diff options
| author | thomasb <thomasb@208e9e7b-5314-0410-a742-e7e81cd9613c> | 2007-11-25 17:34:19 +0000 |
|---|---|---|
| committer | thomasb <thomasb@208e9e7b-5314-0410-a742-e7e81cd9613c> | 2007-11-25 17:34:19 +0000 |
| commit | 916676eafd05379db18614e3c0431fdbd422feb2 (patch) | |
| tree | 3ff32ced45c2e0c8a57b9c64ebe676f7eda0d9c5 /roundcubemail/program/steps/mail/get.inc | |
| parent | 2f82db76ece7e62d182850dea58c902b7d0a43f3 (diff) | |
Fixed some potential security risks + updatedd changelog
git-svn-id: https://svn.roundcube.net/trunk@930 208e9e7b-5314-0410-a742-e7e81cd9613c
Diffstat (limited to 'roundcubemail/program/steps/mail/get.inc')
| -rw-r--r-- | roundcubemail/program/steps/mail/get.inc | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/roundcubemail/program/steps/mail/get.inc b/roundcubemail/program/steps/mail/get.inc index c9e40ac77..dad49d370 100644 --- a/roundcubemail/program/steps/mail/get.inc +++ b/roundcubemail/program/steps/mail/get.inc @@ -88,7 +88,7 @@ else if ($pid = get_input_value('_part', RCUBE_INPUT_GET)) // we have to analyze the whole structure again to find inline objects list($new_parts, $new_attachments) = rcmail_parse_message($MESSAGE['structure'], - array('safe' => (bool)$_GET['_safe'], + array('safe' => intval($_GET['_safe']), 'prefer_html' => TRUE, 'get_url' => $GET_URL.'&_part=%s')); @@ -102,7 +102,7 @@ else if ($pid = get_input_value('_part', RCUBE_INPUT_GET)) $part->body = $IMAP->get_message_part($MESSAGE['UID'], $part->mime_id, $part); $OUTPUT = new rcube_html_page(); - $OUTPUT->write(rcmail_print_body($part, (bool)$_GET['_safe'])); + $OUTPUT->write(rcmail_print_body($part, intval($_GET['_safe']))); } else { @@ -130,7 +130,7 @@ else $cont = ''; list($MESSAGE['parts']) = rcmail_parse_message($MESSAGE['structure'], - array('safe' => (bool)$_GET['_safe'], + array('safe' => intval($_GET['_safe']), 'get_url' => $GET_URL.'&_part=%s')); $cont = "<html>\n<head><title></title>\n</head>\n<body>"; |