Protect attachment download urls against csrf using unique request tokens (...

Thomas Bruederli

2016-01-16 97f3972c9fdcf840cc979f1d9cdc139f2da09395

 plugins/zipdownload/zipdownload.js

@@ -54,7 +54,7 @@
    // default .eml download of single message
    if (mode == 'eml') {
        var uid = rcmail.get_single_uid();
        rcmail.goto_url('viewsource', rcmail.params_from_uid(uid, {_save: 1}));
        rcmail.goto_url('viewsource', rcmail.params_from_uid(uid, {_save: 1}), true, true);
        return;
    }