On Fri, Oct 03, 2003 at 11:56:47AM -0500, Jason Munro wrote: > While squirrelmail's filter is based on the same engine apparently either > it's not up to date or the params are not set as tight. It looks like Squirrelmail 1.4.0 doesn't filter it, while 1.4.2 does. Upgrading Squirrelmail is not a bad idea anyway, as before version 1.4.1, external images could be loaded through the "lowsrc" attribute on browsers that handle it. But this was not a bug in Squirrelmail either, just a combination to avoid.
