From df0b4f34372e6b615b172df47834e2470b5c8331 Mon Sep 17 00:00:00 2001 From: Aleksander Machniak <alec@alec.pl> Date: Tue, 15 Sep 2015 06:52:18 -0400 Subject: [PATCH] Make sure an email address is valid when replacing it with mailto: link --- program/include/rcmail_string_replacer.php | 10 ++++++++++ 1 files changed, 10 insertions(+), 0 deletions(-) diff --git a/program/include/rcmail_string_replacer.php b/program/include/rcmail_string_replacer.php index 4111c1d..2037db6 100644 --- a/program/include/rcmail_string_replacer.php +++ b/program/include/rcmail_string_replacer.php @@ -41,6 +41,16 @@ { $href = $matches[1]; $suffix = $this->parse_url_brackets($href); + $email = $href; + + if (strpos($email, '?')) { + list($email,) = explode('?', $email); + } + + // skip invalid emails + if (!rcube_utils::check_email($email, false)) { + return $matches[1]; + } $i = $this->add(html::a(array( 'href' => 'mailto:' . $href, -- Gitblit v1.9.1