Aleksander Machniak
|
126d099e83
|
Fix PHP warning when defaults.inc.php is not readable
|
10 years ago |
|
Thomas Bruederli
|
699af1e520
|
Protect download urls against CSRF using unique request tokens (#1490642)
Send X-Frame-Options headers with every HTTP response
Conflicts:
plugins/enigma/enigma.js
plugins/enigma/lib/enigma_ui.php
program/lib/Roundcube/rcube_message.php
|
10 years ago |
|
Aleksander Machniak
|
b01689caf8
|
Hide DSN option in Preferences when smtp_server is not used (#1490666)
|
10 years ago |
|
Aleksander Machniak
|
7a73635214
|
Fix unicode-awareness of Base64 encoding implementation in javascript
|
10 years ago |
|
Aleksander Machniak
|
58c03846e7
|
Fix list row selection when provided uid is number not a string
|
10 years ago |
|
Aleksander Machniak
|
d66793f0af
|
Fix missing emoticons on html-to-text conversion
|
10 years ago |
|
Aleksander Machniak
|
8d047c668f
|
Plugin API: Added addressbook_export hook
|
10 years ago |
|
Aleksander Machniak
|
3e55a2d9cb
|
Fix bug in long recipients list parsing for cases where recipient name contained @-char (#1490653)
|
10 years ago |
|
Aleksander Machniak
|
a2d5db0a98
|
Fix bug where Archive/Junk buttons were not active after page jump with select=all mode (#1490647)
|
10 years ago |
|
Aleksander Machniak
|
4de4438340
|
Fix regression where xml mode could be used to parse xhtml messages causing empty result
|
10 years ago |
|
Aleksander Machniak
|
768e3e1b09
|
Improved SVG cleanup code
|
10 years ago |
|
Aleksander Machniak
|
847c771d9e
|
Refactor wash_attribs() - fix regressions
|
10 years ago |
|
Aleksander Machniak
|
3e4b7cd19d
|
Extend rcube_washtml with SVG support
|
10 years ago |
|
Aleksander Machniak
|
7bbefdb63b
|
Fix XSS issue in SVG images handling (#1490625)
Conflicts:
CHANGELOG
|
10 years ago |
|
Aleksander Machniak
|
3f6fbdcc6d
|
Fix random "access to this resource is secured against CSRF" message at logout (#1490641)
- this is when openssl module is not installed
|
10 years ago |
|
Francis Russell
|
8a53588940
|
Make TLS method for IMAP parameterisable.
|
10 years ago |
|
Francis Russell
|
f8911c2a7f
|
Enable use of TLSv1.1 and TLSv1.2 for IMAP.
|
10 years ago |
|
Aleksander Machniak
|
fc5befff0f
|
Fix missing language name in "Add to Dictionary" request in HTML mode (#1490634)
Conflicts:
CHANGELOG
|
10 years ago |
|
Thomas Bruederli
|
f2ff464002
|
Bump version to 1.1.4; update Changelog
|
10 years ago |
|
Aleksander Machniak
|
7d0099f28e
|
Fix so drag-n-drop of text (e.g. recipient addresses) on compose page actually works (#1490619)
Conflicts:
CHANGELOG
|
10 years ago |
|
Aleksander Machniak
|
89a5dcb946
|
Fix path traversal vulnerability in setting a skin (#1490620)
Conflicts:
CHANGELOG
|
10 years ago |
|
Aleksander Machniak
|
9fbabc4668
|
Add INBOX to the list of folders only if no filter and no prefix was specified
|
10 years ago |
|
Aleksander Machniak
|
c67e7e8f85
|
Fix PDF support detection in Firefox > 19 (#1490610)
Conflicts:
CHANGELOG
|
10 years ago |
|
Aleksander Machniak
|
c82d09a052
|
Fix handling of message/rfc822 attachments on replies and forwards (#1490607)
Conflicts:
CHANGELOG
program/lib/Roundcube/rcube_message.php
program/steps/mail/compose.inc
|
10 years ago |
|
Aleksander Machniak
|
6e71c958fc
|
Fix also charset encoding of message/rfc822 part bodies (#1490606)
|
10 years ago |
|
Aleksander Machniak
|
2382c6e822
|
Fix regression in displaying contents of message/rfc822 parts (#1490606)
Conflicts:
CHANGELOG
|
10 years ago |
|
Aleksander Machniak
|
b6b92c0ddd
|
Optionally throw 404 error when contact photo wasn't found
|
10 years ago |
|
Aleksander Machniak
|
5143c47e0f
|
Fix rcube_utils::words_match() to work with mixed/invalid/binary content (T844)
|
10 years ago |
|
Aleksander Machniak
|
9953d5c10c
|
Add workaround for https://bugs.php.net/bug.php?id=70757 (#1490582)
|
10 years ago |
|
Aleksander Machniak
|
c7c09f85d9
|
Fix HTML sanitizer to skip <!-- node type X --> in output (#1490583)
|
10 years ago |
|
Aleksander Machniak
|
8e7f32fddc
|
Small improvements in HTML to text conversion.
