Tickets :: Comment on [#15190] Security: IMP HTML Email view does not sanitize against javascript in the onerror property

* Your Email Address
* Spam protection	Enter the letters below: . __.. ..___.__ \| (__ \|__\|[__ [__) \|___.__)\| \|\| [__)
Comment	> See Re: [horde] Horde v 5.2.22 vulnerability ? obfuscation via HTML > encoding ? XSS payload > > Quick remedy is to disable HTML display. > Proper solution needs server-side filtering against javascript. > > This was originally reported against Horde 5.2 - unsure if a patch > can be backported.
Attachment
Watch this ticket