Added BREACH attack mittigation, #4084

views/agentinvite.handlebars

@@ -167,6 +167,8 @@
     </div>
     <script>
         'use strict';
+
+        var random = '{{{randomlength}}}' // Random length string for BREACH mitigation
         var uiMode = parseInt(getstore('uiMode', 1));
         var webPageStackMenu = false;
         var webPageFullScreen = true;

views/default-mobile.handlebars

@@ -1192,6 +1192,7 @@
     <iframe name="fileUploadFrame" style=display:none></iframe>
     <script>
         'use strict';
+        var random = '{{{randomlength}}}' // Random length string for BREACH mitigation
 
         // Process server-side web state
         var webState = '{{{webstate}}}';

views/default.handlebars

@@ -1402,6 +1402,7 @@
     </div>
     <script type="text/javascript">
         'use strict';
+        var random = '{{{randomlength}}}' // Random length string for BREACH mitigation
 
         // Process server-side web state
         var webState = '{{{webstate}}}';

views/download.handlebars

@@ -43,6 +43,7 @@
         </div>
     </div>
     <script>
+        var random = '{{{randomlength}}}' // Random length string for BREACH mitigation
         var messageid = parseInt('{{{messageid}}}');
         var fileurl = '{{{fileurl}}}';
         var filename = '{{{filename}}}';

views/download2.handlebars

@@ -57,6 +57,7 @@
         </tr>
     </table>
     <script>
+        var random = '{{{randomlength}}}' // Random length string for BREACH mitigation
         var messageid = parseInt('{{{messageid}}}');
         var fileurl = '{{{fileurl}}}';
         var filename = '{{{filename}}}';

views/error404.handlebars

@@ -148,6 +148,7 @@
     </div>
     <script nonce="{{{cspNonce}}}">
         'use strict';
+        var random = '{{{randomlength}}}' // Random length string for BREACH mitigation
         var uiMode = parseInt(getstore('uiMode', 1));
         var webPageStackMenu = false;
         var webPageFullScreen = true;

views/invite.handlebars

@@ -103,6 +103,7 @@
     </div>
     <script>
         'use strict';
+        var random = '{{{randomlength}}}' // Random length string for BREACH mitigation
         var urlargs = parseUriArgs();
         if (urlargs.key && (isAlphaNumeric(urlargs.key) == false)) { delete urlargs.key; }
         var uiMode = parseInt(getstore('uiMode', 1));

views/login-mobile.handlebars

@@ -311,6 +311,7 @@
     </div>
     <script>
         'use strict';
+        var random = '{{{randomlength}}}' // Random length string for BREACH mitigation
         var loginMode = '{{{loginmode}}}';
         var newAccount = '{{{newAccount}}}';
         var passhint = '{{{passhint}}}';

views/login.handlebars

@@ -305,6 +305,7 @@
     </div>
     <script>
         'use strict';
+        var random = '{{{randomlength}}}' // Random length string for BREACH mitigation
         var passlogin = '{{{passlogin}}}';
         var passhint = '{{{passhint}}}';
         var loginMode = '{{{loginmode}}}';

views/login2.handlebars

@@ -361,6 +361,7 @@
     </div>
     <script>
         'use strict';
+        var random = '{{{randomlength}}}' // Random length string for BREACH mitigation
         var welcomePictureFullScreen = (decodeURIComponent('{{{welcomePictureFullScreen}}}') === 'true');
         var passlogin = '{{{passlogin}}}';
         var passhint = '{{{passhint}}}';

views/message.handlebars

@@ -43,6 +43,7 @@
         </div>
     </div>
     <script>
+        var random = '{{{randomlength}}}' // Random length string for BREACH mitigation
         var titleid = parseInt('{{{titleid}}}');
         var msgid = parseInt('{{{msgid}}}');
         var domainurl = decodeURIComponent('{{{domainurl}}}');

views/message2.handlebars

@@ -44,6 +44,7 @@
         </tr>
     </table>
     <script>
+        var random = '{{{randomlength}}}' // Random length string for BREACH mitigation
         var titleid = parseInt('{{{titleid}}}');
         var msgid = parseInt('{{{msgid}}}');
         var domainurl = decodeURIComponent('{{{domainurl}}}');

views/mstsc.handlebars

@@ -75,6 +75,7 @@
         }
     </style>
     <script language="javascript">
+        var random = '{{{randomlength}}}' // Random length string for BREACH mitigation
         var client = null;
         var canvas = null;
         var urlargs = parseUriArgs();

views/player.handlebars

@@ -96,6 +96,7 @@
         </div>
     </div>
     <script>
+        var random = '{{{randomlength}}}' // Random length string for BREACH mitigation
         var recFile = null;
         var recFilePtr = 0;
         var recFileStartTime = 0;

views/sharing-mobile.handlebars

@@ -737,6 +737,7 @@
     <iframe name="fileUploadFrame" style=display:none></iframe>
     <script>
         'use strict';
+        var random = '{{{randomlength}}}' // Random length string for BREACH mitigation
         var args = parseUriArgs();
         var urlargs = args;
         var sessionTime = parseInt('{{{sessiontime}}}');

views/sharing.handlebars

@@ -283,6 +283,7 @@
         </div>
     </div>
     <script>
+        var random = '{{{randomlength}}}' // Random length string for BREACH mitigation
         var sessionActivity = null;
         var desktop = null;
         var agentPresent = true;

views/ssh.handlebars

@@ -68,6 +68,7 @@
         </div>
     </div>
     <script>
+        var random = '{{{randomlength}}}' // Random length string for BREACH mitigation
         var term = null;
         var termfit = null;
         var resizeTimer = null;

views/terms.handlebars

@@ -161,6 +161,7 @@
     </div>
     <script>
         'use strict';
+        var random = '{{{randomlength}}}' // Random length string for BREACH mitigation
         var uiMode = parseInt(getstore('uiMode', 1));
         var webPageStackMenu = false;
         var webPageFullScreen = true;

views/xterm.handlebars

@@ -80,6 +80,7 @@
         </div>
     </div>
     <script>
+        var random = '{{{randomlength}}}' // Random length string for BREACH mitigation
         var term = null;
         var termfit = null;
         var tunnel = null;