melib/imap: escape IMAP passwords properly

Closes #125
2 years ago · 81d1265601
parent d8e9a00563
commit 81d1265601
1 changed files with 13 additions and 2 deletions
--- a/melib/src/backends/imap/connection.rs
+++ b/melib/src/backends/imap/connection.rs
@ -376,8 +376,19 @@ impl ImapStream {
            _ => {
                ret.send_command(
                    format!(
-                        "LOGIN \"{}\" \"{}\"",
-                        &server_conf.server_username, &server_conf.server_password
+                        r#"LOGIN "{}" "{}""#,
+                        &server_conf
+                            .server_username
+                            .replace(r#"\"#, r#"\\"#)
+                            .replace('"', r#"\""#)
+                            .replace('{', r#"\{"#)
+                            .replace('}', r#"\}"#),
+                        &server_conf
+                            .server_password
+                            .replace(r#"\"#, r#"\\"#)
+                            .replace('"', r#"\""#)
+                            .replace('{', r#"\{"#)
+                            .replace('}', r#"\}"#)
                    )
                    .as_bytes(),
                )