mail body blank on web gui

[ghen]

zimbra_strict_unclosed_comment_tag=false seems to cause other rendering issues though, where commented CSS code inside <style> tags is now being interpreted, whereas it shouldn't be.

This also impacts mails that previously rendered correctly, so we're still undecided whether to use this workaround or not ...

Is this upstream OWASP fix expected in the near future?

[ghen]

We don't seem to have such side effects with zimbra_strict_unclosed_comment_tag=false combined with zimbra_skip_tags_with_unclosed_cdata="" (empty, instead of the default "styles" value).

But zimbra_skip_tags_with_unclosed_cdata isn't documented anywhere, I only saw it in the source code. Can you advise?