708ceb2ba0
Elastic: Add style for HTML editor content (use embed.css for this)
6 years ago
cec626a12f
Use 'thumb' prefix, instead of '.thumb' suffix, for consistency
6 years ago
afc68aae63
FIx temp_filename() regressions, update changelog, add note in UPGRADING
6 years ago
e024f133fa
give all temp files a constant prefix
6 years ago
bec67c29b4
Display storage errors on refresh/check-recent action ( #6474 )
6 years ago
796e5a17e6
Removed referer_check option ( #6440 )
6 years ago
75fd0a73cb
Register 'uploading' label globally
6 years ago
00acb46411
Update to TinyMCE 4.7.13, refactor image selector dialog, add style for Elastic skin
7 years ago
9e289982ac
Add "Disk usage: " prefix to the quota element title
7 years ago
3e0e12227e
Use default skin on login page, also after logout
...
Before we stored user skin in session to keep user skin on logon after logout.
After more thinking... imho it's better to always present the same logon look.
7 years ago
b2bebe531a
Fix bug where usernames without domain part could be malformed or converted to lower-case on logon ( #6224 )
7 years ago
8e543f843e
Fix check_request() bypass in places using get_uids() [CVE-2018-9846] ( #6238 )
7 years ago
26f1b0770c
use skinned alert boxes
7 years ago
b897fe9349
use skined confirmation boxes where possible
7 years ago
2a32f51c91
Fix file disclosure vulnerability caused by insuficient input validation in relation with attachment plugins ( #6026 )
7 years ago
cfed954a46
Fix bug where Chrome could not upload the same file that was selected before ( #5854 )
...
... and removed the cancel hack that is not needed anymore.
7 years ago
86a4d78369
Merge branch 'dev-elastic'
7 years ago
7b4b36b16c
Plugin API: Added 'show_bytes' hook ( #5001 )
7 years ago
9858c2a294
Merge branch 'master' into dev-elastic
8 years ago
34446e00ca
Fix bug where namespace prefix could not be truncated on folders list if show_real_foldernames=true ( #5695 )
8 years ago
9a35768c26
spelling fixes ( #5690 )
8 years ago
adbab9d3e2
Merge branch 'master' into dev-elastic
8 years ago
81f67a4de2
Don't use each() deprecated in PHP 7.2
8 years ago
879f1dd2a0
Register some labels, add one localization label
8 years ago
25de39d444
Merge branch 'dev-remove-js-deps'
8 years ago
2733258d2b
Load 'close' label for dialogs by default
8 years ago
5e1da48d0c
Remove external javascript code from the git repo, add jsdeps.sh script ( #5535 )
8 years ago
ecfe177173
CS fixes, use $this instead of local variable
8 years ago
e3b61cd487
Plugin API: Added get_compose_responses hook ( #5457 )
8 years ago
571a10751f
Display error when trying to upload more files than specified in max_file_uploads ( #5483 )
8 years ago
4e0532808d
Fix bug where it wasn't possible to store more that 2MB objects in memcache/apc ( #5452 )
...
Added memcache_max_allowed_packet and apc_max_allowed_packet settings
8 years ago
650ac8befb
Fix displaying size of attachments with zero size
8 years ago
32e5a6bbcf
Fix bug where folder creation could fail if personal namespace contained more than one entry ( #5403 )
...
+ small code improvements
8 years ago
873e0353cf
Use smart-upload-button for messages and contact photos upload
...
Unified interface with rcmail::upload_form().
8 years ago
184de7735c
CS fixes (mostly phpdoc)
8 years ago
ebc2f5dc7d
Add possibility to rename attachments in mail compose ( #4996 )
...
... and fix some small issues related to the new compose attachment menu feature
8 years ago
8a13615e9e
Add possibility to preview and download attachments in mail compose ( #5053 )
8 years ago
4361a95820
Fix missing localization of HTML editor when assets_dir != INSTALL_PATH
8 years ago
a0f38f5fd8
Small code style improvements
9 years ago
4e6f3019f5
Enigma: Handle encrypted/signed content inside message/rfc822 attachments
9 years ago
4a408843b0
Protect download urls against CSRF using unique request tokens ( #1490642 )
...
Send X-Frame-Options headers with every HTTP response
9 years ago
a15d877ba8
Added brute-force attack prevention via login rate limit ( #1490566 )
9 years ago
454b0b1ca9
Remove deprecated rcmail and rcube_imap methods
9 years ago
2aa9ee56fd
Fix so disabling emoticons plugin really removes emoticons button from HTML editor
9 years ago
a5c03db798
Security: Added options to validate username/password on logon ( #1490500 )
9 years ago
c1bbf0d0b6
After failed login wait a second to slow down brute-force attacks ( #1490549 )
9 years ago
26086981a2
Improve randomness of security tokens ( #1490529 )
9 years ago
e2f605d44d
Fallback to C locale
9 years ago
3c29c7e858
Fix various issues with Turkish (and similar) locales ( #1490519 )
9 years ago
c4daf3f14f
Fix regression in converting signatures to text, fixed PHP warning in html2text() call
9 years ago
Aleksander Machniak