[Bps-public-commit] rt-extension-permissivehtmlmail branch, master, updated. 489ce641451f0c9b465663242a6b55c6cbe901c5

Jim Brandt jbrandt at bestpractical.com
Fri Feb 7 13:45:06 EST 2014


The branch, master has been updated
       via  489ce641451f0c9b465663242a6b55c6cbe901c5 (commit)
       via  f4bc18daac30e015e7435b630d2283444e4392c9 (commit)
      from  495818c445224850d461b651fc2a1811bcf94811 (commit)

Summary of changes:
 lib/RT/Extension/PermissiveHTMLMail.pm | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

- Log -----------------------------------------------------------------
commit f4bc18daac30e015e7435b630d2283444e4392c9
Author: Jim Brandt <jbrandt at bestpractical.com>
Date:   Fri Feb 7 13:43:14 2014 -0500

    Exclude base tag to avoid RT page links going to other domains

diff --git a/lib/RT/Extension/PermissiveHTMLMail.pm b/lib/RT/Extension/PermissiveHTMLMail.pm
index 6b93535..a001a50 100644
--- a/lib/RT/Extension/PermissiveHTMLMail.pm
+++ b/lib/RT/Extension/PermissiveHTMLMail.pm
@@ -34,6 +34,7 @@ if ( RT->Config->Get( 'AllowDangerousHTML' ) ) {
                 head   => 0,
                 body   => 0,
                 meta   => 0,
+                base   => 0,
             ],
             comment => 0,
         );

commit 489ce641451f0c9b465663242a6b55c6cbe901c5
Author: Jim Brandt <jbrandt at bestpractical.com>
Date:   Fri Feb 7 13:44:41 2014 -0500

    Fix attributes typo in docs

diff --git a/lib/RT/Extension/PermissiveHTMLMail.pm b/lib/RT/Extension/PermissiveHTMLMail.pm
index a001a50..191c82f 100644
--- a/lib/RT/Extension/PermissiveHTMLMail.pm
+++ b/lib/RT/Extension/PermissiveHTMLMail.pm
@@ -80,7 +80,7 @@ that it recognizes.
 Installing this extension also additionally provides a
 C<$AllowDangerousHTML> configuration option.  Setting this alters RT
 from using a whitelist (allowing only HTML tags and attributes which it
-knows to be safe) to using a blacklist (skip tags and ributes which are
+knows to be safe) to using a blacklist (skip tags and attributes which are
 unsafe).  This is B<unsafe> and B<dangerous>, as there are guaranteedly
 further unsafe tags which RT does not know to prevent.  B<Enabling this
 feature allows your RT account to be compromised by a malicious email>.

-----------------------------------------------------------------------



More information about the Bps-public-commit mailing list