From f06aa8058b7e32ba32d4551074b6e0b8a300f751 Mon Sep 17 00:00:00 2001 From: Thomas Bruederli <thomas@roundcube.net> Date: Mon, 21 Oct 2013 15:02:40 -0400 Subject: [PATCH] Bump version after security fix --- program/steps/mail/headers.inc | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) diff --git a/program/steps/mail/headers.inc b/program/steps/mail/headers.inc index 0892247..3bb087a 100644 --- a/program/steps/mail/headers.inc +++ b/program/steps/mail/headers.inc @@ -26,7 +26,8 @@ $source = $RCMAIL->storage->get_raw_headers($uid); if ($source !== false) { - $source = htmlspecialchars(trim($source)); + $source = trim(rcube_charset::clean($source)); + $source = htmlspecialchars($source); $source = preg_replace( array( '/\n[\t\s]+/', -- Gitblit v1.9.1