From 037af6890fe6fdb84a08d3c86083e847c90ec0ad Mon Sep 17 00:00:00 2001 From: Aleksander Machniak <alec@alec.pl> Date: Tue, 22 Oct 2013 08:17:26 -0400 Subject: [PATCH] Fix vulnerability in handling _session argument of utils/save-prefs (#1489382) --- skins/larry/templates/error.html | 9 ++++++--- 1 files changed, 6 insertions(+), 3 deletions(-) diff --git a/skins/larry/templates/error.html b/skins/larry/templates/error.html index 222683f..a65733e 100644 --- a/skins/larry/templates/error.html +++ b/skins/larry/templates/error.html @@ -4,11 +4,14 @@ <title><roundcube:object name="pagetitle" /></title> <roundcube:include file="/includes/links.html" /> </head> -<body> - +<roundcube:if condition="!env:framed" /> +<body class="error"> <roundcube:include file="/includes/header.html" /> +<roundcube:else /> +<body class="error iframe"> +<roundcube:endif /> -<div class="uibox errobox" style="width:40em; margin:60px auto; padding:20px"> +<div class="uibox centerbox errorbox"> $__page_content </div> -- Gitblit v1.9.1