Kopete doesn't escape HTML in receiving messages

[Sjoerd Hemminga]

Binary package hint: kdenetwork

When receiving a message that contains HTML code, Kopete will interpret the HTML and display a parsed version of it. E.g. "<a href="http://www.example.com/">Hi</a>" will display as a link to example.com. I've seen this behaviour on ICQ, where the other person was using CenterIM, and on MSN, where the other party was using Trillian.

It is quite annoying when people send you messages like "http://link/ <-- Check this out" or an HTML paste. I'm not sure if this can be abused. I tried some simple tests with Javascript, which didn't work, but that was in no way exhaustive.

I'm using Ubuntu 8.10 and Kopete 4.1.3.

[Terence Simpson (tsimpson)]

I think this is the same as bug #181073, so I'm marking it as a duplicate.

[Terence Simpson (tsimpson)]

actually, I'll mark that one as a dup of this

[Sjoerd Hemminga (sjoerd-hemminga)]

That bug (and it's duplicate bug #283495), are about sending text. This bug is about received text. While those issues may be related, I don't think they are the same.

[Terence Simpson (tsimpson)]

They are both the same thing, about text being interpreted as HTML by Kopete when it should be interpreted as plain text. That's why I marked it as a duplicate.
There was an option in the KDE3 version of Kopete to disable sending/receiving in HTML format, but this appears to be missing in the KDE4 client.

[Harald Sitter (apachelogger)]

Configure => Behavior => Chat => Enable rich text by default

deactivate that option and html will not be parsed any longer, at least not on KDE 4.4.