Thomas Bruederli
c14b337450
Fix XSS vulnerability using Flash files ( #1488828 ) by comparing mimetypes and filename extensions
12 years ago
Thomas Bruederli
03149131f7
New feature: display attached images as thumbnails below message body
12 years ago
Aleksander Machniak
4fd5b62194
Add Content-Length for attachments where possible ( #1485478 )
13 years ago
Aleksander Machniak
19cc5b91c9
Display Tiff as Jpeg in browsers without Tiff support ( #1488452 )
13 years ago
Aleksander Machniak
041c93ce0b
Removed $Id$
13 years ago
Aleksander Machniak
4bfe4ec22a
Remove last instance of storage_connect() with possible performance
...
improvement when a message part body is in cache
13 years ago
alecpl
b4f95a9387
- Fix attachment name regression ( #1488446 )
13 years ago
alecpl
0c259682f6
- Merge devel-framework branch, resolved conflicts
13 years ago
thomascube
d1e3430bfa
Pass message UID to 'message_part_get' hook
13 years ago
thomascube
7fe3811c65
Changed license to GNU GPLv3+ with exceptions for skins and plugins
13 years ago
thomascube
c321a955a7
Merged devel-framework branch (r5746:5779) back into trunk
13 years ago
thomascube
c29b82d90a
Fix crashes with eAccelerator ( #1488256 )
13 years ago
alecpl
b6da0b76af
- Remove deprecated global $IMAP variable usage ( #1488148 )
13 years ago
thomascube
3f81174e10
Show attachment filename in page title
13 years ago
thomascube
57486f6e58
Content filter for embedded attachments to protect from XSS on IE<=8 ( #1487895 )
13 years ago
alecpl
e0960f6365
- Prevent from memory_limit exceeding when trying to parse big messages bodies ( #1487424 ):
...
don't try to parse it, display notice with a link to download it directly
13 years ago
alecpl
5510a5278b
- Fix possible infinite redirect on attachment preview ( #1488199 )
13 years ago
alecpl
9e54e6fd45
- Make the whole PHP output non-cacheable ( #1487797 )
13 years ago
thomascube
d78771ad3c
Add plugin hook message_part_get for message part downloads
13 years ago
thomascube
f5e7b35307
Bumbed version; Roundcube development is not Switzerland only
14 years ago
alecpl
e0bd7054b7
- Add workaround for some Outlook's wrong content-types, per discussion in #1487051
14 years ago
alecpl
e019f2d0f2
- s/RoundCube/Roundcube/
14 years ago
alecpl
799359457f
- Don't create a new rcube_browser object, use browser property from output object
14 years ago
alecpl
b8d96f6e60
- Use random sleep interval up to 3 sec. in 'get' action when IMAP conn. fails
14 years ago
alecpl
431234538a
- Fix when IMAP connection fails in 'get' action session shouldn't be destroyed ( #1486995 )
...
- Performance: improve mail/get action and skip one IMAP connection
14 years ago
alecpl
9bb1fc7b0b
- Make sure attachment name doesn't contain \r\n ( #1486832 )
15 years ago
alecpl
b25dfd0913
- removed PHP closing tag
15 years ago
alecpl
d311d809d6
- Fix forwarding of messages with winmail attachments
...
- Remove some redundant code for winmail handling in get.inc, move tnef_decode() to rcube_message
- Fix handling of uuencoded attachments in message body (#1485839 )
- Extend rc_mime_content_type() to work with string buffer
15 years ago
alecpl
1097a3cd8a
- don't parse text/html attachment body on download
15 years ago
alecpl
ebc619c149
- Fix CVE-2010-0464: Disable DNS prefetching ( #1486449 )
15 years ago
alecpl
6d479a622b
- remove set_magic_quotes_runtime() call, use set_time_limit() with @ ( #1486149 )
15 years ago
thomascube
35f40fbda7
Set timeout for attachment loading back to 0
15 years ago
alecpl
3e8b11194d
- Fix charset bug during loading attachment file ( #1486064 )
15 years ago
alecpl
3b7e00fbda
- don't call FETCH for empty (size=0) message parts
16 years ago
alecpl
d51c93b43e
- get rid of some hardcoded action names and move decission about output compression to the user
16 years ago
thomascube
21b160f38c
Added TNEF support to decode MS Outlook (winmail.dat) attachments
16 years ago
till
cbbef379a5
* bumping up copyright (happy new year ;-))
16 years ago
alecpl
b7a754c44e
- remove Mail/mimeDecode require()s
16 years ago
alecpl
e943e1a961
#1485638 : use rawurlencode for all IE versions
16 years ago
thomascube
07717db753
Only abbreviate attachment file names in MSIE < 7
16 years ago
thomascube
f1cc7fc09c
Only abbreviate file name for IE browsers ( #1485063 )
16 years ago
thomascube
c21d6d713e
Don't use addslashes() which could produce unexpected results when magic_quotes_sybase is on
16 years ago
thomascube
0dbac32181
Enable export of contacts as vCard + DRY
16 years ago
thomascube
0ced2b9ac0
Revert r1670 but improve part download step by fixing headers and adding set_time_limit(0)
17 years ago
alecpl
2c6fa93371
- Add Content-Length header while attachments downloading ( #1484256 )
17 years ago
thomascube
21e724153e
Improve HTML sanitization with washtml
17 years ago
thomascube
8fa58e72a3
New class rcube_message representing a mail message; changed global $MESSAGE from array to object
17 years ago
thomascube
47124c2279
Changed codebase to PHP5 with autoloader + added some new classes from the devel-vnext branch
17 years ago
thomascube
6f2f2d0ffd
Truncate attachment filenames to 55 characters ( #1484757 ) and fix misspelled function name
17 years ago
thomascube
c579961899
Fixed some potential security risks + updatedd changelog
17 years ago