9898599d3e
Bump version to 1.4.5
4 years ago
ccaccae665
Security: Fix cross-site scripting (XSS) via malicious XML attachment
4 years ago
b37433b199
Security: Better fix for CVE-2020-12641
4 years ago
4beec65d40
Security: Fix XSS issue in template object 'username' ( #7406 )
4 years ago
20ae604b9f
Security: Fix couple of XSS issues in Installer ( #7406 )
4 years ago
5e4195a042
Fix bug where PDF attachments marked as inline could have not been attached on mail forward ( #7382 )
4 years ago
31df958caf
Elastic: Fix aspect ratio of a contact photo in mail preview ( #7339 )
4 years ago
bebc9ec1be
Fix error when user-configured skin does not exist anymore ( #7271 )
...
We fallback to the system skin not the default one.
4 years ago
c25616b3b5
Fix PHP warning: count(): Parameter must be an array or an object... in ID command handler ( #7392 )
4 years ago
eba6fb20cf
Fix typo
4 years ago
99b20bd82a
Update changelog
...
[ci skip]
4 years ago
973217d960
Show Encrypt button w/Mailvelope, even if disabled
...
Before the Elastic skin would keep it hidden until enabled, closes #7353
4 years ago
9362bb9459
Fix changelog
...
[ci skip]
4 years ago
a5c6bfb678
Let Mailvelope use sender's address to find pubkeys to check signatures
4 years ago
79e6042276
Add missing \'s to regexes in rcube_check_email()
4 years ago
90afff1929
Update changelog
...
[ci skip]
4 years ago
9d0d072f36
Fix issue with Modoboa driver for password plugin ( #7372 )
...
Was having trouble with updating a password with the Modoboa API (1.9.1). API responded with an error message but 200 HTTP status code, so roundcube displayed a success message even though the password wasn't being updated. Added a line to include a required field in the update request.
4 years ago
656c706270
Fix default keyservers (use keys.openpgp.org), add note about CORS ( #7373 , #7367 )
4 years ago
26d5fb1b55
Fix missing flag indication on collapsed thread in Larry and Elastic ( #7366 )
4 years ago
dff0ee3e2a
Update changelog
...
[ci skip]
4 years ago
f494cd22ce
Markasjunk: Fix regression in jsevent driver #7361 ( #7365 )
4 years ago
2a250d7bc3
Fix so the database setup description is compatible with MySQL 8 ( #7340 )
...
[ci skip]
4 years ago
62a0936ecc
Clarify des_key length requirement ( #7350 )
...
[ci skip]
4 years ago
d15d929167
Fix bug in extracting required plugins from composer.json that led to spurious error in log ( #7364 )
4 years ago
aadb13e25f
Bump version to 1.4.4
4 years ago
9bbda422ff
Fix CSRF bypass that could be used to log out an authenticated user ( #7302 )
4 years ago
814eadb699
Fix local file inclusion (and code execution) via crafted 'plugins' option
4 years ago
fcfb099477
Fix remote code execution via crafted 'im_convert_path' or 'im_identify_path' settings
4 years ago
1c239c90d9
Fix XSS issue in handling of CDATA in HTML messages
4 years ago
301670f081
Fix so Print button for PDF attachments works on Firefox >= 75 ( #5125 )
4 years ago
be68e3f679
Fix typo
4 years ago
37acfc2e03
Fix performance issue of parsing big HTML messages by disabling HTML5 parser for these ( #7331 )
4 years ago
080b0afd95
Make install-jsdeps.sh script working without the 'file' program installed ( #7325 )
4 years ago
ecfee7470c
Fix bug where some message/rfc822 parts could not be attached on forward ( #7323 )
4 years ago
343da344e0
Fix characters encoding in group rename input after group creation/rename ( #7330 )
4 years ago
0d43c51ce1
Mailvelope: Fix bug where recipients with name were not handled properly in mail compose ( #7312 )
4 years ago
808f374f42
Revert "Fix bug where session was destoryed with window close ( #7251 )"
...
This reverts commit 32fac136db
4 years ago
15e924fd64
Fix bug where a special folder couldn't be created if a special-use flag is not supported ( #7147 )
4 years ago
c99e093f8a
Fix so imap error message is displayed to the user on folder create/update ( #7245 )
4 years ago
43f90d31c8
Fix bug where session was destoryed with window close ( #7251 )
4 years ago
5666ae00a8
Elastic: Restrict logo size in print view ( #7275 )
4 years ago
2ba62d0c98
zipdownload: enable menu options when menu is opened
4 years ago
7c081d7d72
Update changelog
4 years ago
a74a9e5fc2
Fix marking as spam/ham on moving messages with Move menu ( #7189 )
4 years ago
cd73ca05d8
Fix PHP warning for real ( #7206 )
4 years ago
1bc41d3a5f
markasjunk: handle select all case ( #7206 )
4 years ago
ae71f01b33
Elastic: Fix color of a folder with recent messages ( #7281 )
4 years ago
746ccb7fdf
Fix literals handling again
4 years ago
59af9944ea
Update changelog
...
[skip ci]
4 years ago
2005b895be
Fix handling keyservers configured with protocol prefix ( #7295 )
...
`|^[a-z]://|` matches only single-character protocol shortnames, to correctly exclude e.g. `hkps://` the expression should be `|^[a-z]+://|` instead.
4 years ago
Thomas Bruederli