Hi On Fri, Dec 09, 2005 at 11:00:57PM +0100, Florian Weimer wrote: > * Ola Lundqvist: > > > As i understand this article at gmane.org this is a IE bug. Fixing this > > in horde do not give much effect as it is just as simple to trigger this > > bug in any html page anywhere else. > > But these HTML pages cannot retrieve session authentication > information from IMP. In the end, it's a question of policy. From a That is true. Did not think of that possibility.
> pure security perspective (ignoring resources and politics), it makes > sense to filter that in IMP. But I can understand that it shouldn't > be top priority for Debian to pamper over IE bugs. I think that is the case. I'll keep this bug open with wishlist status as it is only a IE related bug. Regards, // Ola > -- --------------------- Ola Lundqvist --------------------------- / [EMAIL PROTECTED] Annebergsslingan 37 \ | [EMAIL PROTECTED] 654 65 KARLSTAD | | +46 (0)54-10 14 30 +46 (0)70-332 1551 | | http://www.opal.dhs.org UIN/icq: 4912500 | \ gpg/f.p.: 7090 A92B 18FE 7994 0C36 4FE4 18A1 B1CF 0FE5 3DD9 / --------------------------------------------------------------- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
