mirror of
https://github.com/inverse-inc/sogo.git
synced 2026-10-28 21:35:43 +00:00
fix(security): Security fix for WSTG-INPV-02. Add XSS protection on folders and mail title / content
This commit is contained in:
1 parent
967479335c
commit
714acfc838
9 files changed
+91
-8
No files matched your search
@@ -182,7 +182,7 @@ _intValueFromHex (NSString *hexString)
|
||||
fActiveTasks = [folder activeTasks];
|
||||
|
||||
[calendar setObject: folderName forKey: @"id"];
|
||||
[calendar setObject: fDisplayName forKey: @"name"];
|
||||
[calendar setObject: [fDisplayName stringWithoutHTMLInjection: YES] forKey: @"name"];
|
||||
[calendar setObject: [folder calendarColor] forKey: @"color"];
|
||||
isActive = [NSNumber numberWithBool: [folder isActive]];
|
||||
[calendar setObject: isActive forKey: @"active"];
|
||||
|
||||
Reference in new issue
Block a user