From 1ef4033b8d6aa2ec8559f6aea5f35c9044e033e4 Mon Sep 17 00:00:00 2001 From: Thomas Bruederli <thomas@roundcube.net> Date: Sat, 19 Jan 2013 11:02:48 -0500 Subject: [PATCH] Also block remote images in HTML part view (#1488827) --- program/js/app.js | 8 +++----- 1 files changed, 3 insertions(+), 5 deletions(-) diff --git a/program/js/app.js b/program/js/app.js index 7197609..6d48222 100644 --- a/program/js/app.js +++ b/program/js/app.js @@ -821,11 +821,9 @@ // open attachment in frame if it's of a supported mimetype if (this.env.uid && props.mimetype && this.env.mimetypes && $.inArray(props.mimetype, this.env.mimetypes) >= 0) { - if (props.mimetype == 'text/html') - qstring += '&_safe=1'; - this.attachment_win = window.open(this.env.comm_path+'&_action=get&'+qstring+'&_frame=1', 'rcubemailattachment'); - if (this.attachment_win) { - setTimeout(function(){ ref.attachment_win.focus(); }, 10); + var attachment_win = window.open(this.env.comm_path+'&_action=get&'+qstring+'&_frame=1', 'rcubemailattachment'+this.env.uid+props.part); + if (attachment_win) { + setTimeout(function(){ attachment_win.focus(); }, 10); break; } } -- Gitblit v1.9.1