Re: A text/html message which seems to sneak an <img src> off-site ref past mhonarc

2001-12-02 11:10:18
On December 2, 2001 at 00:06, Jason Molenda wrote:

As I understand 2.5.1's HTML defanging code, I think this message
is showing a bug. I haven't looked into this code path in detail,
but I wanted to pass it along anyway in case something jumps out
at someone.

The images that snuck through are the ones where the <img src> tag
did not use quotes to delimit the value of the SRC attribute.


<Prev in Thread] Current Thread [Next in Thread>