[Alpine-info] URLs with & in them are not escaped

[Sean C. Farley]

On Thu, 23 Apr 2009, Matt Ackeret wrote:


> Sorry, I'm using alpine 1.0.. (at one point in the past, there was 

> some huge speed issue with later versions which I never exactly 

> narrowed down to what specific setting I had.. I should try it 

> again..)  If this is fixed in 2.0, just say so.. thanks.

>

> so anyway, I got a marketing email (not spam since I actually signed 

> up at some point in the past for a free pass or something and almost 

> certainly said yes to send me offers)..  So I wanted to go to the 

> unsubscribe link, and told alpine to open it

>

> http://www.email2.ballyfitness.com/Unsub.do?a=u&e=mattack@apple.com&mid=1816&lid=47

>

> Apparently alpine is doing essentially/literally open 

> http://www.email2.ballyfitness.com/Unsub.do?a=u&e=mattack@apple.com&mid=1816&lid=47

>

> without escaping the &.   (I was seeing messages like 'no match', and 

> I confirmed it's the same that I get when I manually try doing the 

> link above..  yes, I know about UNIX chars like & for background, 

> etc..)

>

> Shouldn't it at least be doing:

>

> open "http://www.email2.ballyfitness.com/Unsub.do?a=u&e=mattack@apple.com&mid=1816&lid=47"

> or somehow escaping the & , etc?


It seems to work for me.  What do you have in url-viewers?  Are the 
execution sections wrapped with quotes?  Here is mine.  You can 
ignore/remove the zpty.sh script; it is a zsh script to create a pty for 
the executed process to allow it to continue to run if I quit Alpine.

url-viewers=_TEST("test -n '${SSH_CONNECTION}'")_   "/usr/local/bin/w3m",
 	_TEST("test -n '${DISPLAY}'")_  "~/bin/zpty.sh /usr/local/bin/firefox _URL_ >& /dev/null &!",
 	_TEST("test -n '${DISPLAY}'")_  "~/bin/zpty.sh /usr/local/bin/opera -newpage _URL_ >& /dev/null &!",
 	_TEST("test -n '${DISPLAY}' -a -x /usr/local/bin/w3m")_  "~/bin/zpty.sh /usr/local/bin/xterm +sb -T W3M -n W3M -g 121x43+0+0 -e /usr/local/bin/w3m _URL_ >& /dev/null &!",
 	"/usr/local/bin/w3m"

Hmm.  I should probably add a few more -a's to the tests.

Sean
-- 
scf at FreeBSD.org