blob: 0014f6676fb88b9ce3b5a3e5ed8bbc77c59690b3 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
commit 6652367d656de7e5f404935be04e10aa281add53
Author: Aleksander Machniak <alec@alec.pl>
Date: Fri May 6 08:28:15 2016 +0200
Fix XSS issue in href attribute on area tag (#5240, #5241)
diff --git a/program/lib/Roundcube/rcube_washtml.php b/program/lib/Roundcube/rcube_washtml.php
index 5938d9b..d03f04a 100644
--- program/lib/Roundcube/rcube_washtml.php
+++ program/lib/Roundcube/rcube_washtml.php
@@ -370,7 +370,7 @@ class rcube_washtml
*/
private function is_link_attribute($tag, $attr)
{
- return $tag == 'a' && $attr == 'href';
+ return ($tag == 'a' || $tag == 'area') && $attr == 'href';
}
/**
|
