Tickets :: Comment on [#9240] XSS: Mailbox name not encoded properly

* Your Email Address
* Spam protection	Enter the letters below: . ..__ .__ . ..__ \|__\|[__)[__)\ /\| \ \| \|[__)\| \ \/ \|__/
Comment	> Changes have been made in Git for this ticket: > > Bug #9240: properly escape elements in dimp. > Escape mailbox label since it is directly inserted into page in the > message list title bar. > Escape growler message because it may include user submitted input. > > http://git.horde.org/diff.php/imp/docs/CHANGES?rt=horde-git&r1=7ce7ed91b17089d0468c00ae9f743b58516d9bef&r2=48913cf3af81875d6e5c6f32e030c5913f22f25d > http://git.horde.org/diff.php/imp/js/dimpcore.js?rt=horde-git&r1=1d4ab4eae68e0b38ed57f251079ab5341547e2b4&r2=48913cf3af81875d6e5c6f32e030c5913f22f25d > http://git.horde.org/diff.php/imp/lib/Views/ListMessages.php?rt=horde-git&r1=b496687e2e71f3ebaecdff5ee49561fbfc1c74cb&r2=48913cf3af81875d6e5c6f32e030c5913f22f25d
Attachment
Watch this ticket