Is this the ticket you're referring to? If so, it has already been patched in the trunk.
http://trac.roundcube.net/trac.cgi/ticket/1484254
On 2/16/07, Chris Weber chris@lookout.net wrote:
I setup a ticket for this bug. I'll work on a patch if someone doesn't beat me to it :)
-----Original Message----- From: till [mailto:klimpong@gmail.com] Sent: Friday, February 16, 2007 6:50 AM To: Chris Weber Cc: dev@lists.roundcube.net Subject: Re: security bugs
On 2/15/07, Chris Weber chris@lookout.net wrote:
I'm loving Roundcube, installation and configuration is a breeze, and the interface is elegant. I just installed it today and plan to get some good use from it . I've also started poking at it to find any security issues I can. What's the preferred method for me to submit security bugs such as XSS?
Preffered way is probably to setup a ticket and alert the list - just in case. You are also welcome to send patches. :-)
Cheers,
Till Klampaeckel e: mailto:klimpong@gmail.com p: +491704018676 l: http://beta.plazes.com/whereis/till
Want to know what's up in Berlin?