Dan Brown 349162ea13
Prevented possible XSS via link attachments ...
This filters out potentially malicious javascript: or data: uri's coming
through to be attached to attachments.
Added tests to cover.
Thanks to Yassine ABOUKIR (@yassineaboukir on twitter) for reporting this
vulnerability.
2020-10-31 15:01:52 +00:00
2020-05-23 00:28:41 +01:00
2020-09-26 18:24:05 +01:00
2020-09-28 22:26:50 +01:00
2020-08-04 14:55:01 +01:00
2019-12-22 12:44:49 +00:00
2020-07-28 12:59:43 +01:00
2020-10-31 15:01:52 +00:00
2020-04-11 20:44:23 +01:00
2018-09-25 12:30:50 +01:00
2020-09-19 12:06:45 +01:00
2019-09-13 23:58:40 +01:00
2020-05-01 23:41:47 +01:00
2017-02-04 11:58:42 +00:00
2020-05-23 11:28:59 +01:00
2019-05-27 12:40:19 +01:00
2020-04-05 13:07:19 +01:00
2020-03-14 18:29:31 +00:00
2020-05-23 11:28:59 +01:00
2020-02-02 13:10:21 +00:00
2020-02-15 14:13:15 +00:00
2018-09-21 15:15:16 +01:00
2019-10-26 18:07:14 +01:00
349162ea13