Commit Graph

6702 Commits (968e20c5e5624a1df5dea2fcd792b1f46add3d1a)

Author SHA1 Message Date
Aleksander Machniak 2a32f51c91 Fix file disclosure vulnerability caused by insuficient input validation in relation with attachment plugins (#6026) 7 years ago
Aleksander Machniak 0f4f85e097 Skip redundant INSERT query on successful logon when using PHP7
Since PHP 7.0 session_regenerate_id() will cause the old session data update.
This is redundant INSERT query and also produces a record for the session
we don't need anymore.
7 years ago
Aleksander Machniak a61f2fdd3c Fix decoding of mailto: links with + character in HTML messages (#6020) 7 years ago
Thomas Bruederli 342b049841 Update localization files from Transifex 7 years ago
Aleksander Machniak 25a7df7f4b Use action=add-folder when creating a new folder 7 years ago
JohnDoh 515d496808 Replace display_version with display_product_info (#5904) 7 years ago
JohnDoh a8f0d35ebc Extend disabled_actions config so it accepts also button names (#5903) 7 years ago
Aleksander Machniak 5e671885e4 Prevent from ghost messages on list after fast delete of multiple messages one-by-one (#5941) 7 years ago
Aleksander Machniak 459cc7ab6d Fix bug where removing the last subfolder did not hide toggle button on its parent record (#6007) 7 years ago
Aleksander Machniak ce0592e1fc Fix truncated folder name on messages list in multi-folder mode, for folders with non-ascii characters (#6004) 7 years ago
Brendan Braybrook 4574870adc fix: unknown content-disposition type should be treated as attachment (#6002) 7 years ago
Aleksander Machniak da15d55665 Fix regression in qsearch() that skipped execution when called with no args
Some plugins would like to do search without value,
so we keep value != '' check to allow that use-case.
7 years ago
Aleksander Machniak 5e08a6ac59 Handle remote stylesheets the same as remote images, ask the user to allow them (#5994)
Fixes the issue where remote stylesheet could have been blocked
if the message contained no remote images and user have no way to
allow that content.
7 years ago
Aleksander Machniak 72aedd368b Fix Edge encoding bug when pasting text into the HTML editor, update to TinyMCE 4.5.8 (#5885) 7 years ago
Aleksander Machniak 3196d656db Fix css conflicts in user interface and e-mail content (#5891)
... by adding prefix to element/class identifiers
Also cleaned up some code and removed global variable use.
7 years ago
Aleksander Machniak 403d8453c8 Fix issue caused by non-default session.cookie_lifetime setting (#5961) 7 years ago
Aleksander Machniak f8fc01b800 Fix so untagged COPYUID responses are also supported according to RFC6851 (#5982) 7 years ago
Aleksander Machniak 22b30de5d9 Fix bug where assets_path wasn't added to some watermark frames 7 years ago
Aleksander Machniak 5d3add78aa Add Message-ID to the sendmail log (#5871) 7 years ago
Aleksander Machniak 117c150b2f Fix bug where mail search could return empty result on servers without SORT capability (#5973) 7 years ago
Aleksander Machniak 5d16751ed8 Fix (again) bug where image data URIs in css style were treated as evil/remote in mail preview (#5580) 7 years ago
Thomas Bruederli 3723f3f178 Fix rcube_utils::random_bytes() to not throw exception for length=0 7 years ago
Thomas B b0697e5f9a Merge pull request #5960 from duk3luk3/auth-log-server
Add host to IMAP login error
7 years ago
Aleksander Machniak 79ea526d65 Fix missing cursor in HTML editor on mail reply (#5969) 7 years ago
Lukas Erlacher 130f0cde3e Add host to IMAP login error
This simplifies debugging authentication failures in multi-host setups.
7 years ago
Aleksander Machniak 0ffd5463d8 Fix wording of "Mark previewed messages as read" to "Mark messages as read" (#5952)
Since we use the option not only for the preview frame the "previewed" word was confusing.
7 years ago
Aleksander Machniak 72fe97ddfc Fix bug where HTML messages could have been rendered empty on some systems (#5957)
Consistently use $nodeName instead of $tagName property.
7 years ago
Aleksander Machniak ee6b5e9e58 Fix PHP 7.2 error: count(): Parameter must be an array or an object that implements Countable 7 years ago
Aleksander Machniak fa3eb6813f Ignore rewind() warnings (#5950) 7 years ago
Aleksander Machniak afa03008c7 Code simplification 7 years ago
Aleksander Machniak 51c76c9bac Add missing variable declaration 7 years ago
Aleksander Machniak 5200d82381 Fix so files size/count limit is verified (client-side) also on drag-n-drop uploads (#5940) 7 years ago
Aleksander Machniak 7fc626d527 Changed defaults for smtp_user (%u), smtp_pass (%p) and smtp_port (587) 7 years ago
Aleksander Machniak cdcbad1879 Handle inline images also inside multipart/mixed messages (#5905) 7 years ago
Aleksander Machniak b1a3d46f89 Fix bug where pink image was used instead of a thumbnail when image resize fails (#5933)
Note GD and Imagick in INSTALL file and optional installer checks.
7 years ago
Aleksander Machniak 9672642479 Cleanup compose input checks (small improvement to the last commit) 7 years ago
Aleksander Machniak b77cce8d3e Fix sending message with "Too many public recipients" dialog buttons (#5924) 7 years ago
Aleksander Machniak 2d608a799c Fix decoding message/rtf822 part body/size
When e.g. an encrypted message has one of it's sub-parts a part that is message/rfc822
part we need it's body and size, because it will be listed on the attachments list
and also can be downloaded.
7 years ago
Aleksander Machniak 902eaa1f78 Remove height definition for "mark all as read" dialog 7 years ago
Aleksander Machniak 52158aa3c7 Fix height of dialogs that do not have a predefined height
This fixes e.g. "no subject" dialog or enigma passphrase dialog.
7 years ago
Aleksander Machniak e7cd4bacdd Bring back rcmail_html_container_id global 7 years ago
Aleksander Machniak 1235dcf321 Encode JSON with JSON_UNESCAPED_SLASHES and JSON_UNESCAPED_UNICODE options 7 years ago
Aleksander Machniak cf9019e462 Fix savetarget frame use (#5897) 7 years ago
Thomas Bruederli 04d9e8addc Remove pointless code + improve comment 7 years ago
Thomas Bruederli 1cfc024036 Modify links in html messages during Washtml DOM traversal
This is a more safe approach than using regex and mitigates
possible vulnerabilities using malformed html markup.
7 years ago
Thomas Bruederli 919338d4ba Escape textarea contents in Washtml 7 years ago
Thomas Bruederli 8d882639d9 Bring back double-click behavior on the message list when preview pane is on (#5823)
This reverts commit 28741ed03 as requested in #5199 and implements an
approach inspired by @bostjan in that ticket.
7 years ago
Aleksander Machniak 4a71847c98 Fix bug where last character of a filename extracted from TNEF could be truncated (#5799) 7 years ago
Aleksander Machniak 5d398d4d00 Add version number to the client environment 7 years ago
JohnDoh afaaa7764b Use list_widget.get_selection() rather than list_widget.selection (#5879) 7 years ago