Re: Spam attack, observations, how to repair
Ralf Schlatterbeck <[email protected]>
| Newsgroups | gmane.comp.bug-tracking.roundup.user |
|---|---|
| Message-ID | <[email protected]> |
On Fri, Jul 04, 2014 at 02:18:22PM +0200, Ralf Schlatterbeck wrote: > This is the hint. Roundup only rewrites the content-type "text/html" not > just "html" but it seems the browser wants to be helpful and renders > this as html -- which it shouldn't. I'll fix this so that in this case > we will indicate a content-type of application/octet-stream which the > browser should not render. I've verified this is indeed the case. Content type 'html' or 'HTML' is rendered as html (my test-browser was the debian version of firefox aka iceweasel). I've just committed a fix that now checks if 'html' is contained in the content-type (case insensitive) and ships this as application/octet-stream unless allow_html_file is explicitly specified in the configuration. Ralf -- Dr. Ralf Schlatterbeck Tel: +43/2243/26465-16 Open Source Consulting www: http://www.runtux.com Reichergasse 131, A-3411 Weidling email: [email protected] allmenda.com member email: [email protected] ------------------------------------------------------------------------------ Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft