[Tickets #7380] strip style attributes code and Firefox 3.0.1 (Mozilla 5)

bugs at horde.org bugs at horde.org
Tue Sep 23 20:53:44 UTC 2008


DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/7380
------------------------------------------------------------------------------
  Ticket             | 7380
  Created By         | agerhard at usp.br
  Summary            | strip style attributes code and Firefox 3.0.1 (Mozilla
                     | 5)
  Queue              | Horde Base
  Version            | 3.2.2
  Type               | Bug
  State              | Unconfirmed
  Priority           | 2. Medium
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


agerhard at usp.br (2008-09-23 16:53) wrote:

I have a HTML email message that is not rendered correctly in IMP (it  
mixes with the IMP code).

I think that the correct behavior is to strip the style tags, but this  
didn't happens in Firefox 3.0.1.

There is a test in lib/Horde/MIME/Viewer/html.php that checks for the  
major version of Mozilla.
This triggers the strip style attributes code / regexp in xss.php.

But It is checking only against version 4; Firefox 3.0.1 major version  
is 5, so the strip style code
doesn't runs.





More information about the bugs mailing list