[Pkg-mailman-hackers] Bug#968244: Bug#968244: mailman3-web: Crash with: /usr/share/mailman3-web/manage.py runjobs daily

[Athanasius]

On Sat, Jan 23, 2021 at 09:47:10PM +0100, Jonas Meurer wrote:
> Could you please try out whether this bug has been fixed with the latest
> updates to mailman3 and hyperkitty? A lot of changes happened to the
> 'import21' code, so I'm hopeful that this bug might have been fixed in the
> meantime. Unfortunately I lack the time to build a reproducer myself.

  I also filed an upstream bug about this.  We tracked down the issue as
being related to sending email addresses over an API without ensuring
they are URL encoded.  A '#' (hash) character in them causes the
receiving API server to truncate at that point, treating the '#' as a
URL anchor which only has signifigance on the browser side (when there's
actually a browser involved).

  The last I heard about that bug was 4 months ago:

	<https://gitlab.com/mailman/mailman/-/issues/763#note_408737989>

Pulling the latest git master of that code, head
177c123074ece0e64fc317cd78eea1d68fec1b88 I see no changes to the
relevant code.  Indeed `git log -- src/mailmanclient/client.py` only
shows one change since '4 months ago', which is simply a copyright
end-year bump across all files.

-- 
-         Athanasius = Athanasius(at)miggy.org / https://miggy.org/
                  GPG/PGP Key: https://miggy.org/gpg-key
	   "And it's me who is my enemy. Me who beats me up.
Me who makes the monsters. Me who strips my confidence." Paula Cole - ME
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-mailman-hackers/attachments/20210124/4fc9dec1/attachment.sig>