On Mon, 25 Feb 2008, Ulrich Kahl wrote:
The most important change is this:

- Forbid attaching anything containing "../" or ".ssh/" in mailto: URIs.

Since it is security related, I think it should go in, but YMMV.

How is it security related?

I don't see any security fix mentioned here (or am I looking in the wrong place?):
http://www.claws-mail.org/news.php

--
Antoine

Reply via email to