[Tickets #4253] Re: unescaped html entities

Fri Nov 3 00:08:21 PST 2006

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/?id=4253
-----------------------------------------------------------------------
 Ticket             | 4253
 Updated By         | Michael Slusarz <slusarz at horde.org>
 Summary            | unescaped html entities
 Queue              | IMP
 Version            | HEAD
 Type               | Bug
-State              | Assigned
+State              | Resolved
 Priority           | 1. Low
 Owners             | Matt Selsky
-----------------------------------------------------------------------

Michael Slusarz <slusarz at horde.org> (2006-11-03 00:08) wrote:

> On the PGP passphrase pop-up page, if you get the passphrase wrong, 
> there is a hidden input set called "reload" with a value of:
>
> <input type="hidden" name="reload" 
>
value="/horde/imp/message.php?mailbox=%2A%2Asearch_1g35vp0dm3k0swc4ko0so4&index=19386&thismailbox=INBOX"

> />
>
> &index and &thismailbox need to be escaped.

Fixed.

> Also, on the message page, before the passphrase is entered, there is 
> an unescaped entity "&reload".

Don't see this.