Commit Graph

6104 Commits (e6132dda95d62e8a5afff31c4e00b41d78789c5c)

Author SHA1 Message Date
Aleksander Machniak 768e3e1b09 Improved SVG cleanup code 9 years ago
Aleksander Machniak 847c771d9e Refactor wash_attribs() - fix regressions 9 years ago
Aleksander Machniak 3e4b7cd19d Extend rcube_washtml with SVG support 9 years ago
Aleksander Machniak 7bbefdb63b Fix XSS issue in SVG images handling (#1490625)
Conflicts:

	CHANGELOG
9 years ago
Aleksander Machniak 3f6fbdcc6d Fix random "access to this resource is secured against CSRF" message at logout (#1490641)
- this is when openssl module is not installed
9 years ago
Francis Russell 8a53588940 Make TLS method for IMAP parameterisable. 9 years ago
Francis Russell f8911c2a7f Enable use of TLSv1.1 and TLSv1.2 for IMAP. 9 years ago
Aleksander Machniak fc5befff0f Fix missing language name in "Add to Dictionary" request in HTML mode (#1490634)
Conflicts:

	CHANGELOG
9 years ago
Thomas Bruederli f2ff464002 Bump version to 1.1.4; update Changelog 9 years ago
Aleksander Machniak 7d0099f28e Fix so drag-n-drop of text (e.g. recipient addresses) on compose page actually works (#1490619)
Conflicts:

	CHANGELOG
9 years ago
Aleksander Machniak 89a5dcb946 Fix path traversal vulnerability in setting a skin (#1490620)
Conflicts:

	CHANGELOG
9 years ago
Aleksander Machniak 9fbabc4668 Add INBOX to the list of folders only if no filter and no prefix was specified 9 years ago
Aleksander Machniak c67e7e8f85 Fix PDF support detection in Firefox > 19 (#1490610)
Conflicts:
	CHANGELOG
9 years ago
Aleksander Machniak c82d09a052 Fix handling of message/rfc822 attachments on replies and forwards (#1490607)
Conflicts:

	CHANGELOG
	program/lib/Roundcube/rcube_message.php
	program/steps/mail/compose.inc
9 years ago
Aleksander Machniak 6e71c958fc Fix also charset encoding of message/rfc822 part bodies (#1490606) 9 years ago
Aleksander Machniak 2382c6e822 Fix regression in displaying contents of message/rfc822 parts (#1490606)
Conflicts:

