Browse Source

[IMAPSYNC] Hardened pipemess exploit prevention (pipemes)

(cherry picked from commit b1658c0f83712e72bd313a99a625298dd39c90d7)
DerLinkman 3 years ago
parent
commit
d06119a21d
1 changed files with 2 additions and 2 deletions
  1. 2 2
      data/web/inc/functions.mailbox.inc.php

+ 2 - 2
data/web/inc/functions.mailbox.inc.php

@@ -337,7 +337,7 @@ function mailbox($_action, $_type, $_data = null, $_extra = null) {
           $enc1                 = $_data['enc1'];
           $custom_params        = (empty(trim($_data['custom_params']))) ? '' : trim($_data['custom_params']);
           // Workaround, fixme
-          if (stripos($custom_params, 'pipemess')) {
+          if (stripos($custom_params, 'pipemess') || stripos($custom_params, 'pipemes')) {
             $custom_params = '';
           }
           if (empty($subfolder2)) {
@@ -1746,7 +1746,7 @@ function mailbox($_action, $_type, $_data = null, $_extra = null) {
               );
               continue;
             }
-            if (stripos($custom_params, 'pipemess')) {
+            if (stripos($custom_params, 'pipemess') || stripos($custom_params, 'pipemes')) {
               $custom_params = '';
             }
             if (empty($subfolder2)) {