Content-Type Text/Plain Considered Harmful https://webcache.googleusercontent.com/search?q=cache:https://jankopecky.net/index.php/2017/04/18/0day-textplain-considered-harmful/ Files: testeml_1.eml (<iframe src='plain.php?name=<HTML><h1>it works</h1>></iframe>) .htaccess plain.php Screenshot: