From bd0551b22076b82a6d49e9f7a2b2e0c90a1b2326 Mon Sep 17 00:00:00 2001
From: Aleksander Machniak <alec@alec.pl>
Date: Fri, 05 Feb 2016 07:25:27 -0500
Subject: [PATCH] Secure also downloads of addressbook exports, managesieve script exports and Enigma keys exports

---
 plugins/newmail_notifier/newmail_notifier.js |  104 +++++++++++++++++++++++++++++++++++-----------------
 1 files changed, 70 insertions(+), 34 deletions(-)

diff --git a/plugins/newmail_notifier/newmail_notifier.js b/plugins/newmail_notifier/newmail_notifier.js
index 320382a..4b71c22 100644
--- a/plugins/newmail_notifier/newmail_notifier.js
+++ b/plugins/newmail_notifier/newmail_notifier.js
@@ -1,18 +1,30 @@
 /**
  * New Mail Notifier plugin script
  *
- * @version @package_version@
  * @author Aleksander Machniak <alec@alec.pl>
+ *
+ * @licstart  The following is the entire license notice for the
+ * JavaScript code in this file.
+ *
+ * Copyright (c) 2013, The Roundcube Dev Team
+ *
+ * The JavaScript code in this page is free software: you can redistribute it
+ * and/or modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation, either version 3 of
+ * the License, or (at your option) any later version.
+ *
+ * @licend  The above is the entire license notice
+ * for the JavaScript code in this file.
  */
 
 if (window.rcmail && rcmail.env.task == 'mail') {
-    rcmail.addEventListener('plugin.newmail_notifier', newmail_notifier_run);
-    rcmail.addEventListener('actionbefore', newmail_notifier_stop);
-    rcmail.addEventListener('init', function() {
-        // bind to messages list select event, so favicon will be reverted on message preview too
-        if (rcmail.message_list)
-            rcmail.message_list.addEventListener('select', newmail_notifier_stop);
-    });
+    rcmail.addEventListener('plugin.newmail_notifier', newmail_notifier_run)
+        .addEventListener('actionbefore', newmail_notifier_stop)
+        .addEventListener('init', function() {
+            // bind to messages list select event, so favicon will be reverted on message preview too
+            if (rcmail.message_list)
+                rcmail.message_list.addEventListener('select', newmail_notifier_stop);
+        });
 }
 
 // Executes notification methods
@@ -23,42 +35,66 @@
     if (prop.sound)
         newmail_notifier_sound();
     if (prop.desktop)
-        newmail_notifier_desktop(rcmail.gettext('body', 'newmail_notifier'));
+        newmail_notifier_desktop(rcmail.get_label('body', 'newmail_notifier'));
 }
 
 // Stops notification
 function newmail_notifier_stop(prop)
 {
     // revert original favicon
-    if (rcmail.env.favicon_href && (!prop || prop.action != 'check-recent')) {
+    if (rcmail.env.favicon_href && rcmail.env.favicon_changed && (!prop || prop.action != 'check-recent')) {
         $('<link rel="shortcut icon" href="'+rcmail.env.favicon_href+'"/>').replaceAll('link[rel="shortcut icon"]');
-        rcmail.env.favicon_href = null;
+        rcmail.env.favicon_changed = 0;
     }
+
+    // Remove IE icon overlay if we're pinned to Taskbar
+    try {
+        if(window.external.msIsSiteMode()) {
+            window.external.msSiteModeClearIconOverlay();
+        }
+    } catch(e) {}
 }
 
 // Basic notification: window.focus and favicon change
 function newmail_notifier_basic()
 {
-    var w = rcmail.is_framed() ? window.parent : window;
+    var w = rcmail.is_framed() ? window.parent : window,
+        path = rcmail.assets_path('plugins/newmail_notifier');
 
     w.focus();
 
     // we cannot simply change a href attribute, we must to replace the link element (at least in FF)
-    var link = $('<link rel="shortcut icon" href="plugins/newmail_notifier/favicon.ico"/>'),
+    var link = $('<link rel="shortcut icon">').attr('href', path + '/favicon.ico'),
         oldlink = $('link[rel="shortcut icon"]', w.document);
 
-    rcmail.env.favicon_href = oldlink.attr('href');
+    if (!rcmail.env.favicon_href)
+        rcmail.env.favicon_href = oldlink.attr('href');
+
+    rcmail.env.favicon_changed = 1;
     link.replaceAll(oldlink);
+
+    // Add IE icon overlay if we're pinned to Taskbar
+    try {
+        if (window.external.msIsSiteMode()) {
+            window.external.msSiteModeSetIconOverlay(path + '/overlay.ico', rcmail.get_label('title', 'newmail_notifier'));
+        }
+    } catch(e) {}
 }
 
