extra sanitizing was added in B and Q header decoding, when SquirrelMail tried to