From 037af6890fe6fdb84a08d3c86083e847c90ec0ad Mon Sep 17 00:00:00 2001 From: Aleksander Machniak <alec@alec.pl> Date: Tue, 22 Oct 2013 08:17:26 -0400 Subject: [PATCH] Fix vulnerability in handling _session argument of utils/save-prefs (#1489382) --- program/steps/mail/sendmdn.inc | 14 ++++++-------- 1 files changed, 6 insertions(+), 8 deletions(-) diff --git a/program/steps/mail/sendmdn.inc b/program/steps/mail/sendmdn.inc index f1fb792..01d0807 100644 --- a/program/steps/mail/sendmdn.inc +++ b/program/steps/mail/sendmdn.inc @@ -4,9 +4,12 @@ +-----------------------------------------------------------------------+ | program/steps/mail/sendmdn.inc | | | - | This file is part of the RoundCube Webmail client | - | Copyright (C) 2008-2009, RoundCube Dev. - Switzerland | - | Licensed under the GNU GPL | + | This file is part of the Roundcube Webmail client | + | Copyright (C) 2008-2009, The Roundcube Dev Team | + | | + | Licensed under the GNU General Public License version 3 or | + | any later version with exceptions for skins & plugins. | + | See the README file for a full license statement. | | | | PURPOSE: | | Send a message disposition notification for a specific mail | @@ -14,9 +17,6 @@ +-----------------------------------------------------------------------+ | Author: Thomas Bruederli <roundcube@gmail.com> | +-----------------------------------------------------------------------+ - - $Id: sendmail.inc 930 2007-11-25 17:34:19Z thomasb $ - */ // only process ajax requests @@ -40,5 +40,3 @@ } $OUTPUT->send(); - -?> \ No newline at end of file -- Gitblit v1.9.1