[IMAPSYNC] Hardened pipemess exploit prevention (pipemes)
(cherry picked from commit b1658c0f83
)
This commit is contained in:
parent
552f09f48a
commit
d06119a21d
@ -337,7 +337,7 @@ function mailbox($_action, $_type, $_data = null, $_extra = null) {
|
||||
$enc1 = $_data['enc1'];
|
||||
$custom_params = (empty(trim($_data['custom_params']))) ? '' : trim($_data['custom_params']);
|
||||
// Workaround, fixme
|
||||
if (stripos($custom_params, 'pipemess')) {
|
||||
if (stripos($custom_params, 'pipemess') || stripos($custom_params, 'pipemes')) {
|
||||
$custom_params = '';
|
||||
}
|
||||
if (empty($subfolder2)) {
|
||||
@ -1746,7 +1746,7 @@ function mailbox($_action, $_type, $_data = null, $_extra = null) {
|
||||
);
|
||||
continue;
|
||||
}
|
||||
if (stripos($custom_params, 'pipemess')) {
|
||||
if (stripos($custom_params, 'pipemess') || stripos($custom_params, 'pipemes')) {
|
||||
$custom_params = '';
|
||||
}
|
||||
if (empty($subfolder2)) {
|
||||
|
Loading…
Reference in New Issue
Block a user