index.php
@@ -195,7 +195,7 @@ // check client X-header to verify request origin if ($OUTPUT->ajax_call) { if (rc_request_header('X-Roundcube-Request') != $RCMAIL->get_request_token() && !$RCMAIL->config->get('devel_mode')) { header('HTTP/1.1 404 Not Found'); header('HTTP/1.1 403 Forbidden'); die("Invalid Request"); } }