From acf633c73bc8df9a5036bc52d7568f4213ab73c7 Mon Sep 17 00:00:00 2001 From: Aleksander Machniak <alec@alec.pl> Date: Fri, 06 May 2016 02:32:01 -0400 Subject: [PATCH] Fix XSS issue in href attribute on area tag (#5240, #5241) --- plugins/database_attachments/database_attachments.php | 6 +++--- 1 files changed, 3 insertions(+), 3 deletions(-) diff --git a/plugins/database_attachments/database_attachments.php b/plugins/database_attachments/database_attachments.php index e4abf93..735915a 100644 --- a/plugins/database_attachments/database_attachments.php +++ b/plugins/database_attachments/database_attachments.php @@ -43,9 +43,9 @@ $status = $cache->write($key, $data); if ($status) { - $args['id'] = $key; + $args['id'] = $key; $args['status'] = true; - unset($args['path']); + $args['path'] = null; } return $args; @@ -155,7 +155,7 @@ $type = $rcmail->config->get('database_attachments_cache', 'db'); // Init SQL cache (disable cache data serialization) - $this->cache = $rcmail->get_cache($this->prefix, 'db', $ttl, false); + $this->cache = $rcmail->get_cache($this->prefix, $type, $ttl, false); } return $this->cache; -- Gitblit v1.9.1