From 0dee717c94468afeb139d9e8d9322b5fd26974b6 Mon Sep 17 00:00:00 2001
From: Arthur Schiwon <blizzz@arthur-schiwon.de>
Date: Sat, 28 Aug 2021 00:07:23 +0200
Subject: Confirm mails only per POST

- this is to avoid automatic confirmation by certain softwares that open
  links

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
---
 core/templates/confirmation.php | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 core/templates/confirmation.php

(limited to 'core')

diff --git a/core/templates/confirmation.php b/core/templates/confirmation.php
new file mode 100644
index 00000000000..26014cd1e79
--- /dev/null
+++ b/core/templates/confirmation.php
@@ -0,0 +1,20 @@
+<?php
+/** @var array $_ */
+/** @var \OCP\IL10N $l */
+/** @var \OCP\Defaults $theme */
+
+?>
+
+<div class="update">
+	<form method="POST" action="<?php print_unescaped($_['targetUrl']);?>">
+		<h2><?php p($_['title']) ?></h2>
+		<p><?php p($_['message']) ?></p>
+		<div class="buttons">
+			<input type="submit" class="primary" value="<?php p($_['action']); ?>">
+		</div>
+		<?php foreach ($_['parameters'] as $name => $value) {?>
+			<input type="hidden" name="<?php p($name); ?>" value="<?php p($value); ?>">
+		<?php } ?>
+		<input type="hidden" name="requesttoken" value="<?php p($_['requesttoken']) ?>">
+	</form>
+</div>
-- 
cgit v1.2.3