Opened 8 years ago

Closed 8 years ago

#1330134 closed Bugs (Fixed)

HTML in incoming mail subjects can mess up rest of the site

Reported by: ja-stiebing Owned by: roundcube
Priority: 5 Milestone:
Component: PHP backend Version: None
Severity: Keywords:
Cc:

Description

The rest of the main mail list will disappear if the subjects 
contains something like the following, perhaps no HTML 
should be allowed in the subject to prevent messing up 
the site.
</td></tr></table><div style="display:none;">

Perhaps just adding following line after line 344 in 'func.
inc' would help?
$cont.=htmlentities($cont);

Change History (1)

comment:1 Changed 8 years ago by roundcube

  • Status changed from assigned to closed
Note: See TracTickets for help on using tickets.