[rt-users] Broken mime type text/html inline e-mail visualization

[Kevin Falcone]

On Fri, Aug 05, 2011 at 10:18:17PM +0200, Christian Loos wrote:
> Am 05.08.2011 17:03, schrieb Thomas Sibley:
> > Ah, much more clear.   For security, RT only allows certain HTML when
> > displaying content inline with the ticket history.  What you're seeing
> > is that RT has stripped the tables from your message for inline display.
> >  There are answers in the list archives and maybe the wiki for how to
> > modify ScrubHTML to allow tables inline, although that code has changed
> > a little from 3.8 → 4.0.
> 
> By the way is there any reason why RT doesn't allow by default HTML
> table elements?

It becomes really trivial to fake ticket history unless we're really
careful.  The real solution is not the scrubber, but something that
actually parses the html mail.

-kevin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <http://lists.bestpractical.com/pipermail/rt-users/attachments/20110805/8f1d8735/attachment.sig>