Fix vulnerability in handling _session argument of utils/save-prefs (#1489382)

Aleksander Machniak

2013-10-17 197203727417a03d87053a47e5aa5175a76e3e0b

 plugins/additional_message_headers/additional_message_headers.php

@@ -3,13 +3,15 @@
/**
 * Additional Message Headers
 *
 * Very simple plugin which will add additional headers to or remove them from outgoing messages.
 * Very simple plugin which will add additional headers
 * to or remove them from outgoing messages.
 *
 * Enable the plugin in config/main.inc.php and add your desired headers:
 * $rcmail_config['additional_message_headers'] = array('User-Agent');
 *
 * @version @package_version@
 * @author Ziba Scott
 * @website http://roundcube.net
 *
 * See config.inc.php.dist
 */
class additional_message_headers extends rcube_plugin
{
@@ -17,7 +19,7 @@

    function init()
    {
        $this->add_hook('outgoing_message_headers', array($this, 'message_headers'));
        $this->add_hook('message_outgoing_headers', array($this, 'message_headers'));
    }

    function message_headers($args)