amorfo77/sogo
1
0
Fork 0
mirror of https://github.com/inverse-inc/sogo.git synced 2026-08-30 02:37:16 +00:00
Code Issues Projects Releases Wiki Activity

fix(security): Security fix for WSTG-INPV-02. Add XSS protection on folders and mail title / content

Browse Source
This commit is contained in:
smizrahi
2022-11-14 14:36:46 +01:00
parent 967479335c
commit 714acfc838
9 changed files with 91 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
UI/MailerUI/UIxMailView.m
+1 -1
View File
@@ -347,7 +347,7 @@ static NSString *mailETag = nil;
if ([self formattedDate])
[data setObject: [self formattedDate] forKey: @"date"];
if ([self messageSubject])
[data setObject: [self messageSubject] forKey: @"subject"];
[data setObject: [[self messageSubject] stringWithoutHTMLInjection: YES] forKey: @"subject"];
if ((addresses = [addressFormatter dictionariesForArray: [co fromEnvelopeAddresses]]))
[data setObject: addresses forKey: @"from"];
if ((addresses = [addressFormatter dictionariesForArray: [co toEnvelopeAddresses]]))