From f06aa8058b7e32ba32d4551074b6e0b8a300f751 Mon Sep 17 00:00:00 2001 From: Thomas Bruederli <thomas@roundcube.net> Date: Mon, 21 Oct 2013 15:02:40 -0400 Subject: [PATCH] Bump version after security fix --- program/steps/mail/headers.inc | 12 ++++++++---- 1 files changed, 8 insertions(+), 4 deletions(-) diff --git a/program/steps/mail/headers.inc b/program/steps/mail/headers.inc index bc7f942..3bb087a 100644 --- a/program/steps/mail/headers.inc +++ b/program/steps/mail/headers.inc @@ -4,8 +4,11 @@ | program/steps/mail/headers.inc | | | | This file is part of the Roundcube Webmail client | - | Copyright (C) 2005-2007, Roundcube Dev. - Switzerland | - | Licensed under the GNU GPL | + | Copyright (C) 2005-2007, The Roundcube Dev Team | + | | + | Licensed under the GNU General Public License version 3 or | + | any later version with exceptions for skins & plugins. | + | See the README file for a full license statement. | | | | PURPOSE: | | Fetch message headers in raw format for display | @@ -20,10 +23,11 @@ if ($uid = get_input_value('_uid', RCUBE_INPUT_POST)) { - $source = $IMAP->get_raw_headers($uid); + $source = $RCMAIL->storage->get_raw_headers($uid); if ($source !== false) { - $source = htmlspecialchars(trim($source)); + $source = trim(rcube_charset::clean($source)); + $source = htmlspecialchars($source); $source = preg_replace( array( '/\n[\t\s]+/', -- Gitblit v1.9.1