[Tickets #8715] Re: XSS vulnerability

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/8715
------------------------------------------------------------------------------
  Ticket             | 8715
  Updated By         | acmpires at co.sapo.pt
  Summary            | XSS vulnerability
  Queue              | IMP
  Version            | FRAMEWORK_3
  Type               | Bug
  State              | Resolved
  Priority           | 3. High
  Milestone          | 4.3.6
  Patch              |
  Owners             | Horde Developers
+New Attachment     | xss_8715_v2.diff
------------------------------------------------------------------------------


acmpires at co.sapo.pt (2010-04-19 13:47) wrote:

> Hi,
>
> Attached a patch in case the link has two hrefs with data URLs

This patch is not working for all cases, but this new version of the  
patch it's working, at least for me.