[IMAPSYNC] Hardened pipemess exploit prevention (pipemes)

This commit is contained in:
DerLinkman 2022-05-20 09:30:42 +02:00
parent 97df5c3b9c
commit b1658c0f83

View File

@ -337,7 +337,7 @@ function mailbox($_action, $_type, $_data = null, $_extra = null) {
$enc1 = $_data['enc1'];
$custom_params = (empty(trim($_data['custom_params']))) ? '' : trim($_data['custom_params']);
// Workaround, fixme
if (stripos($custom_params, 'pipemess')) {
if (stripos($custom_params, 'pipemess') || stripos($custom_params, 'pipemes')) {
$custom_params = '';
}
if (empty($subfolder2)) {
@ -1746,7 +1746,7 @@ function mailbox($_action, $_type, $_data = null, $_extra = null) {
);
continue;
}
if (stripos($custom_params, 'pipemess')) {
if (stripos($custom_params, 'pipemess') || stripos($custom_params, 'pipemes')) {
$custom_params = '';
}
if (empty($subfolder2)) {