Aleksander Machniak
7f836fc7bc
Update changelog
[skip ci]
2 months ago
Aleksander Machniak
ff8c9ef59c
Fix bug where attachments with content type of `application/vnd.ms-tnef` were not parsed ( #7119 )
2 months ago
Aleksander Machniak
2ad3ba61b2
Fix cursor position on "below the quote" reply in HTML mode ( #8700 )
2 months ago
Aleksander Machniak
c174c4150a
- Fix connecting to LDAP using ldapi:// URI ( #8990 )
2 months ago
Aleksander Machniak
80df7021ff
Fix Delete and Empty buttons state while creating a folder ( #9047 )
3 months ago
Aleksander Machniak
bd390e1af6
Remove mobile/floating Create button from the list in Settings > Folders ( #9661 )
3 months ago
Aleksander Machniak
4e55c8f287
Fix a default value and documentation of password_ldap_encodage option ( #9658 )
3 months ago
Aleksander Machniak
c32a86cda2
Fix bug where a wrong SPECIAL-USE folder could have been detected, if there were more than one per-type ( #9781 )
3 months ago
Aleksander Machniak
67d5dfc950
Fix removing/expiring redis/memcache records when using a key prefix
3 months ago
Aleksander Machniak
3cf128da4b
Fix HTML message preview if it contains floating tables ( #9804 )
4 months ago
Aleksander Machniak
56ad7aae2f
Fix dark mode bug where wrong colors were used for blockquotes in HTML mail preview ( #9820 )
4 months ago
Aleksander Machniak
b86fd45abb
OAuth: Fix/improve token refresh
4 months ago
Aleksander Machniak
eda029157f
Fix PHP warning in index.php ( #9813 )
5 months ago
Aleksander Machniak
08248d99f8
Improve installer to fix confusion about disabling SMTP authentication ( #9801 )
5 months ago
Aleksander Machniak
ea41ae4b96
Fix match-type selector (remove unsupported options) in delete header action ( #9610 )
5 months ago
Aleksander Machniak
4a9516b2c9
Fix decoding of attachment names encoded using both RFC2231 and RFC2047 standards ( #9725 )
6 months ago
Aleksander Machniak
f3b58b2f83
Update changelog
[skip ci]
6 months ago
Aleksander Machniak
3e57959976
Fix handling of binary mail parts (e.g. PDF) encoded with quoted-printable ( #9728 )
7 months ago
Aleksander Machniak
b206cbc87a
IMAP: Partial support for ANNOTATE-EXPERIMENT-1 extension (RFC 5257)
8 months ago
Aleksander Machniak
df02322d6a
Fix Oauth issues with use_secure_urls=true ( #9722 )
8 months ago
Aleksander Machniak
726f9c5d3c
Update changelog
[skip ci]
8 months ago
Aleksander Machniak
5c38c67287
Fix PHP fatal error when parsing some malformed BODYSTRUCTURE responses ( #9689 )
8 months ago
Pablo Zmdl
893c557283
Backport virtuser file email2user fix ( #9691 )
* Merge pull request #9668 from idressos/virtuser_file-email2user-fix
Fix virtuser_file plugin email2user() function not accounting for backward slashes in username
Cherry-picked from 875e370d7
(parent mainline 1).
* Changelog entry for #9668
(cherry picked from commit a07d61a80c
)
9 months ago
Aleksander Machniak
dc9ace7526
Fix regression causing inline SVG images to be missing in mail preview ( #9644 )
10 months ago
Aleksander Machniak
c008d62724
Update changelog
[skip ci]
10 months ago
Aleksander Machniak
84e0bafa5b
Managesieve: Fix current script state after initial scripts creation in managesieve_kolab_master mode
10 months ago
Aleksander Machniak
62a8a37ac8
Update changelog
[skip ci]
10 months ago
Aleksander Machniak
602a989697
Fix PHP warning ( #9611 )
11 months ago
Aleksander Machniak
f3c526e6d1
Fix PHP deprecation warnings ( #9616 )
11 months ago
Aleksander Machniak
83f56f1758
OAuth: Support standard authentication with short-living password received with OIDC token ( #9530 )
11 months ago
Aleksander Machniak
f343ecea09
Fix regression where HTML messages were displayed unstyled ( #9586 )
12 months ago
Aleksander Machniak
32fed15346
Fix regression where printing/scaling/rotating image attachments was broken ( #9571 )
12 months ago
Aleksander Machniak
602d0f566e
Fix information leak (access to remote content) via insufficient CSS filtering [CVE-2024-42010]
Credits to Oskar Zeino-Mahmalat (Sonar) https://www.sonarsource.com
12 months ago
Aleksander Machniak
89c8fe9ae9
- Fix XSS vulnerability in serving of attachments other than HTML or SVG [CVE-2024-42008]
Credits to Oskar Zeino-Mahmalat (Sonar) https://www.sonarsource.com
12 months ago
Aleksander Machniak
68af7c864a
Fix XSS vulnerability in post-processing of sanitized HTML content [CVE-2024-42009]
Credits to Oskar Zeino-Mahmalat (https://www.sonarsource.com )
12 months ago
Aleksander Machniak
b5ed0e4946
Fix bug where imap_conn_option's 'socket' was ignored ( #9566 )
12 months ago
Aleksander Machniak
3567090a99
Fix infinite loop when parsing malformed Sieve script ( #9562 )
1 year ago
Aleksander Machniak
c96ff0e811
Managesieve: Protect special scripts in managesieve_kolab_master mode
1 year ago
Aleksander Machniak
f6c92ebafe
Fix bug where a long subject title could not be displayed in some cases ( #9416 )
1 year ago
Aleksander Machniak
9d9f4d6926
Fix bug where an unhandled exception was caused by an invalid image attachment ( #9475 )
GD functions may throw ValueError in some cases since PHP 8.0.
We wrap them in try/catch blocks.
1 year ago
Aleksander Machniak
8eb583b499
Fix bug where "with attachment" filter could fail on some fts engines ( #9514 )
1 year ago
Aleksander Machniak
55447653c5
Fix invalid line break characters in multi-line text in Sieve scripts ( #9543 )
1 year ago
Aleksander Machniak
71804a8c53
Fix bug where some messages could get malformed in an import from a MBOX file ( #9510 )
1 year ago
Aleksander Machniak
e8e0c68369
Fix decoding mail parts with multiple base64-encoded text blocks ( #9290 )
1 year ago
Aleksander Machniak
ccf3d8e43f
Update changelog
1 year ago
Aleksander Machniak
22d403d5fd
Fix fatal error when parsing some TNEF attachments ( #9462 )
1 year ago
Aleksander Machniak
f6bc11f611
Update changelog
[skip ci]
1 year ago
Aleksander Machniak
43aaaa5286
Fix cross-site scripting (XSS) vulnerability in handling SVG animate attributes
Reported by Valentin T. and Lutz Wolf of CrowdStrike.
1 year ago
Aleksander Machniak
cde4522c5c
Fix cross-site scripting (XSS) vulnerability in handling list columns from user preferences
Reported by Huy Nguyễn Phạm Nhật.
1 year ago
Aleksander Machniak
5ea9f37ce3
Fix command injection via crafted im_convert_path/im_identify_path on Windows
Reported by Huy Nguyễn Phạm Nhật.
1 year ago