summaryrefslogtreecommitdiff
path: root/program/lib/Roundcube
diff options
context:
space:
mode:
authorAleksander Machniak <alec@alec.pl>2013-10-17 10:17:32 +0200
committerAleksander Machniak <alec@alec.pl>2013-10-17 10:17:32 +0200
commit70c7df8faa5a9023a2773dc5a38932f1ad3a84aa (patch)
tree323006952431b5f7532a8da3e24bb3d58dc43259 /program/lib/Roundcube
parent26830dcc87603d10c909e6378687d3fa9a8e323e (diff)
Fix vulnerability in handling _session argument of utils/save-prefs (#1489382)
Diffstat (limited to 'program/lib/Roundcube')
-rw-r--r--program/lib/Roundcube/rcube_plugin_api.php5
1 files changed, 3 insertions, 2 deletions
diff --git a/program/lib/Roundcube/rcube_plugin_api.php b/program/lib/Roundcube/rcube_plugin_api.php
index 5a25ada02..2258f1486 100644
--- a/program/lib/Roundcube/rcube_plugin_api.php
+++ b/program/lib/Roundcube/rcube_plugin_api.php
@@ -35,8 +35,9 @@ class rcube_plugin_api
public $url = 'plugins/';
public $task = '';
public $output;
- public $handlers = array();
- public $allowed_prefs = array();
+ public $handlers = array();
+ public $allowed_prefs = array();
+ public $allowed_session_prefs = array();
protected $plugins = array();
protected $tasks = array();