7x31/mailcow-dockerized
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

[IMAPSYNC] Hardened pipemess exploit prevention (pipemes)

Browse Source 
(cherry picked from commit b1658c0f83)
This commit is contained in:
DerLinkman
2022-05-20 09:30:42 +02:00
committed by Niklas Meyer
parent 552f09f48a
commit d06119a21d
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
data/web/inc/functions.mailbox.inc.php
View File

@@ -337,7 +337,7 @@ function mailbox($_action, $_type, $_data = null, $_extra = null) {
$enc1 = $_data['enc1'];
$custom_params = (empty(trim($_data['custom_params']))) ? '' : trim($_data['custom_params']);
// Workaround, fixme
if (stripos($custom_params, 'pipemess')) {
if (stripos($custom_params, 'pipemess') || stripos($custom_params, 'pipemes')) {
$custom_params = '';
}
if (empty($subfolder2)) {
@@ -1746,7 +1746,7 @@ function mailbox($_action, $_type, $_data = null, $_extra = null) {
);
continue;
}
if (stripos($custom_params, 'pipemess')) {
if (stripos($custom_params, 'pipemess') || stripos($custom_params, 'pipemes')) {
$custom_params = '';
}
if (empty($subfolder2)) {