summaryrefslogtreecommitdiff
path: root/program/js/app.js
diff options
context:
space:
mode:
authorThomas Bruederli <thomas@roundcube.net>2013-01-19 17:02:48 +0100
committerThomas Bruederli <thomas@roundcube.net>2013-01-19 17:03:18 +0100
commit24607ceb801e5b30f3338a4458ad6ea3ba8d204f (patch)
treebcb6794a60799a9c7d5f41087a640f8cac8e8f79 /program/js/app.js
parent8c293e2f280e9b4a61a8c6d83a52e0cf4c55f4eb (diff)
Also block remote images in HTML part view (#1488827)
Diffstat (limited to 'program/js/app.js')
-rw-r--r--program/js/app.js8
1 files changed, 3 insertions, 5 deletions
diff --git a/program/js/app.js b/program/js/app.js
index 632ee964c..474ece77f 100644
--- a/program/js/app.js
+++ b/program/js/app.js
@@ -821,11 +821,9 @@ function rcube_webmail()
// open attachment in frame if it's of a supported mimetype
if (this.env.uid && props.mimetype && this.env.mimetypes && $.inArray(props.mimetype, this.env.mimetypes) >= 0) {
- if (props.mimetype == 'text/html')
- qstring += '&_safe=1';
- this.attachment_win = window.open(this.env.comm_path+'&_action=get&'+qstring+'&_frame=1', 'rcubemailattachment');
- if (this.attachment_win) {
- setTimeout(function(){ ref.attachment_win.focus(); }, 10);
+ var attachment_win = window.open(this.env.comm_path+'&_action=get&'+qstring+'&_frame=1', 'rcubemailattachment'+this.env.uid+props.part);
+ if (attachment_win) {
+ setTimeout(function(){ attachment_win.focus(); }, 10);
break;
}
}