<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Line 299 and 300 in lib/mailing.php
contain XSS. Please either lookup how to prevent XSS in PHP or
even better: consider splitting your logic and view by using
templates (oc templates provide p() which does all the escaping
for you)<br>
<br>
On 07/24/2013 12:58 PM, Jascha Burmeister wrote:<br>
</div>
<blockquote
cite="mid:70198B86-4193-44E9-8F15-A51D625196BC@wortbildton.de"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
Hi,
<div><br>
</div>
<div>Any dev there who can approve my app?</div>
<div><br>
</div>
<div><a moz-do-not-send="true"
href="http://apps.owncloud.com/content/show.php/Mail+Notification?content=155982">http://apps.owncloud.com/content/show.php/Mail+Notification?content=155982</a></div>
<div><br>
</div>
<div>Thank you</div>
<div><br>
</div>
<div>telcy</div>
<div><br>
</div>
<div>Jascha Burmeister</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Owncloud mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Owncloud@kde.org">Owncloud@kde.org</a>
<a class="moz-txt-link-freetext" href="https://mail.kde.org/mailman/listinfo/owncloud">https://mail.kde.org/mailman/listinfo/owncloud</a>
</pre>
</blockquote>
<br>
</body>
</html>