From 1ef4033b8d6aa2ec8559f6aea5f35c9044e033e4 Mon Sep 17 00:00:00 2001
From: Thomas Bruederli <thomas@roundcube.net>
Date: Sat, 19 Jan 2013 11:02:48 -0500
Subject: [PATCH] Also block remote images in HTML part view (#1488827)

---
 program/js/app.js |    8 +++-----
 1 files changed, 3 insertions(+), 5 deletions(-)

diff --git a/program/js/app.js b/program/js/app.js
index 7197609..6d48222 100644
--- a/program/js/app.js
+++ b/program/js/app.js
@@ -821,11 +821,9 @@
 
         // open attachment in frame if it's of a supported mimetype
         if (this.env.uid && props.mimetype && this.env.mimetypes && $.inArray(props.mimetype, this.env.mimetypes) >= 0) {
-          if (props.mimetype == 'text/html')
-            qstring += '&_safe=1';
-          this.attachment_win = window.open(this.env.comm_path+'&_action=get&'+qstring+'&_frame=1', 'rcubemailattachment');
-          if (this.attachment_win) {
-            setTimeout(function(){ ref.attachment_win.focus(); }, 10);
+          var attachment_win = window.open(this.env.comm_path+'&_action=get&'+qstring+'&_frame=1', 'rcubemailattachment'+this.env.uid+props.part);
+          if (attachment_win) {
+            setTimeout(function(){ attachment_win.focus(); }, 10);
             break;
           }
         }

--
Gitblit v1.9.1