From c57130576c8c865f02729571dd83cd0eac48e45b Mon Sep 17 00:00:00 2001 From: Wolfgang Sourdeau Date: Mon, 20 Aug 2007 21:49:28 +0000 Subject: [PATCH] Monotone-Parent: 205cd428c17e1d08bc362707f74e0be93d3d5fff Monotone-Revision: 8da67e77abaa8a3dd458ac3f8ab6cbb3bbcc9a3b Monotone-Author: wsourdeau@inverse.ca Monotone-Date: 2007-08-20T21:49:28 Monotone-Branch: ca.inverse.sogo --- ChangeLog | 4 ++++ SoObjects/Mailer/SOGoMailAccounts.m | 6 +++++- 2 files changed, 9 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 2c935aa8e..1a811ba2f 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,9 @@ 2007-08-20 Wolfgang Sourdeau + * SoObjects/Mailer/SOGoMailAccounts.m ([SOGoMailAccounts + -isValidMailAccountName:_key]): prevent unknown accounts from + being accessed. + * UI/MailPartViewers/UIxMailPartViewer.m ([UIxMailPartViewer -pathToAttachmentObject]): we no longer need the filename extension for SoLookup... diff --git a/SoObjects/Mailer/SOGoMailAccounts.m b/SoObjects/Mailer/SOGoMailAccounts.m index 09a8cfd64..66e2948be 100644 --- a/SoObjects/Mailer/SOGoMailAccounts.m +++ b/SoObjects/Mailer/SOGoMailAccounts.m @@ -55,7 +55,11 @@ static NSString *AgenorShareLoginMarker = @".-."; - (BOOL) isValidMailAccountName: (NSString *) _key { - return ([_key length] > 0); + NSArray *accounts; + + accounts = [[context activeUser] mailAccounts]; + + return [[accounts objectsForKey: @"name"] containsObject: _key]; } - (id) mailAccountWithName: (NSString *) _key