From c99a950979cb1a6a5e449b31623fbb6a18ad6112 Mon Sep 17 00:00:00 2001 From: Pierre Kuhner Date: Thu, 24 Aug 2017 15:23:49 +0200 Subject: Percent-encode SMTP password to prevent URI malformed errors Fix URIError: URI malformed errors when sending email with SMTP password containing some special characters. See Sections 2.1 and 3.2 of RFC 3986. --- models/settings.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/models/settings.js b/models/settings.js index ce162d45..089c6783 100644 --- a/models/settings.js +++ b/models/settings.js @@ -45,7 +45,7 @@ Settings.helpers({ if (!this.mailServer.username && !this.mailServer.password) { return `${protocol}${this.mailServer.host}:${this.mailServer.port}/`; } - return `${protocol}${this.mailServer.username}:${this.mailServer.password}@${this.mailServer.host}:${this.mailServer.port}/`; + return `${protocol}${this.mailServer.username}:encodeURIComponent(${this.mailServer.password})@${this.mailServer.host}:${this.mailServer.port}/`; }, }); Settings.allow({ @@ -84,7 +84,7 @@ if (Meteor.isServer) { if (!doc.mailServer.username && !doc.mailServer.password) { process.env.MAIL_URL = `${protocol}${doc.mailServer.host}:${doc.mailServer.port}/`; } else { - process.env.MAIL_URL = `${protocol}${doc.mailServer.username}:${doc.mailServer.password}@${doc.mailServer.host}:${doc.mailServer.port}/`; + process.env.MAIL_URL = `${protocol}${doc.mailServer.username}:encodeURIComponent(${doc.mailServer.password})@${doc.mailServer.host}:${doc.mailServer.port}/`; } Accounts.emailTemplates.from = doc.mailServer.from; } -- cgit v1.2.3-1-g7c22 From 4d4c127b991e04a060985bb2a5589c56a29c7f1c Mon Sep 17 00:00:00 2001 From: Pierre Kuhner Date: Thu, 24 Aug 2017 17:10:50 +0200 Subject: Fix template literals syntax --- models/settings.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/models/settings.js b/models/settings.js index 089c6783..a490d9c5 100644 --- a/models/settings.js +++ b/models/settings.js @@ -45,7 +45,7 @@ Settings.helpers({ if (!this.mailServer.username && !this.mailServer.password) { return `${protocol}${this.mailServer.host}:${this.mailServer.port}/`; } - return `${protocol}${this.mailServer.username}:encodeURIComponent(${this.mailServer.password})@${this.mailServer.host}:${this.mailServer.port}/`; + return `${protocol}${this.mailServer.username}:${encodeURIComponent(this.mailServer.password)}@${this.mailServer.host}:${this.mailServer.port}/`; }, }); Settings.allow({ @@ -84,7 +84,7 @@ if (Meteor.isServer) { if (!doc.mailServer.username && !doc.mailServer.password) { process.env.MAIL_URL = `${protocol}${doc.mailServer.host}:${doc.mailServer.port}/`; } else { - process.env.MAIL_URL = `${protocol}${doc.mailServer.username}:encodeURIComponent(${doc.mailServer.password})@${doc.mailServer.host}:${doc.mailServer.port}/`; + process.env.MAIL_URL = `${protocol}${doc.mailServer.username}:${encodeURIComponent(doc.mailServer.password)}@${doc.mailServer.host}:${doc.mailServer.port}/`; } Accounts.emailTemplates.from = doc.mailServer.from; } -- cgit v1.2.3-1-g7c22 From a4dfdd4fd1c3d74bddf4339fb75e4890486d4fab Mon Sep 17 00:00:00 2001 From: Lauri Ojansivu Date: Sat, 26 Aug 2017 03:46:24 +0300 Subject: Percent-encode SMTP password to prevent URI malformed errors. Thanks to pkuhner ! Closes #1181 --- CHANGELOG.md | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index e5f93a6d..008e5608 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -15,10 +15,12 @@ This release adds the following new features: and fixes the following bugs: -* [Fix Squeezed tickbox in Card](https://github.com/wekan/wekan/pull/1171). +* [Fix Squeezed tickbox in Card](https://github.com/wekan/wekan/pull/1171); +* [Percent-encode SMTP password to prevent URI malformed + errors](https://github.com/wekan/wekan/pull/1190). -Thanks to GitHub users andresmanelli, danhawkes, jonasob, kubiko, nztqa -and xet7 for their contributions. +Thanks to GitHub users andresmanelli, danhawkes, jonasob, kubiko, nztqa, +pkuhner and xet7 for their contributions. # v0.32 2017-07-30 Wekan release -- cgit v1.2.3-1-g7c22