[ mailman-Bugs-645906 ] User supplied HTML with % kills index.ht

[SourceForge.net]

Bugs item #645906, was opened at 2002-11-30 01:52
Message generated for change (Comment added) made by zuse
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=100103&aid=645906&group_id=103

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Pipermail
Group: 2.1 beta
Status: Closed
Resolution: None
Priority: 5
Private: No
Submitted By: Joe R. Doupnik (jdoupnik)
Assigned to: Nobody/Anonymous (nobody)
Summary: User supplied HTML with % kills index.ht

Initial Comment:
Mailman 2.1b5. Edit archtoc.html or listinfo.html,
include table with phrase width=100% and find
that the list's archive overall index.html page is
unformed (present but the various MM items
are left as bare %(foobar)s style).
 After wasting a whole day on this the problem
boils down to that percent sign in user-supplied
HTML. It kills the high level index.html file. We
don''t know about this until a full list archive
operation is performed,  because at the end
the code creates the new index.html from
the template files. Ugh.
  Likely some parser deep in the system is
overreacting to the percent symbol. Needs
fixing.

----------------------------------------------------------------------

Comment By: Holger Jeromin (zuse)
Date: 2007-03-15 14:48

Message:
Logged In: YES 
user_id=254889
Originator: NO

Thanks. That works.

But is is not very obvious for a normal mailinglist admin when editing the
"Welcome email text file"
per webgui. It simply generates a wrong welcome email. It costs me 15
minutes of debugging the new message.

A check would be very nice, at least a warning on top of the input field
"write a single % as %%" should be done.

----------------------------------------------------------------------

Comment By: Holger Jeromin (zuse)
Date: 2007-03-15 13:46

Message:
Logged In: YES 
user_id=254889
Originator: NO

The Problem might be solved for HTML pages, but it is not solved for
text!

When editing subscribeack.txt it is not possible to write something like
"We can reach 20% of our users", because this leads to %(foobar)s stuff.

In pure text there is no workaround like this width="100%" possible...

My mailman provider uses version 2.1.9

----------------------------------------------------------------------

Comment By: Barry A. Warsaw (bwarsaw)
Date: 2002-12-08 16:12

Message:
Logged In: YES 
user_id=12800

archtoc.html and listinfo.html are templates (as implied by
their being in the templates/xx directory :) which means
Python substitutions are performed on the text.  Python
substitutions treat % as a special character so to get a
literal % in the text you need to use %%

E.g. change that to "width=100%%" and you'll be fine.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=100103&aid=645906&group_id=103