diff --git a/data/conf/rspamd/dynmaps/vars.inc.php b/data/conf/rspamd/dynmaps/vars.inc.php
deleted file mode 120000
index f59ab89b..00000000
--- a/data/conf/rspamd/dynmaps/vars.inc.php
+++ /dev/null
@@ -1 +0,0 @@
-../../../web/inc/vars.inc.php
\ No newline at end of file
diff --git a/data/conf/rspamd/dynmaps/vars.inc.php b/data/conf/rspamd/dynmaps/vars.inc.php
new file mode 100644
index 00000000..d47e9079
--- /dev/null
+++ b/data/conf/rspamd/dynmaps/vars.inc.php
@@ -0,0 +1,3 @@
+
diff --git a/data/web/inc/header.inc.php b/data/web/inc/header.inc.php
index 79078554..533711de 100644
--- a/data/web/inc/header.inc.php
+++ b/data/web/inc/header.inc.php
@@ -99,7 +99,7 @@
-
= $app['name']; ?>
+ = htmlspecialchars($app['name']); ?>
diff --git a/data/web/inc/vars.inc.php b/data/web/inc/vars.inc.php
index c986133a..f2d09c5c 100644
--- a/data/web/inc/vars.inc.php
+++ b/data/web/inc/vars.inc.php
@@ -42,11 +42,13 @@ $PASSWD_REGEP = '.{4,}';
$MAILCOW_APPS = array(
array(
'name' => 'SOGo',
- 'link' => '/SOGo/'
+ 'link' => '/SOGo/',
+ 'description' => 'SOGo is a web-based client for email, address book and calendar.'
),
// array(
// 'name' => 'Roundcube',
- // 'link' => '/rc/'
+ // 'link' => '/rc/',
+ // 'description' => 'Roundcube is a web-based email client.',
// ),
);
@@ -60,4 +62,4 @@ $LOG_PAGINATION_SIZE = 30;
$SESSION_LIFETIME = 3600;
// Label for OTP devices
-$OTP_LABEL = "mailcow UI";
\ No newline at end of file
+$OTP_LABEL = "mailcow UI";
diff --git a/data/web/index.php b/data/web/index.php
index 2bc6e570..3202fb5b 100644
--- a/data/web/index.php
+++ b/data/web/index.php
@@ -69,7 +69,7 @@ $_SESSION['return_to'] = $_SERVER['REQUEST_URI'];
- = $app['name']; ?>
+ = htmlspecialchars($app['name']); ?>
diff --git a/data/web/lang/lang.en.php b/data/web/lang/lang.en.php
index 41785570..c49a535f 100644
--- a/data/web/lang/lang.en.php
+++ b/data/web/lang/lang.en.php
@@ -175,7 +175,7 @@ $lang['user']['eas_reset'] = 'Reset ActiveSync device cache';
$lang['user']['eas_reset_now'] = 'Reset now';
$lang['user']['eas_reset_help'] = 'In many cases a device cache reset will help to recover a broken ActiveSync profile.
Attention: All elements will be redownloaded!';
-$lang['user']['encryption'] = 'Encyrption';
+$lang['user']['encryption'] = 'Encryption';
$lang['user']['username'] = 'Username';
$lang['user']['password'] = 'Password';
$lang['user']['last_run'] = 'Last run';