Changeset 2877 in subversion

Timestamp:

Aug 27, 2009 4:08:27 AM (4 years ago)

Author:

thomasb

Message:

Only allow images as 'inline' parts; list other parts as attachments if they have a valid mime type

File:

• trunk/roundcubemail/program/include/rcube_message.php (modified) (1 diff)

trunk/roundcubemail/program/include/rcube_message.php

@@ -393 +393 @@
           // part belongs to a related message and is linked
           if ($message_ctype_secondary == 'related'
-              && ($mail_part->headers['content-id'] || $mail_part->headers['content-location'])) {
+              && preg_match('!^image/!', $mail_part->mimetype)
+              && ($mail_part->headers['content-id'] || $mail_part->headers['content-location'])) {
             if ($mail_part->headers['content-id'])
               $mail_part->content_id = preg_replace(array('/^</', '/>$/'), '', $mail_part->headers['content-id']);
             if ($mail_part->headers['content-location'])
               $mail_part->content_location = $mail_part->headers['content-base'] . $mail_part->headers['content-location'];
-    
+              
             $this->inline_parts[] = $mail_part;
           }
           // is a regular attachment
-          else {
+          else if (preg_match('!^[a-z]+/[a-z0-9-.]+$!i', $mail_part->mimetype)) {
             if (!$mail_part->filename)
               $mail_part->filename = 'Part '.$mail_part->mime_id;