I applied the patch proposed in (patch #516542)
authorteepe <teepe@7612ce4b-ef26-0410-bec9-ea0150e637f0>
Sun, 24 Feb 2002 21:58:51 +0000 (21:58 +0000)
committerteepe <teepe@7612ce4b-ef26-0410-bec9-ea0150e637f0>
Sun, 24 Feb 2002 21:58:51 +0000 (21:58 +0000)
https://sourceforge.net/tracker/index.php?func=detail&aid=516542&group_id=311&atid=300311

please all: be alert whether as to stripping dangerous html is still fully functional

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@2513 7612ce4b-ef26-0410-bec9-ea0150e637f0

ChangeLog
functions/mime.php

index a6c0e5d..5eaa247 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -6,6 +6,7 @@ Version 1.2.6 -- CVS
 --------------------
   - Fixed resume draft bug #513521, #514639
   - Newmail plugin: admin can disablethe use of audio (patch #517698)
+  - Fixed quoting problem in safe html (patch #516542)
        
 Version 1.2.5 -- 22 February 2002
 ---------------------------------
index 6973c86..92927d6 100644 (file)
@@ -1168,10 +1168,12 @@ function stripEvent( &$i, $j, &$body, $id, $base ) {
                     $src .= $body{$k};
                     $k++;
                 }
+                $k++;
                 while( !isNoSep( $body{$k} ) &&
                        $k < $j ) {
                     $k++;
                 }
+                $k++;
                 if ( strtolower( substr( $src, 0, 4 ) ) == 'cid:' ) {
                     $src = substr( $src, 4 );
                     $src = "../src/download.php?absolute_dl=true&amp;passed_id=$id&amp;mailbox=" .