Ticket #1484313: bugfix1484313.patch

File bugfix1484313.patch, 1.5 kB (added by Emil Wojak, 20 months ago)

Solution

  • program/js/app.js

     
    668668        break; 
    669669 
    670670      case 'load-attachment': 
    671         var qstring = '_mbox='+this.env.mailbox+'&_uid='+this.env.uid+'&_part='+props.part; 
     671        var qstring = '_mbox='+urlencode(this.env.mailbox)+'&_uid='+this.env.uid+'&_part='+props.part; 
    672672 
    673673        // open attachment in frame if it's of a supported mimetype 
    674674        if (this.env.uid && props.mimetype && find_in_array(props.mimetype, this.mimetypes)>=0) 
    … …  
    19481948      { 
    19491949      this.message_list.clear(); 
    19501950      this.set_busy(true, 'searching'); 
    1951       this.http_request('search', '_search='+value+'&_mbox='+mbox, true); 
     1951      this.http_request('search', '_search='+value+'&_mbox='+urlencode(mbox), true); 
    19521952      } 
    19531953    return true; 
    19541954    }; 

  • program/steps/mail/func.inc

     
    5959 
    6060// define url for getting message parts 
    6161if (strlen($_GET['_uid'])) 
    62   $GET_URL = sprintf('%s&_action=get&_mbox=%s&_uid=%d', $COMM_PATH, $IMAP->get_mailbox_name(), get_input_value('_uid', RCUBE_INPUT_GET)); 
     62  $GET_URL = sprintf('%s&_action=get&_mbox=%s&_uid=%d', $COMM_PATH, urlencode($IMAP->get_mailbox_name()), get_input_value('_uid', RCUBE_INPUT_GET)); 
    6363 
    6464 
    6565// set current mailbox in client environment