[Tickets #8581] Re: View HTML attach do not render anything

bugs at horde.org bugs at horde.org
Tue Sep 22 14:10:20 UTC 2009


DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/8581
------------------------------------------------------------------------------
  Ticket             | 8581
  Updated By         | rui.carneiro at portugalmail.net
  Summary            | View HTML attach do not render anything
  Queue              | IMP
  Version            | Git master
  Type               | Bug
  State              | Feedback
  Priority           | 1. Low
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


rui.carneiro at portugalmail.net (2009-09-22 10:10) wrote:

The regex in case is a complex version of this one:  
'/(=|url\()("?)[^>]*script:/'

With this simplified version I tried 3 different tests and the results  
are quite inconsistent.

1- onclick='javascript:console.log("test");' - Works fine.
2- style="background: url('javascript:test()');" - Works fine.
3- Test 1 and 2 on the same element - Does not work.

NOTE: this bug occurs on previous versions of IMP too.






More information about the bugs mailing list