[Tickets #9240] Re: XSS: Mailbox name not encoded properly

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/9240
------------------------------------------------------------------------------
  Ticket             | 9240
  Updated By         | CVS Commit <cvs at lists.horde.org>
  Summary            | XSS: Mailbox name not encoded properly
  Queue              | DIMP
  Version            | FRAMEWORK_3
  Type               | Bug
  State              | Assigned
  Priority           | 3. High
  Milestone          | 1.1.5
  Patch              |
  Owners             | Michael Slusarz
------------------------------------------------------------------------------


CVS Commit <cvs at lists.horde.org> (2010-09-08 12:51) wrote:

Changes have been made in CVS for this ticket:

Bug: 9240
Fix XSS vulnerability
http://cvs.horde.org/diff.php/dimp/docs/CHANGES?rt=horder1=1.69.2.85r2=1.69.2.86ty=u
http://cvs.horde.org/diff.php/dimp/lib/Views/ListMessages.php?rt=horder1=1.53.2.24r2=1.53.2.25ty=u