Protect download urls against CSRF using unique request tokens (#1490642) S...

Thomas Bruederli

2016-01-16 4a408843b0ef816daf70a472a02b78cd6073a4d5

 plugins/zipdownload/zipdownload.js

@@ -43,7 +43,7 @@
            link.html('').append(span);
        }

        span.text(rcmail.gettext('zipdownload.download'));
        span.text(rcmail.get_label('zipdownload.download'));
        rcmail.env.download_link = link;
    });
  });
@@ -54,7 +54,7 @@
    // default .eml download of single message
    if (mode == 'eml') {
        var uid = rcmail.get_single_uid();
        rcmail.goto_url('viewsource', {_uid: uid, _mbox: rcmail.get_message_mailbox(uid), _save: 1});
        rcmail.goto_url('viewsource', rcmail.params_from_uid(uid, {_save: 1}), false, true);
        return;
    }