diff options
| author | Aleksander Machniak <alec@alec.pl> | 2013-10-17 10:17:32 +0200 |
|---|---|---|
| committer | Aleksander Machniak <alec@alec.pl> | 2013-10-17 10:18:11 +0200 |
| commit | 4109bb26ced3d5ebe7ad7afe2402d53eca7afce4 (patch) | |
| tree | c3d22cf0453d3bb70ec09aa75864bef51d5c33eb /program/lib | |
| parent | f2d4e40f094135fabcab4261930921e13fee40fd (diff) | |
Fix vulnerability in handling _session argument of utils/save-prefs (#1489382)
Diffstat (limited to 'program/lib')
| -rw-r--r-- | program/lib/Roundcube/rcube_plugin_api.php | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/program/lib/Roundcube/rcube_plugin_api.php b/program/lib/Roundcube/rcube_plugin_api.php index d2fa1c55d..c9602d912 100644 --- a/program/lib/Roundcube/rcube_plugin_api.php +++ b/program/lib/Roundcube/rcube_plugin_api.php @@ -35,8 +35,9 @@ class rcube_plugin_api public $url = 'plugins/'; public $task = ''; public $output; - public $handlers = array(); - public $allowed_prefs = array(); + public $handlers = array(); + public $allowed_prefs = array(); + public $allowed_session_prefs = array(); protected $plugins = array(); protected $tasks = array(); |