From 9bb2399e474da7cc7d1426cd5f689613f2fc4c6a Mon Sep 17 00:00:00 2001 From: the-djmaze <> Date: Tue, 14 Nov 2023 11:14:40 +0100 Subject: [PATCH] Resolve #1308 --- .../v/0.0.0/app/libraries/RainLoop/Config/AbstractConfig.php | 2 +- .../v/0.0.0/app/libraries/snappymail/http/request/socket.php | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/snappymail/v/0.0.0/app/libraries/RainLoop/Config/AbstractConfig.php b/snappymail/v/0.0.0/app/libraries/RainLoop/Config/AbstractConfig.php index 279ad0725..549e247f7 100644 --- a/snappymail/v/0.0.0/app/libraries/RainLoop/Config/AbstractConfig.php +++ b/snappymail/v/0.0.0/app/libraries/RainLoop/Config/AbstractConfig.php @@ -300,7 +300,7 @@ abstract class AbstractConfig implements \ArrayAccess, \JsonSerializable break; case 'string': default: - $sValue = '"'.\str_replace('"', '\\"', $mParamValue[0]).'"'; + $sValue = '"'.\addcslashes($mParamValue[0], '\\"').'"'; break; } diff --git a/snappymail/v/0.0.0/app/libraries/snappymail/http/request/socket.php b/snappymail/v/0.0.0/app/libraries/snappymail/http/request/socket.php index f0b65d7a1..80629023d 100644 --- a/snappymail/v/0.0.0/app/libraries/snappymail/http/request/socket.php +++ b/snappymail/v/0.0.0/app/libraries/snappymail/http/request/socket.php @@ -126,7 +126,7 @@ class Socket extends \SnappyMail\HTTP\Request $digest = \md5($a1 . ':' . $challenge['nonce'] . ':' . $nc . ':' . $challenge['cnonce'] . ':auth:' . $a2); } $extra_headers['Authorization'] = "Authorization: Digest " - . ' username="' . \str_replace(array('\\', '"'), array('\\\\', '\\"'), $this->auth['user']) . '",' + . ' username="' . \addcslashes($this->auth['user'], '\\"') . '",' . ' realm="' . $challenge['realm'] . '",' . ' nonce="' . $challenge['nonce'] . '",' . ' uri="' . $request_url . '",'