Aleksander Machniak
|
24df766e28
|
Bring back 1.4-git as a version number
|
2 years ago |
|
Thomas Bruederli
|
69be0b7b81
|
Bump version to 1.4.14
|
2 years ago |
|
Thomas Bruederli
|
784eb80e67
|
Bump version to 1.4.13
|
4 years ago |
|
Thomas Bruederli
|
ff61573803
|
Bump version to 1.4.12
|
4 years ago |
|
Thomas Bruederli
|
34c42f06e1
|
Bump version to 1.4.11
|
5 years ago |
|
Thomas Bruederli
|
4efec49a46
|
Bump version to 1.4.10
|
5 years ago |
|
Thomas Bruederli
|
22bdb65bbf
|
Bump version to 1.4.9
|
5 years ago |
|
Thomas Bruederli
|
ce22759434
|
Bump version to 1.4.8
|
5 years ago |
|
Thomas Bruederli
|
cdbefb54e2
|
Bump version to 1.4.7
|
5 years ago |
|
Thomas Bruederli
|
5b53161198
|
Bump version to 1.4.6
|
5 years ago |
|
Thomas Bruederli
|
9898599d3e
|
Bump version to 1.4.5
|
5 years ago |
|
Thomas Bruederli
|
aadb13e25f
|
Bump version to 1.4.4
|
5 years ago |
|
Aleksander Machniak
|
9bbda422ff
|
Fix CSRF bypass that could be used to log out an authenticated user (#7302)
|
5 years ago |
|
Thomas Bruederli
|
273707f378
|
Bump version to 1.4.3
|
6 years ago |
|
Thomas Bruederli
|
51b8137170
|
Bump version to 1.4.2
|
6 years ago |
|
Thomas Bruederli
|
0b1d6841f9
|
Bump version to 1.4.1
|
6 years ago |
|
Aleksander Machniak
|
29e7c16b33
|
Fix so 401 error is returned only on failed logon requests (#7010)
|
6 years ago |
|
Thomas Bruederli
|
e774209b41
|
Bump version to 1.4.0
|
6 years ago |
|
Aleksander Machniak
|
f1a83f923d
|
Added cookie mismatch detection, display an error message informing the user to clear cookies
|
6 years ago |
|
Aleksander Machniak
|
57c67db029
|
Remove year(s) from copyright headers + some cleanup
|
6 years ago |
|
Aleksander Machniak
|
11216a1925
|
Changed 'password_charset' default to 'UTF-8' (#6522)
|
7 years ago |
|
Aleksander Machniak
|
186f21c4c1
|
Avoid Referer leaking by using Referrer-Policy:same-origin header (#6385)
Added 'common_headers' hook
|
7 years ago |
|
Aleksander Machniak
|
f1ee6d7906
|
Plugin API: Add possibility to specify HTTP return code via 'unauthenticated' hook
|
7 years ago |
|
Aleksander Machniak
|
e4ccc2bb48
|
Update copyright year in few places
|
7 years ago |
|
Aleksander Machniak
|
fb2f213d6f
|
Add id attribute to the installer warning
|
8 years ago |
|
Aleksander Machniak
|
2cb9de358b
|
Return "401 Unauthorized" status when login fails (#5663)
|
8 years ago |
|
Aleksander Machniak
|
e51fa197bb
|
Remove unused variable
|
8 years ago |
|
Aleksander Machniak
|
5101cfc67a
|
Bump version to 1.4-git
|
8 years ago |
|
Thomas Bruederli
|
f78e2a4367
|
Add 1.3-beta milestone + update copyright year
|
9 years ago |
|
Aleksander Machniak
|
ad9a55f8cb
|
Support hostname and hostname:port in force_https option (#5511)
|
9 years ago |
|
Aleksander Machniak
|
24b4ca52cf
|
Fix so "Action disabled" error uses more appropriate 404 code (#5440)
|
9 years ago |
|
Aleksander Machniak
|
b77efcd104
|
Fix typo
|
9 years ago |
|
Aleksander Machniak
|
85082c88c7
|
CS fixes
|
9 years ago |
|
Aleksander Machniak
|
9634169647
|
Bump version number to 1.3-beta
|
9 years ago |
|
Aleksander Machniak
|
a15d877ba8
|
Added brute-force attack prevention via login rate limit (#1490566)
|
10 years ago |
|
Aleksander Machniak
|
1b39d9a6c7
|
PHP7: Fixed some E_WARNING errors that previously were E_STRICT
|
10 years ago |
|
Aleksander Machniak
|
36bd93f138
|
PHP7: Fixed some E_WARNING errors that previously were E_STRICT
|
10 years ago |
|
Aleksander Machniak
|
4b72a1f498
|
Fix error when using back button after sending an email (#1490009)
|
10 years ago |
|
Aleksander Machniak
|
a958748947
|
CS fixes
|
10 years ago |
|
Aleksander Machniak
|
3779b67a9c
|
Set version number to 1.2-git
|
11 years ago |
|
Thomas Bruederli
|
2f8b1036da
|
Bump version and copyright year
|
11 years ago |
|
Aleksander Machniak
|
681ba6fc3c
|
Improve system security by using optional special URL with security token
Allows to define separate server/path for image/js/css files
Fix bugs where CSRF attacks were still possible on some requests
|
11 years ago |
|
Thomas Bruederli
|
c45507e317
|
Fix login error message display broken in b51de327
|
11 years ago |
|
Thomas Bruederli
|
b51de3279f
|
Display custom error messages from plugins hooks (as documented in the API spec)
|
11 years ago |
|
Thomas Bruederli
|
a873d934f5
|
Give precedence to plugin.* actions over custom tasks registered by plugins
|
11 years ago |
|
Aleksander Machniak
|
d01f9fc7f5
|
Add option (disabled_actions) to disable UI elements/actions (#1489638)
|
11 years ago |
|
Thomas Bruederli
|
7e7e451b66
|
Warn for unsent/unsaved message when closing compose window; remove localStorage copy if page was left intentionally but not on session errors (#1489818)
|
11 years ago |
|
Aleksander Machniak
|
d19a9b35cc
|
Remove obsolete code that disables session check on 'send' action
|
11 years ago |
|
Aleksander Machniak
|
ba5c53e5c3
|
Send X-UA-Compatible as HTTP header instead of meta tag
|
11 years ago |
|
Aleksander Machniak
|
b360f707e8
|
Small code improvement
|
11 years ago |
