Author: leithoff
New Revision: 52387
URL: http://svn.stylite.de/viewvc/egroupware?rev=52387&view=rev
Log:
use ENT_SUBSTITUTE on htmlspecialchars to harden display of message as source
Modified:
branches/14.2/mail/inc/class.mail_ui.inc.php
Modified: branches/14.2/mail/inc/class.mail_ui.inc.php
URL: http://svn.stylite.de/viewvc/egroupware/branches/14.2/mail/inc/class.mail_ui.inc.php?rev=52387&r1=52386&r2=52387&view=diff
— branches/14.2/mail/inc/class.mail_ui.inc.php (original)
+++ branches/14.2/mail/inc/class.mail_ui.inc.php Thu Apr 2 10:49:28 2015
@@ -2595,7 +2595,7 @@
else
{
html::safe_content_header($message, $subject.".eml", $mime=‘text/html’, $size=0, true, false);
-
print '<pre>'. htmlspecialchars($message, ENT_NOQUOTES, 'utf-8') .'</pre>';
-
}print '<pre>'. htmlspecialchars($message, ENT_NOQUOTES|ENT_SUBSTITUTE, 'utf-8') .'</pre>'; }
Dive into the World of Parallel Programming The Go Parallel Website, sponsored
by Intel and developed in partnership with Slashdot Media, is your hub for all
things parallel software development, from weekly thought leadership blogs to
news, videos, case studies, tutorials and more. Take a look and join the
conversation now. http://goparallel.sourceforge.net/
eGroupWare-cvs mailing list
eGroupWare-cvs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-cvs