Thomas Bruederli
699af1e520
Protect download urls against CSRF using unique request tokens ( #1490642 )
...
Send X-Frame-Options headers with every HTTP response
Conflicts:
plugins/enigma/enigma.js
plugins/enigma/lib/enigma_ui.php
program/lib/Roundcube/rcube_message.php
10 years ago
Aleksander Machniak
3e4b7cd19d
Extend rcube_washtml with SVG support
10 years ago
Aleksander Machniak
7bbefdb63b
Fix XSS issue in SVG images handling ( #1490625 )
...
Conflicts:
CHANGELOG
10 years ago
Aleksander Machniak
c82d09a052
Fix handling of message/rfc822 attachments on replies and forwards ( #1490607 )
...
Conflicts:
CHANGELOG
program/lib/Roundcube/rcube_message.php
program/steps/mail/compose.inc
10 years ago
Aleksander Machniak
6e71c958fc
Fix also charset encoding of message/rfc822 part bodies ( #1490606 )
10 years ago
Aleksander Machniak
2382c6e822
Fix regression in displaying contents of message/rfc822 parts ( #1490606 )
...
Conflicts:
CHANGELOG
10 years ago
Aleksander Machniak
280395a544
Fix bug where HTML messages with invalid/excessive css styles couldn't be displayed ( #1490539 )
...
Technically speaking we remove the whole CSS content when it has more than 5k lines.
10 years ago
Aleksander Machniak
357cd5103d
Fix issue where Content-Length of some attachments could be set to wrong value causing browser errors ( #1490482 )
10 years ago
Aleksander Machniak
73d98c4766
Fix missing HTTP_X_FORWARDED_FOR address in generated Received header
10 years ago
Aleksander Machniak
9f98332240
Fix so In-Reply-To header is set also for MDN receipts ( #1490523 )
10 years ago
Aleksander Machniak
8ef86f5253
Fix handling of plus character in mailto: links ( #1490510 )
10 years ago
Aleksander Machniak
5f10f13472
Fix so css of one html part does not apply to other text parts on message display ( #1490505 )
11 years ago
Aleksander Machniak
1172330b2a
Fix error when using back button after sending an email ( #1490009 )
11 years ago
Aleksander Machniak
71bfa5f207
Fix draft removal after a message is sent and storing sent message is disabled ( #1490467 )
11 years ago
Aleksander Machniak
a9035b1561
Fix so *-request@ addresses in Sender: header are also ignored on reply-all ( #1490452 )
...
Conflicts:
program/steps/mail/compose.inc
11 years ago
Aleksander Machniak
0aadd71183
Fix self-reply detection issues ( #1490439 )
11 years ago
Aleksander Machniak
8cab554252
Fix unintentional messages list page change on page switch in compose addressbook ( #1490427 )
11 years ago
Aleksander Machniak
84af0db103
Fix bug where some files could have "executable" extension when stored in temp folder ( #1490377 )
11 years ago
Aleksander Machniak
4d35a983cc
Fix bug where preview_pane setting wasn't always saved into user preferences ( #1490362 )
11 years ago
Aleksander Machniak
ef595a10e0
Add option to place signature at bottom of the quoted text even in top-posting mode [sig_below]
...
Conflicts:
CHANGELOG
11 years ago
Aleksander Machniak
61c35b4a2b
Fix lack of signature separator for plain text signatures in html mode ( #1490352 )
...
Conflicts:
CHANGELOG
11 years ago
Aleksander Machniak
68f76fddbe
Fix handling of %-encoded entities in mailto: URLs ( #1490346 )
...
Conflicts:
CHANGELOG
11 years ago
Thomas Bruederli
c14c21472e
Fix redirct URL for attachments loaded in an iframe ( #1490191 )
11 years ago
Aleksander Machniak
ef09b2751b
Fix rows count when messages search fails ( #1490266 )
11 years ago
Aleksander Machniak
5bdd767a48
Fix so search filter, scope and fields are reset on folder change
11 years ago
Aleksander Machniak
26c9930103
get_part_content() -> get_part_body()
11 years ago
Aleksander Machniak
14f4633b0b
Remove redundant encoding of message subject with mb_encode_mimeheader() ( #1490295 )
11 years ago
Aleksander Machniak
199446c16d
Fix so localized folder name is displayed in multi-folder search result ( #1490243 )
11 years ago
Aleksander Machniak
2799f049bb
Fix "Non-static method PEAR::isError() should not be called statically" errors ( #1490281 )
11 years ago
Aleksander Machniak
f985cbedc6
Fix duplicate entries supression in autocomplete result ( #1490290 )
11 years ago
Aleksander Machniak
b56a3b00f0
Don't sent the message again in saveonly mode
11 years ago
Aleksander Machniak
16c326380d
Improved handling of storage errors after message is sent
...
After sending a message it is stored in Sent folder, this operation
may fail, e.g. because of "over quota" error. In such a case we'll
not close the compose window, but display the error and, if user clicks
Send/Save button, we'll display a dialog informing about the situation and
providing an option to try the save operation again.
11 years ago
Aleksander Machniak
bbbd02bd6a
Fix so "over quota" errors are displayed also in message compose page
...
This also fixes over quota responses on cyrus imap which uses "Over quota" string and no error identifier.
11 years ago
Aleksander Machniak
c8468c2960
Really fix unwanted warning on BMP attachments ( #1490269 )
11 years ago
Aleksander Machniak
afd5e4f8a9
Fix needless security warning on BMP attachments display ( #1490282 )
11 years ago
Aleksander Machniak
cd51e611ff
Fix saving/sending emoticon images when assets_dir is set (Kolab #4608 )
11 years ago
Aleksander Machniak
9ed6d46df7
Fix refreshing of drafts list when sending a message which was saved in meantime ( #1490238 )
11 years ago
Aleksander Machniak
556d288754
Fix false warning when opening attached text/plain files ( #1490241 )
11 years ago
Aleksander Machniak
5d42a9353b
Fix bug where drafts list wasn't refreshed after draft message was sent from another window ( #1490238 )
11 years ago
Aleksander Machniak
38dbd8022b
Fix bug where Reply-To address was ignored on reply to messages sent by self ( #1490233 )
11 years ago
Thomas Bruederli
ef29153a32
Improve display of pgp/mime and s/mime messges. Reverts commit f4154d91
11 years ago
Thomas Bruederli
f4154d9108
Fall back to $part->body when no mime_id is set for the message part
11 years ago
Aleksander Machniak
c6efcf5e6d
Fix blocked.gif image usage with assets_dir set
11 years ago
Aleksander Machniak
f6502176f8
Hide MDN and DSN options in compose if disabled by admin ( #1490221 )
11 years ago
Aleksander Machniak
10f133bae8
Fix bug where sent message was saved in Sent folder even if disabled by user ( #1490208 )
11 years ago
Aleksander Machniak
1881a8a152
Display "real" attachment size also on attachments list
11 years ago
Aleksander Machniak
cc5e4452db
Read page and page_size before check_recent hook is executed
...
- some plugins may change them to invalid values (in mail context)
11 years ago
Aleksander Machniak
8ccfc271d7
Fix skin inheritance for some icons ( #149017 )
11 years ago
Aleksander Machniak
681ba6fc3c
Improve system security by using optional special URL with security token
...
Allows to define separate server/path for image/js/css files
Fix bugs where CSRF attacks were still possible on some requests
11 years ago
Aleksander Machniak
fa424e54d2
Set compose mode in session when needed - skip one session update when composing new message
11 years ago