summaryrefslogtreecommitdiff
path: root/roundcubemail/program/steps/mail/compose.inc
diff options
context:
space:
mode:
authorestadtherr <estadtherr@208e9e7b-5314-0410-a742-e7e81cd9613c>2008-08-21 12:38:10 +0000
committerestadtherr <estadtherr@208e9e7b-5314-0410-a742-e7e81cd9613c>2008-08-21 12:38:10 +0000
commitc8495fc33ce1ad478f329d5b181c28cdbc19454a (patch)
tree5855c550243ef8d13d87cad16d498b06a4dbf2c4 /roundcubemail/program/steps/mail/compose.inc
parent1ffe2cb35fbb5328fc786c4d6a8dfd4f26c24a70 (diff)
escape html entities in forward/reply headers #1484904
git-svn-id: https://svn.roundcube.net/trunk@1667 208e9e7b-5314-0410-a742-e7e81cd9613c
Diffstat (limited to 'roundcubemail/program/steps/mail/compose.inc')
-rw-r--r--roundcubemail/program/steps/mail/compose.inc8
1 files changed, 4 insertions, 4 deletions
diff --git a/roundcubemail/program/steps/mail/compose.inc b/roundcubemail/program/steps/mail/compose.inc
index 228181624..8a9a383d5 100644
--- a/roundcubemail/program/steps/mail/compose.inc
+++ b/roundcubemail/program/steps/mail/compose.inc
@@ -496,7 +496,7 @@ function rcmail_create_reply_body($body, $bodyIsHtml)
{
$prefix = sprintf("<br /><br />On %s, %s wrote:<br />\n",
$MESSAGE->headers->date,
- Q($MESSAGE->get_header('from')));
+ Q($MESSAGE->get_header('from'), 'replace'));
$prefix .= '<blockquote type="cite" style="padding-left:5px; border-left:#1010ff 2px solid; margin-left:5px; width:100%">';
$suffix = "</blockquote>";
}
@@ -513,7 +513,7 @@ function rcmail_create_forward_body($body, $bodyIsHtml)
{
// soft-wrap message first
$body = wordwrap($body, 80);
-
+
$prefix = sprintf("\n\n\n-------- Original Message --------\nSubject: %s\nDate: %s\nFrom: %s\nTo: %s\n\n",
$MESSAGE->subject,
$MESSAGE->headers->date,
@@ -532,8 +532,8 @@ function rcmail_create_forward_body($body, $bodyIsHtml)
"</tbody></table><br>",
Q($MESSAGE->subject),
Q($MESSAGE->headers->date),
- Q($MESSAGE->get_header('from')),
- Q($MESSAGE->get_header('to')));
+ Q($MESSAGE->get_header('from'), 'replace'),
+ Q($MESSAGE->get_header('to'), 'replace'));
}
// add attachments