banananetwork
/
roundcubemail
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
11,228 Commits
14 Branches
151 Tags
76 MiB
Commit Graph

259 Commits (70c20740e747a643370d35137bb7a762e01387d0)

Author SHA1 Message Date
Aleksander Machniak ce52b04051 Update changelog, add some tests for rcube_utils::parse_host()
Aleksander Machniak 7c8ce07e8c Fix bug where bold/strong text was converted to upper-case on html-to-text conversion (6758)
Aleksander Machniak 55cca61134 Workaround more invalid HTML cases parsed incorrectly by Mastermind/HTML5 ()
Aleksander Machniak 57c67db029 Remove year(s) from copyright headers + some cleanup
Aleksander Machniak 92ed0154d5 Followup fix on handling HTML content w/o html/head/body tag ()
Aleksander Machniak 03d56926d8 Fix bug in HTML parser that could cause missing text fragments when there was no head/body tag ()
dsoares 00cc13a1b9 Fix bug where HTML messages with a xml:namespace tag were not rendered.
Aleksander Machniak 881b344fba Fix regression in vcard parser
Aleksander Machniak 7a49b48dc1 Fix handling of empty entries in vCard import ()
Aleksander Machniak 36485dfc34 Prevent from using deprecated timezone names from jsTimezoneDetect 
For better interoperability of plugins such as Calendar, for example
issue see: https://git.kolab.org/T2666.
Aleksander Machniak 0a0ac045fe Fix bug where valid content between HTML comments could have been skipped in some cases ()
Aleksander Machniak 0dee528adb Add test for
Aleksander Machniak 086e781b8f Fix bug where some HTML comments could have been malformed by HTML parser ()
Aleksander Machniak 3d0b2cd3ce Pass PEAR errors to rcube::raise_error(), small CS improvements
Aleksander Machniak 0716d499bc Fix bug where some escape sequences in html styles could bypass security checks
Aleksander Machniak 63d3ad11fb Use Masterminds/HTML5 parser for HTML5 support ()
Aleksander Machniak b2bebe531a Fix bug where usernames without domain part could be malformed or converted to lower-case on logon ()
Aleksander Machniak f36e23b778 Fix parsing date strings (e.g. from a Date: mail header) with comments ()
Aleksander Machniak 0f3ad342f7 Fix bug where some unix timestamps were not handled correctly by rcube_utils::anytodatetime() ()
Aleksander Machniak 1058924e21 Move some framework classes to sub-directories
Aleksander Machniak d07b032bcd Refactor cache code with separate engine-specific classes
Aleksander Machniak 9d2b303b51 Fix bug in remote content blocking on HTML image and style tags ()
Daniel Kesselberg a8d5547163 Update idn convertion methods () 
* Add more test cases
* Update phpdoc
Aleksander Machniak 63a7d2313f Improve SMTPUTF8 support and fix relaxed email validation issues
Daniel Kesselberg a3504cb3b8 Add unit test for IDN ()
Aleksander Machniak a0374f3c45 Fix mangled non-ASCII characters in links in HTML messages ()
Aleksander Machniak 5e08a6ac59 Handle remote stylesheets the same as remote images, ask the user to allow them () 
Fixes the issue where remote stylesheet could have been blocked
if the message contained no remote images and user have no way to
allow that content.
Aleksander Machniak 3196d656db Fix css conflicts in user interface and e-mail content () 
... by adding prefix to element/class identifiers
Also cleaned up some code and removed global variable use.
Aleksander Machniak 5d16751ed8 Fix (again) bug where image data URIs in css style were treated as evil/remote in mail preview ()
Filippo Tessarotto e5e37928d4 Add Travis CI
Thomas Bruederli 1cfc024036 Modify links in html messages during Washtml DOM traversal 
This is a more safe approach than using regex and mitigates
possible vulnerabilities using malformed html markup.
Thomas Bruederli 919338d4ba Escape textarea contents in Washtml
Aleksander Machniak 21e7d873ce Fix so links over images are not removed in plain text signatures converted from HTML ()
Aleksander Machniak 1fcf7bfab3 Fix bug where HTML messages with @media styles could moddify style of page body ()
Aleksander Machniak 8f22c3287d Fix bug where comment notation within style tag would cause the whole style to be ignored ()
Aleksander Machniak ce61c8210e Added test for rcube_db::parse_dsn()
dfukagaw28 89a4134064 Add support for DelSp=Yes messages ()
Thomas Bruederli 522565b400 Add tests for XSS vulnerabilities in style tags
Shin Kojima 0b385dc946 Skip iconv for problematic ISO-2022-JP strings () 
We sometimes get broken character encodings such as:
Subject: =?iso-2022-jp?B?GyRCLWo7M3l1OSk2SBsoQgo=?=
This actually is not a strict ISO-2022-JP string, but a CP50220 string
that is a variant of ISO-2022-JP with extended characters proposed by
Microsoft. Iconv can not handle these encodings well.
Aleksander Machniak e08f22ef28 Fix bug where external content in src attribute of input/video tags was not secured ()
Aleksander Machniak 7340360e79 Fix bug where image data URIs in css style were treated as evil/remote in mail preview ()
Aleksander Machniak bbab6a6db7 Identicon plugin 
https://kolabian.wordpress.com/2016/12/02/contact-identicons/
JohnDoh dd714b33a8 replace old trac links ()
Aleksander Machniak 0485275a75 Merge branch 'dev/drop-legacy-browsers'
Aleksander Machniak 94f8ce3334 Make html::parse_attrib_string() more robust 
Fixes PHP Error: Expression parse error on: ($app->config->get('preview_pane',rcube_utils::get_boolean('')) == true ? ' checked=checked' : ')
Aleksander Machniak 829442a4cd Removed legacy_browsr plugin
Aleksander Machniak dcabc1d814 Merge remote-tracking branch 'upstream/master' 
Conflicts:
	tests/Framework/Washtml.php
Aleksander Machniak 906cf101c3 Better time handling in rcube_utils::clean_datestr()
Aleksander Machniak ed35267b9b Managesieve: Fix parsing of vacation date-time with non-default date_format () 
Added new method rcube_utils::format_datestr() to convert date_format date
into ISO date format.
Aleksander Machniak d91bad5975 Fix handling of blockquote tags with mixed case on html2text conversion ()