lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix against SMTP injection

Browse Source
This commit is contained in:
Laurent Destailleur 2022-11-28 16:57:06 +01:00
parent ba4e5ef245
commit db6ee9f75f
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
htdocs/core/class/CMailFile.class.php
View File

@ -329,10 +329,10 @@ class CMailFile
$this->addr_bcc = dol_sanitizeEmail($addr_bcc); $this->addr_bcc = dol_sanitizeEmail($addr_bcc);
$this->deliveryreceipt = $deliveryreceipt; $this->deliveryreceipt = $deliveryreceipt;
if (empty($replyto)) { if (empty($replyto)) {
$replyto = $from; $replyto = dol_sanitizeEmail($from);
} }
$this->reply_to = $replyto; $this->reply_to = dol_sanitizeEmail($replyto);
$this->errors_to = $errors_to; $this->errors_to = dol_sanitizeEmail($errors_to);
$this->trackid = $trackid; $this->trackid = $trackid;
// Set arrays with attached files info // Set arrays with attached files info
$this->filename_list = $filename_list; $this->filename_list = $filename_list;