Tickets :: Comment on [#5892] Linked attachment feature vulnerability

* Your Email Address
* Spam protection	Enter the letters below: .__.. ..___..___ __. \| \|\|_/ \| [__ (__ \|__\\| \ \| \| .__)
Comment	> Poster wrote back clarifying that this is an XSS issue > (http://blog.beford.org/?p=8). I'm still not sure that this is a > vulnerability that we can solve in IMP. > > > > To the poster: what is your suggested solution here? Any particular > site can turn off linked attachments. But any application that hosts > files is "vulnerable" to this. So what can an app do, aside from > disallowing jar files?
Attachment
Watch this ticket