Bug 358392

no hash checking on installTrigger call on front page
r=shaver

webtools/addons/public/tpl/index.tpl

@@ -13,7 +13,7 @@
 		<img src="{$config.webpath}{$feature.previewuri}" alt="" class="addon-feature-image" />
 		<div class="addon-feature-text">
 			<p>{$feature.body} <a href="{$config.webpath}/{$app}/{$feature.id}/">Learn more&hellip;</a></p>
-			<p class="install-button"><a href="{$feature.uri}" onclick="return install(event,'{$feature.name} {$feature.version}', '{$config.webpath}/images/default.png');"><span>Install now ({$feature.size} KB)</span></a></p>
+			<p class="install-button"><a href="{$feature.uri}" onclick="return install(event,'{$feature.name} {$feature.version}', '{$config.webpath}/images/default.png', '{$feature.hash}');" title="Install {$feature.name} {$feature.version} (Right-click to download)"><span>Install now ({$feature.size} KB)</span></a></p>
       {if $feature.id eq SUPER_MAGIC_YAHOO_ID}
       <p class="eula">By clicking Install, you agree to the <a href="http://del.icio.us/help/firefox/bookmarks/license">Software License</a> for this add-on.</p>
       {/if}
@@ -29,7 +29,7 @@
         <div class="feature-download">
             <!-- Feature Image must be 200px wide... any height is fine, but around 170-200 is preferred -->
             <a href="{$config.webpath}/{$app}/{$feature.id}/"><img src="{$config.webpath}{$feature.previewuri}" alt="{$feature.name} Extension"></a>
-            <h3><a href="{$feature.uri}" onclick="return install(event,'{$feature.name} {$feature.version}', '{$config.webpath}/images/default.png');" title="Install {$feature.name} {$feature.version} (Right-Click to Download)">Install Extension ({$feature.size} KB)</a> </h3>
+            <h3><a href="{$feature.uri}" onclick="return install(event,'{$feature.name} {$feature.version}', '{$config.webpath}/images/default.png', '{$feature.hash}');" title="Install {$feature.name} {$feature.version} (Right-Click to Download)">Install Now ({$feature.size} KB)</a> </h3>
 
         </div>
         <h2>Featured Add-on</h2>

webtools/addons/shared/lib/amo.class.php

@@ -471,6 +471,7 @@ class AMO_Object
                 r.title,
                 v.size,
                 v.version,
+                v.hash,
                 p.previewuri,
                 u.username
             FROM