[RCD] zero day vulnerability (tested on v8.0 to 9.0)

A.L.E.C alec at alec.pl
Wed Mar 27 21:00:56 CET 2013

On 03/27/2013 08:54 PM, Cor Bosman wrote:

>> Yes, if plugin uses save-pref command, it should define $allowed_prefs
>> variable in plugin class. The variable should contain a list of option
>> names.
> Just to be absolutely sure, this is not related to the preferences_save hook?

No. Preferences available (only) via Settings > Preferences don't need
to be listed there.

Aleksander 'A.L.E.C' Machniak
LAN Management System Developer [http://lms.org.pl]
Roundcube Webmail Developer  [http://roundcube.net]
PGP: 19359DC1 @@ GG: 2275252 @@ WWW: http://alec.pl

More information about the dev mailing list