16 Mar
2026
16 Mar
'26
10 a.m.
On Sun, 15 Mar 2026 at 20:35, Martin <debacle@debian.org> wrote:
On 2026-03-15 17:43, Dave Cridland wrote:
* XHTML-IM forces clients to send multiple logical bodies, which an attacker (or simply misuser) can abuse in interesting and annoying ways.
Email horrors! But isn't it an issue with XEP-0481: Content Types in Messages, too?
It is, and I pointed this out when XEP-0481 was published. Travis and I then had a discussion about whether xml:lang has a similar problem (it does, but I think it's not as bad). Dave.