	CHANGELOG
9 years ago
Aleksander Machniak b6b92c0ddd Optionally throw 404 error when contact photo wasn't found 9 years ago
Aleksander Machniak 5143c47e0f Fix rcube_utils::words_match() to work with mixed/invalid/binary content (T844) 9 years ago
Aleksander Machniak 9953d5c10c Add workaround for https://bugs.php.net/bug.php?id=70757 (#1490582) 9 years ago
Aleksander Machniak c7c09f85d9 Fix HTML sanitizer to skip <!-- node type X --> in output (#1490583) 9 years ago
Aleksander Machniak 8e7f32fddc Small improvements in HTML to text conversion.
Better handling of <body> and trailing spaces, and </p><div> or <br><div>.
9 years ago
Aleksander Machniak a04a16c285 Make sure list page is never set to 0 (#1490458)
This should fix the issue where after message move wrong message was
added to the list and the list counter was invalid.
9 years ago
Aleksander Machniak 72be74508f Fix redundant blank lines when using HTML and top posting (#1490576) 9 years ago
Aleksander Machniak 70942083ce After failed login wait a second to slow down brute-force attacks (#1490549) 9 years ago
Aleksander Machniak 280395a544 Fix bug where HTML messages with invalid/excessive css styles couldn't be displayed (#1490539)
Technically speaking we remove the whole CSS content when it has more than 5k lines.
9 years ago
Aleksander Machniak c5acbc6c94 Fix bug where message preview was unintentionally reset on check-recent action (#1490563) 9 years ago
Aleksander Machniak 5e6f6ac539 Fix responses list update issue after response name change (#1490555) 9 years ago
Aleksander Machniak 3d9798da1f Make brute force attacks harder by re-generating security token on every failed login (#1490549)
Or more precissely use the same we did in git-master, i.e. do not base the token on
session ID, but use random bytes instead.
9 years ago
Aleksander Machniak 357cd5103d Fix issue where Content-Length of some attachments could be set to wrong value causing browser errors (#1490482) 9 years ago
Aleksander Machniak 6731d2116c Fix XSS issue in drag-n-drop file uploads (#1490530) 9 years ago
Aleksander Machniak 73d98c4766 Fix missing HTTP_X_FORWARDED_FOR address in generated Received header 9 years ago
Aleksander Machniak 9f98332240 Fix so In-Reply-To header is set also for MDN receipts (#1490523) 9 years ago
Aleksander Machniak bbef212b0e Fallback to C locale 9 years ago
Aleksander Machniak 7bfe676d53 Fix various issues with Turkish (and similar) locales (#1490519) 9 years ago
Aleksander Machniak ac3078fe93 Fix support for Mozilla-based browsers, e.g. Pale Moon (#1490517) 9 years ago
Aleksander Machniak 52b75f2506 Fix so adding CC/BCC recipients from the sidebar unhides compose form fields in Classic skin (#1490472) 9 years ago
Aleksander Machniak 8ef86f5253 Fix handling of plus character in mailto: links (#1490510) 9 years ago
Aleksander Machniak 5f10f13472 Fix so css of one html part does not apply to other text parts on message display (#1490505) 9 years ago
Thomas Bruederli 106d47992b Bump version and update changelog 9 years ago
Thomas Bruederli 27e02f0f3b Fix closing of nested menus (#1490443) 9 years ago
Aleksander Machniak 6564cf8a4b Change code so versions of Mail_mime before and after 1.9.0 are supported
Conflicts:
	program/lib/Roundcube/rcube.php
9 years ago
Aleksander Machniak dddc985ce2 Make Mail_mime>=1.9.0 a requirement, fix compat. errors
Conflicts:
	composer.json-dist
9 years ago
Aleksander Machniak 495b5c3883 Don't display not-sent-warning in compose page on save-pref action 9 years ago
Aleksander Machniak b45b15e5a8 Fix selecting a folder on collapse when any subfolder is selected 9 years ago
Aleksander Machniak 794b2f1d46 Really make base64 encoding unicode-aware 9 years ago
Aleksander Machniak b44a6554bb Fix base64.encode/decode for unicode characters - use fallback if btoa/atob functions fail 9 years ago
Aleksander Machniak 14693832b2 Fix so input field (e.g. search box) does not loose focus on list load (#1490455) 9 years ago
Aleksander Machniak ca7fc75bec Fix "washing" of style elements wrapped into many lines 9 years ago
Thomas Bruederli 8b26f548b5 Add localization alias for tr => tr_TR 9 years ago
Aleksander Machniak f3c12bf7ef Get rid of Mail_mimeDecode package dependency (#1490416)
Conflicts:

	CHANGELOG
	composer.json-dist
9 years ago
Aleksander Machniak eddae8976d Disable links list generation on html-to-text conversion of identities or composed message (#1490437) 9 years ago
Aleksander Machniak b45e9b49b9 Fix removing signature when switching to identity with an empty sig in HTML mode (#1490470) 10 years ago
Aleksander Machniak 1172330b2a Fix error when using back button after sending an email (#1490009) 10 years ago
Aleksander Machniak 0e647e4aa0 Don't use private properties of Net_SMTP object 10 years ago
Aleksander Machniak 468e61b264 Fix some javascript errors in rare situations (#1490441) 10 years ago
Aleksander Machniak 9ca27756f1 Fix wrong positioning of message list header on page scroll in Webkit browsers (#1490035)
Conflicts:

	CHANGELOG
10 years ago
Aleksander Machniak fe82e213c3 Fix so E_DEPRECATED errors from PEAR libs are ignored by error_reporting change (#1490281) 10 years ago
Aleksander Machniak 424c25e5bc Fix bug where new messages weren't added to the list in search mode 10 years ago
Aleksander Machniak 844ee296a8 Revert create_folder() behaviour change where the method didn't fail if folder already existed.
This should not be the default behaviour. It could likely
become an optional functionality, however we should keep the method simple.
10 years ago
Aleksander Machniak f0feb7701e Use in_array_nocase() also for \\Noselect flag check (#1490466) 10 years ago
Aleksander Machniak 19a61851ae Fix so imap folder attribute comparisons are case-insensitive (#1490466)
+ make in_array_nocase() much faster for ASCII strings
10 years ago
Aleksander Machniak 71bfa5f207 Fix draft removal after a message is sent and storing sent message is disabled (#1490467) 10 years ago
Aleksander Machniak 612b04ac30 Reset internal cache index in close()
Conflicts:

	program/lib/Roundcube/rcube_cache.php
	program/lib/Roundcube/rcube_cache_shared.php
10 years ago
Aleksander Machniak 895efa1d42 Fix bug where some messages in multi-folder search couldn't be printed/downloaded (#1490426)
Conflicts:

