I tried downloading the attachments through the admin quarantine page when using showing item button. When clicking the attachment link I get a JSON data.
{“recipients”:[{“address”:“xxxx@yyyy.com”,“type”:“to”},{“address”:“xxxx@yyyy.com”,“type”:“to”},{“address”:“xxxx@yyyy.com”,“type”:“smtp”}],“header_from”:“someone name someone@domain.com”,“env_from”:“someone@domain.com”,“score”:34.09,“symbols”:[{“group”:“headers”,“groups”:[“headers”],“name”:“TO_DN_SOME”,“score”:0},{“group”:“html”,“groups”:[“html”],“options”:[“5”],“name”:“ZERO_FONT”,“score”:0.5},{“group”:“policies”,“groups”:[“policies”,“spf”],“options”:[“+ip4:198.58.75.0\/25”],“name”:“R_SPF_ALLOW”,“score”:-0.2},{“group”:“body”,“groups”:[“body”],“name”:“HAS_ATTACHMENT”,“score”:0},{“group”:“composite”,“groups”:[“composite”],“name”:“RCVD_DKIM_ARC_DNSWL_MED”,“score”:-0.5},{“group”:“rbl”,“groups”:[“rbl”,“dnswl”],“options”:[“198.58.75.97:from”],“name”:“RCVD_IN_DNSWL_MED”,“score”:-0.2},{“group”:“headers”,“groups”:[“headers”],“options”:[“2”],“name”:“RCPT_COUNT_TWO”,“score”:0},{“group”:“policies”,“groups”:[“policies”,“dmarc”],“options”:[“indeedemail.com”,“quarantine”],“name”:“DMARC_POLICY_ALLOW”,"score
…
I removed sensitive data from the JSON.
I was expecting to download the attachment by clicking on the link. If not than JSON is not the best format to display a message 😆