Tickets :: Comment on [#7926] Message option "Show All Headers" causes error

* Your Email Address
* Spam protection	Enter the letters below: . ,. . __ . .._. \./ \|\ \|/ `\|\ \| \| \| \| \\|\__.\| \\|_\|_
Comment	>> I am not following you here... Are you talking about the current > >> code or potential future code? Because for current code, the only > >> reason the html-entity detection (&amp) detection is in there is to > >> allow successive calls to Util::addParameter() rather than any kind > >> of security checking. > > > > I'm talking about the current code, because it is a security check > - if you expect URLs to be encoded, but based on user input, they > might not be, that's a problem.
Attachment
Watch this ticket