Commit Graph

189 Commits (46d3cae2ffa420638709acecf8d5c659da109de0)

Author SHA1 Message Date
Aleksander Machniak 46d3cae2ff Security: Fix cross-site scripting (XSS) via malicious XML attachment 4 years ago
Aleksander Machniak 7ead0bb227 Fix empty attachment size handling (#7370) 4 years ago
Aleksander Machniak 377239fa8e Display a warning and do not try to open empty attachments (#7332) 4 years ago
Aleksander Machniak d340f18295 Fix display issues with mail subject that contains line-breaks (#7191) 4 years ago
Aleksander Machniak 97e6065897
Extract RFC2231 attachment name from message headers (#6729) (#6783)
* Extract RFC2231 attachment name from message headers (#6729)
* Workaround for attachments with invalid content type (e.g. PDF) (#6816)
4 years ago
Aleksander Machniak bfe2bc17d7 Fix css styles leak from replied/forwarded message to the rest of the composed text (#6831)
Generally do the same with styles what we do on message preview.

This also fixes small bugs in handling styles:
- fix so <style> tag on the start of the HTML content is not ignored
- fix so body's background/bgcolor attributes are applied to the container (regression)
5 years ago
Aleksander Machniak 89a342a03a Elastic: Fix visual issue with long buttons in .boxwarning (#6797) 5 years ago
Aleksander Machniak 940e500c1f Enigma: For verified signatures, display the user id associated with the sender address (#5958) 5 years ago
Aleksander Machniak 57c67db029 Remove year(s) from copyright headers + some cleanup 5 years ago
Aleksander Machniak 2373aea95c Elastic: Add style for .part-notice elements (like e.g. .boxwarning) 5 years ago
Aleksander Machniak 7a4aed8320 Move common code to a function 5 years ago
Mario Harjac 136175e445 Fix missing CSRF token in message download (#6621) 5 years ago
Aleksander Machniak 3ede8e5404 Show message flagged status in message view (#5080)
for Larry and Elastic
6 years ago
Aleksander Machniak e4c7e8ac7c Fix bug where attachment size wasn't visible when the filename was too long (#6033)
Uses flexbox, so works in recent browsers only. I don't plan to support olders.
7 years ago
Aleksander Machniak 6ccc8cc020 The "it is a draft" message is more an information than a warning 7 years ago
Aleksander Machniak 8e2f6275a4 Prevent from empty 'class' attribute in generated html 7 years ago
Aleksander Machniak e6398f8786 Assign attachment type classes also in print mode 7 years ago
Aleksander Machniak 828f73a4b9 Small improvements to .image-attachment contents strusture 7 years ago
Aleksander Machniak 7a7ef7b687 Don't treat .eml attachments to drafts as drafts 7 years ago
Aleksander Machniak b1d79900ed Fix invalid/partial merge of 3196d656db 7 years ago
Aleksander Machniak d815525c6a Merge branch 'master' into dev-elastic 7 years ago
Aleksander Machniak 5e08a6ac59 Handle remote stylesheets the same as remote images, ask the user to allow them (#5994)
Fixes the issue where remote stylesheet could have been blocked
if the message contained no remote images and user have no way to
allow that content.
7 years ago
Aleksander Machniak 22061cd38b Support flexbox display for remote objects element 7 years ago
Aleksander Machniak 5afda409aa Add has_writeable_addressbook flag to client env in mail preview 7 years ago
Aleksander Machniak 83fe734460 Move some functions from func.inc to show.inc where they belong to.
Add MessageSummary object for message template.
7 years ago
Aleksander Machniak 1b2d3c0ac2 Email Resent (Bounce) feature (#4985) 7 years ago
Aleksander Machniak adbab9d3e2 Merge branch 'master' into dev-elastic 7 years ago
Aleksander Machniak dfd19206a4 sizeof() -> count() 7 years ago
Aleksander Machniak 01031d0ced Reset onerror on images if placeholder does not exist to prevent from requests storm 7 years ago
Aleksander Machniak 15bd0b51a4 Improve mailvelope decryption errors handling, hide encrypted part attachment on successful decryption (#5279)
+ small style improvements
8 years ago
Aleksander Machniak 556c1725a7 Unify automatic marking as \Seen in preview pane, full-page and extwin views (#5071)
We now have one 'mail_read_time' option that works for all cases.
Option 'preview_pane_mark_read' has been removed and marked as an alias.
8 years ago
Aleksander Machniak 6886a4de3f Widescreen layout aka three column view (#5093) 8 years ago
Aleksander Machniak 650ac8befb Fix displaying size of attachments with zero size 8 years ago
Aleksander Machniak 8a13615e9e Add possibility to preview and download attachments in mail compose (#5053) 8 years ago
Aleksander Machniak 7a7a6795f0 Support WEBP images in mail messages (#5362) 8 years ago
Aleksander Machniak 9796cd2063 Merge branch 'dev-rfc822-preview'
Conflicts:
	CHANGELOG
	program/steps/mail/show.inc
8 years ago
Aleksander Machniak 6f2c007d1b CS fixes: Replace use of "bool ? true : false" with just "bool" 8 years ago
Aleksander Machniak 46f7b70964 Enable reply/reply-all/forward buttons also in preview frame of message/rfc822 8 years ago
Aleksander Machniak ce3105c58f Reply/Reply-All/Forward/Change-format buttons for message/rfc822 preview 8 years ago
Aleksander Machniak 323fa20bc8 Message/rfc822 attachment preview (#5054) 8 years ago
Aleksander Machniak 8271597836 Use ternary operator where applicable 9 years ago
Aleksander Machniak d560916065 Added possibility to drag-n-drop attachments from mail preview to compose window 9 years ago
Aleksander Machniak 8716fca0d0 Small improvements 9 years ago
Aleksander Machniak 63e7937d02 Change so rcube_message class does not depend on $_GET parameters 9 years ago
Aleksander Machniak a958748947 CS fixes 9 years ago
Aleksander Machniak 1aa0c8ad66 Fix bug where preview_pane setting wasn't always saved into user preferences (#1490362) 9 years ago
Aleksander Machniak 1881a8a152 Display "real" attachment size also on attachments list 10 years ago
Aleksander Machniak 681ba6fc3c Improve system security by using optional special URL with security token
Allows to define separate server/path for image/js/css files
Fix bugs where CSRF attacks were still possible on some requests
10 years ago
Aleksander Machniak cc6c7e83b5 Fix possible race-condition in using current folder 10 years ago
Aleksander Machniak cd4e5057fc Don't trust get_folder(), use $MESSAGE->folder if available 10 years ago