Commit Graph

6052 Commits (3e4b7cd19d1b019f35872d384aeb24f09d035bce)

Author SHA1 Message Date
Aleksander Machniak 3e4b7cd19d Extend rcube_washtml with SVG support 10 years ago
Aleksander Machniak 7bbefdb63b Fix XSS issue in SVG images handling (#1490625)
Conflicts:

	CHANGELOG
10 years ago
Aleksander Machniak 3f6fbdcc6d Fix random "access to this resource is secured against CSRF" message at logout (#1490641)
- this is when openssl module is not installed
10 years ago
Francis Russell 8a53588940 Make TLS method for IMAP parameterisable. 10 years ago
Francis Russell f8911c2a7f Enable use of TLSv1.1 and TLSv1.2 for IMAP. 10 years ago
Aleksander Machniak fc5befff0f Fix missing language name in "Add to Dictionary" request in HTML mode (#1490634)
Conflicts:

	CHANGELOG
10 years ago
Thomas Bruederli f2ff464002 Bump version to 1.1.4; update Changelog 10 years ago
Aleksander Machniak 7d0099f28e Fix so drag-n-drop of text (e.g. recipient addresses) on compose page actually works (#1490619)
Conflicts:

	CHANGELOG
10 years ago
Aleksander Machniak 89a5dcb946 Fix path traversal vulnerability in setting a skin (#1490620)
Conflicts:

	CHANGELOG
10 years ago
Aleksander Machniak 9fbabc4668 Add INBOX to the list of folders only if no filter and no prefix was specified 10 years ago
Aleksander Machniak c67e7e8f85 Fix PDF support detection in Firefox > 19 (#1490610)
Conflicts:
	CHANGELOG
10 years ago
Aleksander Machniak c82d09a052 Fix handling of message/rfc822 attachments on replies and forwards (#1490607)
Conflicts:

	CHANGELOG
	program/lib/Roundcube/rcube_message.php
	program/steps/mail/compose.inc
10 years ago
Aleksander Machniak 6e71c958fc Fix also charset encoding of message/rfc822 part bodies (#1490606) 10 years ago
Aleksander Machniak 2382c6e822 Fix regression in displaying contents of message/rfc822 parts (#1490606)
Conflicts:

	CHANGELOG
10 years ago
Aleksander Machniak b6b92c0ddd Optionally throw 404 error when contact photo wasn't found 10 years ago
Aleksander Machniak 5143c47e0f Fix rcube_utils::words_match() to work with mixed/invalid/binary content (T844) 10 years ago
Aleksander Machniak 9953d5c10c Add workaround for https://bugs.php.net/bug.php?id=70757 (#1490582) 10 years ago
Aleksander Machniak c7c09f85d9 Fix HTML sanitizer to skip <!-- node type X --> in output (#1490583) 10 years ago
Aleksander Machniak 8e7f32fddc Small improvements in HTML to text conversion.
Better handling of <body> and trailing spaces, and </p><div> or <br><div>.
10 years ago
Aleksander Machniak a04a16c285 Make sure list page is never set to 0 (#1490458)
This should fix the issue where after message move wrong message was
added to the list and the list counter was invalid.
10 years ago
Aleksander Machniak 72be74508f Fix redundant blank lines when using HTML and top posting (#1490576) 10 years ago
Aleksander Machniak 70942083ce After failed login wait a second to slow down brute-force attacks (#1490549) 10 years ago
Aleksander Machniak 280395a544 Fix bug where HTML messages with invalid/excessive css styles couldn't be displayed (#1490539)
Technically speaking we remove the whole CSS content when it has more than 5k lines.
10 years ago
Aleksander Machniak c5acbc6c94 Fix bug where message preview was unintentionally reset on check-recent action (#1490563) 10 years ago
Aleksander Machniak 5e6f6ac539 Fix responses list update issue after response name change (#1490555) 10 years ago
Aleksander Machniak 3d9798da1f Make brute force attacks harder by re-generating security token on every failed login (#1490549)
Or more precissely use the same we did in git-master, i.e. do not base the token on
session ID, but use random bytes instead.
10 years ago
Aleksander Machniak 357cd5103d Fix issue where Content-Length of some attachments could be set to wrong value causing browser errors (#1490482) 10 years ago
Aleksander Machniak 6731d2116c Fix XSS issue in drag-n-drop file uploads (#1490530) 10 years ago
Aleksander Machniak 73d98c4766 Fix missing HTTP_X_FORWARDED_FOR address in generated Received header 10 years ago
Aleksander Machniak 9f98332240 Fix so In-Reply-To header is set also for MDN receipts (#1490523) 10 years ago
Aleksander Machniak bbef212b0e Fallback to C locale 10 years ago
Aleksander Machniak 7bfe676d53 Fix various issues with Turkish (and similar) locales (#1490519) 10 years ago
Aleksander Machniak ac3078fe93 Fix support for Mozilla-based browsers, e.g. Pale Moon (#1490517) 10 years ago
Aleksander Machniak 52b75f2506 Fix so adding CC/BCC recipients from the sidebar unhides compose form fields in Classic skin (#1490472) 10 years ago
Aleksander Machniak 8ef86f5253 Fix handling of plus character in mailto: links (#1490510) 10 years ago
Aleksander Machniak 5f10f13472 Fix so css of one html part does not apply to other text parts on message display (#1490505) 11 years ago
Thomas Bruederli 106d47992b Bump version and update changelog 11 years ago
Thomas Bruederli 27e02f0f3b Fix closing of nested menus (#1490443) 11 years ago
Aleksander Machniak 6564cf8a4b Change code so versions of Mail_mime before and after 1.9.0 are supported
Conflicts:
	program/lib/Roundcube/rcube.php
11 years ago
Aleksander Machniak dddc985ce2 Make Mail_mime>=1.9.0 a requirement, fix compat. errors
Conflicts:
	composer.json-dist
11 years ago
Aleksander Machniak 495b5c3883 Don't display not-sent-warning in compose page on save-pref action 11 years ago
Aleksander Machniak b45b15e5a8 Fix selecting a folder on collapse when any subfolder is selected 11 years ago
Aleksander Machniak 794b2f1d46 Really make base64 encoding unicode-aware 11 years ago
Aleksander Machniak b44a6554bb Fix base64.encode/decode for unicode characters - use fallback if btoa/atob functions fail 11 years ago
Aleksander Machniak 14693832b2 Fix so input field (e.g. search box) does not loose focus on list load (#1490455) 11 years ago
Aleksander Machniak ca7fc75bec Fix "washing" of style elements wrapped into many lines 11 years ago
Thomas Bruederli 8b26f548b5 Add localization alias for tr => tr_TR 11 years ago
Aleksander Machniak f3c12bf7ef Get rid of Mail_mimeDecode package dependency (#1490416)
Conflicts:

	CHANGELOG
	composer.json-dist
11 years ago
Aleksander Machniak eddae8976d Disable links list generation on html-to-text conversion of identities or composed message (#1490437) 11 years ago
Aleksander Machniak b45e9b49b9 Fix removing signature when switching to identity with an empty sig in HTML mode (#1490470) 11 years ago