Skip to content

Strip HTML-part if keywords are present to stop leaking them.

paz requested to merge paz/strip_html_from_multialt_if_keywords into release-4.0

The HTML-part of multipart/alternative-messages also contain the keywords. We don't parse them because we don't touch any HTML. In order to prevent the keywords from being disclosed to third parties (e.g. through resent messages), we strip the HTML-part completely.

Closes #402 (closed)

Edited by paz

Merge request reports