Commit Graph

1374 Commits (4d3f055ce050cdfd807fef308fc6d17c666acd63)

Author SHA1 Message Date
Thomas Bruederli 699af1e520 Protect download urls against CSRF using unique request tokens (#1490642)
Send X-Frame-Options headers with every HTTP response

Conflicts:
	plugins/enigma/enigma.js
	plugins/enigma/lib/enigma_ui.php
	program/lib/Roundcube/rcube_message.php
10 years ago
Aleksander Machniak 3e4b7cd19d Extend rcube_washtml with SVG support 10 years ago
Aleksander Machniak 7bbefdb63b Fix XSS issue in SVG images handling (#1490625)
Conflicts:

	CHANGELOG
10 years ago
Aleksander Machniak c82d09a052 Fix handling of message/rfc822 attachments on replies and forwards (#1490607)
Conflicts:

	CHANGELOG
	program/lib/Roundcube/rcube_message.php
	program/steps/mail/compose.inc
10 years ago
Aleksander Machniak 6e71c958fc Fix also charset encoding of message/rfc822 part bodies (#1490606) 10 years ago
Aleksander Machniak 2382c6e822 Fix regression in displaying contents of message/rfc822 parts (#1490606)
Conflicts:

	CHANGELOG
10 years ago
Aleksander Machniak 280395a544 Fix bug where HTML messages with invalid/excessive css styles couldn't be displayed (#1490539)
Technically speaking we remove the whole CSS content when it has more than 5k lines.
10 years ago
Aleksander Machniak 357cd5103d Fix issue where Content-Length of some attachments could be set to wrong value causing browser errors (#1490482) 10 years ago
Aleksander Machniak 73d98c4766 Fix missing HTTP_X_FORWARDED_FOR address in generated Received header 10 years ago
Aleksander Machniak 9f98332240 Fix so In-Reply-To header is set also for MDN receipts (#1490523) 10 years ago
Aleksander Machniak 8ef86f5253 Fix handling of plus character in mailto: links (#1490510) 10 years ago
Aleksander Machniak 5f10f13472 Fix so css of one html part does not apply to other text parts on message display (#1490505) 11 years ago
Aleksander Machniak 1172330b2a Fix error when using back button after sending an email (#1490009) 11 years ago
Aleksander Machniak 71bfa5f207 Fix draft removal after a message is sent and storing sent message is disabled (#1490467) 11 years ago
Aleksander Machniak a9035b1561 Fix so *-request@ addresses in Sender: header are also ignored on reply-all (#1490452)
Conflicts:
	program/steps/mail/compose.inc
11 years ago
Aleksander Machniak 0aadd71183 Fix self-reply detection issues (#1490439) 11 years ago
Aleksander Machniak 8cab554252 Fix unintentional messages list page change on page switch in compose addressbook (#1490427) 11 years ago
Aleksander Machniak 84af0db103 Fix bug where some files could have "executable" extension when stored in temp folder (#1490377) 11 years ago
Aleksander Machniak 4d35a983cc Fix bug where preview_pane setting wasn't always saved into user preferences (#1490362) 11 years ago
Aleksander Machniak ef595a10e0 Add option to place signature at bottom of the quoted text even in top-posting mode [sig_below]
Conflicts:

	CHANGELOG
11 years ago
Aleksander Machniak 61c35b4a2b Fix lack of signature separator for plain text signatures in html mode (#1490352)
Conflicts:
	CHANGELOG
11 years ago
Aleksander Machniak 68f76fddbe Fix handling of %-encoded entities in mailto: URLs (#1490346)
Conflicts:

	CHANGELOG
11 years ago
Thomas Bruederli c14c21472e Fix redirct URL for attachments loaded in an iframe (#1490191) 11 years ago
Aleksander Machniak ef09b2751b Fix rows count when messages search fails (#1490266) 11 years ago
Aleksander Machniak 5bdd767a48 Fix so search filter, scope and fields are reset on folder change 11 years ago
Aleksander Machniak 26c9930103 get_part_content() -> get_part_body() 11 years ago
Aleksander Machniak 14f4633b0b Remove redundant encoding of message subject with mb_encode_mimeheader() (#1490295) 11 years ago
Aleksander Machniak 199446c16d Fix so localized folder name is displayed in multi-folder search result (#1490243) 11 years ago
Aleksander Machniak 2799f049bb Fix "Non-static method PEAR::isError() should not be called statically" errors (#1490281) 11 years ago
Aleksander Machniak f985cbedc6 Fix duplicate entries supression in autocomplete result (#1490290) 11 years ago
Aleksander Machniak b56a3b00f0 Don't sent the message again in saveonly mode 11 years ago
Aleksander Machniak 16c326380d Improved handling of storage errors after message is sent
After sending a message it is stored in Sent folder, this operation
may fail, e.g. because of "over quota" error. In such a case we'll
not close the compose window, but display the error and, if user clicks
Send/Save button, we'll display a dialog informing about the situation and
providing an option to try the save operation again.
11 years ago
Aleksander Machniak bbbd02bd6a Fix so "over quota" errors are displayed also in message compose page
This also fixes over quota responses on cyrus imap which uses "Over quota" string and no error identifier.
11 years ago
Aleksander Machniak c8468c2960 Really fix unwanted warning on BMP attachments (#1490269) 11 years ago
Aleksander Machniak afd5e4f8a9 Fix needless security warning on BMP attachments display (#1490282) 11 years ago
Aleksander Machniak cd51e611ff Fix saving/sending emoticon images when assets_dir is set (Kolab #4608) 11 years ago
Aleksander Machniak 9ed6d46df7 Fix refreshing of drafts list when sending a message which was saved in meantime (#1490238) 11 years ago
Aleksander Machniak 556d288754 Fix false warning when opening attached text/plain files (#1490241) 11 years ago
Aleksander Machniak 5d42a9353b Fix bug where drafts list wasn't refreshed after draft message was sent from another window (#1490238) 11 years ago
Aleksander Machniak 38dbd8022b Fix bug where Reply-To address was ignored on reply to messages sent by self (#1490233) 11 years ago
Thomas Bruederli ef29153a32 Improve display of pgp/mime and s/mime messges. Reverts commit f4154d91 11 years ago
Thomas Bruederli f4154d9108 Fall back to $part->body when no mime_id is set for the message part 11 years ago
Aleksander Machniak c6efcf5e6d Fix blocked.gif image usage with assets_dir set 11 years ago
Aleksander Machniak f6502176f8 Hide MDN and DSN options in compose if disabled by admin (#1490221) 11 years ago
Aleksander Machniak 10f133bae8 Fix bug where sent message was saved in Sent folder even if disabled by user (#1490208) 11 years ago
Aleksander Machniak 1881a8a152 Display "real" attachment size also on attachments list 11 years ago
Aleksander Machniak cc5e4452db Read page and page_size before check_recent hook is executed
- some plugins may change them to invalid values (in mail context)
11 years ago
Aleksander Machniak 8ccfc271d7 Fix skin inheritance for some icons (#149017) 11 years ago
Aleksander Machniak 681ba6fc3c Improve system security by using optional special URL with security token
Allows to define separate server/path for image/js/css files
Fix bugs where CSRF attacks were still possible on some requests
11 years ago
Aleksander Machniak fa424e54d2 Set compose mode in session when needed - skip one session update when composing new message 11 years ago