[Web] Remove invalid chars from sender for quota and quarantine notifications

2019-09-15 09:52:13 +02:00
parent f9e7c6cf6a
commit 62a386f94e
2 changed files with 7 additions and 2 deletions
--- a/data/web/inc/functions.quarantine.inc.php
+++ b/data/web/inc/functions.quarantine.inc.php
@@ -298,7 +298,9 @@ function quarantine($_action, $_data = null) {
        $max_size = $_data['max_size'];
        $max_age = intval($_data['max_age']);
        $subject = $_data['subject'];
-        $sender = $_data['sender'];
+        if (!filter_var($_data['sender'], FILTER_VALIDATE_EMAIL)) {
+          $sender = '';
+        }
        $html = $_data['html_tmpl'];
        if ($max_age <= 0) {
          $max_age = 365;