Am Mo., 22. Aug. 2022 um 09:22 Uhr schrieb Jakub Wilk <jwilk@jwilk.net>:
>
> See: https://nmbug.notmuchmail.org/nmweb/search/markup%20where%20appropriate
>
> <code> and <p> from the mail subject was dumped without escaping into HTML.
>

Interesting :)

The body is htmlescape()ed, but the subject header is used as is. I
should be escaped too.

Michael
_______________________________________________
notmuch mailing list -- notmuch@notmuchmail.org
To unsubscribe send an email to notmuch-leave@notmuchmail.org