Commit Graph

80 Commits (b3e3422e9fc8418732574120b8ae82a0a25ca628)

Author SHA1 Message Date
Aleksander Machniak 3375a681eb Fix problem where security warning was displayed for valid images with image/jpg type (#1489097) 12 years ago
Aleksander Machniak d7fcd8ce42 Fix possible collision in generated thumbnail cache key (#1489069) 12 years ago
Thomas Bruederli a021d6f187 Skip filename suffix check for embedded images; return blocked.gif instead of HTML warning when embedded (#1489029) 12 years ago
Aleksander Machniak 139635f189 Fix thumbnail size when GD extension is used for image resize (#1488985) 12 years ago
Aleksander Machniak 7c851e669e Don't try to print file extension in a warning message if it's not available 12 years ago
Thomas Bruederli 921115ed56 Ignore file extension difference for text/plain attachments (#1488891) 12 years ago
Thomas Bruederli 1730cf8d7b Load a default stylesheet (embed.css) from skin in plain html pages (e.g. attachment warnings and html messages) 12 years ago
Thomas Bruederli 1ef4033b8d Also block remote images in HTML part view (#1488827) 12 years ago
Thomas Bruederli d9f180adf9 Minor IE7/8 fixes 12 years ago
Aleksander Machniak be72fb3597 Unified attachments filenames handling for message parts without a filename 12 years ago
Thomas Bruederli 5f0bd1fcb4 Make html button-links work in IE 12 years ago
Thomas Bruederli 31521613e4 Append filename extension if missing 12 years ago
Aleksander Machniak c7ff6ec2cb Add workaround for IE<=8 bug where Content-Disposition:inline was ignored (#1488844) 12 years ago
Aleksander Machniak 8afbc8aeea Fix attachment Content-Length for in-memory files (#1488844) 12 years ago
Thomas Bruederli c14b337450 Fix XSS vulnerability using Flash files (#1488828) by comparing mimetypes and filename extensions 12 years ago
Thomas Bruederli 03149131f7 New feature: display attached images as thumbnails below message body 12 years ago
Aleksander Machniak 4fd5b62194 Add Content-Length for attachments where possible (#1485478) 13 years ago
Aleksander Machniak 19cc5b91c9 Display Tiff as Jpeg in browsers without Tiff support (#1488452) 13 years ago
Aleksander Machniak 041c93ce0b Removed $Id$ 13 years ago
Aleksander Machniak 4bfe4ec22a Remove last instance of storage_connect() with possible performance
improvement when a message part body is in cache
13 years ago
alecpl b4f95a9387 - Fix attachment name regression (#1488446) 13 years ago
alecpl 0c259682f6 - Merge devel-framework branch, resolved conflicts 13 years ago
thomascube d1e3430bfa Pass message UID to 'message_part_get' hook 13 years ago
thomascube 7fe3811c65 Changed license to GNU GPLv3+ with exceptions for skins and plugins 13 years ago
thomascube c321a955a7 Merged devel-framework branch (r5746:5779) back into trunk 13 years ago
thomascube c29b82d90a Fix crashes with eAccelerator (#1488256) 13 years ago
alecpl b6da0b76af - Remove deprecated global $IMAP variable usage (#1488148) 13 years ago
thomascube 3f81174e10 Show attachment filename in page title 13 years ago
thomascube 57486f6e58 Content filter for embedded attachments to protect from XSS on IE<=8 (#1487895) 13 years ago
alecpl e0960f6365 - Prevent from memory_limit exceeding when trying to parse big messages bodies (#1487424):
don't try to parse it, display notice with a link to download it directly
13 years ago
alecpl 5510a5278b - Fix possible infinite redirect on attachment preview (#1488199) 13 years ago
alecpl 9e54e6fd45 - Make the whole PHP output non-cacheable (#1487797) 13 years ago
thomascube d78771ad3c Add plugin hook message_part_get for message part downloads 13 years ago
thomascube f5e7b35307 Bumbed version; Roundcube development is not Switzerland only 14 years ago
alecpl e0bd7054b7 - Add workaround for some Outlook's wrong content-types, per discussion in #1487051 14 years ago
alecpl e019f2d0f2 - s/RoundCube/Roundcube/ 14 years ago
alecpl 799359457f - Don't create a new rcube_browser object, use browser property from output object 14 years ago
alecpl b8d96f6e60 - Use random sleep interval up to 3 sec. in 'get' action when IMAP conn. fails 14 years ago
alecpl 431234538a - Fix when IMAP connection fails in 'get' action session shouldn't be destroyed (#1486995)
- Performance: improve mail/get action and skip one IMAP connection
14 years ago
alecpl 9bb1fc7b0b - Make sure attachment name doesn't contain \r\n (#1486832) 15 years ago
alecpl b25dfd0913 - removed PHP closing tag 15 years ago
alecpl d311d809d6 - Fix forwarding of messages with winmail attachments
- Remove some redundant code for winmail handling in get.inc, move tnef_decode() to rcube_message
- Fix handling of uuencoded attachments in message body (#1485839)
- Extend rc_mime_content_type() to work with string buffer
15 years ago
alecpl 1097a3cd8a - don't parse text/html attachment body on download 15 years ago
alecpl ebc619c149 - Fix CVE-2010-0464: Disable DNS prefetching (#1486449) 15 years ago
alecpl 6d479a622b - remove set_magic_quotes_runtime() call, use set_time_limit() with @ (#1486149) 15 years ago
thomascube 35f40fbda7 Set timeout for attachment loading back to 0 15 years ago
alecpl 3e8b11194d - Fix charset bug during loading attachment file (#1486064) 15 years ago
alecpl 3b7e00fbda - don't call FETCH for empty (size=0) message parts 16 years ago
alecpl d51c93b43e - get rid of some hardcoded action names and move decission about output compression to the user 16 years ago
thomascube 21b160f38c Added TNEF support to decode MS Outlook (winmail.dat) attachments 16 years ago