575075 - Cannot subscribe to mailboxes with a > (greater then) sign through IMAP

Status: NEW

(MailNews Core :: Networking: IMAP, defect)

Description

[Sven Kirmess]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 ( .NET CLR 3.5.30729)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.4) Gecko/20100608 Thunderbird/3.1

You cannot subscribe to (or create) folders with a > (greater then) sign through IMAP. I've verified this bug with the dovecot 2 server and with gmail IMAP access.

If you try to subscribe to the mailbox <test> you get the error message that the server could not find the mailbox "<test". It looks like the > sign is not correctly escaped and somehow interpreted as part of an IMAP command.

If you try to subscribe to <test>test you also get the error message that mailbox "<test" does not exist.

Reproducible: Always

Steps to Reproduce:
1. Create a folder called <test> with another IMAP client.
2. Try to subscribe to this folder with Thunderbird.

Actual Results:  
not subscribed to the folder

Expected Results:  
subscribed to the folder

Comment 1

[Ludovic Hirlimann [:Usul]]

Can you provide an imap log of this when you try ? (see https://wiki.mozilla.org/MailNews:Logging )

Comment 2

[David :Bienvenu]

This is a dup of a very old bug, I believe.

Comment 3

[WADA:World Anti-bad-Duping Agency]

The very old bug is probably bug 23789(we duped to bug 538942).

Comment 4

[WADA:World Anti-bad-Duping Agency]

Bug 538942 is problem upon SELECT after next to XLIST(other mailer subscribed).
> * XLIST (\Noselect \HasChildren) "/" "<script>alert('XSS')<"
Setting dependency instead of duping, to keep SUBSCRIBE case, although basically dup.

Comment 5

[gene smith]

Didn't try to create with another client, but if you create folder "<test>" in tb you get folder "<test"