Aleksander Machniak
|
52d80f2467
|
Fix so mime_content_type check in Installer uses files that should always be available (i.e. from program/resources) (#6599)
|
6 years ago |
|
Thomas Bruederli
|
b1a8a4b627
|
Bump version to 1.3.8
|
6 years ago |
|
Fedor A. Fetisov
|
4f683c26e1
|
Fix support for "allow-from X" in "x_frame_options" config option (#6449)
|
6 years ago |
|
Thomas Bruederli
|
9f79a7ae6f
|
Bump version to 1.3.7
|
6 years ago |
|
Thomas Bruederli
|
357f9380c3
|
Bump version to 1.3.6
|
7 years ago |
|
Aleksander Machniak
|
c278b8796f
|
Fix bug where usernames without domain part could be malformed or converted to lower-case on logon (#6224)
|
7 years ago |
|
Aleksander Machniak
|
e3dd5b66d2
|
Fix check_request() bypass in places using get_uids() [CVE-2018-9846] (#6238)
|
7 years ago |
|
Thomas Bruederli
|
8922e3e076
|
Bump version to 1.3.5
|
7 years ago |
|
Aleksander Machniak
|
e5b7bcd207
|
Fix handling encoding of HTML tags in "inline" JSON output (#6207)
|
7 years ago |
|
Thomas Bruederli
|
917ae1c199
|
Bump version to 1.3.4
|
7 years ago |
|
Aleksander Machniak
|
f9c590621b
|
Remove x_frame_options env
|
7 years ago |
|
Thomas Bruederli
|
d84391d2c8
|
Bump version + add CVE ID
|
7 years ago |
|
Aleksander Machniak
|
c90ad5a977
|
Fix file disclosure vulnerability caused by insuficient input validation in relation with attachment plugins (#6026)
|
7 years ago |
|
Thomas Bruederli
|
392f88afc1
|
Bump version to 1.3.2
|
7 years ago |
|
Aleksander Machniak
|
0ad7e4c903
|
Fix bug where assets_path wasn't added to some watermark frames
|
7 years ago |
|
Thomas Bruederli
|
b6132b2bcd
|
Bump versions and year
|
7 years ago |
|
Aleksander Machniak
|
b6b5e42154
|
Fix bug where Chrome could not upload the same file that was selected before (#5854)
... and removed the cancel hack that is not needed anymore.
|
7 years ago |
|
Aleksander Machniak
|
412163416e
|
Add ignore_errors option to rcube_db, so error logging can be disabled temporarily
Use ignore_errors to make sure the DDL upgrade errors are printed only once.
|
8 years ago |
|
Thomas Bruederli
|
a7075251d6
|
Bump version to 1.3.0
|
8 years ago |
|
Aleksander Machniak
|
bf6440c3dc
|
Fix POST parameter reflection in default_charset selector (#5768)
|
8 years ago |
|
Thomas Bruederli
|
3dd2884788
|
Bump version to 1.3-rc
|
8 years ago |
|
Aleksander Machniak
|
cc0defce86
|
Fix failing database schema check in all engines except mysql (#5730)
|
8 years ago |
|
Aleksander Machniak
|
34446e00ca
|
Fix bug where namespace prefix could not be truncated on folders list if show_real_foldernames=true (#5695)
|
8 years ago |
|
ka7
|
9a35768c26
|
spelling fixes (#5690)
|
8 years ago |
|
Aleksander Machniak
|
81f67a4de2
|
Don't use each() deprecated in PHP 7.2
|
8 years ago |
|
Aleksander Machniak
|
f29fd706cf
|
Get back to eval()
We used create_function() before but it's deprecated in PHP 7.2
and really it was just a wrapper on eval().
|
8 years ago |
|
Aleksander Machniak
|
25de39d444
|
Merge branch 'dev-remove-js-deps'
|
8 years ago |
|
Aleksander Machniak
|
369b44d94a
|
Fix unsetting template objects
Fixes compatibility with some plugins e.g. kolab_addressbook which
call parse() method (for sub-templates) while parsing the main template
|
8 years ago |
|
Aleksander Machniak
|
2733258d2b
|
Load 'close' label for dialogs by default
|
8 years ago |
|
Aleksander Machniak
|
5e1da48d0c
|
Remove external javascript code from the git repo, add jsdeps.sh script (#5535)
|
8 years ago |
|
Aleksander Machniak
|
a844db6a27
|
Merge branch 'dev-layouts'
|
8 years ago |
|
Aleksander Machniak
|
e17fcf1649
|
Support ALLOW-FROM in x_frame_options (#5122)
|
8 years ago |
|
Aleksander Machniak
|
d02e6ea45e
|
Fix so templating system does not mess with external (e.g. email) content (#5499)
|
8 years ago |
|
Aleksander Machniak
|
ecfe177173
|
CS fixes, use $this instead of local variable
|
8 years ago |
|
Aleksander Machniak
|
e3b61cd487
|
Plugin API: Added get_compose_responses hook (#5457)
|
8 years ago |
|
Aleksander Machniak
|
edea8732a6
|
Fix regression where UI object could be not created on some pages (#5484)
|
8 years ago |
|
Aleksander Machniak
|
571a10751f
|
Display error when trying to upload more files than specified in max_file_uploads (#5483)
|
8 years ago |
|
Aleksander Machniak
|
f43f5bf93f
|
Use JSON_PRETTY_PRINT in devel_mode
This effectively makes PHP 5.4 a real requirement
|
8 years ago |
|
Aleksander Machniak
|
4e0532808d
|
Fix bug where it wasn't possible to store more that 2MB objects in memcache/apc (#5452)
Added memcache_max_allowed_packet and apc_max_allowed_packet settings
|
8 years ago |
|
Aleksander Machniak
|
40fe66b71e
|
Fix reference to non-existing blank.tif file in mime_content_type check
|
8 years ago |
|
Aleksander Machniak
|
638afafbd2
|
Make so rcmail.log() depends on devel_mode (#5193)
|
8 years ago |
|
Aleksander Machniak
|
6886a4de3f
|
Widescreen layout aka three column view (#5093)
|
8 years ago |
|
Aleksander Machniak
|
650ac8befb
|
Fix displaying size of attachments with zero size
|
8 years ago |
|
Victor Benincasa
|
daeb66ee99
|
Fix login form
Fix a small bug introduced on commit 43f3c5f that breaks the login form ($attrib['form'] is checked at line 1899, so it cannot be unset).
|
8 years ago |
|
Aleksander Machniak
|
32e5a6bbcf
|
Fix bug where folder creation could fail if personal namespace contained more than one entry (#5403)
+ small code improvements
|
8 years ago |
|
Aleksander Machniak
|
873e0353cf
|
Use smart-upload-button for messages and contact photos upload
Unified interface with rcmail::upload_form().
|
8 years ago |
|
Aleksander Machniak
|
43f3c5fb2a
|
Implement "one click" attachment upload (#5024)
|
8 years ago |
|
Aleksander Machniak
|
9debc38724
|
Drop mail_header_delimiter option, since we don't use mail() we don't need it
|
8 years ago |
|
Aleksander Machniak
|
184de7735c
|
CS fixes (mostly phpdoc)
|
8 years ago |
|
Aleksander Machniak
|
ebc2f5dc7d
|
Add possibility to rename attachments in mail compose (#4996)
... and fix some small issues related to the new compose attachment menu feature
|
8 years ago |