From bd0551b22076b82a6d49e9f7a2b2e0c90a1b2326 Mon Sep 17 00:00:00 2001
From: Aleksander Machniak <alec@alec.pl>
Date: Fri, 05 Feb 2016 07:25:27 -0500
Subject: [PATCH] Secure also downloads of addressbook exports, managesieve script exports and Enigma keys exports

---
 plugins/legacy_browser/legacy_browser.php |   61 +++++++++++++++++++++++-------
 1 files changed, 47 insertions(+), 14 deletions(-)

diff --git a/plugins/legacy_browser/legacy_browser.php b/plugins/legacy_browser/legacy_browser.php
index 0dc0794..346a0ed 100644
--- a/plugins/legacy_browser/legacy_browser.php
+++ b/plugins/legacy_browser/legacy_browser.php
@@ -1,7 +1,7 @@
 <?php
 
 /**
- * Plugin which adds support for legacy browsers (IE 7/8)
+ * Plugin which adds support for legacy browsers (IE 7/8, Firefox < 4)
  *
  * @author Aleksander Machniak <alec@alec.pl>
  * @license GNU GPLv3+
@@ -9,12 +9,18 @@
 class legacy_browser extends rcube_plugin
 {
     public $noajax = true;
+    private $rc;
 
     public function init()
     {
-        $rcube = rcube::get_instance();
+        $this->rc = $rcube = rcube::get_instance();
 
-        if ($rcube->output->browser->ie && $rcube->output->browser->ver < 9) {
+        if (
+            // IE < 9
+            ($rcube->output->browser->ie && $rcube->output->browser->ver < 9)
+            // Firefox < 4 (Firefox 4 is recognized as 2.0)
+            || ($rcube->output->browser->mz && $rcube->output->browser->ver < 2)
+        ) {
             $this->add_hook('send_page', array($this, 'send_page'));
             $this->add_hook('render_page', array($this, 'render_page'));
         }
@@ -22,13 +28,38 @@
 
     function send_page($args)
     {
-        // replace jQuery 2.x with 1.x
+        $p1 = $this->rc->output->asset_url('program/js');
+        $p2 = $this->rc->output->asset_url('plugins/legacy_browser/js');
+
+        $assets_dir = $this->rc->config->get('assets_dir');
+
         $ts1 = filemtime($this->home . '/js/jquery.min.js');
         $ts2 = filemtime($this->home . '/js/iehacks.js');
+
+        if (!$ts1 && $assets_dir) {
+            $ts1 = filemtime($assets_dir . '/plugins/legacy_browser/js/jquery.min.js');
+        }
+        if (!$ts2 && $assets_dir) {
+            $ts2 = filemtime($assets_dir . '/plugins/legacy_browser/js/iehacks.js');
+        }
+
+        // put iehacks.js after app.js
+        if ($this->rc->output->browser->ie) {
+            $args['content'] = preg_replace(
+                '|(<script src="' . preg_quote($p1, '|') . '/app(\.min)?\.js(\?s=[0-9]+)?" type="text/javascript"></script>)|',
+                '\\1<script src="' . $p2 . '/iehacks.js?s=' . $ts2 . '" type="text/javascript"></script>',
+                $args['content'], 1, $count);
+        }
+        else {
+            $count = 1;
+        }
+
+        // replace jQuery 2.x with 1.x
         $args['content'] = preg_replace(
-            '|<script src="program/js/jquery\.min\.js\?s=[0-9]+" type="text/javascript"></script>|',
-            '<script src="plugins/legacy_browser/js/jquery.min.js?s=' . $ts1 . '" type="text/javascript"></script>'."\n"
-            .'<script src="plugins/legacy_browser/js/iehacks.js?s=' . $ts2 . '" type="text/javascript"></script>',
+            '|<script src="' . preg_quote($p1, '|') . '/jquery\.min\.js(\?s=[0-9]+)?" type="text/javascript"></script>|',
+            '<script src="' . $p2 . '/jquery.min.js?s=' . $ts1 . '" type="text/javascript"></script>'
+            // add iehacks.js if it is IE and it wasn't added yet
+            . ($count ? '' : "\n".'<script src="' . $p2 . '/iehacks.js?s=' . $ts2 . '" type="text/javascript"></script>'),
             $args['content'], 1);
 
         return $args;
@@ -36,23 +67,26 @@
 
     function render_page($args)
     {
-        $rcube = rcube::get_instance();
+        if (!$this->rc->output->browser->ie) {
+            return $args;
+        }
+
         $skin  = $this->skin();
 
         if ($skin == 'classic') {
             $minified = file_exists(INSTALL_PATH . '/plugins/legacy_browser/skins/classic/iehacks.min.css') ? '.min' : '';
-            $rcube->output->add_header(
+            $this->rc->output->add_header(
                 '<link rel="stylesheet" type="text/css" href="plugins/legacy_browser/skins/classic/iehacks' . $minified . '.css" />'
             );
         }
         else if ($skin == 'larry') {
             $minified = file_exists(INSTALL_PATH . '/plugins/legacy_browser/skins/larry/iehacks.min.css') ? '.min' : '';
-            $rcube->output->add_header(
+            $this->rc->output->add_header(
                 '<link rel="stylesheet" type="text/css" href="plugins/legacy_browser/skins/larry/iehacks' . $minified . '.css" />'
             );
 
-            if ($rcube->output->browser->ver < 8) {
-                $rcube->output->add_header(
+            if ($this->rc->output->browser->ver < 8) {
+                $this->rc->output->add_header(
                     '<link rel="stylesheet" type="text/css" href="plugins/legacy_browser/skins/larry/ie7hacks' . $minified . '.css" />'
                 );
             }
@@ -61,8 +95,7 @@
 
     private function skin()
     {
-        $rcube = rcube::get_instance();
-        $skin  = $rcube->config->get('skin');
+        $skin  = $this->rc->config->get('skin');
 
         // external skin, find if it inherits from other skin
         if ($skin != 'larry' && $skin != 'classic') {

--
Gitblit v1.9.1