Commit Graph

15 Commits (28f15eb597304d1761adeef4e22c202de42ef22d)

Author SHA1 Message Date
alecpl 503e019a56 - Fix HTML messages output with empty block elements (#1485974) 16 years ago
alecpl f7fff8f682 - Allow WBR tag in HTML message (#1485960) 16 years ago
thomascube 4cc74f7269 Treat 'background' attributes the same way as 'src' (another XSS vulnerability) 16 years ago
alecpl 7f62581c10 - Smart Tags and NOBR tag support in html messages (#1485363, #1485327) 16 years ago
thomascube a47acc56c6 Allow content of HTML head sections to be processes 16 years ago
thomascube c505e59a6d Respect Content-Location headers in multipart/related messages (#1484946) 16 years ago
thomascube d368a68ed7 Reverted r1607. See #1485137 for explanations 17 years ago
alecpl 4897adcbd4 #1485137: added 'form' to allowed elements list 17 years ago
thomascube 21e724153e Improve HTML sanitization with washtml 17 years ago
alecpl 18ebb902d5 #1485097: Re-enable background attribute in HTML messages 17 years ago
thomascube 350459486d Change meta-charset specififcation in HTML to UTF-8; no need for mb_convert_encoding() anymore 17 years ago
thomascube a8755664af Allow <body> tag in HTML messages which will be converted to <div class='rcmBody'> 17 years ago
thomascube 65cc1c196f Chech for mb_convert_encoding first because mbstring is optional for RoundCube + add some phpdoc 17 years ago
alecpl 68217c548a -add convert encoding before html parsing 17 years ago
thomascube 45f56c1c40 Replace our crappy html sanitization with the dom-based washtml script + fix inline message parts + remove old code + add some doc comments 17 years ago