MISP
/
PyMISP
mirror of https://github.com/MISP/PyMISP
2
0
Fork 0
Code Issues Releases Wiki Activity

fix: Properly decode the body depending on the encoding of the email 

Fix #671
pull/681/head
Raphaël Vinot 2021-01-11 14:15:30 +01:00
parent c50bbd5d1c
commit fa95c9d84f
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
pymisp/tools/emailobject.py
View File

@ -269,7 +269,7 @@ class EMailObject(AbstractMISPObjectGenerator):
if self.encapsulated_body == body.get_content_type(): if self.encapsulated_body == body.get_content_type():
comment += " De-Encapsulated from RTF in original msg." comment += " De-Encapsulated from RTF in original msg."
self.add_attribute("email-body", self.add_attribute("email-body",
body.get_payload(decode=True).decode('utf8', 'surrogateescape'), body.get_content(),
comment=comment) comment=comment)
headers = ["{}: {}".format(k, v) for k, v in message.items()] headers = ["{}: {}".format(k, v) for k, v in message.items()]