also strip title from notification of private messages - it leaks potentially sensitive message info. Note: there is still information leakage of sender but this is difficult to avoid completely. "You've got an email from (we're sorry, we can't tell you...)"

2013-05-10 16:09:24 -07:00 · 2013-05-10 16:09:24 -07:00 · 99c842ff39
commit 99c842ff39
parent 34526e8253
1 changed files with 1 additions and 1 deletions
--- a/include/enotify.php
+++ b/include/enotify.php
@ -397,7 +397,7 @@ function notification($params) {
 					if(! $private)
 						break;
 				case NOTIFY_MAIL:
-					$datarray['textversion'] = $datarray['htmlversion'] = '';
+					$datarray['textversion'] = $datarray['htmlversion'] = $datarray['title'] = '';
 					break;
 				default:
 					break;