Commit Graph

66 Commits (876d31d5940f3c4c2f683891130db0201f4a3913)

Author SHA1 Message Date
Thomas Bruederli c14b337450 Fix XSS vulnerability using Flash files (#1488828) by comparing mimetypes and filename extensions 12 years ago
Thomas Bruederli 03149131f7 New feature: display attached images as thumbnails below message body 12 years ago
Aleksander Machniak 4fd5b62194 Add Content-Length for attachments where possible (#1485478) 13 years ago
Aleksander Machniak 19cc5b91c9 Display Tiff as Jpeg in browsers without Tiff support (#1488452) 13 years ago
Aleksander Machniak 041c93ce0b Removed $Id$ 13 years ago
Aleksander Machniak 4bfe4ec22a Remove last instance of storage_connect() with possible performance
improvement when a message part body is in cache
13 years ago
alecpl b4f95a9387 - Fix attachment name regression (#1488446) 13 years ago
alecpl 0c259682f6 - Merge devel-framework branch, resolved conflicts 13 years ago
thomascube d1e3430bfa Pass message UID to 'message_part_get' hook 13 years ago
thomascube 7fe3811c65 Changed license to GNU GPLv3+ with exceptions for skins and plugins 13 years ago
thomascube c321a955a7 Merged devel-framework branch (r5746:5779) back into trunk 13 years ago
thomascube c29b82d90a Fix crashes with eAccelerator (#1488256) 13 years ago
alecpl b6da0b76af - Remove deprecated global $IMAP variable usage (#1488148) 13 years ago
thomascube 3f81174e10 Show attachment filename in page title 13 years ago
thomascube 57486f6e58 Content filter for embedded attachments to protect from XSS on IE<=8 (#1487895) 13 years ago
alecpl e0960f6365 - Prevent from memory_limit exceeding when trying to parse big messages bodies (#1487424):
don't try to parse it, display notice with a link to download it directly
13 years ago
alecpl 5510a5278b - Fix possible infinite redirect on attachment preview (#1488199) 13 years ago
alecpl 9e54e6fd45 - Make the whole PHP output non-cacheable (#1487797) 13 years ago
thomascube d78771ad3c Add plugin hook message_part_get for message part downloads 13 years ago
thomascube f5e7b35307 Bumbed version; Roundcube development is not Switzerland only 14 years ago
alecpl e0bd7054b7 - Add workaround for some Outlook's wrong content-types, per discussion in #1487051 14 years ago
alecpl e019f2d0f2 - s/RoundCube/Roundcube/ 14 years ago
alecpl 799359457f - Don't create a new rcube_browser object, use browser property from output object 14 years ago
alecpl b8d96f6e60 - Use random sleep interval up to 3 sec. in 'get' action when IMAP conn. fails 14 years ago
alecpl 431234538a - Fix when IMAP connection fails in 'get' action session shouldn't be destroyed (#1486995)
- Performance: improve mail/get action and skip one IMAP connection
14 years ago
alecpl 9bb1fc7b0b - Make sure attachment name doesn't contain \r\n (#1486832) 15 years ago
alecpl b25dfd0913 - removed PHP closing tag 15 years ago
alecpl d311d809d6 - Fix forwarding of messages with winmail attachments
- Remove some redundant code for winmail handling in get.inc, move tnef_decode() to rcube_message
- Fix handling of uuencoded attachments in message body (#1485839)
- Extend rc_mime_content_type() to work with string buffer
15 years ago
alecpl 1097a3cd8a - don't parse text/html attachment body on download 15 years ago
alecpl ebc619c149 - Fix CVE-2010-0464: Disable DNS prefetching (#1486449) 15 years ago
alecpl 6d479a622b - remove set_magic_quotes_runtime() call, use set_time_limit() with @ (#1486149) 15 years ago
thomascube 35f40fbda7 Set timeout for attachment loading back to 0 15 years ago
alecpl 3e8b11194d - Fix charset bug during loading attachment file (#1486064) 15 years ago
alecpl 3b7e00fbda - don't call FETCH for empty (size=0) message parts 16 years ago
alecpl d51c93b43e - get rid of some hardcoded action names and move decission about output compression to the user 16 years ago
thomascube 21b160f38c Added TNEF support to decode MS Outlook (winmail.dat) attachments 16 years ago
till cbbef379a5 * bumping up copyright (happy new year ;-)) 16 years ago
alecpl b7a754c44e - remove Mail/mimeDecode require()s 16 years ago
alecpl e943e1a961 #1485638: use rawurlencode for all IE versions 16 years ago
thomascube 07717db753 Only abbreviate attachment file names in MSIE < 7 16 years ago
thomascube f1cc7fc09c Only abbreviate file name for IE browsers (#1485063) 16 years ago
thomascube c21d6d713e Don't use addslashes() which could produce unexpected results when magic_quotes_sybase is on 16 years ago
thomascube 0dbac32181 Enable export of contacts as vCard + DRY 16 years ago
thomascube 0ced2b9ac0 Revert r1670 but improve part download step by fixing headers and adding set_time_limit(0) 17 years ago
alecpl 2c6fa93371 - Add Content-Length header while attachments downloading (#1484256) 17 years ago
thomascube 21e724153e Improve HTML sanitization with washtml 17 years ago
thomascube 8fa58e72a3 New class rcube_message representing a mail message; changed global $MESSAGE from array to object 17 years ago
thomascube 47124c2279 Changed codebase to PHP5 with autoloader + added some new classes from the devel-vnext branch 17 years ago
thomascube 6f2f2d0ffd Truncate attachment filenames to 55 characters (#1484757) and fix misspelled function name 17 years ago
thomascube c579961899 Fixed some potential security risks + updatedd changelog 17 years ago