mirror of
https://github.com/inverse-inc/sogo.git
synced 2026-08-29 10:17:35 +00:00
Jan Kahmen
045a0b9c0a
the generic attribute writer used for these two spots does not escape what it writes, so a value taken from the message ends the attribute and starts a new one. both are inside a part that is compiled, which is where an injected handler runs. * the organizer link took inEvent.organizer.email verbatim. a value such as mailto:x@y" onpointerover="... produced a live handler on the anchor, and an entity encoded scheme such as javascript: reached the href, where the browser decodes it. the href is now built as mailto: plus the parsed address and escaped as an attribute value. * the attachment name paragraph of the image and the link viewer took filenameForDisplay verbatim. a quote inside an RFC 2231 encoded filename ended the title attribute. the writer escapes & < > there but not the quote, so the accessor drops the quote instead of escaping it, which keeps a plain filename such as A&B.pdf unchanged in the tooltip. the img title of the image viewer is left alone: attributes of that element are escaped by the framework already.
56 lines
1.5 KiB
Objective-C
56 lines
1.5 KiB
Objective-C
/*
|
|
* Copyright (C) 2007-2016 Inverse inc.
|
|
*
|
|
* This file is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2, or (at your option)
|
|
* any later version.
|
|
*
|
|
* This file is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; see the file COPYING. If not, write to
|
|
* the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
|
|
* Boston, MA 02111-1307, USA.
|
|
*/
|
|
|
|
#ifndef UIXMAILPARTICALVIEWER_H
|
|
#define UIXMAILPARTICALVIEWER_H
|
|
|
|
#import "UIxMailPartViewer.h"
|
|
|
|
@class iCalEvent;
|
|
@class iCalCalendar;
|
|
|
|
@class SOGoAppointmentObject;
|
|
@class SOGoDateFormatter;
|
|
|
|
@interface UIxMailPartICalViewer : UIxMailPartViewer
|
|
{
|
|
iCalCalendar *inCalendar;
|
|
iCalEvent *inEvent;
|
|
SOGoDateFormatter *dateFormatter;
|
|
SOGoAppointmentObject *storedEventObject;
|
|
BOOL storedEventFetched;
|
|
iCalEvent *storedEvent;
|
|
}
|
|
|
|
- (iCalEvent *) authorativeEvent;
|
|
- (NSString *) endDate;
|
|
- (NSString *) endTime;
|
|
- (NSString *) startDate;
|
|
- (NSString *) startTime;
|
|
- (BOOL) isEndDateOnSameDay;
|
|
- (BOOL) hasLocation;
|
|
- (NSString *)location;
|
|
- (NSString *) organizerHref;
|
|
- (NSString *) userComment;
|
|
- (NSString *) eventDescription;
|
|
|
|
@end
|
|
|
|
#endif /* UIXMAILPARTICALVIEWER_H */
|