diff options
| author | Aleksander Machniak <alec@alec.pl> | 2013-10-17 10:17:32 +0200 |
|---|---|---|
| committer | Aleksander Machniak <alec@alec.pl> | 2013-10-17 10:17:32 +0200 |
| commit | 70c7df8faa5a9023a2773dc5a38932f1ad3a84aa (patch) | |
| tree | 323006952431b5f7532a8da3e24bb3d58dc43259 /program/lib/Roundcube/rcube_plugin_api.php | |
| parent | 26830dcc87603d10c909e6378687d3fa9a8e323e (diff) | |
Fix vulnerability in handling _session argument of utils/save-prefs (#1489382)
Diffstat (limited to 'program/lib/Roundcube/rcube_plugin_api.php')
| -rw-r--r-- | program/lib/Roundcube/rcube_plugin_api.php | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/program/lib/Roundcube/rcube_plugin_api.php b/program/lib/Roundcube/rcube_plugin_api.php index 5a25ada02..2258f1486 100644 --- a/program/lib/Roundcube/rcube_plugin_api.php +++ b/program/lib/Roundcube/rcube_plugin_api.php @@ -35,8 +35,9 @@ class rcube_plugin_api public $url = 'plugins/'; public $task = ''; public $output; - public $handlers = array(); - public $allowed_prefs = array(); + public $handlers = array(); + public $allowed_prefs = array(); + public $allowed_session_prefs = array(); protected $plugins = array(); protected $tasks = array(); |