KeyHelp Community

Code: Select all

nano /home/keyhelp/www/roundcube/program/actions/settings/upload.php

        // Validate URL input.
        if (!rcube_utils::is_simple_string($type)) {
            rcmail::write_log('errors', 'The URL parameter "_from" contains disallowed characters and the request is thus rejected.');
            $rcmail->output->command('display_message', 'Invalid input', 'error');
            $rcmail->output->send('iframe');
        }

Code: Select all

nano /home/keyhelp/www/roundcube/program/lib/Roundcube/rcube_utils.php

    /**
     * Check if input value is a "simple" string.
     * "Simple" is defined as a non-empty string containing only
     *  - "word" characters (alphanumeric plus underscore),
     *  - dots,
     *  - dashes.
     *
     * @param string $input The string to test
     *
     * @return bool
     */
    public static function is_simple_string($input)
    {
        return is_string($input) && !!preg_match('/^[\w.-]+$/i', $input);
    }

Code: Select all

nano /home/keyhelp/www/roundcube/program/lib/Roundcube/rcube_message.php

                //else if ($part_mimetype == 'application/ms-tnef' && $this->tnef_decode) {
                // Note: It can be application/ms-tnef or application/vnd.ms-tnefMore actions
                elseif ($primary_type == 'application' && strpos($secondary_type, 'ms-tnef') !== false
                    && $this->tnef_decode
                ) {

Code: Select all

systemctl restart apache2