imp
imp copied to clipboard
add 'sandbox' attr to Horde_Mime_Part iframes
the "allow-same-origin" value is needed. Otherwise the email can not be displayed
This is meant as an additional countermeasure against XSS attacks in html emails. I am not 100% sure this won't break some html emails. In my tests it did not lead to any issues.