Commit Graph

20 Commits (3e7c3694ef2b516610c0592712e95046a2bde227)

Author SHA1 Message Date
alecpl 7435e3bc32 - fix empty A tag handling (#1486272) 15 years ago
svncommit e98f249172 Added # to washtml's regex for safe links (some list digests have tables of contents that use internal links). 15 years ago
svncommit 5f8d31f9be better solution for HTML washing encoding issue 15 years ago
svncommit 659672ebf9 fix washing of HTML encoded in something other than UTF-8 15 years ago
alecpl 2337a82f72 - Fix displaying of HTML messages with unknown/malformed tags (#1486003)
- Some other changes for styled HTML display
16 years ago
alecpl 503e019a56 - Fix HTML messages output with empty block elements (#1485974) 16 years ago
alecpl f7fff8f682 - Allow WBR tag in HTML message (#1485960) 16 years ago
thomascube 4cc74f7269 Treat 'background' attributes the same way as 'src' (another XSS vulnerability) 16 years ago
alecpl 7f62581c10 - Smart Tags and NOBR tag support in html messages (#1485363, #1485327) 16 years ago
thomascube a47acc56c6 Allow content of HTML head sections to be processes 16 years ago
thomascube c505e59a6d Respect Content-Location headers in multipart/related messages (#1484946) 16 years ago
thomascube d368a68ed7 Reverted r1607. See #1485137 for explanations 17 years ago
alecpl 4897adcbd4 #1485137: added 'form' to allowed elements list 17 years ago
thomascube 21e724153e Improve HTML sanitization with washtml 17 years ago
alecpl 18ebb902d5 #1485097: Re-enable background attribute in HTML messages 17 years ago
thomascube 350459486d Change meta-charset specififcation in HTML to UTF-8; no need for mb_convert_encoding() anymore 17 years ago
thomascube a8755664af Allow <body> tag in HTML messages which will be converted to <div class='rcmBody'> 17 years ago
thomascube 65cc1c196f Chech for mb_convert_encoding first because mbstring is optional for RoundCube + add some phpdoc 17 years ago
alecpl 68217c548a -add convert encoding before html parsing 17 years ago
thomascube 45f56c1c40 Replace our crappy html sanitization with the dom-based washtml script + fix inline message parts + remove old code + add some doc comments 17 years ago