Aleksander Machniak
|
fe42e143ca
|
Fix cross-site scripting (XSS) vulnerability in handling of linkrefs in plain text messages
Thanks to Niraj Shivtarkar for the report.
|
2 years ago |
|
Aleksander Machniak
|
4b5e9c10f9
|
Fix handling of multiple link references with the same index in plain text message (#8021)
Second attempt that should work on all supported PHP versions
|
4 years ago |
|
Aleksander Machniak
|
dc89e18a0f
|
Revert "Fix handling of multiple link references with the same index in plain text message (#8021)"
This reverts commit 2be7e1cb61.
The code used a PHP>=7.4 feature.
|
4 years ago |
|
Aleksander Machniak
|
2be7e1cb61
|
Fix handling of multiple link references with the same index in plain text message (#8021)
|
4 years ago |
|
Aleksander Machniak
|
39b3c0049e
|
Fix cross-site scripting (XSS) via HTML or Plain text messages with malicious content [CVE-2020-35730]
Credits to Alex Birnberg <birnbergalex@gmail.com>
|
5 years ago |
|
Aleksander Machniak
|
f4ed1024dc
|
PHP8 fixes, CS fixes, short array syntax, tests
|
5 years ago |
|
Aleksander Machniak
|
bde383d051
|
PHP8: Fix various issues
for now only these I found by running our unit tests, there will be much more
|
5 years ago |
|
Aleksander Machniak
|
a5c2b4360c
|
Fixes in context of undefined variables, and code style
|
5 years ago |
|
Aleksander Machniak
|
3e2f076628
|
Fix bug in conversion of email addresses to mailto links in plain text messages (#7526)
|
5 years ago |
|
Aleksander Machniak
|
1afa46d28d
|
PHPDoc and CS fixes
|
6 years ago |
|
Aleksander Machniak
|
57c67db029
|
Remove year(s) from copyright headers + some cleanup
|
6 years ago |
|
Aleksander Machniak
|
e8ab3d96bd
|
Fix converting mail addresses with @www. into mailto links (#5197)
|
9 years ago |
|
Aleksander Machniak
|
a03233ceba
|
CS fixes
|
10 years ago |
|
Aleksander Machniak
|
df0b4f3437
|
Make sure an email address is valid when replacing it with mailto: link
|
10 years ago |
|
Aleksander Machniak
|
a958748947
|
CS fixes
|
10 years ago |
|
Aleksander Machniak
|
001d337b37
|
Fix handling unicode characters in links (#1489898)
|
11 years ago |
|
Aleksander Machniak
|
d1abd8e339
|
Fix infinite loop in rcube_utils::mod_css_styles() after recent changes in rcube_string_replacer
|
12 years ago |
|
Thomas Bruederli
|
c856b73c86
|
Minor improvements to linkref parser
|
12 years ago |
|
Thomas Bruederli
|
e480ca00ba
|
Replace markdown-style [1] link indexes in plain text email bodies. [1]: http://daringfireball.net/projects/markdown/
|
12 years ago |
|
Aleksander Machniak
|
0bac7b32de
|
Fix wrong handling of links with '|' character (#1489276)
|
12 years ago |
|
Thomas Bruederli
|
cff07b5f76
|
Fix parsing of links with ... in URL (#1489192)
|
12 years ago |
|
Aleksander Machniak
|
70229cbbfc
|
Fix incorrect handling of some specific links (#1489060)
|
12 years ago |
|
Aleksander Machniak
|
1e32540839
|
Add rel="noreferrer" for links in displayed messages (#1484686)
|
13 years ago |
|
Aleksander Machniak
|
16915ee2ad
|
Don't convert to link a text with < and > characters
|
13 years ago |
|
Aleksander Machniak
|
0931a97c5f
|
Fix handling of parentheses in URLs
|
13 years ago |
|
Aleksander Machniak
|
0d214498d0
|
CS fixes
|
13 years ago |
|
Aleksander Machniak
|
d2534c63f2
|
Cleanup, remove file paths from doc
|
13 years ago |
|
Thomas Bruederli
|
60226a75d8
|
Separate the very application-specific output classes from the Roundcube framework; add autoloader for rmail* classes
|
13 years ago |
|
Thomas Bruederli
|
10da75f364
|
Move shortcut functions to framework class
|
13 years ago |
|
Aleksander Machniak
|
ba6f21caeb
|
Framework files moved to lib/Roundcube
|
13 years ago |
|
Aleksander Machniak
|
9ab34604d9
|
Define @package and @subpackage of Framework classes
|
13 years ago |
|
Thomas Bruederli
|
c96d3f57ef
|
Match http://localhost/xxx as link
|
13 years ago |
|
Aleksander Machniak
|
22c67d0ec2
|
Fix handling of URLs with asterisk characters (#1488759)
|
13 years ago |
|
Aleksander Machniak
|
041c93ce0b
|
Removed $Id$
|
13 years ago |
|
alecpl
|
1aceb9cec8
|
- Framework refactoring (I hope it's the last one):
rcube,rcmail,rcube_ui -> rcube,rcmail,rcube_utils
renamed main.inc into rcube_bc.inc
|
13 years ago |
|
alecpl
|
0c259682f6
|
- Merge devel-framework branch, resolved conflicts
|
13 years ago |
|
thomascube
|
7fe3811c65
|
Changed license to GNU GPLv3+ with exceptions for skins and plugins
|
14 years ago |
|
alecpl
|
ae7ac91c31
|
- Fixed bug in handling link with '!' character in it (#1488195)
|
14 years ago |
|
alecpl
|
f2292c3a95
|
- Fix handling of curly brackets in URLs (#1488168)
|
14 years ago |
|
alecpl
|
303ade533f
|
- Fix handling of links with IP address
|
14 years ago |
|
alecpl
|
96e24fab88
|
- Fix parsing URLs containing commas (#1487970)
|
14 years ago |
|
alecpl
|
5c1dfb0b11
|
- Fix handling of top-level domains with more than 5 chars or unicode chars (#1487883)
|
14 years ago |
|
thomascube
|
f5e7b35307
|
Bumbed version; Roundcube development is not Switzerland only
|
15 years ago |
|
thomascube
|
a1013c0372
|
Exclude punctuation from URLs within text; only link accepted url schemes
|
15 years ago |
|
alecpl
|
0ff554d165
|
- Fix handling square brackets in links (#1487672)
|
15 years ago |
|
alecpl
|
d21a05b481
|
- Fix handling of URLs with semicolon (;) character (#1487088)
|
15 years ago |
|
alecpl
|
acd9bdd25b
|
- Fix handling of URLs with tilde (~) character (#1487087)
|
15 years ago |
|
alecpl
|
937e26a541
|
- Fix links handling
|
15 years ago |
|
alecpl
|
9cc93aea7c
|
- Use simplified domain expression for proper handling of domain names in UTF8
|
15 years ago |
|
alecpl
|
df2188d778
|
- Fix mailto optional params in plain text messages aren't handled (#1487026)
|
15 years ago |
