Simplify, blanket escaping all HTML poses issues and we just need the…

… quotes
apache · Jan 20, 2020 · a65a09c · a65a09c
1 parent f62d78d
commit a65a09c
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/site/api/email.lua b/site/api/email.lua
@@ -60,8 +60,8 @@ function handle(r)
         -- If we can access this email, ...
         if aaa.canAccessDoc(r, doc, account) then
             -- Because we allow quotes in message-IDs, we need to escape for standard UI.
-            doc.tid = r:escape_html(doc.request_id)
-            doc.mid = r:escape_html(doc.mid)
+            doc.tid = doc.request_id:gsub('"', '%%22')
+            doc.mid = doc.mid:gsub('"', '%%22')
 
             -- Are we in fact looking for an attachment inside this email?
             if get.attachment then