The HTMLQuoteColorer::process function in
messageviewer/htmlquotecolorer.cpp in KDE PIM 4.6 through 4.8 does not
inject arbitrary web script or HTML via a crafted email.
mdeslaur> caused by webkit migration, doesn't affect natty and lower
Updated: 2016-01-26 17:42:24 UTC (commit 10507)