	program/js/app.js
10 years ago
Aleksander Machniak 383749eeff Update to TinyMCE 4.1.10 (#1490405) 10 years ago
Aleksander Machniak a9035b1561 Fix so *-request@ addresses in Sender: header are also ignored on reply-all (#1490452)
Conflicts:
	program/steps/mail/compose.inc
10 years ago
Aleksander Machniak f7dd463174 Fix multi-folder search result sorting by arrival date (#1490450) 10 years ago
Aleksander Machniak 8cc6b18bcd Get rid of array_walk() when simple foreach() can be used 10 years ago
Aleksander Machniak 70422cd7a2 Fix Fatal error after last commit 10 years ago
Aleksander Machniak 947c4dc30b Fix issue when first search() argument is not an array 10 years ago
Aleksander Machniak 0aadd71183 Fix self-reply detection issues (#1490439) 10 years ago
Aleksander Machniak 8e68430749 Fix handling of non-break spaces in html to text conversion (#1490436) 10 years ago
Aleksander Machniak 3a428d9571 Make has_(html|text)_part and first_(html|text)_part methods consistent in arguments and functionality 10 years ago
Aleksander Machniak 25c457dc68 Modify rcube_smtp::send_mail() so it is possible to send message by
specifying only the message stream no headers, it's for cases when
the stream already contains a complete message.
10 years ago
Aleksander Machniak fec877f038 Fix so links with href == content aren't added to links list on html to text conversion (#1490434) 10 years ago
Aleksander Machniak 92e36f6839 Fix race-condition in saving user preferences and loading plugin config (#1490431) 10 years ago
Aleksander Machniak 8cab554252 Fix unintentional messages list page change on page switch in compose addressbook (#1490427) 10 years ago
Aleksander Machniak e8028083b9 Fix bug where some messages in multi-folder search couldn't be opened (#1490426) 10 years ago
Aleksander Machniak cb0e0777ce Fix "PHP Fatal error: Using $this when not in object context" 10 years ago
Aleksander Machniak 30e71606a0 Fix Compose action in addressbook for results from multiple addressbooks (#1490413)
Conflicts:

	CHANGELOG
10 years ago
Aleksander Machniak ef07e9e546 Update to jQuery 2.1.4 (#1490406) 10 years ago
Aleksander Machniak d438147ddc Fix SQL error on logout when using session_storage=php (#1490421) 10 years ago
Aleksander Machniak 552854d738 Fix "Importing..." message does not hide on error (#1490422)
Conflicts:
	CHANGELOG
10 years ago
Daniel Hoffend 8fab64e594 remove debug test code 10 years ago
Aleksander Machniak 15fd8f9dc7 Fix XSS vulnerability in _mbox argument handling (#1490417) 10 years ago
Aleksander Machniak 5529d94ed7 Installer: Use openssl_random_pseudo_bytes() (if available) to generate des_key (#1490402)
Conflicts:

	CHANGELOG
10 years ago
Aleksander Machniak 4312ac809c Fix blank image in html_signature when saving identity changes (#1490412) 10 years ago
Thomas Bruederli 245619e98d Update localizations from Transifex 10 years ago
Thomas Bruederli f1ae19dc6b Bump version 10 years ago
Thomas Bruederli d8ffedbd5e Add new plugin hook 'identity_create_after' (#1490358) 10 years ago
Aleksander Machniak d5694ef84f Fix issues when using moduserprefs.sh without --user argument (#1490399)
Conflicts:

	program/include/rcmail_utils.php
10 years ago
Aleksander Machniak 4d97838ed9 Fix font artifacts in text2html conversion (#1490353)
Use white-space:nowrap elements instead of unicode word-joiner character
10 years ago
Aleksander Machniak 84af0db103 Fix bug where some files could have "executable" extension when stored in temp folder (#1490377) 10 years ago
Aleksander Machniak 244a46fdea Fix missing index update after write() call 10 years ago
Aleksander Machniak 92459da0e2 Fix possible memcache/apc cache data consistency issues (#1490390)
And removed unused code

Conflicts:

	program/lib/Roundcube/rcube_cache.php
	program/lib/Roundcube/rcube_cache_shared.php
10 years ago
Aleksander Machniak a7d269253f Workaround possible issue where some keys were ignored when deleting cached entries
by key name prefix and keys index is in inconsistent state (does not contain all keys)
10 years ago
Aleksander Machniak 1d024f37cc Fix mb_substitute_character() use 10 years ago
Aleksander Machniak c084a6ab8b Fix rcube_charset::clean() for case when mbstring and iconv are not installed 10 years ago
Aleksander Machniak 4471b2bffb Fix security issue in contact photo handling (#1490379) 10 years ago
Thomas Bruederli b765160fd5 Improve LDAP search by ignoring words order in fuzzy substring matching mode 10 years ago