From ebc619c149f82e9151bbf672cf065447f4d12923 Mon Sep 17 00:00:00 2001
From: alecpl <alec@alec.pl>
Date: Fri, 26 Feb 2010 03:06:48 -0500
Subject: [PATCH] - Fix CVE-2010-0464: Disable DNS prefetching (#1486449)
---
program/steps/mail/get.inc | 3 +--
1 files changed, 1 insertions(+), 2 deletions(-)
diff --git a/program/steps/mail/get.inc b/program/steps/mail/get.inc
index cb938c0..a41925a 100644
--- a/program/steps/mail/get.inc
+++ b/program/steps/mail/get.inc
@@ -41,6 +41,7 @@
$MESSAGE = new rcube_message(get_input_value('_uid', RCUBE_INPUT_GET));
}
+send_nocacheing_headers();
// show part page
if (!empty($_GET['_frame'])) {
@@ -66,8 +67,6 @@
$browser = new rcube_browser;
- send_nocacheing_headers();
-
// send download headers
if ($_GET['_download']) {
header("Content-Type: application/octet-stream");
--
Gitblit v1.9.1