bug-1390: added escaping wit htmlspecialchars function and encoding UTF-8

9 years ago · c28a5e261f
parent acad82ef82
commit c28a5e261f
1 changed files with 1 additions and 1 deletions
--- a/manager/application/views/scripts/mail/read.phtml
+++ b/manager/application/views/scripts/mail/read.phtml
@ -7,4 +7,4 @@ $this->headLink()->appendStylesheet('/css/mail.css');
 ?>
 <H1><?php print I18n::_('Read Mail'); ?></H1>
 <?php
-print nl2br(quoted_printable_decode($this->mail_body));
+print nl2br(htmlspecialchars(quoted_printable_decode($this->mail_body), ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8'));