Fix XSS issue in handling of CDATA in HTML messages

5 years ago · 4312dc4efe
parent d3f2759a6b
commit 4312dc4efe
1 changed files with 0 additions and 3 deletions
--- a/program/lib/Roundcube/rcube_washtml.php
+++ b/program/lib/Roundcube/rcube_washtml.php
@ -472,9 +472,6 @@ class rcube_washtml
                break;

            case XML_CDATA_SECTION_NODE:
-                $dump .= $node->nodeValue;
-                break;
-
            case XML_TEXT_NODE:
                $dump .= htmlspecialchars($node->nodeValue);
                break;