src-advisory/SRCmail
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
815 Commits 9 Branches 39 Tags
4b7009dfc2d77343c4f6c96aab5505b02d6250a4
Commit Graph
2 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Timo StreuleandLinus Rath 4b7009dfc2 feat: raise HTML signature length cap to 50000 chars 
5000 chars is too tight for signatures containing base64-embedded images (even a small PNG can run a few thousand chars).
 2026-05-15 14:46:43 +02:00
Timo StreuleandLinus Rath 55a408e810 feat: allow img in HTML identity signatures 
- Restricts src to https: URLs or base64-embedded raster data: URIs (png/jpeg/gif/webp).
- SVG is excluded for safety reasons.
- Images with a disallowed src are removed entirely so they don't render as broken-image icons.
 2026-05-15 14:46:43 +02:00