From 197203727417a03d87053a47e5aa5175a76e3e0b Mon Sep 17 00:00:00 2001
From: Aleksander Machniak <alec@alec.pl>
Date: Thu, 17 Oct 2013 04:24:53 -0400
Subject: [PATCH] Fix vulnerability in handling _session argument of utils/save-prefs (#1489382)

---
 plugins/additional_message_headers/additional_message_headers.php |   14 ++++++++------
 1 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/plugins/additional_message_headers/additional_message_headers.php b/plugins/additional_message_headers/additional_message_headers.php
index 757296a..80c58d5 100644
--- a/plugins/additional_message_headers/additional_message_headers.php
+++ b/plugins/additional_message_headers/additional_message_headers.php
@@ -3,21 +3,23 @@
 /**
  * Additional Message Headers
  *
- * Very simple plugin which will add additional headers to or remove them from outgoing messages.
+ * Very simple plugin which will add additional headers
+ * to or remove them from outgoing messages.
  *
- * @version 1.1
+ * Enable the plugin in config/main.inc.php and add your desired headers:
+ * $rcmail_config['additional_message_headers'] = array('User-Agent');
+ *
+ * @version @package_version@
  * @author Ziba Scott
  * @website http://roundcube.net
- *
- * See config.inc.php.disc 
  */
 class additional_message_headers extends rcube_plugin
 {
     public $task = 'mail';
-    
+
     function init()
     {
-        $this->add_hook('outgoing_message_headers', array($this, 'message_headers'));
+        $this->add_hook('message_outgoing_headers', array($this, 'message_headers'));
     }
 
     function message_headers($args)

--
Gitblit v1.9.1