Hi there
I developed this small Zimlet which disables the vulnerable show snippet (in the code its called a fragment) functionality.
Tested with Zimbra 8.7.
https://github.com/ozzi-/Zimbra-CVE-2017-8802-Hotifx
Regards
Search found 7 matches
- Wed Jan 24, 2018 8:41 am
- Forum: Administrators
- Topic: Zimbra XSS (show fragment / snippet) - Zimlet Hotfix
- Replies: 0
- Views: 809
- Tue Dec 05, 2017 1:52 pm
- Forum: Zimlets
- Topic: Toolbar Buttons not clickable when several msg selected
- Replies: 3
- Views: 4252
Re: Toolbar Buttons not clickable when several msg selected
Actually, i found a proper solution to this, the solution mentioned above does not work with certain UI constellations (example: switching from conversation view to mail view, or not having preview on). This works always: appCtxt.getAppViewMgr()._view['THE VIEW YOU HAVE OPEN '].controller.operations...
- Fri Nov 24, 2017 7:09 am
- Forum: Zimlets
- Topic: Toolbar Buttons not clickable when several msg selected
- Replies: 3
- Views: 4252
Re: Toolbar Buttons not clickable when several msg selected
If somebody finds this problem, i found a solution: var controller = appCtxt.getAppViewMgr()._view['TV-main']; // you might want to use another controller, maybe use appCtxt.getCurrentController or so controller.operationsToEnableOnMultiSelection.push('YOUR_BUTTON_NAME); // YOUR_BUTTON_NAME being th...
- Tue Nov 21, 2017 10:05 am
- Forum: Zimlets
- Topic: onAction Hook
- Replies: 0
- Views: 2723
onAction Hook
Hi there When using the onAction hook, one gets a variable called "action" ( https://barrydegraaff.github.io/jsapi-zimbra-doc860/symbols/ZmZimletBase.html#onAction ) . However this action is localized, meaning the same action will be a different string depending on the set webmail language...
- Mon Nov 13, 2017 1:35 pm
- Forum: Zimlets
- Topic: Zimbra's code minification is breaking zimlet
- Replies: 1
- Views: 4248
Re: Zimbra's code minification is breaking zimlet
Hi
Try to launch webmail with ?dev=1 and see if it works.
If it doesn't, its your code, if it does, its the minification.
Keep us posted
Try to launch webmail with ?dev=1 and see if it works.
If it doesn't, its your code, if it does, its the minification.
Keep us posted
- Mon Nov 13, 2017 1:26 pm
- Forum: Zimlets
- Topic: Refresh View
- Replies: 1
- Views: 3824
Refresh View
Hi I have the problem that my Zimlet performs a long operation and then moves elements from one folder to another. The problem here is, that the Zimbra GUI does not update the GUI accordingly, meaning the moved elements still visually appear to be in the currently open folder. Clicking on the folder...
- Mon Nov 13, 2017 12:28 pm
- Forum: Zimlets
- Topic: Zimlet Examples
- Replies: 0
- Views: 2679
Zimlet Examples
Hi there
I found a lot of posts asking how to upload / download things with Zimlets and nobody had an answer.
I figured it out and compiled a zimlet blueprint and some more specific examples.
Maybe this can help somebody:
https://github.com/ozzi-/zimlet-blueprint
Cheers
I found a lot of posts asking how to upload / download things with Zimlets and nobody had an answer.
I figured it out and compiled a zimlet blueprint and some more specific examples.
Maybe this can help somebody:
https://github.com/ozzi-/zimlet-blueprint
Cheers