Re: [Full-disclosure] XSS in roundcube.com and users of it