thomascube
|
4cc74f7269
|
Treat 'background' attributes the same way as 'src' (another XSS vulnerability)
|
16 years ago |
|
alecpl
|
7f62581c10
|
- Smart Tags and NOBR tag support in html messages (#1485363, #1485327)
|
16 years ago |
|
thomascube
|
a47acc56c6
|
Allow content of HTML head sections to be processes
|
16 years ago |
|
thomascube
|
c505e59a6d
|
Respect Content-Location headers in multipart/related messages (#1484946)
|
16 years ago |
|
thomascube
|
d368a68ed7
|
Reverted r1607. See #1485137 for explanations
|
17 years ago |
|
alecpl
|
4897adcbd4
|
#1485137: added 'form' to allowed elements list
|
17 years ago |
|
thomascube
|
21e724153e
|
Improve HTML sanitization with washtml
|
17 years ago |
|
alecpl
|
18ebb902d5
|
#1485097: Re-enable background attribute in HTML messages
|
17 years ago |
|
thomascube
|
350459486d
|
Change meta-charset specififcation in HTML to UTF-8; no need for mb_convert_encoding() anymore
|
17 years ago |
|
thomascube
|
a8755664af
|
Allow <body> tag in HTML messages which will be converted to <div class='rcmBody'>
|
17 years ago |
|
thomascube
|
65cc1c196f
|
Chech for mb_convert_encoding first because mbstring is optional for RoundCube + add some phpdoc
|
17 years ago |
|
alecpl
|
68217c548a
|
-add convert encoding before html parsing
|
17 years ago |
|
thomascube
|
45f56c1c40
|
Replace our crappy html sanitization with the dom-based washtml script + fix inline message parts + remove old code + add some doc comments
|
17 years ago |