adam/znc
1
0 Fork 0
mirror of https://github.com/znc/znc.git synced 2026-11-03 02:42:21 +01:00
Code Issues 362 Packages Projects Releases Wiki Activity

IMAP Auth sends password unescaped #923

New Issue
Open
opened 2026-10-05 04:53:20 +02:00 by adam · 1 comment
adam commented 2026-10-05 04:53:20 +02:00
Owner
Copy link
Copy source

Using the IMAP plugin for auth returns invalid login when the user's password contains certain special characters (spaces, {}, ", ') which are valid password characters.

From what I can tell, the password is grabbed and sent unescaped to the IMAP server here.

Using the IMAP plugin for auth returns invalid login when the user's password contains certain special characters (spaces, `{}`, `"`, `'`) which are valid password characters. From what I can tell, the password is grabbed and sent unescaped to the IMAP server [here](https://github.com/znc/znc/blob/znc-1.7.4/modules/imapauth.cpp#L143). <!-- github-sync-id:492983699 -->
adam commented 2026-10-05 04:53:21 +02:00
Author
Owner
Copy link
Copy source

I happened to stumble upon this bug the other day too. Tools like pass make sure I get all sorts of characters making it easy to fail login.

I happened to stumble upon this bug the other day too. Tools like `pass` make sure I get all sorts of characters making it easy to fail login. <!-- github-comment-id:637959811 -->
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Wojcieszonek)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/znc#923