Add X-LABKEY-CSRF to BLAST download

Author: bbimber

blast/src/org/labkey/blast/model/BlastJob.java

@@ -19,6 +19,7 @@
 import org.labkey.api.pipeline.PipelineService;
 import org.labkey.api.pipeline.PipelineStatusFile;
 import org.labkey.api.security.User;
+import org.labkey.api.util.HtmlString;
 import org.labkey.blast.BLASTManager;
 import org.labkey.blast.BLASTSchema;
 import org.labkey.blast.BLASTWrapper;
@@ -322,9 +323,10 @@ public void getResults(BLAST_OUTPUT_FORMAT outputFormat, Writer out) throws IOEx
             return;
         }
 
+        String results = outputFormat.processResults(output);
         if (out instanceof JspWriter jsp)
         {
-            jsp.print(unsafe(outputFormat.processResults(output)));
+            jsp.print(outputFormat.supportsHTML() ? unsafe(results) : HtmlString.of(results));
         }
         else
         {

blast/src/org/labkey/blast/view/jobDetails.jsp

@@ -141,6 +141,7 @@
                                                 '<input type="hidden" name="fileName" value="' + Ext4.htmlEncode('blastResults.txt') + '" />' +
                                                 '<input type="hidden" name="jobId" value="' + <%=q(h(job.getObjectid()))%> + '" />' +
                                                 '<input type="hidden" name="outputFormat" value="' + fmt + '" />' +
+                                                '<input type="hidden" name="X-LABKEY-CSRF" value="' + Ext4.htmlEncode(LABKEY.CSRF) + '" />' +
                                                 '</form>');
                                 newForm.submit();