Aleksander Machniak
|
5ec496885e
|
Fix cross-site scripting (XSS) vulnerability in setting Content-Type/Content-Disposition for attachment preview/download
Thanks to rehme.infosec for reporting the issues.
|
2 years ago |
Aleksander Machniak
|
8d823e2947
|
Fix cross-site scripting (XSS) vulnerability in handling of SVG in HTML messages (#9168)
|
2 years ago |
Aleksander Machniak
|
fe42e143ca
|
Fix cross-site scripting (XSS) vulnerability in handling of linkrefs in plain text messages
Thanks to Niraj Shivtarkar for the report.
|
2 years ago |
Aleksander Machniak
|
56a1d651f0
|
Fix so output of log_date_format with microseconds contains time in server time zone, not UTC
|
2 years ago |
Aleksander Machniak
|
a30206bf6a
|
Fix bug where a non-ASCII character in app.js could cause error in javascript engine (#8894)
|
3 years ago |
Aleksander Machniak
|
c71697fd21
|
Update changelog
|
3 years ago |
Aleksander Machniak
|
6abd913566
|
Fix so N property always exists in a vCard export (#8771)
|
3 years ago |
Thomas Bruederli
|
88c1566126
|
Prepare release 1.5.3
|
3 years ago |
Aleksander Machniak
|
9822616191
|
Fix support for DSN specification without host e.g. pgsql:///dbname (#8558)
|
3 years ago |
Aleksander Machniak
|
62d0287e61
|
Fix bug where title tag content was displayed in the body if it contained HTML tags (#8540)
|
3 years ago |
Aleksander Machniak
|
c9617a6b1a
|
Fix problem with aria-hidden=true on toolbar menus in the Elastic skin (#8517)
|
3 years ago |
Aleksander Machniak
|
22066d8ffc
|
Fix broken encoding of HTML content encapsulated in a RTF attachment (#8444)
|
3 years ago |
Aleksander Machniak
|
1b4f364430
|
Fix bug where DSN flag state wasn't stored with a draft (#8371)
|
3 years ago |
Aleksander Machniak
|
c3da7b9f45
|
Enigma: Fix double quoted-printable encoding of pgp-signed messages with no attachments (#8413)
|
3 years ago |
Aleksander Machniak
|
96e9427616
|
Fix bug where session could time out if DB and PHP timezone were different (#8303)
|
3 years ago |
Aleksander Machniak
|
c093f658d3
|
Update changelog
|
3 years ago |
Aleksander Machniak
|
d760749ca3
|
Fix handling of message/rfc822 parts that are small and are multipart structures with a single part (#8458)
|
3 years ago |
Aleksander Machniak
|
7270ef6ee5
|
Fix bug where attachment icons were stuck at the top of the messages list in Safari (#8433)
|
4 years ago |
Aleksander Machniak
|
ec613a6060
|
Update changelog
[skip ci]
|
4 years ago |
Aleksander Machniak
|
5bcb76298e
|
Fix setting HTML mode on reply/forward of a signed message (#8405)
|
4 years ago |
Aleksander Machniak
|
c33541b03a
|
Fix handling of RFC2231-encoded attachment names inside of a message/rfc822 part (#8418)
|
4 years ago |
Aleksander Machniak
|
fbc424546d
|
Fix bug where small message/rfc822 parts could not be decoded (#8408)
|
4 years ago |
Aleksander Machniak
|
6d5c41e242
|
Fix mail headers injection via the subject field on mail compose (#8404)
|
4 years ago |
Aleksander Machniak
|
243312c50f
|
Fix various PHP8 warnings (#8392)
|
4 years ago |
Thomas Bruederli
|
5016788716
|
Set release 1.5.2 title to changelog
|
4 years ago |
Aleksander Machniak
|
8894fddd59
|
Security: Fix cross-site scripting (XSS) via HTML messages with malicious CSS content
|
4 years ago |
Thomas Bruederli
|
3a7d5fbbfc
|
Update CHANGELOG
|
4 years ago |
Aleksander Machniak
|
1fd288099f
|
Fix scrolling and missing Close button in the Select image dialog in Elastic/mobile (#8367)
|
4 years ago |
Aleksander Machniak
|
fad77f1b6c
|
Fix chpass-wrapper.py helper compatibility with Python 3 (#8324)
|
4 years ago |
Aleksander Machniak
|
918730b46f
|
Fix some PHP8 compatibility issues (#8363)
|
4 years ago |
Aleksander Machniak
|
4463865b12
|
Fix handling of unicode/special characters in custom From input (#8357)
|
4 years ago |
Aleksander Machniak
|
72d2e96825
|
Update changelog
[skip ci]
|
4 years ago |
Thomas Bruederli
|
c8361a9b9c
|
Update CHANGELOG
|
4 years ago |
Thomas Bruederli
|
4851ab3dd9
|
Bump version to 1.5.1
|
4 years ago |
Aleksander Machniak
|
d87ddd1170
|
Update changelog
[skip ci]
|
4 years ago |
Aleksander Machniak
|
48afc9a873
|
Fix an infinite loop when parsing environment variables with float/integer values (#8293)
|
4 years ago |
Aleksander Machniak
|
c33fbf0905
|
Fix bug where attachment download could sometimes fail with a CSRF check error (#8283)
|
4 years ago |
Aleksander Machniak
|
f8426f5334
|
Fix fetching headers of multiple message parts at once in rcube_imap_generic::fetchMIMEHeaders() (#8282)
|
4 years ago |
Aleksander Machniak
|
80b453c24a
|
Fix PHP fatal error on an undefined constant in contacts import action (#8277)
|
4 years ago |
Aleksander Machniak
|
fdca2a55ed
|
Fix bug with show_images setting where option 1 and 3 were swapped (#8268)
|
4 years ago |
Aleksander Machniak
|
d203db0366
|
Fix bug where adding a contact to trusted senders via "Always allow from..." button didn't work (#8264, #8268)
...if the contact already existed in Personal addresses (or another default contacts source)
|
4 years ago |
Aleksander Machniak
|
ca0cce0e11
|
Fix charset conversion errors on PHP < 8 for charsets not supported by mbstring (#8252)
|
4 years ago |
Aleksander Machniak
|
f4ee8c44c2
|
Fix bug where \u200b characters were added into the recipient input preventing mail delivery (#8269)
|
4 years ago |
Aleksander Machniak
|
eb5e38558d
|
Fix bug in Larry skin where headers toggle state was reset on full page preview (#8203)
|
4 years ago |
Aleksander Machniak
|
27813bb762
|
Update changelog
[skip ci]
|
4 years ago |
Aleksander Machniak
|
d4bc09bd67
|
Fix installation/upgrade on MySQL 5.5 - Index column size too large (#8231)
|
4 years ago |
Aleksander Machniak
|
d517b8398d
|
Fix undefined constant error in Installer on Windows (#8258)
|
4 years ago |
Aleksander Machniak
|
3158f11b2a
|
Fix database initialization if db_prefix is a schema prefix (#8221)
|
4 years ago |
Aleksander Machniak
|
e8b7d6b83f
|
Fix handling of dark_mode_support:false setting in skins meta.json - also when devel_mode=false (#8249)
|
4 years ago |
Aleksander Machniak
|
c36af329ef
|
Fix colors on "Show source" page in dark mode (#8246)
|
4 years ago |