Changeset 277 in subversion for trunk/roundcubemail/program/steps/mail/show.inc

Timestamp:

Jul 19, 2006 3:36:35 PM (7 years ago)

Author:

thomasb

Message:

Improved usability (Ticket #1483807) and HTML validity; applied patch #1328032; fixed bug #1443200

File:

• trunk/roundcubemail/program/steps/mail/show.inc (modified) (1 diff)

trunk/roundcubemail/program/steps/mail/show.inc

@@ -110 +110 @@
                         show_bytes($attach_prop['size']));
       else
-        $out .= sprintf('<li><a href="%s&_part=%s" onclick="return %s.command(\'load-attachment\',{part:\'%s\', mimetype:\'%s\'},this)">%s</a></li>'."\n",
-                        $GET_URL,
+        $out .= sprintf('<li><a href="%s&amp;_part=%s" onclick="return %s.command(\'load-attachment\',{part:\'%s\', mimetype:\'%s\'},this)">%s</a></li>'."\n",
+                        htmlentities($GET_URL),
                         $attach_prop['part_id'],
                         $JS_OBJECT_NAME,