[geeklog-devel] [geeklog-cvs] Geeklog-1.x/public_html profiles.php, 1.54, 1.55

[Dirk Haun]

Michael Jervis wrote:

>>  Why cut the subject off at the first CRLF? When the subject is sent
>>  to the browser, they are just whitespace.
>
>It's an email subject not a story subject. Newlines are invalid in the
>subject line of an email.

--- snip ---
July 8, 2002 (1.3.5sr2)
(...)
- Cut off the subject at the first linefeed when sending email to a user,
  thus preventing the injection of additional email headers.
--- snip ---

bye, Dirk


-- 
http://www.haun-online.de/accu/