When a header with an encoded (QP or Base64) display_name is refolded, it may lose (some of) its encoding. If it then contains illegal "atext" tokens, an invalid header will result.
For example, `From: =?utf-8?Q?a=2C=20123456789012345678901234567890123456?= <[email protected]>` will become `From: a, 123456789012345678901234567890123456 <[email protected]>` This contains a comma character which needs to be quoted: correct rendering would be `From: "a, 123456789012345678901234567890123456" <[email protected]>`. Note that this example isn't even folded to multiple lines, since the decoded text is short enough to fit in one line.
This can be triggered by `BytesParser(policy=policy.default).parsebytes("From: =?utf-8?Q?a=2C=20123456789012345678901234567890123456?= <[email protected]>").as_bytes()`, but the offending code seems to be in or below `email.policy.EmailPolicy.fold`. See attached file for examples with and without folding. |