	FML Advisory 2001-001: Internal HTMLifier can pass through invalid URL
	========================================

Topic:	Internal HTMLifier can pass through invalid URL

			Ken'ichi Fukamachi <fukachan@fml.org>

	Copyright (C) 2001 Ken'ichi Fukamachi
		All rights reserved.

[Abstract]

If you use fml internal htmlifier mechanism for articles (when
$AUTO_HTML_GEN is on), fml htmlifier passes through message with
invalid URL. This condition is satisfied when $AUTO_HTML_GEN is on or
you use utility program called spool2html, which is a wrapper for
internal htmlifier engine.

------------------------------------------------------------
1	Technical detail

2	workaround
2.1	set $AUTO_HTML_GEN = 0; anyway
2.2	update libraries (1)
2.3	update libraries (2)

3	misc
3.1	future plan

4	Acknowledgement
------------------------------------------------------------


1	Technical detail

fml internal mechanism to convert text (article) to html does not 
escape meta characters for subject.

2	workaround

2.1	set $AUTO_HTML_GEN = 0; anyway

Firstly, disable this automatic conversion mechanism if your ml
converts incoming article to html automatically. To disable it, set

	$AUTO_HTML_GEN = 0;

This setting disables automatic conversion for incoming messages.

In menu, 

	TOP -> OPTION -> HTML_GENERATION -> AUTO_HTML_GEN -> n

To re-html-ify articles arrived among htmlifier mechanism is disabled,
run "make spool2html" after updating libraries.

2.2	update libraries (1)

replace libsynchtml.pl libhtmlsubr.pl with latest one.
See the following URL.

	ftp://ftp.fml.org/pub/fml/workaround-fix2/

2.3	update libraries (2)

use upcoming 4.0.3 release.

3	misc

3.1	future plan

fml next generation project developments a module for conversion from
text to html.  I plan to replace the current htmlifier with this when
this new module becomes enough mature.

	http://www.fml.org/software/fml-devel/CHANGES.txt

4	Acknowledgement

See thread beginning at fml-help: 01093 for further reference.

I am appreciate for KOJIMA Hajime <kjm@rins.ryukoku.ac.jp> on
problem reports and workaround patch to fix this.

$FML: FA2001_001.wix,v 1.4.2.1 2001/11/18 14:34:51 fukachan Exp $
