From 037af6890fe6fdb84a08d3c86083e847c90ec0ad Mon Sep 17 00:00:00 2001 From: Aleksander Machniak <alec@alec.pl> Date: Tue, 22 Oct 2013 08:17:26 -0400 Subject: [PATCH] Fix vulnerability in handling _session argument of utils/save-prefs (#1489382) --- skins/larry/templates/settingsedit.html | 14 +++++++------- 1 files changed, 7 insertions(+), 7 deletions(-) diff --git a/skins/larry/templates/settingsedit.html b/skins/larry/templates/settingsedit.html index afcbeb5..1a80f58 100644 --- a/skins/larry/templates/settingsedit.html +++ b/skins/larry/templates/settingsedit.html @@ -1,5 +1,5 @@ -<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> -<html xmlns="http://www.w3.org/1999/xhtml"> +<roundcube:object name="doctype" value="html5" /> +<html> <head> <title><roundcube:object name="pagetitle" /></title> <roundcube:include file="/includes/links.html" /> @@ -9,14 +9,14 @@ <h1 class="boxtitle"><roundcube:object name="sectionname" /></h1> <div id="preferences-details" class="boxcontent"> -<roundcube:object name="userprefs" form="form" class="propform" cellspacing="0" /> +<roundcube:object name="userprefs" form="form" class="propform" /> </div> -<div id="formfooter"> -<div class="footerleft"> -<roundcube:button command="save" type="input" class="button mainaction" label="save" /> +<div class="footerleft formbuttons"> + <roundcube:button command="save" type="input" class="button mainaction" label="save" /> </div> -</div> + +<roundcube:include file="/includes/footer.html" /> </body> </html> -- Gitblit v1.9.1