File: /usr/local/www/roundcube/program/lib/Roundcube/rcube_washtml.php.rej
@@ -425,16 +425,17 @@
}
}
else if ($is_image && preg_match('/^data:image\/([^,]+),(.+)$/i', $uri, $matches)) { // RFC2397
+ $type = preg_replace('/\s/', '', $matches[1]);
+
// svg images can be insecure, we'll sanitize them
- if (stripos($matches[1], 'svg') !== false) {
+ if (stripos($type, 'svg') !== false) {
$svg = $matches[2];
- if (stripos($matches[1], ';base64') !== false) {
- $svg = base64_decode($svg);
- $type = $matches[1];
+ if (stripos($type, ';base64') !== false) {
+ $svg = base64_decode($svg);
}
else {
- $type = $matches[1] . ';base64';
+ $type .= ';base64';
}
$washer = new self($this->config);