michael/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2026-08-31 18:50:39 +01:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Also filter other JS types

Browse Source
This commit is contained in:
Jamie Cameron
2026-08-27 21:35:56 -07:00
parent 670a22122f
commit b14f24fc61
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
mailboxes/detach.cgi
View File

@@ -100,7 +100,8 @@ else {
print "Content-type: $attach->{'type'}\n\n";
}
}
if ($attach->{'type'} =~ /^text\/html/i && !$in{'save'}) {
if ($attach->{'type'} =~ /^(text\/html|image\/svg|application\/xhtml)/i
&& !$in{'save'}) {
print &safe_urls(&filter_javascript($attach->{'data'}));
}
else {