Fix vulnerability in handling _session argument of utils/save-prefs (#1489382)

Aleksander Machniak

2013-10-17 eb433aa33cec00b42eba3153fc905ebef9c6fd0b

 program/include/rcube_plugin_api.php

@@ -30,13 +30,14 @@
class rcube_plugin_api
{
  static private $instance;
  

  public $dir;
  public $url = 'plugins/';
  public $output;
  public $config;
  public $allowed_prefs = array();
  
  public $allowed_prefs         = array();
  public $allowed_session_prefs = array();

  public $handlers = array();
  private $plugins = array();
  private $tasks = array();