diff options
| author | Jeffrey Stedfast <fejj@ximian.com> | 2003-03-13 04:55:04 +0800 |
|---|---|---|
| committer | Jeffrey Stedfast <fejj@src.gnome.org> | 2003-03-13 04:55:04 +0800 |
| commit | 1f54deb5584629a657a69d62db0e07935322be05 (patch) | |
| tree | f7837d6f97087725a9bf5661701e91645466b1bc /mail/ChangeLog | |
| parent | 8bfabb5cf21422a13242cd169e0e92c126124be4 (diff) | |
| download | gsoc2013-evolution-1f54deb5584629a657a69d62db0e07935322be05.tar gsoc2013-evolution-1f54deb5584629a657a69d62db0e07935322be05.tar.gz gsoc2013-evolution-1f54deb5584629a657a69d62db0e07935322be05.tar.bz2 gsoc2013-evolution-1f54deb5584629a657a69d62db0e07935322be05.tar.lz gsoc2013-evolution-1f54deb5584629a657a69d62db0e07935322be05.tar.xz gsoc2013-evolution-1f54deb5584629a657a69d62db0e07935322be05.tar.zst gsoc2013-evolution-1f54deb5584629a657a69d62db0e07935322be05.zip | |
Security vulnerability fixes.
2003-03-12 Jeffrey Stedfast <fejj@ximian.com>
Security vulnerability fixes.
* mail-format.c (handle_text_html, attachment_header)
(handle_image, handle_via_bonobo): Encode the result from
get_cid() so that malicious Content-Id strings cannot bypass the
user's preference to not load http images, force a bonobo control
to load passing it arbitrary data, etc.
svn path=/trunk/; revision=20268
Diffstat (limited to 'mail/ChangeLog')
| -rw-r--r-- | mail/ChangeLog | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/mail/ChangeLog b/mail/ChangeLog index ec8c9e200c..7b553f817e 100644 --- a/mail/ChangeLog +++ b/mail/ChangeLog @@ -1,5 +1,15 @@ 2003-03-12 Jeffrey Stedfast <fejj@ximian.com> + Security vulnerability fixes. + + * mail-format.c (handle_text_html, attachment_header) + (handle_image, handle_via_bonobo): Encode the result from + get_cid() so that malicious Content-Id strings cannot bypass the + user's preference to not load http images, force a bonobo control + to load passing it arbitrary data, etc. + +2003-03-12 Jeffrey Stedfast <fejj@ximian.com> + * mail-signature-editor.c (menu_file_save_cb): Rewritten to do the same as the composer's build_message() code. |