RotherOSS / otobo

OTOBO is one of the most flexible web-based ticketing systems used for Customer Service, Help Desk, IT Service Management. https://otobo.io/
GNU General Public License v3.0
263 stars 75 forks source link

Remove a possibility for ReDos attacks by removing special handling of some MS classes in articles. Thanks to Emin Yazi (Efflux) #3853

Closed svenoe closed 1 month ago

svenoe commented 1 month ago

We removed special handling of a html class used by some Microsoft software, to prevent maliciously crafted or erroneous article html from resulting in high server load for article rendering.