allow attachment filenames containing semicolons (#13)

CHANGELOG.md

@@ -4,6 +4,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/).
 
 ### Unreleased
 
+### [1.2.4] - 2024-09-27
+- allow attachment filenames containing semicolons https://github.com/haraka/email-message/issues/12
+
 ### [1.2.3] - 2024-04-24
 
 - style(es6): replace forEach with for...of

index.js

@@ -438,17 +438,20 @@ class Body extends events.EventEmitter {
     }
     this.ct = ct;
 
+    const buildRegex = (key) => new RegExp(`${key}\\s*=\\s*"([^"]+)"|${key}\\s*=\\s*"?([^";]+)"?`, 'i');
+    const matchKey = (test, key) => test.match(buildRegex(key))?.filter(item => item);
+
     let match;
     if (/^(?:text|message)\//i.test(ct) && !/^attachment/i.test(cd)) {
       this.state = 'body';
     } else if (/^multipart\//i.test(ct)) {
-      match = ct.match(/boundary\s*=\s*"?([^";]+)"?/i);
+      match = matchKey(ct, 'boundary');
       this.boundary = match ? match[1] : '';
       this.state = 'multipart_preamble';
     } else {
-      match = cd.match(/name\s*=\s*"?([^";]+)"?/i);
+      match = matchKey(cd, 'name');
       if (!match) {
-        match = ct.match(/name\s*=\s*"?([^";]+)"?/i);
+        match = matchKey(ct, 'name');
       }
       const filename = match ? match[1] : '';
       this.attachment_stream = exports.createAttachmentStream(this.header);

package.json

@@ -1,6 +1,6 @@
 {
   "name": "haraka-email-message",
-  "version": "1.2.3",
+  "version": "1.2.4",
   "description": "Haraka email message",
   "main": "index.js",
   "files": [

test/body.js

@@ -406,4 +406,68 @@ describe('body', function () {
       done();
     });
   });
+
+  describe('attachments', function () {
+    describe('content-type-name', function () {
+      it('with-quotes', function (done) {
+        const body = new Body();
+        body.on('attachment_start', (ct, filename) => {
+          assert.equal(filename, 'aaaa.zip');
+          done();
+        });
+        body.header.parse([
+          'Content-Type: application/zip; name="aaaa.zip"'
+        ]);
+        body.parse_start('');
+      });
+
+      it('without-quotes', function (done) {
+        const body = new Body();
+        body.on('attachment_start', (ct, filename) => {
+          assert.equal(filename, 'aaaa.zip');
+          done();
+        });
+        body.header.parse([
+          'Content-Type: application/zip; name=aaaa.zip'
+        ]);
+        body.parse_start('');
+      });
+
+      it('with-quotes-and-semicolons', function (done) {
+        const body = new Body();
+        body.on('attachment_start', (ct, filename) => {
+          assert.equal(filename, 'aaaa; bbb; cccc.zip');
+          done();
+        });
+        body.header.parse([
+          'Content-Type: application/zip; name="aaaa; bbb; cccc.zip"'
+        ]);
+        body.parse_start('');
+      });
+
+      it('with-one-quote-left', function (done) {
+        const body = new Body();
+        body.on('attachment_start', (ct, filename) => {
+          assert.equal(filename, 'aaaa');
+          done();
+        });
+        body.header.parse([
+          'Content-Type: application/zip; name="aaaa; bbb; cccc.zip'
+        ]);
+        body.parse_start('');
+      });
+
+      it('with-one-quote-right', function (done) {
+        const body = new Body();
+        body.on('attachment_start', (ct, filename) => {
+          assert.equal(filename, 'aaaa');
+          done();
+        });
+        body.header.parse([
+          'Content-Type: application/zip; name=aaaa; bbb; cccc.zip"'
+        ]);
+        body.parse_start('');
+      });
+    });
+  });
 });