From 99c842ff397b87e9f09dd552b45a9b4a2b09b613 Mon Sep 17 00:00:00 2001 From: friendica Date: Fri, 10 May 2013 16:09:24 -0700 Subject: also strip title from notification of private messages - it leaks potentially sensitive message info. Note: there is still information leakage of sender but this is difficult to avoid completely. "You've got an email from (we're sorry, we can't tell you...)" --- include/enotify.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/include/enotify.php b/include/enotify.php index a2b7b67b0..a774385da 100644 --- a/include/enotify.php +++ b/include/enotify.php @@ -397,7 +397,7 @@ function notification($params) { if(! $private) break; case NOTIFY_MAIL: - $datarray['textversion'] = $datarray['htmlversion'] = ''; + $datarray['textversion'] = $datarray['htmlversion'] = $datarray['title'] = ''; break; default: break; -- cgit v1.2.3