Fix handling of %-encoded entities in mailto: URLs (#1490346)

CHANGELOG

@@ -5,6 +5,7 @@ CHANGELOG Roundcube Webmail
 - Add initdb.sh to create database from initial.sql script with prefix support (#1490188)
 - Plugin API: Added message_part_body hook
 - Plugin API: Add special onload() method to execute plugin actions before startup (session and GUI initialization)
+- Fix handling of %-encoded entities in mailto: URLs (#1490346)
 
 RELEASE 1.1.1
 -------------

program/steps/mail/compose.inc

@@ -448,6 +448,8 @@ function rcmail_process_compose_params(&$COMPOSE)
 
         // #1486037: remove "mailto:" prefix
         $COMPOSE['param']['to'] = preg_replace('/^mailto:/i', '', $mailto[0]);
+        // #1490346: decode the recipient address
+        $COMPOSE['param']['to'] = urldecode($COMPOSE['param']['to']);
 
         // Supported case-insensitive tokens in mailto URL
         $url_tokens = array('to', 'cc', 'bcc', 'reply-to', 'in-reply-to', 'references', 'subject', 'body');