sthen 3db2d38185 SECURITY update to 0.2-alpha, "Replace our crappy html sanitization ... with the dom-based washtml script" from their commit log gives you some idea ... http://secunia.com/advisories/30734/ (advisory pointed out by viq, thanks!). Lots of other bugs fixed too. Based on a diff from Bruno Bigras. N.B. Upgrading users need to read /var/www/roundcubemail/UPGRADING		2008-06-20 10:31:35 +00:00
..
DESCR	import roundcubemail, an imap4 webmail client	2007-05-30 14:30:23 +00:00
MESSAGE	import roundcubemail, an imap4 webmail client	2007-05-30 14:30:23 +00:00
PLIST	SECURITY update to 0.2-alpha, "Replace our crappy html sanitization	2008-06-20 10:31:35 +00:00