[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-commits
Subject:    kdenox/konq-embed/src
From:       Stefan Eilers <stefan.eilers () basyskom ! de>
Date:       2008-06-05 10:26:52
Message-ID: 1212661612.592293.17106.nullmailer () svn ! kde ! org
[Download RAW message or body]

SVN commit 817135 by eilers:

Disable parsing of BCC in mailto string. This may be insecure..

 M  +3 -0      view.cc  


--- trunk/kdenox/konq-embed/src/view.cc #817134:817135
@@ -90,10 +90,13 @@
 		    {
 			parameters["cc"] = KURL::decode_string((*it).mid(3));
 		    }
+#if 0
+		    // BCC is unsafe and should not be interpreted!
 		    else if ((*it).startsWith(QString::fromLatin1("bcc=")))
 		    {
 			parameters["bcc"] = KURL::decode_string((*it).mid(4));
 		    }
+#endif
 		    else if ((*it).startsWith(QString::fromLatin1("body=")))
 		    {
 			parameters["body"] = KURL::decode_string((*it).mid(5));
[prev in list] [next in list] [prev in thread] [next in thread]