Better handling of <body> and trailing spaces, and </p><div> or <br><div>.
|
10 years ago |
|
Aleksander Machniak
|
a04a16c285
|
Make sure list page is never set to 0 (#1490458)
This should fix the issue where after message move wrong message was
added to the list and the list counter was invalid.
|
10 years ago |
|
Aleksander Machniak
|
72be74508f
|
Fix redundant blank lines when using HTML and top posting (#1490576)
|
10 years ago |
|
Aleksander Machniak
|
70942083ce
|
After failed login wait a second to slow down brute-force attacks (#1490549)
|
10 years ago |
|
Aleksander Machniak
|
280395a544
|
Fix bug where HTML messages with invalid/excessive css styles couldn't be displayed (#1490539)
Technically speaking we remove the whole CSS content when it has more than 5k lines.
|
10 years ago |
|
Aleksander Machniak
|
c5acbc6c94
|
Fix bug where message preview was unintentionally reset on check-recent action (#1490563)
|
10 years ago |
|
Aleksander Machniak
|
5e6f6ac539
|
Fix responses list update issue after response name change (#1490555)
|
10 years ago |
|
Aleksander Machniak
|
3d9798da1f
|
Make brute force attacks harder by re-generating security token on every failed login (#1490549)
Or more precissely use the same we did in git-master, i.e. do not base the token on
session ID, but use random bytes instead.
|
10 years ago |
|
Aleksander Machniak
|
357cd5103d
|
Fix issue where Content-Length of some attachments could be set to wrong value causing browser errors (#1490482)
|
10 years ago |
|
Aleksander Machniak
|
6731d2116c
|
Fix XSS issue in drag-n-drop file uploads (#1490530)
|
10 years ago |
|
Aleksander Machniak
|
73d98c4766
|
Fix missing HTTP_X_FORWARDED_FOR address in generated Received header
|
10 years ago |
|
Aleksander Machniak
|
9f98332240
|
Fix so In-Reply-To header is set also for MDN receipts (#1490523)
|
10 years ago |
|
Aleksander Machniak
|
bbef212b0e
|
Fallback to C locale
|
10 years ago |
|
Aleksander Machniak
|
7bfe676d53
|
Fix various issues with Turkish (and similar) locales (#1490519)
|
10 years ago |
|
Aleksander Machniak
|
ac3078fe93
|
Fix support for Mozilla-based browsers, e.g. Pale Moon (#1490517)
|
10 years ago |
|
Aleksander Machniak
|
52b75f2506
|
Fix so adding CC/BCC recipients from the sidebar unhides compose form fields in Classic skin (#1490472)
|
10 years ago |
|
Aleksander Machniak
|
8ef86f5253
|
Fix handling of plus character in mailto: links (#1490510)
|
10 years ago |
|
Aleksander Machniak
|
5f10f13472
|
Fix so css of one html part does not apply to other text parts on message display (#1490505)
|
11 years ago |
|
Thomas Bruederli
|
106d47992b
|
Bump version and update changelog
|
11 years ago |
|
Thomas Bruederli
|
27e02f0f3b
|
Fix closing of nested menus (#1490443)
|
11 years ago |