use raw header for Message-ID

Message-IDs should not be MIME encoded, but in case they are,
use the raw form for compatibility with ssoma and possibly
other tools.  This prevents a potential problem where a
malicious client could confuse our storage layer into indexing
incorrect contents.

1 files changed, 2 insertions, 2 deletions

diff --git a/lib/PublicInbox/WWW.pm b/lib/PublicInbox/WWW.pm
index 2acb4c83..369be686 100644
--- a/lib/PublicInbox/WWW.pm
+++ b/lib/PublicInbox/WWW.pm
@@ -147,8 +147,8 @@ sub invalid_list_mid {
                 if ($mid = mid2blob($ctx)) {
                         require Email::Simple;
                         use PublicInbox::MID qw/mid_clean/;
-                        $mid = Email::Simple->new($mid);
-                        $ctx->{mid} = mid_clean($mid->header('Message-ID'));
+                        my $s = Email::Simple->new($mid);
+                        $ctx->{mid} = mid_clean($s->header('Message-ID'));
                 }
         }
         undef;