SECURITY update to 0.2-alpha, "Replace our crappy html sanitization
with the dom-based washtml script" from their commit log gives you
some idea ... http://secunia.com/advisories/30734/ (advisory pointed
out by viq, thanks!). Lots of other bugs fixed too. Based on a diff
from Bruno Bigras.
N.B. Upgrading users need to read /var/www/roundcubemail/UPGRADING
with the dom-based washtml script" from their commit log gives you
some idea ... http://secunia.com/advisories/30734/ (advisory pointed
out by viq, thanks!). Lots of other bugs fixed too. Based on a diff
from Bruno Bigras.
N.B. Upgrading users need to read /var/www/roundcubemail/UPGRADING
