| | |
| | | if (!empty($MESSAGE->headers->charset)) |
| | | $RCMAIL->storage->set_charset($MESSAGE->headers->charset); |
| | | |
| | | if ($compose_mode == RCUBE_COMPOSE_REPLY) { |
| | | if (!$MESSAGE->headers) { |
| | | // error |
| | | } |
| | | else if ($compose_mode == RCUBE_COMPOSE_REPLY) { |
| | | $COMPOSE['reply_uid'] = $msg_uid; |
| | | $COMPOSE['reply_msgid'] = $MESSAGE->headers->messageID; |
| | | $COMPOSE['references'] = trim($MESSAGE->headers->references . " " . $MESSAGE->headers->messageID); |
| | |
| | | } |
| | | } |
| | | |
| | | $out = $select_from->show((int)$MESSAGE->compose['from']); |
| | | $out = $select_from->show($MESSAGE->compose['from']); |
| | | |
| | | // add signatures to client |
| | | $OUTPUT->set_env('signatures', $a_signatures); |
| | |
| | | $prefix .= rcube_label('from') . ': ' . $MESSAGE->get_header('from') . "\n"; |
| | | $prefix .= rcube_label('to') . ': ' . $MESSAGE->get_header('to') . "\n"; |
| | | |
| | | if ($MESSAGE->headers->cc) |
| | | $prefix .= rcube_label('cc') . ': ' . $MESSAGE->get_header('cc') . "\n"; |
| | | if ($MESSAGE->headers->replyto && $MESSAGE->headers->replyto != $MESSAGE->headers->from) |
| | | $prefix .= rcube_label('replyto') . ': ' . $MESSAGE->get_header('replyto') . "\n"; |
| | | if ($cc = $MESSAGE->headers->get('cc')) |
| | | $prefix .= rcube_label('cc') . ': ' . $cc . "\n"; |
| | | if (($replyto = $MESSAGE->headers->get('reply-to')) && $replyto != $MESSAGE->get_header('from')) |
| | | $prefix .= rcube_label('replyto') . ': ' . $replyto . "\n"; |
| | | |
| | | $prefix .= "\n"; |
| | | $body = trim($body, "\r\n"); |
| | |
| | | rcube_label('from'), Q($MESSAGE->get_header('from'), 'replace'), |
| | | rcube_label('to'), Q($MESSAGE->get_header('to'), 'replace')); |
| | | |
| | | if ($MESSAGE->headers->cc) |
| | | if ($cc = $MESSAGE->headers->get('cc')) |
| | | $prefix .= sprintf("<tr><th align=\"right\" nowrap=\"nowrap\" valign=\"baseline\">%s: </th><td>%s</td></tr>", |
| | | rcube_label('cc'), |
| | | Q($MESSAGE->get_header('cc'), 'replace')); |
| | | rcube_label('cc'), Q($cc, 'replace')); |
| | | |
| | | if ($MESSAGE->headers->replyto && $MESSAGE->headers->replyto != $MESSAGE->headers->from) |
| | | if (($replyto = $MESSAGE->headers->get('reply-to')) && $replyto != $MESSAGE->get_header('from')) |
| | | $prefix .= sprintf("<tr><th align=\"right\" nowrap=\"nowrap\" valign=\"baseline\">%s: </th><td>%s</td></tr>", |
| | | rcube_label('replyto'), |
| | | Q($MESSAGE->get_header('replyto'), 'replace')); |
| | | rcube_label('replyto'), Q($replyto, 'replace')); |
| | | |
| | | $prefix .= "</tbody></table><br>"; |
| | | } |
| | |
| | | $cid_map = rcmail_write_compose_attachments($MESSAGE, $bodyIsHtml); |
| | | } |
| | | |
| | | // clean up html tags - XSS prevention (#1489251) |
| | | $body = rcmail_wash_html($body, array('safe' => 1), $cid_map); |
| | | // clean up HTML tags - XSS prevention (#1489251) |
| | | if ($bodyIsHtml) { |
| | | $body = rcmail_wash_html($body, array('safe' => 1), $cid_map); |
| | | |
| | | // replace cid with href in inline images links |
| | | if ($cid_map) { |
| | | $body = str_replace(array_keys($cid_map), array_values($cid_map), $body); |
| | | // remove comments (produced by washtml) |
| | | $body = preg_replace('/<!--[^>]+-->/', '', $body); |
| | | |
| | | // replace cid with href in inline images links |
| | | if (!empty($cid_map)) { |
| | | $body = str_replace(array_keys($cid_map), array_values($cid_map), $body); |
| | | } |
| | | } |
| | | |
| | | return $body; |