Merge pull request #6145 from Countly/ar2rsawseen/master

[email-reports] fix exposing auth token

Author: ar2rsawseen

plugins/reports/frontend/public/javascripts/countly.views.js

@@ -97,8 +97,9 @@
                     });
                     break;
                 case "preview-comment":
-                    var url = '/i/reports/preview?auth_token=' + countlyGlobal.auth_token + '&args=' + JSON.stringify({_id: scope.row._id}) + "&app_id=" + countlyCommon.ACTIVE_APP_ID;
-                    window.open(url, "_blank");
+                    document.forms.previewemailform.action = '/i/reports/preview?args=' + JSON.stringify({_id: scope.row._id}) + "&app_id=" + countlyCommon.ACTIVE_APP_ID;
+                    document.forms.previewemailform.querySelectorAll('input[type=hidden]')[0].value = countlyGlobal.auth_token;
+                    document.forms.previewemailform.submit();
                     break;
                 default:
                     return;

plugins/reports/frontend/public/templates/vue-main.html

@@ -94,6 +94,9 @@
                         <el-dropdown-item  icon="el-icon-position" command="send-comment">
                             Send Now
                         </el-dropdown-item>
+                        <form name="previewemailform" method="post" target="_blank">
+                            <input type="hidden" name="auth_token">
+                        </form>
                         <el-dropdown-item  icon="el-icon-chat-dot-square" command="preview-comment">
                             Preview
                         </el-dropdown-item>