Don't allow HTML message to override default browser cursor styling

horde · Jan 19, 2015 · 9effa67 · 9effa67
1 parent 0fc9c67
commit 9effa67
Showing 1 changed file with 15 additions and 2 deletions.
diff --git a/imp/lib/Mime/Viewer/Html.php b/imp/lib/Mime/Viewer/Html.php
@@ -591,8 +591,21 @@ protected function _parseCss($css, $blocked)
                             }
                         }
                         $item->setListComponents($components);
-                    } elseif ($blocked) {
-                        $val->removeRule($val2);
+                    } else {
+                        switch ($val2->getRule()) {
+                        case 'cursor':
+                            /* Don't allow overriding default pointer rules,
+                             * since this can make visual recognition of
+                             * clickable elements difficult. */
+                            $val->removeRule($val2);
+                            break;
+
+                        default:
+                            if ($blocked) {
+                                $val->removeRule($val2);
+                            }
+                            break;
+                        }
                     }
                 }
             } elseif ($val instanceof Sabberworm\CSS\Property\Import) {