Ok, based on that patch you need to do this:
1. open the file components/com_roundcube/program/steps/mail/func.inc on your computer
2. search for the line with this code
| Code: |
// replace event handlers on any object
|
around line 1188
3. after it add these 2 lines
| Code: |
$body = preg_replace('/\s(on[^=]+)=/im', ' __removed=', $body);
$body = preg_replace('/\shref=["\']?(javascript:«»)/im', 'null:', $body);
|
4. save it and upload it back on the server
Hope it helps, i didn't got the chance to test this patch! Let me know if it worked! Ovidiu