Aleksander Machniak
|
160013555f
|
Update changelog
|
9 years ago |
|
Thomas Bruederli
|
699af1e520
|
Protect download urls against CSRF using unique request tokens (#1490642)
Send X-Frame-Options headers with every HTTP response
Conflicts:
plugins/enigma/enigma.js
plugins/enigma/lib/enigma_ui.php
program/lib/Roundcube/rcube_message.php
|
9 years ago |
|
Aleksander Machniak
|
b01689caf8
|
Hide DSN option in Preferences when smtp_server is not used (#1490666)
|
9 years ago |
|
Aleksander Machniak
|
7a73635214
|
Fix unicode-awareness of Base64 encoding implementation in javascript
|
9 years ago |
|
Aleksander Machniak
|
58c03846e7
|
Fix list row selection when provided uid is number not a string
|
9 years ago |
|
Aleksander Machniak
|
d66793f0af
|
Fix missing emoticons on html-to-text conversion
|
9 years ago |
|
Aleksander Machniak
|
f915d15c43
|
Bring back additional_message_headers compatibility with Mail_Mime < 1.9
|
9 years ago |
|
Aleksander Machniak
|
c8023ac6b1
|
Fix additional_message_headers plugin compatibility with Mail_Mime >= 1.9 (#1490657)
|
9 years ago |
|
Aleksander Machniak
|
8d047c668f
|
Plugin API: Added addressbook_export hook
|
9 years ago |
|
Aleksander Machniak
|
3e55a2d9cb
|
Fix bug in long recipients list parsing for cases where recipient name contained @-char (#1490653)
|
9 years ago |
|
Aleksander Machniak
|
a2d5db0a98
|
Fix bug where Archive/Junk buttons were not active after page jump with select=all mode (#1490647)
|
9 years ago |
|
Aleksander Machniak
|
d3b98eb4dc
|
Fix (again) security issue in DBMail driver of password plugin [CVE-2015-2181] (#1490643)
Unify the C program code with the one used by other drivers.
Conflicts:
CHANGELOG
|
9 years ago |
|
Aleksander Machniak
|
4de4438340
|
Fix regression where xml mode could be used to parse xhtml messages causing empty result
|
9 years ago |
|
Aleksander Machniak
|
768e3e1b09
|
Improved SVG cleanup code
|
9 years ago |
|
Aleksander Machniak
|
847c771d9e
|
Refactor wash_attribs() - fix regressions
|
9 years ago |
|
Aleksander Machniak
|
3e4b7cd19d
|
Extend rcube_washtml with SVG support
|
9 years ago |
|
Aleksander Machniak
|
7bbefdb63b
|
Fix XSS issue in SVG images handling (#1490625)
Conflicts:
CHANGELOG
|
9 years ago |
|
Aleksander Machniak
|
3f6fbdcc6d
|
Fix random "access to this resource is secured against CSRF" message at logout (#1490641)
- this is when openssl module is not installed
|
9 years ago |
|
Aleksander Machniak
|
db76c50a7c
|
Update ticket number
|
9 years ago |
|
Francis Russell
|
8a53588940
|
Make TLS method for IMAP parameterisable.
|
9 years ago |
|
Francis Russell
|
f8911c2a7f
|
Enable use of TLSv1.1 and TLSv1.2 for IMAP.
