Skip to content

Commit d4a2232

Browse files
committed
Also filter other JS types
1 parent b2a7121 commit d4a2232

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

mailbox/detach.cgi

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -94,7 +94,7 @@ else {
9494
else {
9595
print "Content-type: $attach->{'type'}\n\n";
9696
}
97-
if ($attach->{'type'} =~ /^text\/html/i && !$in{'save'}) {
97+
if ($attach->{'type'} =~ /^(text\/html|image\/svg|application\/xhtml)/i && !$in{'save'}) {
9898
print &safe_urls(&filter_javascript($attach->{'data'}));
9999
}
100100
else {

0 commit comments

Comments
 (0)