Browse Source

Added LINK to the forbidden tag-list in magic HTML because it can contain
external stylesheets or other dangerous things.

In IE6 the included stylesheets messed up the layout of SM although the link
attribute only is permitted in the head section ??

stekkel 23 năm trước cách đây
mục cha
commit
17b75f0080
1 tập tin đã thay đổi với 3 bổ sung3 xóa
  1. 3 3
      functions/mime.php

+ 3 - 3
functions/mime.php

@@ -211,7 +211,6 @@ function listEntities ($message) {
   } 
 }
 
-
 /* returns a $message object for a particular entity id */
 function getEntity ($message, $ent_id) {
     return $message->getEntity($ent_id);
@@ -286,7 +285,7 @@ function formatBody($imap_stream, $message, $color, $wrap_at, $ent_num, $id, $ma
            $show_html_default, $has_unsafe_images, $view_unsafe_images, $sort;
 
     $has_unsafe_images= 0;
-    
+    $body = '';
     $urlmailbox = urlencode($mailbox);
     $body_message = getEntity($message, $ent_num);
     if (($body_message->header->type0 == 'text') ||
@@ -1435,7 +1434,8 @@ function magicHTML($body, $id, $message, $mailbox = 'INBOX'){
                       "meta",
                       "html",
                       "head",
-                      "base"
+                      "base",
+                      "link"
                       );
 
     $rm_tags_with_content = Array(