|
9 years ago |
|
Aleksander Machniak
|
fc5befff0f
|
Fix missing language name in "Add to Dictionary" request in HTML mode (#1490634)
Conflicts:
CHANGELOG
|
9 years ago |
|
Thomas Bruederli
|
772e08fa2a
|
Fix mail view scaling on iOS (#1490551)
|
9 years ago |
|
Thomas Bruederli
|
f2ff464002
|
Bump version to 1.1.4; update Changelog
|
9 years ago |
|
Aleksander Machniak
|
ded453cdc4
|
Fix .htaccess rewrite rules to not block .well-known URIs (#1490615)
Conflicts:
.htaccess
CHANGELOG
|
9 years ago |
|
Aleksander Machniak
|
7d0099f28e
|
Fix so drag-n-drop of text (e.g. recipient addresses) on compose page actually works (#1490619)
Conflicts:
CHANGELOG
|
9 years ago |
|
Aleksander Machniak
|
89a5dcb946
|
Fix path traversal vulnerability in setting a skin (#1490620)
Conflicts:
CHANGELOG
|
9 years ago |
|
Aleksander Machniak
|
9fbabc4668
|
Add INBOX to the list of folders only if no filter and no prefix was specified
|
9 years ago |
|
Aleksander Machniak
|
c67e7e8f85
|
Fix PDF support detection in Firefox > 19 (#1490610)
Conflicts:
CHANGELOG
|
9 years ago |
|
Aleksander Machniak
|
c82d09a052
|
Fix handling of message/rfc822 attachments on replies and forwards (#1490607)
Conflicts:
CHANGELOG
program/lib/Roundcube/rcube_message.php
program/steps/mail/compose.inc
|
9 years ago |
|
Aleksander Machniak
|
6e71c958fc
|
Fix also charset encoding of message/rfc822 part bodies (#1490606)
|
9 years ago |
|
Aleksander Machniak
|
2382c6e822
|
Fix regression in displaying contents of message/rfc822 parts (#1490606)
Conflicts:
CHANGELOG
|
9 years ago |
|
Aleksander Machniak
|
b6b92c0ddd
|
Optionally throw 404 error when contact photo wasn't found
|
9 years ago |
|
Aleksander Machniak
|
5143c47e0f
|
Fix rcube_utils::words_match() to work with mixed/invalid/binary content (T844)
|
9 years ago |
|
Aleksander Machniak
|
818b78a893
|
Fix invalid LDAP query in ACL user autocompletion (#1490591)
|
9 years ago |
|
Aleksander Machniak
|
78a9870e00
|
Remove redundant .gitignore files
|
9 years ago |
|
Thomas Bruederli
|
62ee427b7e
|
Improve directory protection for Apache 2.4
|
9 years ago |
|
Aleksander Machniak
|
9953d5c10c
|
Add workaround for https://bugs.php.net/bug.php?id=70757 (#1490582)
|
9 years ago |
|
Aleksander Machniak
|
c7c09f85d9
|
Fix HTML sanitizer to skip <!-- node type X --> in output (#1490583)
|
9 years ago |
|
Aleksander Machniak
|
2c3634df04
|
Update changelog
|
9 years ago |
|
Aleksander Machniak
|
8e7f32fddc
|
Small improvements in HTML to text conversion.
Better handling of <body> and trailing spaces, and </p><div> or <br><div>.
|
9 years ago |
|
Aleksander Machniak
|
9e808942ba
|
Update changelog
|
9 years ago |
|
Aleksander Machniak
|
a04a16c285
|
Make sure list page is never set to 0 (#1490458)
This should fix the issue where after message move wrong message was
added to the list and the list counter was invalid.
|
9 years ago |
|
Aleksander Machniak
|
72be74508f
|
Fix redundant blank lines when using HTML and top posting (#1490576)
|
9 years ago |
|
Aleksander Machniak
|
6ee039e10e
|
Bump Net_SMTP version in composer config (#1490569)
|
9 years ago |
|
Aleksander Machniak
|
5de338e45e
|
Update changelog
|
9 years ago |
|
Aleksander Machniak
|
70942083ce
|
After failed login wait a second to slow down brute-force attacks (#1490549)
|
9 years ago |
|
Aleksander Machniak
|
280395a544
|
Fix bug where HTML messages with invalid/excessive css styles couldn't be displayed (#1490539)
Technically speaking we remove the whole CSS content when it has more than 5k lines.
|
9 years ago |
|
Aleksander Machniak
|
c5acbc6c94
|
Fix bug where message preview was unintentionally reset on check-recent action (#1490563)
|
9 years ago |
|
Aleksander Machniak
|
5e6f6ac539
|
Fix responses list update issue after response name change (#1490555)
|
9 years ago |