Commit Graph

21 Commits (b68c141e1d245aa3ad6390c7f55d5c6b0f39c492)

Author SHA1 Message Date
Aleksander Machniak 57c67db029 Remove year(s) from copyright headers + some cleanup 6 years ago
Aleksander Machniak fe5b4fd81d fputs() -> fwrite() 6 years ago
Aleksander Machniak d3c65d752b Remove useless "return null;" at the end of function block 6 years ago
Aleksander Machniak 186f21c4c1 Avoid Referer leaking by using Referrer-Policy:same-origin header (#6385)
Added 'common_headers' hook
6 years ago
Aleksander Machniak a451ad6599 Fix handling encoding of HTML tags in "inline" JSON output (#6207) 7 years ago
Aleksander Machniak 1556eb01c7 Use JSON_UNESCAPED_UNICODE only on PHP >= 7.1.0 (#6187) 7 years ago
Aleksander Machniak 4793ec753a Remove double-quotes in filename* parameter of the Content-Disposition of downloads (#5857) 7 years ago
Aleksander Machniak 1235dcf321 Encode JSON with JSON_UNESCAPED_SLASHES and JSON_UNESCAPED_UNICODE options 7 years ago
Aleksander Machniak bcc6405552 Fix various issues when downloading files with names containing non-ascii chars, use RFC 2231 (#5772) 8 years ago
Aleksander Machniak f43f5bf93f Use JSON_PRETTY_PRINT in devel_mode
This effectively makes PHP 5.4 a real requirement
8 years ago
Aleksander Machniak 58c036116b Support type=password in rcube_output::get_edit_field() 9 years ago
Thomas Bruederli 4a408843b0 Protect download urls against CSRF using unique request tokens (#1490642)
Send X-Frame-Options headers with every HTTP response
9 years ago
Aleksander Machniak a958748947 CS fixes 10 years ago
Aleksander Machniak ba5c53e5c3 Send X-UA-Compatible as HTTP header instead of meta tag 11 years ago
Thomas Bruederli b0ce5c62af Make skin meta/hierarchy information accessible for plugins (#1488831) 11 years ago
Zou Guangxian 49311c55dd * fixed: modsecurity warning: AppDefect: Cache-Control Response Header Missing 'no-store' flag. http://websecuritytool.codeplex.com/wikipage?title=Checks#http-cache-control-header-no-store 12 years ago
Aleksander Machniak d2534c63f2 Cleanup, remove file paths from doc 12 years ago
Aleksander Machniak 63f130782c Small fixes to last commits 12 years ago
Thomas Bruederli 60226a75d8 Separate the very application-specific output classes from the Roundcube framework; add autoloader for rmail* classes 12 years ago
Aleksander Machniak a92beb6bdb Define RCUBE_CHARSET in place of RCMAIL_CHARSET for naming consistency 12 years ago
Aleksander Machniak ba6f21caeb Framework files moved to lib/Roundcube 12 years ago