[IMAPSYNC] Hardened pipemess exploit prevention (pipemes)

(cherry picked from commit b1658c0f83)
This commit is contained in:
DerLinkman 2022-05-20 09:30:42 +02:00 committed by Niklas Meyer
parent 552f09f48a
commit d06119a21d

View File

@ -337,7 +337,7 @@ function mailbox($_action, $_type, $_data = null, $_extra = null) {
$enc1 = $_data['enc1'];
$custom_params = (empty(trim($_data['custom_params']))) ? '' : trim($_data['custom_params']);
// Workaround, fixme
if (stripos($custom_params, 'pipemess')) {
if (stripos($custom_params, 'pipemess') || stripos($custom_params, 'pipemes')) {
$custom_params = '';
}
if (empty($subfolder2)) {
@ -1746,7 +1746,7 @@ function mailbox($_action, $_type, $_data = null, $_extra = null) {
);
continue;
}
if (stripos($custom_params, 'pipemess')) {
if (stripos($custom_params, 'pipemess') || stripos($custom_params, 'pipemes')) {
$custom_params = '';
}
if (empty($subfolder2)) {