Confirm
591
edits
Changes
→XML: login page URL: Require HTTPS
<webMail>
<!-- Webpage where the user has to log in manually by entering username
and password himself. HTTPS required. --> <loginPage url="httphttps://mail.example.com/login/" />
<!-- Same as loginAutomaticDOM, but the website makes checks that
The *Name attributes give the DOM name attribute,
while *Selector attributes give CSS selectors.
Don't treat the content of IDs given in this XML file as trusted, but before using them, but verify the format (e.g. only characters and digits for IDs),. esp. if If you use powerful functions like jQuery, and the XML returns you code in the username ID, and you feed it unchecked to jQuery, it may be executed. HTTPS is required for the URL. -->
<loginAutomaticDOM
url="https://mail.example.com/login/"
