Sending now works because HTML entities are unescaped in the metadata.

diff --git a/webcit-ng/static/js/view_mail.js b/webcit-ng/static/js/view_mail.js
index fac046decf109e5b9fc85b94144d5967d1dff155..cb33d577d43d010f91a3c315fa66ae9c62bb3cfd 100644 (file)
--- a/webcit-ng/static/js/view_mail.js
+++ b/webcit-ng/static/js/view_mail.js
@@ -367,10 +367,15 @@ function make_cc_bcc_visible() {
 }
 
 
-// Helper function for mail_send_messages() to extract form values.
-// (We have to replace "|" with "!" because "|" is a field separator in the Citadel protocol)
+// Helper function for mail_send_messages() to extract and decode metadata values.
 function msm_field(element_name, separator) {
-       return (document.getElementById(element_name).innerHTML).replaceAll("|",separator);
+       let s1 = document.getElementById(element_name).innerHTML;
+       let s2 = s1.replaceAll("|",separator);  // Replace "|" with "!" because "|" is a field separator in Citadel wire protocol
+       let s3 = decodeURI(s2);
+       let s4 = document.createElement("textarea");    // This One Weird Trick Unescapes All HTML Entities
+       s4.innerHTML = s3;
+       s5 = s4.value;
+       return(s5);
 }