[rt-users] New vulnerability with FCKEditor, is RT effected

2009-07-06 Thread Mike Harris
I'm unsure what version of FCKEditor is included with RT 3.8.4. Is the version of FCKEditor less than 2.6.4.1? There is a potential advisory out for FCKEditor 2.6.4.1 and less: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2265 Thanks -- Mike

[rt-users] Disable WYSIWYG Editor

2009-06-29 Thread Mike Harris
I found a previous post from lwebb from April or so, asking how to permanently disable the WYSIWYG editor, and there weren't any responses to him. I too, would like to disable users from changing to the WYSIWYG editor. I found the RT_SiteConfig.pm option: Set( $MessageBoxRichText, 0);