File tree 3 files changed +15
-4
lines changed
3 files changed +15
-4
lines changed Original file line number Diff line number Diff line change @@ -3,8 +3,8 @@ CHANGELOG Roundcube Webmail
33
44RELEASE 1.3.12
55--------------
6-
7- - Security: Fix couple of XSS issues in Installer (#7406)
6+ - Security: Fix XSS issue in template object 'username' (#7406)
7+ - Security: Fix couple of XSS issues in Installer (#7406)
88
99RELEASE 1.3.11
1010--------------
Original file line number Diff line number Diff line change @@ -60,7 +60,16 @@ INSTALLATION
60605. Point your browser to http://url-to-roundcube/installer/
61616. Follow the instructions of the install script (or see MANUAL CONFIGURATION)
62627. After creating and testing the configuration, remove the installer directory
63- 8. Check Known Issues section of this file
63+ ------------------------------------------
64+ IMPORTANT: REMOVE THE INSTALLER DIRECTORY!
65+ ------------------------------------------
66+ 8. If you use git sources compile css files for the Elastic skin (required
67+ lessc >= 1.5.0):
68+ $ cd skins/elastic
69+ $ lessc -x styles/styles.less > styles/styles.css
70+ $ lessc -x styles/print.less > styles/print.css
71+ $ lessc -x styles/embed.less > styles/embed.css
72+ 9. Check Known Issues section of this file
6473
6574
6675CONFIGURATION HINTS
Original file line number Diff line number Diff line change @@ -1823,7 +1823,9 @@ public function current_username($attrib)
18231823 $ username = $ this ->app ->user ->get_username ();
18241824 }
18251825
1826- return rcube_utils::idn_to_utf8 ($ username );
1826+ $ username = rcube_utils::idn_to_utf8 ($ username );
1827+
1828+ return html::quote ($ username );
18271829 }
18281830
18291831 /**
You can’t perform that action at this time.
0 commit comments