summaryrefslogtreecommitdiff
path: root/program/js/app.js
diff options
context:
space:
mode:
authorthomascube <thomas@roundcube.net>2009-07-21 16:13:42 +0000
committerthomascube <thomas@roundcube.net>2009-07-21 16:13:42 +0000
commit2a5d02ab8ea2e80d7d73f90b1d31994def0c7c43 (patch)
treeb20bee3635f16d918e3f13ab3f673b700f77252a /program/js/app.js
parent5499336feff22f682448dd99cc00a9b36701fcd1 (diff)
Also protect GET request from CSRF
Diffstat (limited to 'program/js/app.js')
-rw-r--r--program/js/app.js5
1 files changed, 3 insertions, 2 deletions
diff --git a/program/js/app.js b/program/js/app.js
index 4ce354665..8a9a580f8 100644
--- a/program/js/app.js
+++ b/program/js/app.js
@@ -2969,8 +2969,9 @@ function rcube_webmail()
if (!id)
id = this.env.iid ? this.env.iid : selection[0];
- // if (this.env.framed && id)
- this.goto_url('delete-identity', '_iid='+id, true);
+ // append token to request
+ this.goto_url('delete-identity', '_iid='+id+'&_token='+this.env.request_token, true);
+
return true;
};