Get the latest tech news
Roundcube Webmail: SVG feImage bypasses image blocking to track email opens
Roundcube's HTML sanitizer doesn't treat SVG feImage href as an image source. Attackers can bypass remote image blocking to track email opens.
None
Or read this on Hacker News