diff options
| author | thomascube <thomas@roundcube.net> | 2006-09-01 10:01:31 +0000 |
|---|---|---|
| committer | thomascube <thomas@roundcube.net> | 2006-09-01 10:01:31 +0000 |
| commit | ea206d3d9299ce32996dcd24d49790e36f2b89a2 (patch) | |
| tree | e607a652bff4d09b3d6d059d53806912d0f544b3 /program/steps/mail/show.inc | |
| parent | 10c92bef09262b7d46e6c87893715bb5a2e5e4a1 (diff) | |
Improved message parsing and HTML validation
Diffstat (limited to 'program/steps/mail/show.inc')
| -rw-r--r-- | program/steps/mail/show.inc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/program/steps/mail/show.inc b/program/steps/mail/show.inc index f381818ed..51633fa7b 100644 --- a/program/steps/mail/show.inc +++ b/program/steps/mail/show.inc @@ -108,7 +108,7 @@ function rcmail_message_attachments($attrib) show_bytes($attach_prop->size)); else $out .= sprintf('<li><a href="%s&_part=%s" onclick="return %s.command(\'load-attachment\',{part:\'%s\', mimetype:\'%s\'},this)">%s</a></li>'."\n", - htmlentities($GET_URL), + htmlspecialchars($GET_URL), $attach_prop->mime_id, $JS_OBJECT_NAME, $attach_prop->mime_id, |