From d75e755b837a8e9b58baa202ee91f3db7aeac81f Mon Sep 17 00:00:00 2001 From: pdontthink Date: Tue, 27 Nov 2007 11:22:32 +0000 Subject: [PATCH] Make mailto: links work when viewing HTML messages. Security folks, can this be exploited? git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@12789 7612ce4b-ef26-0410-bec9-ea0150e637f0 --- functions/mime.php | 1 + 1 file changed, 1 insertion(+) diff --git a/functions/mime.php b/functions/mime.php index 6112e3c6..d1511d22 100644 --- a/functions/mime.php +++ b/functions/mime.php @@ -1847,6 +1847,7 @@ function sq_fix_url($attname, &$attvalue, $message, $id, $mailbox,$sQuote = '"') $aUrl = parse_url($attvalue); if (isset($aUrl['scheme'])) { switch(strtolower($aUrl['scheme'])) { + case 'mailto': case 'http': case 'https': case 'ftp': -- 2.25.1