Commit Graph

1139 Commits (e6132dda95d62e8a5afff31c4e00b41d78789c5c)

Author SHA1 Message Date
Thomas Bruederli 4c1394cf2d Bump version to 1.1.7 8 years ago
Aleksander Machniak 45a3e81653 Fix vulnerability in handling of mail()'s 5th argument 8 years ago
Thomas Bruederli 802d119153 Bump version to 1.1.6 8 years ago
Aleksander Machniak 93cb7b1fea Support contact+group searches in all relevant places (T1360)
Before the search worked only in Addressbook, not also in Compose.
The point of the change is also to align group searches with contact searches
in that it now uses the same set of attributes. Previously groups
in Compose were searched by name only.

Conflicts:

	program/lib/Roundcube/rcube_addressbook.php
	program/lib/Roundcube/rcube_contacts.php
	program/steps/mail/search_contacts.inc
8 years ago
Aleksander Machniak 3f10f9a2e6 Fix regression where LDAP results could be counted incorrectly when using VLV
... broken by d08bd0a51f where we added searching in users+groups in one request
8 years ago
Aleksander Machniak 425e31dc27 Wash position:fixed style in HTML mail for better security (#5264) 8 years ago
Aleksander Machniak 4fa70856b9 Fix handling of blockquote tags with mixed case on html2text conversion (#5363)
Conflicts:
	CHANGELOG
9 years ago
Aleksander Machniak d10c591a61 Merge pull request #5330 from urc/patch-1
Do not mask fatal error when unable to load PEAR class
9 years ago
dsoares f85227358a Avoid PHP fatal error
After last change to file `rcube_ldap.php`, my roundcube instance was getting this error:
```
PHP Fatal error:  Cannot use object of type Net_LDAP3_Result as array in ...
```
In
```php
protected function extended_search($count = false)
```
`$result = $this->ldap->search()` returns a LDAP object (whatever package we use).
If the search returns no results (and if `$is_extended_search` is false), then it gets to line 971 trying to do a `usort()` and then a `count()` on an object, instead of an array.
9 years ago
Aleksander Machniak ac592fd169 Searching in both contacts and groups when LDAP addressbook with group_filters option is used
Conflicts:

	CHANGELOG
	program/steps/addressbook/search.inc
9 years ago
urc 3e508e9587 Do not mask fatal error
A failure to load PEAR consistutes a fatal PHP error, and @-loading it prevents that error from being logged, making debugging problems with loading the PEAR class really difficult. It should therefore be loaded without the @ sign, allowing the fatal error to end up in the logs, if it occurs.
9 years ago
Aleksander Machniak 7d14065baa Fix XSS issue in href attribute on area tag (#5240, #5241)
Conflicts:

	CHANGELOG
9 years ago
Thomas Bruederli 25bc871ee7 Bump version to 1.1.5 9 years ago
Aleksander Machniak 848410042c Fix converting mail addresses with @www. into mailto links (#5197) 9 years ago
Aleksander Machniak c91d4975ff Make sure an email address is valid when replacing it with mailto: link 9 years ago
Aleksander Machniak d54eb6c951 CS fixes 9 years ago
Bostjan Skufca 55d90b2f62 mailbox/listing: Make server response for large mailbox listing faster when using threaded view
Symptom
=======
When using roundcube with mailboxes with over 60k messages, list
view was way faster than viewing in threaded view.

Mailbox index view timing:    ~360 ms
Mailbox threaded view timing: ~800 ms

Resolution
==========
Use native PHP array manipulation functions instead of rolling custom
string data reversal implementation using strpos() and substr() in a
'while' loop.

This optimization is already present in index view handler, but was missing
from threaded view.

Results after optimization
==========================
Both average out around ~360 ms response time.
9 years ago
Aleksander Machniak 473dc0b86d Fix so SPECIAL-USE assignments are forced only until user sets special folders (#4782)
The old behaviour where SPECIAL-USE has always a prio can be bringed back
by setting lock_special_folders=false and adding it to dont_override.
9 years ago
Aleksander Machniak 86bc1f95ea Require Net_Socket >= 1.0.12 (because of timeout=0 bugfix)
Conflicts:
	INSTALL
9 years ago
Aleksander Machniak 2bfce1ae20 Refer to Github issues instead of Trac 9 years ago
Aleksander Machniak 7c04110698 Fix so contactlist_fields option can be set via config file 9 years ago
Thomas Bruederli 699af1e520 Protect download urls against CSRF using unique request tokens (#1490642)
Send X-Frame-Options headers with every HTTP response

