95 Commits (1.5.6)

Author SHA1 Message Date
Aleksander Machniak 5ec496885e Fix cross-site scripting (XSS) vulnerability in setting Content-Type/Content-Disposition for attachment preview/download 2 years ago
Aleksander Machniak 8d823e2947 Fix cross-site scripting (XSS) vulnerability in handling of SVG in HTML messages (#9168) 2 years ago
Aleksander Machniak fe42e143ca Fix cross-site scripting (XSS) vulnerability in handling of linkrefs in plain text messages 2 years ago
Aleksander Machniak 56a1d651f0 Fix so output of log_date_format with microseconds contains time in server time zone, not UTC 2 years ago
Aleksander Machniak a30206bf6a Fix bug where a non-ASCII character in app.js could cause error in javascript engine (#8894) 3 years ago
Aleksander Machniak c71697fd21 Update changelog 3 years ago
Aleksander Machniak 6abd913566 Fix so N property always exists in a vCard export (#8771) 3 years ago
Thomas Bruederli 88c1566126 Prepare release 1.5.3 3 years ago
Aleksander Machniak 9822616191 Fix support for DSN specification without host e.g. pgsql:///dbname (#8558) 3 years ago
Aleksander Machniak 62d0287e61 Fix bug where title tag content was displayed in the body if it contained HTML tags (#8540) 3 years ago
Aleksander Machniak c9617a6b1a Fix problem with aria-hidden=true on toolbar menus in the Elastic skin (#8517) 3 years ago
Aleksander Machniak 22066d8ffc Fix broken encoding of HTML content encapsulated in a RTF attachment (#8444) 3 years ago
Aleksander Machniak 1b4f364430 Fix bug where DSN flag state wasn't stored with a draft (#8371) 3 years ago
Aleksander Machniak c3da7b9f45 Enigma: Fix double quoted-printable encoding of pgp-signed messages with no attachments (#8413) 3 years ago
Aleksander Machniak 96e9427616 Fix bug where session could time out if DB and PHP timezone were different (#8303) 3 years ago
Aleksander Machniak c093f658d3 Update changelog 3 years ago
Aleksander Machniak d760749ca3 Fix handling of message/rfc822 parts that are small and are multipart structures with a single part (#8458) 3 years ago
Aleksander Machniak 7270ef6ee5 Fix bug where attachment icons were stuck at the top of the messages list in Safari (#8433) 4 years ago
Aleksander Machniak ec613a6060 Update changelog 4 years ago
Aleksander Machniak 5bcb76298e Fix setting HTML mode on reply/forward of a signed message (#8405) 4 years ago
Aleksander Machniak c33541b03a Fix handling of RFC2231-encoded attachment names inside of a message/rfc822 part (#8418) 4 years ago
Aleksander Machniak fbc424546d Fix bug where small message/rfc822 parts could not be decoded (#8408) 4 years ago
Aleksander Machniak 6d5c41e242 Fix mail headers injection via the subject field on mail compose (#8404) 4 years ago
Aleksander Machniak 243312c50f Fix various PHP8 warnings (#8392) 4 years ago
Thomas Bruederli 5016788716 Set release 1.5.2 title to changelog 4 years ago
Aleksander Machniak 8894fddd59 Security: Fix cross-site scripting (XSS) via HTML messages with malicious CSS content 4 years ago
Thomas Bruederli 3a7d5fbbfc Update CHANGELOG 4 years ago
Aleksander Machniak 1fd288099f Fix scrolling and missing Close button in the Select image dialog in Elastic/mobile (#8367) 4 years ago
Aleksander Machniak fad77f1b6c Fix chpass-wrapper.py helper compatibility with Python 3 (#8324) 4 years ago
Aleksander Machniak 918730b46f Fix some PHP8 compatibility issues (#8363) 4 years ago
Aleksander Machniak 4463865b12 Fix handling of unicode/special characters in custom From input (#8357) 4 years ago
Aleksander Machniak 72d2e96825 Update changelog 4 years ago
Thomas Bruederli c8361a9b9c Update CHANGELOG 4 years ago
Thomas Bruederli 4851ab3dd9 Bump version to 1.5.1 4 years ago
Aleksander Machniak d87ddd1170 Update changelog 4 years ago
Aleksander Machniak 48afc9a873 Fix an infinite loop when parsing environment variables with float/integer values (#8293) 4 years ago
Aleksander Machniak c33fbf0905 Fix bug where attachment download could sometimes fail with a CSRF check error (#8283) 4 years ago
Aleksander Machniak f8426f5334 Fix fetching headers of multiple message parts at once in rcube_imap_generic::fetchMIMEHeaders() (#8282) 4 years ago
Aleksander Machniak 80b453c24a Fix PHP fatal error on an undefined constant in contacts import action (#8277) 4 years ago
Aleksander Machniak fdca2a55ed Fix bug with show_images setting where option 1 and 3 were swapped (#8268) 4 years ago
Aleksander Machniak d203db0366 Fix bug where adding a contact to trusted senders via "Always allow from..." button didn't work (#8264, #8268) 4 years ago
Aleksander Machniak ca0cce0e11 Fix charset conversion errors on PHP < 8 for charsets not supported by mbstring (#8252) 4 years ago
Aleksander Machniak f4ee8c44c2 Fix bug where \u200b characters were added into the recipient input preventing mail delivery (#8269) 4 years ago
Aleksander Machniak eb5e38558d Fix bug in Larry skin where headers toggle state was reset on full page preview (#8203) 4 years ago
Aleksander Machniak 27813bb762 Update changelog 4 years ago
Aleksander Machniak d4bc09bd67 Fix installation/upgrade on MySQL 5.5 - Index column size too large (#8231) 4 years ago
Aleksander Machniak d517b8398d Fix undefined constant error in Installer on Windows (#8258) 4 years ago
Aleksander Machniak 3158f11b2a Fix database initialization if db_prefix is a schema prefix (#8221) 4 years ago
Aleksander Machniak e8b7d6b83f Fix handling of dark_mode_support:false setting in skins meta.json - also when devel_mode=false (#8249) 4 years ago
Aleksander Machniak c36af329ef Fix colors on "Show source" page in dark mode (#8246) 4 years ago