summaryrefslogtreecommitdiff
path: root/program/lib/Roundcube
diff options
context:
space:
mode:
authorAleksander Machniak <alec@alec.pl>2013-10-17 10:17:32 +0200
committerAleksander Machniak <alec@alec.pl>2013-10-17 10:18:11 +0200
commit4109bb26ced3d5ebe7ad7afe2402d53eca7afce4 (patch)
treec3d22cf0453d3bb70ec09aa75864bef51d5c33eb /program/lib/Roundcube
parentf2d4e40f094135fabcab4261930921e13fee40fd (diff)
Fix vulnerability in handling _session argument of utils/save-prefs (#1489382)
Diffstat (limited to 'program/lib/Roundcube')
-rw-r--r--program/lib/Roundcube/rcube_plugin_api.php5
1 files changed, 3 insertions, 2 deletions
diff --git a/program/lib/Roundcube/rcube_plugin_api.php b/program/lib/Roundcube/rcube_plugin_api.php
index d2fa1c55d..c9602d912 100644
--- a/program/lib/Roundcube/rcube_plugin_api.php
+++ b/program/lib/Roundcube/rcube_plugin_api.php
@@ -35,8 +35,9 @@ class rcube_plugin_api
public $url = 'plugins/';
public $task = '';
public $output;
- public $handlers = array();
- public $allowed_prefs = array();
+ public $handlers = array();
+ public $allowed_prefs = array();
+ public $allowed_session_prefs = array();
protected $plugins = array();
protected $tasks = array();