Conflicts:
	plugins/enigma/enigma.js
	plugins/enigma/lib/enigma_ui.php
	program/lib/Roundcube/rcube_message.php
9 years ago
Aleksander Machniak 3e55a2d9cb Fix bug in long recipients list parsing for cases where recipient name contained @-char (#1490653) 9 years ago
Aleksander Machniak 4de4438340 Fix regression where xml mode could be used to parse xhtml messages causing empty result 9 years ago
Aleksander Machniak 768e3e1b09 Improved SVG cleanup code 9 years ago
Aleksander Machniak 847c771d9e Refactor wash_attribs() - fix regressions 9 years ago
Aleksander Machniak 3e4b7cd19d Extend rcube_washtml with SVG support 9 years ago
Aleksander Machniak 3f6fbdcc6d Fix random "access to this resource is secured against CSRF" message at logout (#1490641)
- this is when openssl module is not installed
9 years ago
Francis Russell 8a53588940 Make TLS method for IMAP parameterisable. 9 years ago
Francis Russell f8911c2a7f Enable use of TLSv1.1 and TLSv1.2 for IMAP. 9 years ago
Thomas Bruederli f2ff464002 Bump version to 1.1.4; update Changelog 9 years ago
Aleksander Machniak 9fbabc4668 Add INBOX to the list of folders only if no filter and no prefix was specified 9 years ago
Aleksander Machniak c82d09a052 Fix handling of message/rfc822 attachments on replies and forwards (#1490607)
Conflicts:

	CHANGELOG
	program/lib/Roundcube/rcube_message.php
	program/steps/mail/compose.inc
9 years ago
Aleksander Machniak 5143c47e0f Fix rcube_utils::words_match() to work with mixed/invalid/binary content (T844) 9 years ago
Aleksander Machniak 9953d5c10c Add workaround for https://bugs.php.net/bug.php?id=70757 (#1490582) 9 years ago
Aleksander Machniak c7c09f85d9 Fix HTML sanitizer to skip <!-- node type X --> in output (#1490583) 9 years ago
Aleksander Machniak 8e7f32fddc Small improvements in HTML to text conversion.
Better handling of <body> and trailing spaces, and </p><div> or <br><div>.
9 years ago
Aleksander Machniak a04a16c285 Make sure list page is never set to 0 (#1490458)
This should fix the issue where after message move wrong message was
added to the list and the list counter was invalid.
9 years ago
Aleksander Machniak 3d9798da1f Make brute force attacks harder by re-generating security token on every failed login (#1490549)
Or more precissely use the same we did in git-master, i.e. do not base the token on
session ID, but use random bytes instead.
9 years ago
Thomas Bruederli 106d47992b Bump version and update changelog 9 years ago
Aleksander Machniak 6564cf8a4b Change code so versions of Mail_mime before and after 1.9.0 are supported
Conflicts:
	program/lib/Roundcube/rcube.php
9 years ago
Aleksander Machniak dddc985ce2 Make Mail_mime>=1.9.0 a requirement, fix compat. errors
Conflicts:
	composer.json-dist
9 years ago
Aleksander Machniak ca7fc75bec Fix "washing" of style elements wrapped into many lines 9 years ago
Aleksander Machniak f3c12bf7ef Get rid of Mail_mimeDecode package dependency (#1490416)
Conflicts:

	CHANGELOG
	composer.json-dist
9 years ago
Aleksander Machniak 0e647e4aa0 Don't use private properties of Net_SMTP object 10 years ago
Aleksander Machniak fe82e213c3 Fix so E_DEPRECATED errors from PEAR libs are ignored by error_reporting change (#1490281) 10 years ago
Aleksander Machniak 424c25e5bc Fix bug where new messages weren't added to the list in search mode 10 years ago
Aleksander Machniak 844ee296a8 Revert create_folder() behaviour change where the method didn't fail if folder already existed.
This should not be the default behaviour. It could likely
become an optional functionality, however we should keep the method simple.
10 years ago
Aleksander Machniak 19a61851ae Fix so imap folder attribute comparisons are case-insensitive (#1490466)
+ make in_array_nocase() much faster for ASCII strings
10 years ago
Aleksander Machniak 612b04ac30 Reset internal cache index in close()
Conflicts:

	program/lib/Roundcube/rcube_cache.php
	program/lib/Roundcube/rcube_cache_shared.php
10 years ago