holm/egroupware
1
1
Fork 0
forked from extern/egroupware
Code Issues Pull Requests Packages Projects Releases Wiki Activity

use ENT_SUBSTITUTE on htmlspecialchars to harden display of message as source

Browse Source
This commit is contained in:
Klaus Leithoff 2015-04-02 08:49:28 +00:00
parent 5a42714aee
commit 90200ea1ec
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
mail/inc/class.mail_ui.inc.php
View File

@ -2595,7 +2595,7 @@ class mail_ui
else
{
html::safe_content_header($message, $subject.".eml", $mime='text/html', $size=0, true, false);
print '<pre>'. htmlspecialchars($message, ENT_NOQUOTES, 'utf-8') .'</pre>';
print '<pre>'. htmlspecialchars($message, ENT_NOQUOTES|ENT_SUBSTITUTE, 'utf-8') .'</pre>';
}
}