From a2cf7c41b97a587d90188b83e4d15da1567a54b4 Mon Sep 17 00:00:00 2001 From: Thomas Bruederli <thomas@roundcube.net> Date: Wed, 09 Apr 2014 02:48:28 -0400 Subject: [PATCH] Fix accidental key replacements --- program/steps/mail/headers.inc | 21 ++++++++++----------- 1 files changed, 10 insertions(+), 11 deletions(-) diff --git a/program/steps/mail/headers.inc b/program/steps/mail/headers.inc index bc7f942..9d3e6d3 100644 --- a/program/steps/mail/headers.inc +++ b/program/steps/mail/headers.inc @@ -1,11 +1,15 @@ <?php + /* +-----------------------------------------------------------------------+ | program/steps/mail/headers.inc | | | | This file is part of the Roundcube Webmail client | - | Copyright (C) 2005-2007, Roundcube Dev. - Switzerland | - | Licensed under the GNU GPL | + | Copyright (C) 2005-2007, The Roundcube Dev Team | + | | + | Licensed under the GNU General Public License version 3 or | + | any later version with exceptions for skins & plugins. | + | See the README file for a full license statement. | | | | PURPOSE: | | Fetch message headers in raw format for display | @@ -13,17 +17,14 @@ +-----------------------------------------------------------------------+ | Author: Aleksander Machniak <alec@alec.pl> | +-----------------------------------------------------------------------+ - - $Id$ - */ -if ($uid = get_input_value('_uid', RCUBE_INPUT_POST)) -{ - $source = $IMAP->get_raw_headers($uid); +if ($uid = rcube_utils::get_input_value('_uid', rcube_utils::INPUT_POST)) { + $source = $RCMAIL->storage->get_raw_headers($uid); if ($source !== false) { - $source = htmlspecialchars(trim($source)); + $source = trim(rcube_charset::clean($source)); + $source = htmlspecialchars($source); $source = preg_replace( array( '/\n[\t\s]+/', @@ -46,5 +47,3 @@ } exit; - - -- Gitblit v1.9.1