GNOME Bugzilla – Bug 599964
html interpreted using <object> and <embed> for flash
Last modified: 2009-10-29 10:42:19 UTC
Send this code into your message to any buddy and you see the flash in your empathy. <html><body> <OBJECT classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=5,0,0,0" WIDTH=123 HEIGHT=321> <PARAM NAME=movie VALUE="xxx.swf"> <PARAM NAME=quality VALUE=high> <PARAM NAME=bgcolor VALUE=#666666> <EMBED src="xxx.swf" quality=high bgcolor=#666666 WIDTH=123 HEIGHT=321 TYPE="application/x-shockwave-flash" PLUGINSPAGE="http://www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash"></EMBED> </OBJECT> </body></html>
Which version of Empathy are you using ? Quoting from 2.28.1.1 announcement: > It also solves a potential security issue by ensuring that messages are > always escaped before being displayed in Webkit (#599640).
Empathy 2.28.1 Only occour with Addium theme (Ravenant Dust) Maybe 2.28.1.1 can have fixed this bug.
That should be fixed in 2.28.1.1. Feel free to re-open if you can reproduce with this version.