Fix XSS issue in handling of CDATA in HTML messages

4 years ago · 23c06159ae
parent 25c4861542
commit 23c06159ae
1 changed files with 0 additions and 3 deletions
--- a/program/lib/Roundcube/rcube_washtml.php
+++ b/program/lib/Roundcube/rcube_washtml.php
@ -497,9 +497,6 @@ class rcube_washtml
                break;

            case XML_CDATA_SECTION_NODE:
-                $dump .= $node->nodeValue;
-                break;
-
            case XML_TEXT_NODE:
                $dump .= htmlspecialchars($node->nodeValue);
                break;