Workaround for Internet Explorer MIME handling
- We've changed SquirrelMail attachment handling to work around an issue in Internet Explorer: the browser will attempt to guess the MIME type of attachments based on content, not the MIME header we send. Attachments could fake to be an 'harmless' image/jpeg, while they were in fact HTML that Internet Explorer would render.
- Affected Versions:
- Register Globals:
- Register_globals does not have to be on for this issue.
- CVE ID(s):
- view patch
- Thanks go to Martijn Brinkers and Cor Bosman.
- This page last updated:
- 2006-12-02 16:42:03