46d3cae2ff
Security: Fix cross-site scripting (XSS) via malicious XML attachment
4 years ago
34a0af8964
Allow array in smtp_host config ( #7296 )
4 years ago
663f7a8c58
Fix default keyservers (use keys.openpgp.org), add note about CORS ( #7373 , #7367 )
4 years ago
3d2bb47f8d
Clarify des_key length requirement ( #7350 )
...
[ci skip]
4 years ago
51a9dd631f
Add support for SameSite cookie attribute (req PHP >= 7.3.0) ( #6772 )
4 years ago
0aa5eca1fd
Fix bug where 'skins_allowed' option didn't enforce user skin preference ( #7080 )
5 years ago
259b7fa065
Explain difference between ssl:// and tls:// for default_host ( #7099 )
5 years ago
3b3dd0cf7a
Add note about URI format of hostnames in ldap config ( #7082 )
5 years ago
511e99ee1a
Update SMTP TLS/STARTTLS explanation in config.php ( #7066 )
...
Implicit TLS (port 465) is no longer deprecated since RFC 8314.
5 years ago
8db933e440
Set default skin to 'elastic' in sample config
5 years ago
1656bbcfaa
Update changelog and cleanup
5 years ago
714ea7b128
add unit tests for rcmail_output_html::get_template_logo
5 years ago
0ae3823853
rewrite skin_logo config
5 years ago
8bcb1e801c
Switch default skin to Elastic
5 years ago
20e25582e7
Fix so an error is loogged when encryption fails ( #6948 )
5 years ago
f7832a1a26
Removed 'delete_always' option ( #6782 )
5 years ago
9b88e9e5c2
Correct vendor string for GMail is 'gimap'
5 years ago
a80c5569ab
Added flag to disable server certificate validation via Mysql DSN argument ( #6848 )
5 years ago
446ff50c57
Merge branch 'dev/display_next' of https://github.com/alecpl/roundcubemail into alecpl-dev/display_next
5 years ago
f6807bcc4c
Added 'keyservers' option to define list of HKP servers for Enigma/Mailvelope ( #6326 )
5 years ago
22a47cced6
Changes in `display_next` setting ( #6795 )
...
- Move it to Preferences > User Interface > Main Options
- Make it apply to Contacts interface too
- Make it apply only if deleting/moving a previewed message/contact
5 years ago
fdac30e544
Support PECL memcached extension as a session and cache storage driver (experimental)
5 years ago
2dccbf2879
Redis: Support connection to unix socket
...
Also handle exceptions thrown on connection and remove support for
specifying hosts with redis:// scheme.
5 years ago
f3948a26b8
Use .log suffix in options descriptions as it's the default
5 years ago
c87ac075ae
Renamed 'log_session' option to 'session_debug'
5 years ago
5218b0193a
Clarified 'address_book_type' option behavior ( #6680 )
5 years ago
57c67db029
Remove year(s) from copyright headers + some cleanup
5 years ago
0492b1f6e5
HTML5 Upload Progress ( #6177 ) ( #6583 )
...
Replaced all old upload progress code in favour of ajax upload progress.
Instead of posting a hidden iframe, we now use AJAX (as we did for drag-n-drop).
Removed code for old browsers. Now we support IE >= 10, Firefox > 4.
Upload progress may not work in some more, but support is quite good.
5 years ago
11216a1925
Changed 'password_charset' default to 'UTF-8' ( #6522 )
6 years ago
619ddfed3d
CS fixes and consistence, update changelog
6 years ago
8b2e466c00
limit skins available/shown in the settings section
6 years ago
02ddb8d535
Use RCUBE_VERSION in defaults.inc.php, RCMAIL_VERSION is undefined when using Framework only
6 years ago
796e5a17e6
Removed referer_check option ( #6440 )
6 years ago
ca6324afb7
Add note about purpose of the defaults.inc.php file
6 years ago
4ea790ba37
Extend skin_logo allowing per skin logos ( #6273 )
6 years ago
b816569a83
Improve description of imap_ns_* options, add note about FALSE value
6 years ago
4b97f40af9
Get rid of debug_level ( #6298 )
6 years ago
d07b032bcd
Refactor cache code with separate engine-specific classes
6 years ago
4c8736755f
Fix typo
6 years ago
b172fb505c
Improve trusted_host_patterns code
6 years ago
50a9c8f777
Add option trusted_host_patterns
7 years ago
515d496808
Replace display_version with display_product_info ( #5904 )
7 years ago
5e08a6ac59
Handle remote stylesheets the same as remote images, ask the user to allow them ( #5994 )
...
Fixes the issue where remote stylesheet could have been blocked
if the message contained no remote images and user have no way to
allow that content.
7 years ago
7fc626d527
Changed defaults for smtp_user (%u), smtp_pass (%p) and smtp_port (587)
7 years ago
76adb49454
Support for IMAP folders that cannot contain both folders and messages ( #5057 )
7 years ago
8b7c7dd5a9
Merge branch 'issue-logfilename' of https://github.com/remicollet/roundcubemail into remicollet-issue-logfilename
7 years ago
6ca4eab399
add 'log_file_ext' configuration option
7 years ago
6dee73a0ec
Support both comma and semicolon as recipient separator, drop recipients_separator option ( #5092 )
7 years ago
fe2f553688
Add option to not indent quoted text on top-posting reply ( #5105 )
...
by setting reply_mode = 2
7 years ago
f7809af6e4
Support AUTHENTICATE LOGIN for IMAP connections ( #5563 )
...
Add imap_auth_type=IMAP to force use of LOGIN instead of AUTHENTICATE LOGIN.
In imap_auth_type=CHECK mode prefer LOGIN over AUTHENTICATE LOGIN (for performance reasons).
7 years ago
Aleksander Machniak