Dan Brown
349162ea13
Prevented possible XSS via link attachments ...
This filters out potentially malicious javascript: or data: uri's coming
through to be attached to attachments.
Added tests to cover.
Thanks to Yassine ABOUKIR (@yassineaboukir on twitter) for reporting this
vulnerability.
2020-10-31 15:01:52 +00:00
2020-05-23 00:28:41 +01:00
2020-07-28 16:29:06 +01:00
2020-07-25 00:20:58 +01:00
2020-10-31 15:01:52 +00:00
2020-09-19 12:06:45 +01:00
2020-04-09 17:29:22 +01:00
2019-10-05 12:55:01 +01:00
2020-04-10 12:49:16 +01:00
2019-10-05 12:55:01 +01:00
2019-10-05 12:55:01 +01:00
2019-10-05 12:55:01 +01:00
2020-05-01 23:24:11 +01:00
2020-07-28 18:19:18 +01:00
2020-05-12 22:21:45 +01:00
2020-09-19 09:24:58 +01:00
2020-07-05 21:18:17 +01:00
2019-10-05 12:55:01 +01:00
2020-05-23 12:28:14 +01:00
2019-10-05 12:55:01 +01:00
2020-08-04 14:55:01 +01:00
2020-06-27 13:29:00 +01:00
2020-09-19 09:24:58 +01:00
2020-06-29 22:11:03 +01:00
2019-12-30 14:51:28 +00:00
2020-08-04 14:55:01 +01:00
349162ea13