Tickets :: Comment on [#15190] Security: IMP HTML Email view does not sanitize against javascript in the onerror property

* Your Email Address
* Spam protection	Enter the letters below: .___..__ .__ .__ . \| \| \[__)\| \\| \| \|__/[__)\|__/\|___
Comment	> See Re: [horde] Horde v 5.2.22 vulnerability ? obfuscation via HTML > encoding ? XSS payload > > Quick remedy is to disable HTML display. > Proper solution needs server-side filtering against javascript. > > This was originally reported against Horde 5.2 - unsure if a patch > can be backported.
Attachment
Watch this ticket