forked from extern/egroupware
use ENT_SUBSTITUTE on htmlspecialchars to harden display of message as source
This commit is contained in:
parent
ed092a5887
commit
e3d4a685af
@ -2611,7 +2611,7 @@ class mail_ui
|
||||
else
|
||||
{
|
||||
html::safe_content_header($message, $subject.".eml", $mime='text/html', $size=0, true, false);
|
||||
print '<pre>'. htmlspecialchars($message, ENT_NOQUOTES, 'utf-8') .'</pre>';
|
||||
print '<pre>'. htmlspecialchars($message, ENT_NOQUOTES|ENT_SUBSTITUTE, 'utf-8') .'</pre>';
|
||||
}
|
||||
}
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user