Skip to content

For master-branch: Strip HTML-part if keywords are present to stop leaking them.

paz requested to merge paz/for_master--strip_html_from_multialt_if_keywords into master

The HTML-part of multipart/alternative-messages also contain the keywords. We don't parse them because we don't touch any HTML. In order to prevent the keywords from being disclosed to third parties (e.g. through resent messages), we strip the HTML-part completely.

Merge request reports