Allow help plugin to append a link to the error page for more information about CSRF protection

pull/280/head
Thomas Bruederli 10 years ago
parent d5b4ef0de2
commit 6066619818

@ -33,3 +33,5 @@ $config['help_license_url'] = null;
// Determine whether to open the help in a new window
$config['help_open_extwin'] = false;
// URL to additional information about CSRF protection
$config['help_csrf_info'] = null;

@ -34,6 +34,7 @@ class help extends rcube_plugin
$this->register_action('license', array($this, 'action'));
$this->add_hook('startup', array($this, 'startup'));
$this->add_hook('error_page', array($this, 'error_page'));
}
function startup($args)
@ -140,6 +141,16 @@ class help extends rcube_plugin
return $rcmail->output->frame($attrib);
}
function error_page($args)
{
$rcmail = rcmail::get_instance();
if ($args['code'] == 403 && $rcmail->request_status == rcube::REQUEST_ERROR_URL && ($url = $rcmail->config->get('help_csrf_info'))) {
$args['text'] .= '<p>' . html::a(array('href' => $url, 'target' => '_blank'), $this->gettext('csrfinfo')) . '</p>';
}
return $args;
}
private function resolve_language($path)
{

@ -20,5 +20,6 @@ $labels = array();
$labels['help'] = 'Help';
$labels['about'] = 'About';
$labels['license'] = 'License';
$labels['csrfinfo'] = 'Read more about CSRF and how we protect you';
?>

Loading…
Cancel
Save