Changeset 930 in subversion for trunk/roundcubemail/program/steps/mail/show.inc

Timestamp:

Nov 25, 2007 12:34:19 PM (6 years ago)

Author:

thomasb

Message:

Fixed some potential security risks + updatedd changelog

File:

• trunk/roundcubemail/program/steps/mail/show.inc (modified) (2 diffs)

trunk/roundcubemail/program/steps/mail/show.inc

@@ -58 +58 @@
     list($MESSAGE['parts'], $MESSAGE['attachments']) = rcmail_parse_message(
       $MESSAGE['structure'],
-      array('safe' => (bool)$_GET['_safe'],
+      array('safe' => intval($_GET['_safe']),
             'prefer_html' => $CONFIG['prefer_html'],
             'get_url' => $GET_URL.'&_part=%s')
@@ -72 +72 @@
   // give message uid to the client
   $OUTPUT->set_env('uid', $MESSAGE['UID']);
-  $OUTPUT->set_env('safemode', (bool)$_GET['_safe']);
+  $OUTPUT->set_env('safemode', intval($_GET['_safe']));
 
   $next = $prev = -1;