Parcourir la source

Added LINK to the forbidden tag-list in magic HTML because it can contain
external stylesheets or other dangerous things.

In IE6 the included stylesheets messed up the layout of SM although the link
attribute only is permitted in the head section ??

stekkel il y a 23 ans
Parent
commit
17b75f0080
1 fichiers modifiés avec 3 ajouts et 3 suppressions
  1. 3 3
      functions/mime.php

+ 3 - 3
functions/mime.php

@@ -211,7 +211,6 @@ function listEntities ($message) {
   } 
 }
 
-
 /* returns a $message object for a particular entity id */
 function getEntity ($message, $ent_id) {
     return $message->getEntity($ent_id);
@@ -286,7 +285,7 @@ function formatBody($imap_stream, $message, $color, $wrap_at, $ent_num, $id, $ma
            $show_html_default, $has_unsafe_images, $view_unsafe_images, $sort;
 
     $has_unsafe_images= 0;
-    
+    $body = '';
     $urlmailbox = urlencode($mailbox);
     $body_message = getEntity($message, $ent_num);
     if (($body_message->header->type0 == 'text') ||
@@ -1435,7 +1434,8 @@ function magicHTML($body, $id, $message, $mailbox = 'INBOX'){
                       "meta",
                       "html",
                       "head",
-                      "base"
+                      "base",
+                      "link"
                       );
 
     $rm_tags_with_content = Array(