diff options
| author | thomasb <thomasb@208e9e7b-5314-0410-a742-e7e81cd9613c> | 2009-01-20 16:28:33 +0000 |
|---|---|---|
| committer | thomasb <thomasb@208e9e7b-5314-0410-a742-e7e81cd9613c> | 2009-01-20 16:28:33 +0000 |
| commit | 6cbe8244e54e1fa0b0fa99fc920f4694935e306a (patch) | |
| tree | d02f044fcab6fd8bbe0c6c6546e8b176078fab91 /roundcubemail/CHANGELOG | |
| parent | b8f49f7007ef08528895584470c288337de51771 (diff) | |
Treat 'background' attributes the same way as 'src' (another XSS vulnerability)
git-svn-id: https://svn.roundcube.net/trunk@2245 208e9e7b-5314-0410-a742-e7e81cd9613c
Diffstat (limited to 'roundcubemail/CHANGELOG')
| -rw-r--r-- | roundcubemail/CHANGELOG | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/roundcubemail/CHANGELOG b/roundcubemail/CHANGELOG index f9ce6de9f..e8ce8272a 100644 --- a/roundcubemail/CHANGELOG +++ b/roundcubemail/CHANGELOG @@ -1,6 +1,10 @@ CHANGELOG RoundCube Webmail --------------------------- +2009/01/20 (thomasb) +---------- +- Fix XSS vulnerability through background attributes as reported by Julien Cayssol + 2009/01/18 (alec) ---------- - Fix problems with backslash as IMAP hierarchy delimiter (#1484467) |