PR-5.4-dev Pending

User tests: Successful: Unsuccessful:

avatar arib06
arib06
2 Jul 2026

Content deleted by maintainer

avatar arib06 arib06 - open - 2 Jul 2026
avatar arib06 arib06 - change - 2 Jul 2026
Status New Pending
avatar joomla-cms-bot joomla-cms-bot - change - 2 Jul 2026
Category Front End com_contact
avatar richard67
richard67 - comment - 2 Jul 2026

https://github.com/joomla/joomla-cms/security

@arib06 Brian is right. Please read our security policy and act according to it. Thanks in advance.

avatar arib06
arib06 - comment - 2 Jul 2026

Understood, that's fair. I'll submit this to the JSST through the security portal so it can be handled privately. Closing here to keep the vector out of the public tracker in the meantime.

avatar arib06 arib06 - change - 2 Jul 2026
Status Pending Closed
Closed_Date 0000-00-00 00:00:00 2026-07-02 15:13:23
Closed_By arib06
Labels Added: PR-5.4-dev
avatar arib06 arib06 - close - 2 Jul 2026
avatar arib06 arib06 - change - 2 Jul 2026
The description was changed
avatar arib06 arib06 - edited - 2 Jul 2026
avatar brianteeman
brianteeman - comment - 2 Jul 2026

You should edit the description to remove the details please

avatar richard67 richard67 - change - 2 Jul 2026
Title
sanitize contact name in vCard Content-Disposition header
Title deleted by maintainer
avatar richard67 richard67 - edited - 2 Jul 2026
avatar richard67 richard67 - change - 2 Jul 2026
The description was changed
avatar richard67 richard67 - edited - 2 Jul 2026
avatar arib06
arib06 - comment - 2 Jul 2026

The title and body have already been redacted, so the details are out of the public thread now. I'm taking the rest through the security portal. Thanks for the pointer.

avatar richard67
richard67 - comment - 2 Jul 2026

The title and body have already been redacted, so the details are out of the public thread now. I'm taking the rest through the security portal. Thanks for the pointer.

@arib06 Maybe you can push a code change to your branch which reverts your code changes so that they are not visible anymore in the closed PR?

avatar arib06 arib06 - change - 2 Jul 2026
Status Closed New
Closed_Date 2026-07-02 15:13:23
Closed_By arib06
avatar arib06 arib06 - change - 2 Jul 2026
Status New Pending
avatar arib06 arib06 - change - 2 Jul 2026
Status Pending Closed
avatar arib06 arib06 - reopen - 2 Jul 2026
avatar arib06 arib06 - close - 2 Jul 2026
avatar arib06
arib06 - comment - 2 Jul 2026

Done. Pushed a revert to the branch so the diff here is now empty, and re-closed. I'll take the details through the security portal.

Add a Comment

Login with GitHub to post a comment