geary/bindings/vapi
Michael James Gratton 8a1906fa96 Ensure encoded mailbox addresses are decoded correctly.
Both RFC mailbox address names and mailboxes/local-names may by RFC 2047
be Quoted-Printable or Base64 encoded. This patch ensures these parts are
correctly decoded when parsing a RFC 822 message, so that they are
displayed to the user in human-readable form.

Part 2 of Mailsploit mitigation.

* src/engine/rfc822/rfc822-message.vala (Message): Since GMime.Message's
  convenience properties for accessing header values such as senders,
  recipients, etc. in string form are presented as human-readable, not
  RFC822 compliant strings, we can't re-parse them for use by this class
  when it is being constructed from a GMime-based source. Instead,
  iterate over all headers to get the raw values and parse those we are
  interested in instead. Add unit tests.

* src/engine/rfc822/rfc822-mailbox-address.vala (BaseObject): Add gmime
  constructor so we can handle construction and decoding from a GMime
  InternetAddressMailbox object in a consistent way. Ensure both names
  are decoded correctly, and mailboxes are decoded at all, from both
  GMime and IMAP sources. If a GMime source's address has no @-symbol,
  try to decode the whole thing first it in case the whole address is
  encoded. Add unit tests.

* src/engine/rfc822/rfc822-mailbox-addresses.vala (MailboxAddresses):
  Add append method and handle group addresses here instead of in Message
  to simplify updated Message implementation.

* src/engine/rfc822/rfc822-message-data.vala (MessageData): Add append
  method to simplify updated Message implementation.
2018-01-31 16:15:29 +10:30
..
gmime-2.6 Transfer Yorba copyrights to Software Freedom Conservancy 2016-05-06 08:33:37 -04:00
enchant.vapi Added support to change the spell-checking language. 2016-06-09 15:36:39 +10:00
gmime-2.6.vapi Ensure encoded mailbox addresses are decoded correctly. 2018-01-31 16:15:29 +10:30
javascriptcore-4.0.vapi Reenable basic deceptive link highlighting. 2017-02-01 00:41:44 +11:00
libnotify.vapi Fix warning/crash when libnotify enabled and server is not present. Bug 768911. 2016-07-18 22:13:32 +10:00
libunwind.vapi Add licensing info for libunwind binding, based on convention. 2017-11-19 12:07:14 +11:00
Makefile Closes #6209 Precise support for GIR WebKitGTK binding. Rolls back to deprecated context menu in composer for compatibility with WebKitGTK 1.8 2013-01-15 13:04:30 -08:00