Comment 4 for bug 741527

Revision history for this message
Curtis Hovey (sinzui) wrote :

The proposed fix is not trustworthy. It can be circumvented by someone with moderate skill and intent. We only accept plain text email. I think we want to escape the body and subject before appending the email to the archive.