In-Reply-To: <20030124143507.32126.qmail@mail.securityfocus.com> A fix for this has now been posted. Please see the xss-2.1.0-patch.txt file referenced here: http://sourceforge.net/project/showfiles.php?group_id=103 This fix will be part of Mailman 2.1.1 when that release is ready.