Thomas Bruederli
|
5b53161198
|
Bump version to 1.4.6
|
6 years ago |
|
Thomas Bruederli
|
9898599d3e
|
Bump version to 1.4.5
|
6 years ago |
|
Aleksander Machniak
|
ccaccae665
|
Security: Fix cross-site scripting (XSS) via malicious XML attachment
|
6 years ago |
|
Aleksander Machniak
|
b37433b199
|
Security: Better fix for CVE-2020-12641
|
6 years ago |
|
Aleksander Machniak
|
bebc9ec1be
|
Fix error when user-configured skin does not exist anymore (#7271)
We fallback to the system skin not the default one.
|
6 years ago |
|
Aleksander Machniak
|
c25616b3b5
|
Fix PHP warning: count(): Parameter must be an array or an object... in ID command handler (#7392)
|
6 years ago |
|
Aleksander Machniak
|
d15d929167
|
Fix bug in extracting required plugins from composer.json that led to spurious error in log (#7364)
|
6 years ago |
|
Thomas Bruederli
|
aadb13e25f
|
Bump version to 1.4.4
|
6 years ago |
|
Aleksander Machniak
|
814eadb699
|
Fix local file inclusion (and code execution) via crafted 'plugins' option
|
6 years ago |
|
Aleksander Machniak
|
fcfb099477
|
Fix remote code execution via crafted 'im_convert_path' or 'im_identify_path' settings
|
6 years ago |
|
Aleksander Machniak
|
1c239c90d9
|
Fix XSS issue in handling of CDATA in HTML messages
|
6 years ago |
|
Aleksander Machniak
|
be68e3f679
|
Fix typo
|
6 years ago |
|
Aleksander Machniak
|
37acfc2e03
|
Fix performance issue of parsing big HTML messages by disabling HTML5 parser for these (#7331)
|
6 years ago |
|
Aleksander Machniak
|
808f374f42
|
Revert "Fix bug where session was destoryed with window close (#7251)"
This reverts commit 32fac136db.
|
6 years ago |
|
Aleksander Machniak
|
15e924fd64
|
Fix bug where a special folder couldn't be created if a special-use flag is not supported (#7147)
|
6 years ago |
|
Aleksander Machniak
|
43f90d31c8
|
Fix bug where session was destoryed with window close (#7251)
|
6 years ago |
|
Aleksander Machniak
|
746ccb7fdf
|
Fix literals handling again
|
6 years ago |
|
dessert1
|
2005b895be
|
Fix handling keyservers configured with protocol prefix (#7295)
`|^[a-z]://|` matches only single-character protocol shortnames, to correctly exclude e.g. `hkps://` the expression should be `|^[a-z]+://|` instead.
|
6 years ago |
|
Aleksander Machniak
|
ade470aac9
|
Support many string literals in a "line response", deduplicate code
|
6 years ago |
|
Aleksander Machniak
|
a71b33f568
|
Fix string literals handling in IMAP STATUS (and various other) responses (#7290)
|
6 years ago |
|
Aleksander Machniak
|
518d1aea71
|
Fix internal cache use in rcube_imap::get_message()
Two folders, personal and shared, can contain the same UIDs, so
we should check UID and folder name when dealing with internally
cached message.
|
6 years ago |
|
Thomas Bruederli
|
273707f378
|
Bump version to 1.4.3
|
6 years ago |
|
Paul J. Dorn
|
9cb796ee2b
|
Fix using unix:///path/to/socket.file in memcached driver (#7210)
off by one when stripping the memcache (sans d) compatible AF_UNIX prefix
|
6 years ago |
|
Aleksander Machniak
|
ea1260ea72
|
Fix regression where using an absolute path to SQLite database file on Windows didn't work (#7196)
|
6 years ago |
|
Aleksander Machniak
|
7f45e47f00
|
Fix display issues with mail subject that contains line-breaks (#7191)
|
6 years ago |
|
Aleksander Machniak
|
3819e4e640
|
Fix bug where message parts with no Content-Disposition header and no name were not listed on attachments list (#7117)
|
6 years ago |
|
Aleksander Machniak
|
adc08946ef
|
Fix unexpected error message when mail refresh involves folder auto-unsubscribe (#6923)
|
6 years ago |
|
Thomas Bruederli
|
51b8137170
|
Bump version to 1.4.2
|
6 years ago |
|
Aleksander Machniak
|
d025351d64
|
Fix bug where 'text' attribute on body tag was ignored when displaying HTML message (#7109)
|
6 years ago |
|
Aleksander Machniak
|
906b223d30
|
Fix bug where listing tables in PostgreSQL database with db_prefix didn't work (#7093)
|
6 years ago |
|
Aleksander Machniak
|
eecd78c3a1
|
Fix bug where 'skins_allowed' option didn't enforce user skin preference (#7080)
|
6 years ago |
|
Aleksander Machniak
|
5ec5ae57a5
|
Add 'filter' to required extensions
|
6 years ago |
|
Aleksander Machniak
|
8127d2615f
|
Fix matching multiple X-Forwarded-For addresses with 'proxy_whitelist' (#7107)
|
6 years ago |
|
Aleksander Machniak
|
c084d69d06
|
Fix DB Write test on SQLite database ("database is locked" error) (#7064)
Also fix so SQLite DSN with a relative path to the database file works in Installer
|
6 years ago |
|
Aleksander Machniak
|
90bdd77ada
|
Fix bug where Ctype extension wasn't required in Installer and INSTALL file (#7049)
|
6 years ago |
|
Aleksander Machniak
|
720a0a3173
|
Update changelog, CS improvements
|
6 years ago |
|
PhilW
|
c7baf94531
|
remove redundant type attrib in script tag
|
6 years ago |
|
Thomas Bruederli
|
0b1d6841f9
|
Bump version to 1.4.1
|
6 years ago |
|
Aleksander Machniak
|
594a12b61e
|
Fix tables listing routine when DSN contained a database with unsupported suffix (#7034)
|
6 years ago |
|
Aleksander Machniak
|
71990b59d6
|
Fix db_prefix handling in queries with `TRUNCATE TABLE <name>` and `UNIQUE <name>` (#7013)
|
6 years ago |
|
Aleksander Machniak
|
392734f984
|
Fix bug where cache keys could exceed length limit specified in db schema (#7004)
|
6 years ago |
|
Thomas Bruederli
|
e774209b41
|
Bump version to 1.4.0
|
6 years ago |
|
Aleksander Machniak
|
c1c534d67c
|
Fix bug where inline images could have been ignored if Content-Id header contained redundant spaces (#6980)
|
6 years ago |
|
Aleksander Machniak
|
8bcb1e801c
|
Switch default skin to Elastic
|
6 years ago |
|
Aleksander Machniak
|
66fab8cdb2
|
CS fixes, Avoid usused variables, fixed minor bugs
|
6 years ago |
|
Aleksander Machniak
|
20e25582e7
|
Fix so an error is loogged when encryption fails (#6948)
|
6 years ago |
|
Aleksander Machniak
|
e7ebff56df
|
PHPDoc fixes
|
6 years ago |
|
Aleksander Machniak
|
17296b39cb
|
Fix infinite loading message on iframe loading errors
The loading message was not stopped on "hard" errors, i.e. when
the page was blank, e.g. on 500 error.
|
6 years ago |
|
Aleksander Machniak
|
c6de97c5a8
|
Redis: Improve error handling and phpredis 5.X support (#6888)
|
6 years ago |
|
Aleksander Machniak
|
de4a6068e6
|
Mention Masterminds/HTML5 in INSTALL/README
|
6 years ago |