From aed65976ca94d9223db27e555ea43b4076dd81fa Mon Sep 17 00:00:00 2001 From: M66B Date: Fri, 24 Jan 2020 15:22:50 +0100 Subject: [PATCH] Sanitize color codes/names --- app/src/main/java/eu/faircode/email/HtmlHelper.java | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/app/src/main/java/eu/faircode/email/HtmlHelper.java b/app/src/main/java/eu/faircode/email/HtmlHelper.java index 8f9764f918..1ddf390b72 100644 --- a/app/src/main/java/eu/faircode/email/HtmlHelper.java +++ b/app/src/main/java/eu/faircode/email/HtmlHelper.java @@ -334,14 +334,14 @@ public class HtmlHelper { switch (key) { case "color": String c = value - .replace("\"", "") .replace("none", "") .replace("unset", "") .replace("inherit", "") .replace("initial", "") .replace("windowtext", "") .replace("transparent", "") - .replace("!important", ""); + .replace("!important", "") + .replaceAll("[^a-z0-9]", ""); Integer color = null; try {