tracker issue : CF-4204050

select a category, or use search below
(searches all categories and all time range)

ASCII characters in Email "From Name" mangles text

| View in Tracker

Status/Resolution/Reason: Closed/Fixed/Fixed

Reporter/Name(from Bugbase): James M. / ()

Created: 02/26/2019

Components: Net Protocols, MAIL

Versions: 2016

Failure Type: Data Corruption

Found In Build/Fixed In Build: update 9 / 2016.0.11.314195

Priority/Frequency: Normal / All users will encounter

Locale/System: English / Win 2016

Vote Count: 9

Problem Description: Try to use a trademark symbol in the email "FROM" name. This works in ColdFusion 2016u7, but was broken after the u8 & 9 updates.

Steps to Reproduce: Send an email with a copright, trademark or other non-alphanumeric ASCII characters. (Use your own email & server settings.)

<cfmail to="" subject="REALTORS#CHR(174)# Test" from="""REALTORS#CHR(174)# Test"" <>">

Actual Result:  The text is lowercased, characters are stripped, extra characters are added to beginning & ending of name string.

xn--"realtors test" -vwa

Expected Result:  This is the subject taht we've always experienced... the same value that was initially passed without any modification.  These characters are retained in the subject and text/html body of the message, just not in the email from "name".


Any Workarounds:  None



Yes, same result here with a user's display name that contained a french accent.
Comment by Dan C.
30394 | February 26, 2019 03:10:29 PM GMT
Dan C, To sanitize non-ASCII7 characters from a text string, the workaround I've been using is to convert all unicode to ASCII7 using JUnidecode. (We also use this to sanitize filenames & URL path strings.) Using JUnidecode requires adding a JAR file to your project, but the results are much better than writing your own regex filter or using Normalizer, Transliterate or StripAccent libraries.
Comment by James M.
30398 | February 26, 2019 06:00:34 PM GMT
The xn-- prefix looks like Punycode (RFC 3492) that's used with domain names if they contain special characters. No idea if it's used in E-Mails, though.
Comment by Bernhard D.
30406 | February 28, 2019 10:17:01 AM GMT
FYI: I just installed CF2016 hotfix (or update) 10, performed a test and this bug is not fixed.
Comment by James M.
30415 | March 01, 2019 10:34:06 PM GMT
Thanks, That confirms my suspicions. They had to rush out the security patch, and the status here is still "to fix" I;m sure it will be Update 11 now.
Comment by Dan C.
30416 | March 02, 2019 01:23:29 AM GMT
I also have same problem on my server: Server Details Server Product ColdFusion 2016 Version 2016.0.10.314028 Expected Result: "Hotel Tambù Desirè <>" instead of "xn--hotel tamb desir -7sb03a <>"
Comment by Davide T.
30464 | March 11, 2019 02:46:43 PM GMT
I just encountered another issue which I believe it tied directly to this. A CFML script that we've used w/CF7, 8, 9 & 10 failed today on CF2016 due to "The label in the input is too long" in a CFMail tag.? Too long? Are there some new undocumented max lengths being applied to some of the CFMail attributes? I'm guessing it's regarding the "FROM" attribute but it's only 38 characters (display name + email) and does not contain any non-ASCII7 characters.
Comment by James M.
30509 | March 15, 2019 01:20:13 AM GMT
A similar reported "the label in the input is too long" recommends only passing the domain part of the e-mail to IDN.toASCII. Is this what's happening w/CF? If so, I'm worried because the last time I checked, allowable/legal domain names could be up to 253 characters. Does this mean that a legal, long domain names can cause the CFMail to crash?
Comment by James M.
30510 | March 15, 2019 01:24:24 AM GMT
[Verified] Apparently an email address that has 74 or more characters characters will successfully evaluate as a valid email address using isvalid("email"), but will fail with a "the label in the input is too long" error message when attempting to send via CFMail.
Comment by James M.
30516 | March 15, 2019 02:40:20 PM GMT
We had messages failing to be processed for 6 days because the "FROM" values was 92 characters. This has never been a problem, in the past... but now it's a show stopper. Here's a sample FROM that currently causes a ColdFusion error: "Regular Organization Name without any Special Characters - Testing" <>
Comment by James M.
30534 | March 18, 2019 06:53:10 PM GMT
any news on this error? 2 months have already passed
Comment by Davide T.
30639 | April 19, 2019 10:56:21 AM GMT
Hoping for a fix on this sooner rather than later.
Vote by Frank A.
30656 | April 24, 2019 06:50:54 PM GMT
And another month has passed and this is still bugging us. Those special characters are actually quite common in non-english languages.
Comment by Donald v.
30753 | May 16, 2019 07:07:32 PM GMT
Adobe where are you? You support is very poor.
Comment by Emanuele C.
30764 | May 17, 2019 07:31:31 AM GMT