Re: Webmails + Internet Explorer can create unwanted javascript execution
On Fri, Oct 03, 2003 at 11:56:47AM -0500, Jason Munro wrote:
> While squirrelmail's filter is based on the same engine apparently either
> it's not up to date or the params are not set as tight.
It looks like Squirrelmail 1.4.0 doesn't filter it, while 1.4.2 does.
Upgrading Squirrelmail is not a bad idea anyway, as before version 1.4.1,
external images could be loaded through the "lowsrc" attribute on browsers
that handle it. But this was not a bug in Squirrelmail either, just a
combination to avoid.