From 037af6890fe6fdb84a08d3c86083e847c90ec0ad Mon Sep 17 00:00:00 2001
From: Aleksander Machniak <alec@alec.pl>
Date: Tue, 22 Oct 2013 08:17:26 -0400
Subject: [PATCH] Fix vulnerability in handling _session argument of utils/save-prefs (#1489382)

---
 skins/larry/settings.css |   98 +++++++++++++++++++++++++++++++++++++++++++-----
 1 files changed, 87 insertions(+), 11 deletions(-)

diff --git a/skins/larry/settings.css b/skins/larry/settings.css
index 105b350..1734b55 100644
--- a/skins/larry/settings.css
+++ b/skins/larry/settings.css
@@ -1,29 +1,28 @@
 /**
  * Roundcube webmail styles for the Settings section
  *
- * Copyright (c) 2011, The Roundcube Dev Team
+ * Copyright (c) 2012, The Roundcube Dev Team
  * Screendesign by FLINT / B�ro f�r Gestaltung, bueroflint.com
  *
  * The contents are subject to the Creative Commons Attribution-ShareAlike
  * License. It is allowed to copy, distribute, transmit and to adapt the work
  * by keeping credits to the original autors in the README file.
  * See http://creativecommons.org/licenses/by-sa/3.0/ for details.
- *
- * $Id$
  */
 
 #settings-sections {
 	position: absolute;
 	top: 0;
 	left: 0;
-	width: 220px;
+	width: 200px;
 	bottom: 0;
 }
 
+#pluginbody,
 #settings-right {
 	position: absolute;
 	top: 0;
-	left: 232px;
+	left: 212px;
 	right: 0;
 	bottom: 0;
 }
@@ -39,7 +38,7 @@
 #preferences-box {
 	position: absolute;
 	top: 0;
-	left: 270px;
+	left: 272px;
 	right: 0;
 	bottom: 0;
 }
@@ -53,7 +52,9 @@
 #settings-sections span.listitem a,
 #settings-sections span.tablink a {
 	padding-left: 36px;
-	background: url(images/listicons.png) -100px 0 no-repeat;
+	background-image: url(images/listicons.png);
+	background-position: -100px 0;
+	background-repeat: no-repeat;
 }
 
 /* note: support span.tablink because this is used by plugins */
@@ -93,8 +94,20 @@
 	background-position: 6px -502px;
 }
 
-#settings-sections span.about a {
-	background-position: -100px 0;
+#settings-sections span.filter a {
+	background-position: 6px -1746px;
+}
+
+#settings-sections span.filter.selected a {
+	background-position: 6px -1770px;
+}
+
+#settings-sections span.password a {
+	background-position: 6px -1795px;
+}
+
+#settings-sections span.password.selected a {
+	background-position: 6px -1819px;
 }
 
 #sections-table #rcmrowgeneral td.section {
@@ -158,17 +171,32 @@
 	position: absolute;
 	top: 0;
 	left: 0;
-	width: 300px;
+	width: 260px;
 	bottom: 0;
+}
+
+#identities-table {
+	width: 100%;
+	table-layout: fixed;
+}
+
+#identities-table tbody td.mail {
+	width: 100%;
+	overflow: hidden;
+	text-overflow: ellipsis;
 }
 
 #folder-details,
 #identity-details {
 	position: absolute;
 	top: 0;
-	left: 310px;
+	left: 272px;
 	right: 0;
 	bottom: 0;
+}
+
+#subscription-table {
+	table-layout: fixed;
 }
 
 #subscription-table tr.root td {
@@ -177,13 +205,57 @@
 	padding: 2px;
 }
 
+#subscription-table td.name {
+	width: 85%;
+	overflow: hidden;
+	text-overflow: ellipsis;
+}
+
 #subscription-table td.subscribed {
+	min-width: 30px;
 	padding: 3px 12px 3px 3px;
 	text-align: right;
 }
 
+.skinselection {
+	display: block;
+}
+
+.skinselection span {
+	display: inline-block;
+	vertical-align: middle;
+	padding-right: 1em;
+}
+
+.skinselection .skinname {
+	font-weight: bold;
+}
+
+.skinselection .skinlicense,
+.skinselection .skinlicense a {
+	font-style: italic;
+	color: #666;
+	text-decoration: none;
+}
+
+.skinselection .skinlicense a:hover {
+	text-decoration: underline;
+}
+
+img.skinthumbnail {
+	width: 64px;
+	height: 64px;
+	border: 1px solid #ccc;
+	background: #fff;
+	border-radius: 4px;
+}
+
 #pluginlist td.version {
 	width: 5em;
+}
+
+.webkit #pluginlist td.version {
+	width: 6em;
 }
 
 #pluginlist td.license,
@@ -191,3 +263,7 @@
 	width: 8em;
 }
 
+.webkit #pluginlist td.license,
+.webkit #pluginlist td.source {
+	width: 9em;
+}

--
Gitblit v1.9.1