16 Mar
2026
16 Mar
'26
6 a.m.
On Sun, 15 Mar 2026 at 20:35, Martin <debacle(a)debian.org> wrote:
On 2026-03-15 17:43, Dave Cridland wrote:
It is, and I pointed this out when XEP-0481 was published. Travis and I
then had a discussion about whether xml:lang has a similar problem (it
does, but I think it's not as bad).
Dave.
* XHTML-IM forces clients to send multiple
logical bodies, which an
attacker (or simply misuser) can abuse in interesting and
annoying
ways.
Email horrors!
But isn't it an issue with XEP-0481: Content Types in Messages, too?