![]() |
mhonarc-users
|
Re: A text/html message which seems to sneak an <img src> off-site ref past mhonarc2001-12-02 11:10:18On December 2, 2001 at 00:06, Jason Molenda wrote: As I understand 2.5.1's HTML defanging code, I think this message is showing a bug. I haven't looked into this code path in detail, but I wanted to pass it along anyway in case something jumps out at someone. The images that snuck through are the ones where the <img src> tag did not use quotes to delimit the value of the SRC attribute. --ewh
|
|