From 037af6890fe6fdb84a08d3c86083e847c90ec0ad Mon Sep 17 00:00:00 2001 From: Aleksander Machniak <alec@alec.pl> Date: Tue, 22 Oct 2013 08:17:26 -0400 Subject: [PATCH] Fix vulnerability in handling _session argument of utils/save-prefs (#1489382) --- plugins/managesieve/skins/larry/templates/setedit.html | 8 +++++--- 1 files changed, 5 insertions(+), 3 deletions(-) diff --git a/plugins/managesieve/skins/larry/templates/setedit.html b/plugins/managesieve/skins/larry/templates/setedit.html index 71de8dd..9fc115d 100644 --- a/plugins/managesieve/skins/larry/templates/setedit.html +++ b/plugins/managesieve/skins/larry/templates/setedit.html @@ -5,16 +5,18 @@ <roundcube:include file="/includes/links.html" /> <link rel="stylesheet" type="text/css" href="/this/managesieve.css" /> </head> -<body class="iframe"> +<body class="iframe floatingbuttons"> <div id="filter-title" class="boxtitle"><roundcube:label name="managesieve.newfilterset" /></div> <div id="filter-form" class="boxcontent"> <roundcube:object name="filtersetform" /> -<p> +<div id="footer"> +<div class="footerleft formbuttons floating"> <roundcube:button command="plugin.managesieve-save" type="input" class="button mainaction" label="save" /> -</p> +</div> +</div> </form> </div> -- Gitblit v1.9.1