36043cb7bc
Bump version to 1.2.9 and copyright to 2018
7 years ago
8d6d4a5de5
Fix regression where IMAP commands with '*' uidset argument wasn't working
7 years ago
c69b851b8a
Fix regression in compressMessageSet()
7 years ago
9f91018a16
Bump version to 1.2.8
7 years ago
cdeb6234a2
Fix possible IMAP command injection vulnerability ( #6229 )
...
[CVE-2018-9846]
7 years ago
8e7c2f61a3
Fix bug in remote content blocking on HTML image and style tags ( #6178 )
7 years ago
987856eee2
Bump version + add CVE ID
7 years ago
9be2224c77
Fix file disclosure vulnerability caused by insuficient input validation in relation with attachment plugins ( #6026 )
7 years ago
1fd9ad242e
Fix (again) bug where image data URIs in css style were treated as evil/remote in mail preview ( #5580 )
7 years ago
ead587ad59
Fix bug where HTML messages could have been rendered empty on some systems ( #5957 )
...
Consistently use $nodeName instead of $tagName property.
7 years ago
5f0f579766
Ignore rewind() warnings ( #5950 )
7 years ago
3644b02d0b
Bump version to 1.2.6
7 years ago
d265b5756f
Bring back rcmail_html_container_id global
7 years ago
54a3712ada
Modify links in html messages during Washtml DOM traversal
...
This is a more safe approach than using regex and mitigates
possible vulnerabilities using malformed html markup.
7 years ago
fb43d2e608
Escape textarea contents in Washtml
7 years ago
507a1e9935
Don't ignore (global) userlogins/sendmail logs in per_user_logging mode
7 years ago
183f68f387
Fix uninitialized string offset in rcube_utils::bin2ascii() and make sure rcube_utils::random_bytes() result has always requested length ( #5788 )
8 years ago
3d498cd632
Fix bug where it wasn't possible to set timezone to auto-detected value ( #5782 )
8 years ago
913ffcfbbe
Fix SQL syntax error on MariaDB 10.2 ( #5774 )
8 years ago
58d7cdc3fc
Fix addressbook searching by gender ( #5757 )
8 years ago
9bfacb4d3c
Fix bug where comment notation within style tag would cause the whole style to be ignored ( #5747 )
8 years ago
e62a7d0dfa
Bump version to 1.2.5
8 years ago
22b34fc44b
Fix bug where base_dn setting was ignored inside group_filters ( #5720 )
8 years ago
b213ee9aa0
Merge branch 'release-1.2' of github.com:roundcube/roundcubemail into release-1.2
8 years ago
2f6ca6d672
Fix bug where namespace prefix could not be truncated on folders list if show_real_foldernames=true ( #5695 )
8 years ago
0fffea28c1
Fix regression in LDAP fuzzy search where it always used prefix search instead ( #5713 )
8 years ago
6a178b3a7f
Remove redundant spaces from generated contact names
8 years ago
fa62496107
Fix so settings/upload.inc could not be used by plugins ( #5694 )
8 years ago
cbd35626f7
Better fix for XSS in style tags ( fa2824fdc)
8 years ago
fa2824fdcd
Fix XSS issue in handling of a style tag inside of an svg element
8 years ago
85a750a068
Bump version to 1.2.4
8 years ago
801f296872
Fix bug where it was too easy accidentally move a folder when using the subscription checkbox ( #5655 )
8 years ago
b1a5b76445
Fix update of group name in the contacts list header on group rename ( #5648 )
8 years ago
4475037023
Rename $sql_arr variable to $record as it's not about sql only
8 years ago
f51a101891
Fix regression where groups with email address were resolved to its members' addresses
8 years ago
3608e0c666
Fix visual glitch when using disabled_actions for items in Settings menu
8 years ago
a336026142
Fix bug where signature couldn't be added above the quote in Firefox 51 ( #5628 )
8 years ago
04025fb297
Fix bug where mail content frame couldn't be reset in some corner cases ( #5608 )
...
Conflicts:
CHANGELOG
8 years ago
82b826faef
Fix PHP error on update of a contact with multiple email addresses when using PHP 7.1 ( #5587 )
8 years ago
1568bd9e04
Fix bug where external content in src attribute of input/video tags was not secured ( #5583 )
8 years ago
f90f22ffb8
Fix bug where image data URIs in css style were treated as evil/remote in mail preview ( #5580 )
8 years ago
58e63a6e70
Fix so group/addressbook selection is retained on page refresh
8 years ago
c9b394bcad
Fix some advanced search issues with multiple addressbooks ( #5572 )
8 years ago
e0d7367f1f
Fix adding images to new identity signatures
...
It already worked only on edits, because the image data for new identity
was stored in the wrong session item.
8 years ago
94feab652c
Disable Print button for pdf attachments in Firefox ( #5125 )
...
Mozilla's PDF.js viewer does not allow printing from host page.
We try to detect such situation and disable the button to minimize
user confusion.
8 years ago
79613c1e4f
Fix variable substitution in ldap host for some use-cases, e.g. new_user_identity ( #5544 )
8 years ago
f04fc506b0
Bump version to 1.2.3
8 years ago
e8fc8888a6
Remove leftower code from last few backports
8 years ago
31df33d4e0
Fix regression where LDAP results could be counted incorrectly when using VLV
...
... broken by d08bd0a51f
8 years ago
53ede465e3
Avoid PHP fatal error
...
After last change to file `rcube_ldap.php`, my roundcube instance was getting this error:
```
PHP Fatal error: Cannot use object of type Net_LDAP3_Result as array in ...
```
In
```php
protected function extended_search($count = false)
```
`$result = $this->ldap->search()` returns a LDAP object (whatever package we use).
If the search returns no results (and if `$is_extended_search` is false), then it gets to line 971 trying to do a `usort()` and then a `count()` on an object, instead of an array.
8 years ago
Thomas Bruederli