Thu, 09 Apr 2026 17:42:22 +0000 https://bugs.horde.org/ticket/10722 "cannot verify" error message on stripping attachments In the Traditional mode of IMP, when selecting "Strip Attachment" users are presented with: "We cannot verify that this request was really sent by you. It could be a malicious request. If you intended to perform this action, you can retry it now." This appears to be because in imp/lib/Contents.php the seed if for imp.impcontents, yet message.php validates "imp.message" when checking the actionID The bug fix we put in place in message.php in the try block was: + ($vars->actionID == 'strip_attachment') ? + $injector->getInstance('Horde_Token')->validate($vars->message_token, 'imp.impcontents') : $injector->getInstance('Horde_Token')->validate($vars->message_token, 'imp.message'); I hope this doesn't affect the code adversely in other ways. I suspect lib/Contents.php should really be modified instead. Tue, 08 Nov 2011 16:16:42 +0000 https://bugs.horde.org/ticket/10722#t68659 Changes have been made in Git for this ticket: Bug #10722: Fix stripping attachments in traditional view 3 files changed, 13 insertions(+), 1 deletions(-) http://git.horde.org/horde-git/-/commit/de6c93f0326f8eabd84a0a682f109c2a87b704e9 Tue, 08 Nov 2011 21:58:07 +0000 https://bugs.horde.org/ticket/10722#t68678