Quellcode durchsuchen

Added LINK to the forbidden tag-list in magic HTML because it can contain
external stylesheets or other dangerous things.

In IE6 the included stylesheets messed up the layout of SM although the link
attribute only is permitted in the head section ??

stekkel vor 23 Jahren
Ursprung
Commit
17b75f0080
1 geänderte Dateien mit 3 neuen und 3 gelöschten Zeilen
  1. 3 3
      functions/mime.php

+ 3 - 3
functions/mime.php

@@ -211,7 +211,6 @@ function listEntities ($message) {
   } 
 }
 
-
 /* returns a $message object for a particular entity id */
 function getEntity ($message, $ent_id) {
     return $message->getEntity($ent_id);
@@ -286,7 +285,7 @@ function formatBody($imap_stream, $message, $color, $wrap_at, $ent_num, $id, $ma
            $show_html_default, $has_unsafe_images, $view_unsafe_images, $sort;
 
     $has_unsafe_images= 0;
-    
+    $body = '';
     $urlmailbox = urlencode($mailbox);
     $body_message = getEntity($message, $ent_num);
     if (($body_message->header->type0 == 'text') ||
@@ -1435,7 +1434,8 @@ function magicHTML($body, $id, $message, $mailbox = 'INBOX'){
                       "meta",
                       "html",
                       "head",
-                      "base"
+                      "base",
+                      "link"
                       );
 
     $rm_tags_with_content = Array(