Thomas Bruederli
|
54a3712ada
|
Modify links in html messages during Washtml DOM traversal
This is a more safe approach than using regex and mitigates
possible vulnerabilities using malformed html markup.
|
7 years ago |
|
Thomas Bruederli
|
fb43d2e608
|
Escape textarea contents in Washtml
|
7 years ago |
|
Aleksander Machniak
|
f9151f6830
|
Managesieve: Fix AM/PM suffix in vacation time selectors
|
7 years ago |
|
Aleksander Machniak
|
822afb7afd
|
Update changelog
|
7 years ago |
|
Aleksander Machniak
|
507a1e9935
|
Don't ignore (global) userlogins/sendmail logs in per_user_logging mode
|
7 years ago |
|
Aleksander Machniak
|
183f68f387
|
Fix uninitialized string offset in rcube_utils::bin2ascii() and make sure rcube_utils::random_bytes() result has always requested length (#5788)
|
8 years ago |
|
Aleksander Machniak
|
3d498cd632
|
Fix bug where it wasn't possible to set timezone to auto-detected value (#5782)
|
8 years ago |
|
Aleksander Machniak
|
913ffcfbbe
|
Fix SQL syntax error on MariaDB 10.2 (#5774)
|
8 years ago |
|
Aleksander Machniak
|
793bf96747
|
Enigma: Fix compatibility with assets_dir
|
8 years ago |
|
Aleksander Machniak
|
58d7cdc3fc
|
Fix addressbook searching by gender (#5757)
|
8 years ago |
|
Aleksander Machniak
|
1b8d766447
|
Fix bug where it wasn't possible to scroll folders list in Edge (#5750)
|
8 years ago |
|
Aleksander Machniak
|
9bfacb4d3c
|
Fix bug where comment notation within style tag would cause the whole style to be ignored (#5747)
|
8 years ago |
|
Thomas Bruederli
|
e62a7d0dfa
|
Bump version to 1.2.5
|
8 years ago |
|
Aleksander Machniak
|
fc557cacfa
|
Add CVE ident
|
8 years ago |
|
Aleksander Machniak
|
6e054a37d1
|
Password: Fix security issue in virtualmin and sasl drivers
|
8 years ago |
|
Aleksander Machniak
|
22b34fc44b
|
Fix bug where base_dn setting was ignored inside group_filters (#5720)
|
8 years ago |
|
Thomas Bruederli
|
00874b7fbd
|
Add CVE identifier to recent XSS fix
|
8 years ago |
|
Aleksander Machniak
|
cc3b79bf66
|
Fix re-positioning of the fixed header of messages list in Chrome when using minimal mode toggle and About dialog (#5711)
|
8 years ago |
|
Aleksander Machniak
|
b213ee9aa0
|
Merge branch 'release-1.2' of github.com:roundcube/roundcubemail into release-1.2
|
8 years ago |
|
Aleksander Machniak
|
2f6ca6d672
|
Fix bug where namespace prefix could not be truncated on folders list if show_real_foldernames=true (#5695)
|
8 years ago |
|
Aleksander Machniak
|
0fffea28c1
|
Fix regression in LDAP fuzzy search where it always used prefix search instead (#5713)
|
8 years ago |
|
Aleksander Machniak
|
6a178b3a7f
|
Remove redundant spaces from generated contact names
|
8 years ago |
|
Aleksander Machniak
|
d5be34ad17
|
Update changelog
|
8 years ago |
|
Aleksander Machniak
|
fa62496107
|
Fix so settings/upload.inc could not be used by plugins (#5694)
|
8 years ago |
|
Thomas Bruederli
|
cbd35626f7
|
Better fix for XSS in style tags (fa2824fdc)
|
8 years ago |
|
Aleksander Machniak
|
fa2824fdcd
|
Fix XSS issue in handling of a style tag inside of an svg element
|
8 years ago |
|
Aleksander Machniak
|
33586e4c87
|
Fix possible defect in handling \r\n in scripts (#5685)
|
8 years ago |
|
Thomas Bruederli
|
85a750a068
|
Bump version to 1.2.4
|
8 years ago |
|
Aleksander Machniak
|
04ed3846d3
|
Managesieve: Fix parser issue with empty lines between comments (#5657)
|
8 years ago |
|
Aleksander Machniak
|
801f296872
|
Fix bug where it was too easy accidentally move a folder when using the subscription checkbox (#5655)
|
8 years ago |
|
Aleksander Machniak
|
e3484f9225
|
Add rewrite rule to disable access to /vendor/bin folder in .htaccess (#5630)
|
8 years ago |
|
Aleksander Machniak
|
b1a5b76445
|
Fix update of group name in the contacts list header on group rename (#5648)
|
8 years ago |
|
Aleksander Machniak
|
528084ff37
|
Add note about PinEntry issues with SELinux (#5620)
|
8 years ago |
|
Aleksander Machniak
|
49d24e973d
|
Enigma: Fix handling of messages with nested PGP encrypted parts (#5634)
|
8 years ago |
|
Aleksander Machniak
|
4bc337c460
|
Enigma: Fix missing require statement for Crypt_GPG_KeyGenerator (#5641)
|
8 years ago |
|
Aleksander Machniak
|
4475037023
|
Rename $sql_arr variable to $record as it's not about sql only
|
8 years ago |
|
Aleksander Machniak
|
f51a101891
|
Fix regression where groups with email address were resolved to its members' addresses
|
8 years ago |
|
Aleksander Machniak
|
3608e0c666
|
Fix visual glitch when using disabled_actions for items in Settings menu
|
8 years ago |
|
Aleksander Machniak
|
a336026142
|
Fix bug where signature couldn't be added above the quote in Firefox 51 (#5628)
|
8 years ago |
|
Aleksander Machniak
|
9e75845193
|
Fix bug where some classic skin images were not displayed in IE/Edge (#5614)
Converted from png to gif according to file extension.
|
8 years ago |
|
Aleksander Machniak
|
04025fb297
|
Fix bug where mail content frame couldn't be reset in some corner cases (#5608)
Conflicts:
CHANGELOG
|
8 years ago |
|
Aleksander Machniak
|
82b826faef
|
Fix PHP error on update of a contact with multiple email addresses when using PHP 7.1 (#5587)
|
8 years ago |
|
Aleksander Machniak
|
1568bd9e04
|
Fix bug where external content in src attribute of input/video tags was not secured (#5583)
|
8 years ago |
|
Aleksander Machniak
|
f90f22ffb8
|
Fix bug where image data URIs in css style were treated as evil/remote in mail preview (#5580)
|
8 years ago |
|
Aleksander Machniak
|
58e63a6e70
|
Fix so group/addressbook selection is retained on page refresh
|
8 years ago |
|
Aleksander Machniak
|
c9b394bcad
|
Fix some advanced search issues with multiple addressbooks (#5572)
|
8 years ago |
|
Aleksander Machniak
|
088b0c6e85
|
Fix rsync error handling in installto.sh script (#5562)
|
8 years ago |
|
Aleksander Machniak
|
e0d7367f1f
|
Fix adding images to new identity signatures
It already worked only on edits, because the image data for new identity
was stored in the wrong session item.
|
8 years ago |
|
Aleksander Machniak
|
94feab652c
|
Disable Print button for pdf attachments in Firefox (#5125)
Mozilla's PDF.js viewer does not allow printing from host page.
We try to detect such situation and disable the button to minimize
user confusion.
|
8 years ago |
|
Aleksander Machniak
|
d4f5804e40
|
Enigma: Add some notes to Known issues section (#5561)
|
8 years ago |