From 7259529fad909c51bd412135827af08155f72e19 Mon Sep 17 00:00:00 2001 From: Aleksander Machniak <alec@alec.pl> Date: Tue, 16 Dec 2014 07:34:48 -0500 Subject: [PATCH] Get rid of requests whitelist for security check bypass --- program/include/rcmail.php | 8 -------- 1 files changed, 0 insertions(+), 8 deletions(-) diff --git a/program/include/rcmail.php b/program/include/rcmail.php index 8b47a8d..a16319f 100644 --- a/program/include/rcmail.php +++ b/program/include/rcmail.php @@ -867,14 +867,6 @@ */ public function request_security_check($mode = rcube_utils::INPUT_POST) { - // don't check for valid request tokens in these actions - // @TODO: get rid of this - $request_check_whitelist = array('spell'=>1, 'spell_html'=>1); - - if ($request_check_whitelist[$this->action]) { - return; - } - // check request token if (!$this->check_request($mode)) { self::raise_error(array( -- Gitblit v1.9.1