mirror of
https://github.com/roundcube/roundcubemail.git
synced 2026-03-24 16:56:59 +01:00
Fix XSS vulnerability in _mbox argument handling (#1490417)
This commit is contained in:
@@ -1822,7 +1822,7 @@ class rcmail extends rcube
|
||||
}
|
||||
else {
|
||||
$error = 'servererrormsg';
|
||||
$args = array('msg' => $err_str);
|
||||
$args = array('msg' => rcube::Q($err_str));
|
||||
}
|
||||
}
|
||||
else if ($err_code < 0) {
|
||||
|
||||
Reference in New Issue
Block a user