 // Sound notification
 function newmail_notifier_sound()
 {
-    var elem, src = 'plugins/newmail_notifier/sound.wav';
+    var elem, src = rcmail.assets_path('plugins/newmail_notifier/sound'),
+        plugin = navigator.mimeTypes ? navigator.mimeTypes['audio/mp3'] : {};
+
+    // Internet Explorer does not support wav files,
+    // support in other browsers depends on enabled plugins,
+    // so we use wav as a fallback
+    src += bw.ie || (plugin && plugin.enabledPlugin) ? '.mp3' : '.wav';
 
     // HTML5
     try {
-        elem = $('<audio src="' + src + '" />');
+        elem = $('<audio>').attr('src', src);
         elem.get(0).play();
     }
     // old method
@@ -73,26 +109,26 @@
 // - Require Chrome or Firefox latest version (22+) / 21.0 or older with a plugin
 function newmail_notifier_desktop(body)
 {
+    var timeout = rcmail.env.newmail_notifier_timeout || 10,
+        icon = rcmail.assets_path('plugins/newmail_notifier/mail.png');
 
-/**
- * Fix: As of 17 June 2013, Chrome/Chromium does not implement Notification.permission correctly that
- *      it gives 'undefined' until an object has been created:
- *      https://code.google.com/p/chromium/issues/detail?id=163226
- *
- */
+
+    // As of 17 June 2013, Chrome/Chromium does not implement Notification.permission correctly that
+    // it gives 'undefined' until an object has been created:
+    // https://code.google.com/p/chromium/issues/detail?id=163226
     try {
         if (Notification.permission == 'granted' || Notification.permission == undefined) {
-            var popup = new Notification(rcmail.gettext('title', 'newmail_notifier'), {
+            var popup = new Notification(rcmail.get_label('title', 'newmail_notifier'), {
                 dir: "auto",
                 lang: "",
                 body: body,
                 tag: "newmail_notifier",
-                icon: "plugins/newmail_notifier/mail.png",
+                icon: icon
             });
             popup.onclick = function() {
                 this.close();
             }
-            setTimeout(function() { popup.close(); }, 10000); // close after 10 seconds
+            setTimeout(function() { popup.close(); }, timeout * 1000);
             if (popup.permission == 'granted') return true;
         }
     }
@@ -102,13 +138,13 @@
         if (dn && !dn.checkPermission()) {
             if (rcmail.newmail_popup)
                 rcmail.newmail_popup.cancel();
-            var popup = window.webkitNotifications.createNotification('plugins/newmail_notifier/mail.png',
-                rcmail.gettext('title', 'newmail_notifier'), body);
+            var popup = window.webkitNotifications.createNotification(icon,
+                rcmail.get_label('title', 'newmail_notifier'), body);
             popup.onclick = function() {
                 this.cancel();
             }
             popup.show();
-            setTimeout(function() { popup.cancel(); }, 10000); // close after 10 seconds
+            setTimeout(function() { popup.cancel(); }, timeout * 1000);
             rcmail.newmail_popup = popup;
             return true;
         }
@@ -118,8 +154,7 @@
 
 function newmail_notifier_test_desktop()
 {
-    var dn = window.webkitNotifications,
-        txt = rcmail.gettext('testbody', 'newmail_notifier');
+    var txt = rcmail.get_label('testbody', 'newmail_notifier');
 
     // W3C draft implementation (with fix for Chrome/Chromium)
     try {
@@ -129,18 +164,19 @@
     }
     // webkit implementation
     catch (e) {
+        var dn = window.webkitNotifications;
         if (dn) {
             if (!dn.checkPermission())
                 newmail_notifier_desktop(txt);
             else
                 dn.requestPermission(function() {
                     if (!newmail_notifier_desktop(txt))
-                        rcmail.display_message(rcmail.gettext('desktopdisabled', 'newmail_notifier'), 'error');
+                        rcmail.display_message(rcmail.get_label('desktopdisabled', 'newmail_notifier'), 'error');
                 });
         }
         else
             // Everything fails, means the browser has no support
-            rcmail.display_message(rcmail.gettext('desktopunsupported', 'newmail_notifier'), 'error');
+            rcmail.display_message(rcmail.get_label('desktopunsupported', 'newmail_notifier'), 'error');
     }
 }
 
@@ -157,8 +193,8 @@
 function newmail_notifier_desktop_authorize() {
         Notification.requestPermission(function(perm) {
                 if (perm == 'denied')
-                        rcmail.display_message(rcmail.gettext('desktopdisabled', 'newmail_notifier'), 'error');
+                        rcmail.display_message(rcmail.get_label('desktopdisabled', 'newmail_notifier'), 'error');
                 if (perm == 'granted')
                         newmail_notifier_test_desktop();  // Test again, which should show test message
         });
-}
\ No newline at end of file
+}

--
Gitblit v1.9.1