Clean HTML message body from URL parameters after enabling HTML mode in commit e957bfec

11 years ago · 2af3748596
parent cf31954661
commit 2af3748596
1 changed files with 5 additions and 0 deletions
--- a/program/steps/mail/compose.inc
+++ b/program/steps/mail/compose.inc
@ -446,6 +446,11 @@ function rcmail_process_compose_params(&$COMPOSE)
    }
  }

+  // clean HTML message body which can be submitted by URL
+  if ($COMPOSE['param']['body']) {
+    $COMPOSE['param']['body'] = rcmail_wash_html($COMPOSE['param']['body'], array('safe' => false, 'inline_html' => true), array());
+  }
+
  $RCMAIL = rcmail::get_instance();

  // select folder where to save the sent message