"Closes #2215, Santize Class and EmailComponent need some header injection protection and cleaning"

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6244 3807eeeb-6ff5-0310-8944-8be069107fe0
This commit is contained in:
phpnut 2007-12-25 05:30:54 +00:00
parent 3935746a29
commit 1489239252

View file

@ -617,7 +617,7 @@ class EmailComponent extends Object{
function __strip($value, $message = false) {
$search = array('/%0a/i', '/%0d/i', '/Content-Type\:/i',
'/charset\=/i', '/mime-version\:/i', '/multipart\/mixed/i',
'/bcc\:/i','/to\:/i','/cc\:/i', '/\\r/i', '/\\n/i');
'/bcc\:.*/i','/to\:.*/i','/cc\:.*/i', '/\\r/i', '/\\n/i');
if ($message === true) {
$search = array_slice($search, 0, -2);