Skip to content

Commit

Permalink
Add "stylesheet" to the non-plain list.
Browse files Browse the repository at this point in the history
Fixes leaking some rtf control data into plaintext.
  • Loading branch information
mrubinsk committed Jan 30, 2015
1 parent e8ca478 commit 528499f
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion framework/Compress/lib/Horde/Compress/Tnef/Rtf.php
Expand Up @@ -357,7 +357,7 @@ protected function _rtf2text($text)

protected function _rtfIsPlain($s)
{
$notPlain = array('*', 'fonttbl', 'colortbl', 'datastore', 'themedata');
$notPlain = array('*', 'fonttbl', 'colortbl', 'datastore', 'themedata', 'stylesheet');
for ($i = 0; $i < count($notPlain); $i++) {
if (!empty($s[$notPlain[$i]])) {
return false;
Expand Down

0 comments on commit 528499f

Please sign in to comment.