2 Nov
2007
2 Nov
'07
10:28 a.m.
Have you guys tested RoundCube for XSS vulnerabilities, for example using this list? http://ha.ckers.org/xss.html
Is it possible to completely disable the display of HTML messages in the web interface (ie make sure that HTML parts are only available as "Content-Type: attachment" http streams)?
Cc pls ;) _______________________________________________ List info: http://lists.roundcube.net/dev/