On Sun, 15 Mar 2026 at 20:35, Martin <debacle@debian.org> wrote:

On 2026-03-15 17:43, Dave Cridland wrote:
> * XHTML-IM forces clients to send multiple logical bodies, which an attacker (or simply misuser) can abuse in interesting and annoying
> ways.

Email horrors!
But isn't it an issue with XEP-0481: Content Types in Messages, too?

It is, and I pointed this out when XEP-0481 was published. Travis and I then had a discussion about whether xml:lang has a similar problem (it does, but I think it's not as bad).

Dave.