1a7b603875
Bump version to 1.2.10
5 years ago
36043cb7bc
Bump version to 1.2.9 and copyright to 2018
7 years ago
9f91018a16
Bump version to 1.2.8
7 years ago
987856eee2
Bump version + add CVE ID
7 years ago
9be2224c77
Fix file disclosure vulnerability caused by insuficient input validation in relation with attachment plugins ( #6026 )
7 years ago
3644b02d0b
Bump version to 1.2.6
7 years ago
e62a7d0dfa
Bump version to 1.2.5
8 years ago
2f6ca6d672
Fix bug where namespace prefix could not be truncated on folders list if show_real_foldernames=true ( #5695 )
8 years ago
85a750a068
Bump version to 1.2.4
8 years ago
f04fc506b0
Bump version to 1.2.3
8 years ago
dcf68720c1
Fix regression where UI object could be not created on some pages ( #5484 )
8 years ago
9eac1dd513
Fix bug where it wasn't possible to store more that 2MB objects in memcache/apc ( #5452 )
...
Added memcache_max_allowed_packet and apc_max_allowed_packet settings
8 years ago
444fdb6161
Bump version to 1.2.2
8 years ago
fa462b5ab4
Fix displaying size of attachments with zero size
8 years ago
bcf576c662
Fix bug where folder creation could fail if personal namespace contained more than one entry ( #5403 )
...
+ small code improvements
8 years ago
3a7a550518
Bump version to 1.2.1
8 years ago
073961a1b6
Fix missing localization of HTML editor when assets_dir != INSTALL_PATH
8 years ago
a80981cdca
Remove application/x-tar file extension test as it might not exist in nginx config ( #5253 )
...
Use text/css instead
9 years ago
d2e2a8f32e
Bump version to 1.2.0 (stable)
9 years ago
a0f38f5fd8
Small code style improvements
9 years ago
4e6f3019f5
Enigma: Handle encrypted/signed content inside message/rfc822 attachments
9 years ago
3a13b5dab8
CS fixes
9 years ago
0c9e55b0c9
Fix PHP warning when defaults.inc.php is not readable
9 years ago
4a408843b0
Protect download urls against CSRF using unique request tokens ( #1490642 )
...
Send X-Frame-Options headers with every HTTP response
9 years ago
10e5192a2b
Fix path traversal vulnerability in setting a skin ( #1490620 )
9 years ago
69a1e4f7b1
rcube_parse_host() -> rcube_utils::parse_host()
9 years ago
7476410a04
Add missing deprecation warning
9 years ago
458a6b26e8
Load bc.inc in script startup
9 years ago
32695c333c
Restore bc.inc which now logs a warning when calling deprecated functions
9 years ago
a15d877ba8
Added brute-force attack prevention via login rate limit ( #1490566 )
9 years ago
454b0b1ca9
Remove deprecated rcmail and rcube_imap methods
9 years ago
2aa9ee56fd
Fix so disabling emoticons plugin really removes emoticons button from HTML editor
9 years ago
234fd19505
Replace deprecated call to Q within array_map()
9 years ago
74ce01efc7
Q() -> rcube::Q()
9 years ago
a5c03db798
Security: Added options to validate username/password on logon ( #1490500 )
9 years ago
c1bbf0d0b6
After failed login wait a second to slow down brute-force attacks ( #1490549 )
9 years ago
fddfd8e6d7
Remove backward compatibility "layer" of bc.php ( #1490534 )
9 years ago
df0b4f3437
Make sure an email address is valid when replacing it with mailto: link
9 years ago
26086981a2
Improve randomness of security tokens ( #1490529 )
9 years ago
e2f605d44d
Fallback to C locale
9 years ago
3c29c7e858
Fix various issues with Turkish (and similar) locales ( #1490519 )
9 years ago
c4daf3f14f
Fix regression in converting signatures to text, fixed PHP warning in html2text() call
9 years ago
a63f14ec40
Emoticons-related code refactoring
...
- Emoticons: All emoticons-related functionality is handled by the plugin now
- Emoticons: Added option to switch on/off emoticons in compose editor (#1485732 )
- Emoticons: Added option to switch on/off emoticons in plain text messages
- Plugin API: Added disabled_plugins an disabled_buttons options in html_editor hook
- Plugin API: Added html2text hook
9 years ago
1b39d9a6c7
PHP7: Fixed some E_WARNING errors that previously were E_STRICT
9 years ago
93e64008a6
Small code improvements
9 years ago
08bb20f261
Don't use deprecated functions/constants (from bc.inc)
9 years ago
9d78c68cbf
Fix so imap folder attribute comparisons are case-insensitive ( #1490466 )
...
+ make in_array_nocase() much faster for ASCII strings
9 years ago
252cc4c4ac
Password: Allow temporarily disabling the plugin functionality with a notice
9 years ago
8447bae77c
Require Mbstring and OpenSSL extensions ( #1490415 ) - remove redundant code
10 years ago
a958748947
CS fixes
10 years ago
Thomas Bruederli