Changeset 293 for trunk/lib/Email.inc.php

Timestamp:

Dec 11, 2007 10:53:46 PM (16 years ago)

Author:

quinn

Message:

Minor updates.

File:

• trunk/lib/Email.inc.php (modified) (1 diff)

trunk/lib/Email.inc.php

@@ -303 +303 @@
         // Check for mail header injection attacks.
         $full_mail_content = join($this->getParam('crlf'), array($final_to, $this->_params['subject'], $final_body));
-        if (preg_match("/(^|[\n\r])(Content-Type|MIME-Version|Content-Transfer-Encoding|Bcc|Cc):/i", $full_mail_content)) {
+        if (preg_match("/(^|[\n\r])(Content-Type|MIME-Version|Content-Transfer-Encoding|Bcc|Cc)\s*:/i", $full_mail_content)) {
             $app->logMsg(sprintf('Mail header injection attack in content: %s', $full_mail_content), LOG_WARNING, __FILE__, __LINE__);
             sleep(3);