Fix cross-site scripting (XSS) vulnerability in setting Content-Type/Content…
a5b44239022b
Actions

Description

Fix cross-site scripting (XSS) vulnerability in setting Content-Type/Content-Disposition for attachment preview/download

Thanks to rehme.infosec for reporting the issues.

Details

Provenance

mollekopf	Authored on Nov 7 2023, 10:53 AM
mollekopf	Pushed on Nov 8 2023, 5:08 PM

Parents

R113:0546ce4a1e7a: Fix tests

Branches

Unknown

Tags

Unknown

Build Status

Buildable 45643

Event Timeline

mollekopf committed R113:a5b44239022b: Fix cross-site scripting (XSS) vulnerability in setting Content-Type/Content… (authored by mollekopf).Nov 7 2023, 10:53 AM

Harbormaster completed building B45643: R113:a5b44239022b: Fix cross-site scripting (XSS) vulnerability in setting Content-Type/Content….Nov 8 2023, 5:23 PM

Changes (6)

Path

Size

CHANGELOG

program/

lib/

Roundcube/

rcube_charset.php

rcube_imap.php

rcube_output.php

steps/

mail/

viewsource.inc

tests/

Framework/

Charset.php

R113:a5b44239022b

View Options

CHANGELOG

View Options

program/lib/Roundcube/rcube_charset.php

View Options

program/lib/Roundcube/rcube_imap.php

View Options

program/lib/Roundcube/rcube_output.php

View Options

program/steps/mail/viewsource.inc

View Options

tests/Framework/Charset.php

Fix cross-site scripting (XSS) vulnerability in setting Content-Type/Content…a5b44239022bActions

Description

Details

Event Timeline

Changes (6)

R113:a5b44239022b

CHANGELOG

program/lib/Roundcube/rcube_charset.php

program/lib/Roundcube/rcube_imap.php

program/lib/Roundcube/rcube_output.php

program/steps/mail/viewsource.inc

tests/Framework/Charset.php

Fix cross-site scripting (XSS) vulnerability in setting Content-Type/Content…
a5b44239022b
Actions