Tickets :: Comment on [#1472] Replying to mail in HTML form leaves horde related html in reply

* Your Email Address
* Spam protection	Enter the letters below: .___. ..__ .. . [__ \| \|[__) \|\| \| [___\|/\\|\| \\__\|\|/\\|
Comment	> The replied body contains html links rewritten to horde: > > > > <a onmouseover="window.status='Compose Message > > (user@domain.tld)'; return true;" onmouseout="window.status='';" > > href="javascript:open_compose_win('to=user@domain.tld&thismailbox=INBOX.some.mailbox');">user@domain.tld</a> > > > > <a > > href="/horde/services/go.php?url=http%3A%2F%2Fwww.delfi.ee%2F" > > target="_blank">http://www.delfi.ee/</a><br />><br />><br /> > > > > This HTML is left to the final sent email, and it's rather invalid > for users not using horde to read their mail :) > > > > And it's also somewhat security risk, as it "leaks" some information > of IMAP folder structure : > > INBOX.some.mailbox > > > > Reproduced using MSIE/6.0 > >
Attachment
Watch this ticket