Aleksander Machniak
|
186f21c4c1
|
Avoid Referer leaking by using Referrer-Policy:same-origin header (#6385)
Added 'common_headers' hook
|
6 years ago |
|
Aleksander Machniak
|
a451ad6599
|
Fix handling encoding of HTML tags in "inline" JSON output (#6207)
|
6 years ago |
|
Aleksander Machniak
|
1556eb01c7
|
Use JSON_UNESCAPED_UNICODE only on PHP >= 7.1.0 (#6187)
|
7 years ago |
|
Aleksander Machniak
|
4793ec753a
|
Remove double-quotes in filename* parameter of the Content-Disposition of downloads (#5857)
|
7 years ago |
|
Aleksander Machniak
|
1235dcf321
|
Encode JSON with JSON_UNESCAPED_SLASHES and JSON_UNESCAPED_UNICODE options
|
7 years ago |
|
Aleksander Machniak
|
bcc6405552
|
Fix various issues when downloading files with names containing non-ascii chars, use RFC 2231 (#5772)
|
7 years ago |
|
Aleksander Machniak
|
f43f5bf93f
|
Use JSON_PRETTY_PRINT in devel_mode
This effectively makes PHP 5.4 a real requirement
|
8 years ago |
|
Aleksander Machniak
|
58c036116b
|
Support type=password in rcube_output::get_edit_field()
|
8 years ago |
|
Thomas Bruederli
|
4a408843b0
|
Protect download urls against CSRF using unique request tokens (#1490642)
Send X-Frame-Options headers with every HTTP response
|
9 years ago |
|
Aleksander Machniak
|
a958748947
|
CS fixes
|
9 years ago |
|
Aleksander Machniak
|
ba5c53e5c3
|
Send X-UA-Compatible as HTTP header instead of meta tag
|
10 years ago |
|
Thomas Bruederli
|
b0ce5c62af
|
Make skin meta/hierarchy information accessible for plugins (#1488831)
|
10 years ago |
|
Zou Guangxian
|
49311c55dd
|
* fixed: modsecurity warning: AppDefect: Cache-Control Response Header Missing 'no-store' flag. http://websecuritytool.codeplex.com/wikipage?title=Checks#http-cache-control-header-no-store
|
11 years ago |
|
Aleksander Machniak
|
d2534c63f2
|
Cleanup, remove file paths from doc
|
12 years ago |
|
Aleksander Machniak
|
63f130782c
|
Small fixes to last commits
|
12 years ago |
|
Thomas Bruederli
|
60226a75d8
|
Separate the very application-specific output classes from the Roundcube framework; add autoloader for rmail* classes
|
12 years ago |
|
Aleksander Machniak
|
a92beb6bdb
|
Define RCUBE_CHARSET in place of RCMAIL_CHARSET for naming consistency
|
12 years ago |
|
Aleksander Machniak
|
ba6f21caeb
|
Framework files moved to lib/Roundcube
|
12 years ago |