mirror of
https://github.com/kamilwylegala/cakephp2-php8.git
synced 2025-03-12 20:49:50 +00:00
"Closes #2215, Santize Class and EmailComponent need some header injection protection and cleaning"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6244 3807eeeb-6ff5-0310-8944-8be069107fe0
This commit is contained in:
parent
3935746a29
commit
1489239252
1 changed files with 1 additions and 1 deletions
|
@ -617,7 +617,7 @@ class EmailComponent extends Object{
|
|||
function __strip($value, $message = false) {
|
||||
$search = array('/%0a/i', '/%0d/i', '/Content-Type\:/i',
|
||||
'/charset\=/i', '/mime-version\:/i', '/multipart\/mixed/i',
|
||||
'/bcc\:/i','/to\:/i','/cc\:/i', '/\\r/i', '/\\n/i');
|
||||
'/bcc\:.*/i','/to\:.*/i','/cc\:.*/i', '/\\r/i', '/\\n/i');
|
||||
|
||||
if ($message === true) {
|
||||
$search = array_slice($search, 0, -2);
|
||||
|
|
Loading…
Add table
Reference in a new issue