From 14cc3ec188397cc215d077cc7fdd66e523853d5f Mon Sep 17 00:00:00 2001 From: Aleksander Machniak Date: Wed, 16 May 2018 09:38:10 +0200 Subject: [PATCH] Add EFAIL-related warning in the code --- plugins/enigma/lib/enigma_engine.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/plugins/enigma/lib/enigma_engine.php b/plugins/enigma/lib/enigma_engine.php index bbe380cd0..efe163a70 100644 --- a/plugins/enigma/lib/enigma_engine.php +++ b/plugins/enigma/lib/enigma_engine.php @@ -373,6 +373,9 @@ class enigma_engine */ function part_structure($p, $body = null) { + // Don't be tempted to support encryption in text/html parts + // Because of EFAIL vulnerability we should never support this (#6289) + if ($p['mimetype'] == 'text/plain' || $p['mimetype'] == 'application/pgp') { $this->parse_plain($p, $body); }