Commit Graph

8255 Commits

Author SHA1 Message Date
Aleksander Machniak
6ee6e7ae30 Fix cross-site scripting (XSS) vulnerability in handling of SVG in HTML messages (#9168) 2023-10-14 18:16:22 +02:00
Aleksander Machniak
d08d167884 Code improvements for latest changes regarding #9077, #7556 2023-10-08 10:36:18 +02:00
Aleksander Machniak
035a14df4a Fix localization broken in last commit 2023-10-08 10:28:31 +02:00
vladimirdulov
e7360d87b1 Make mail search scope configurable (#9077, #7556)
Co-authored-by: Vladimir D <vladimir@brandlight.org>
2023-10-08 10:24:28 +02:00
Sam Partington
c2ddaf15cd Add missing apostrophe in warning message (#9149) 2023-10-08 10:18:08 +02:00
Aleksander Machniak
7c1665b08f Fix PHP8 warning (#9160) 2023-10-08 09:51:37 +02:00
Aleksander Machniak
f0d1ae49f9 Fix default 'mime.types' path on Windows (#9113) 2023-10-01 14:12:25 +02:00
Aleksander Machniak
5350396e7f Fix bug in es_ES localization (#9146) 2023-10-01 14:09:06 +02:00
Aleksander Machniak
20447fa962 Fix PHP8 warnings (#9142) 2023-09-18 11:15:33 +02:00
Aleksander Machniak
16ee6865ca Fix cross-site scripting (XSS) vulnerability in handling of linkrefs in plain text messages
Thanks to Niraj Shivtarkar for the report.
2023-09-14 08:39:51 +02:00
Aleksander Machniak
68876f073d Fix various PHP warnings (#9098) 2023-08-20 08:43:05 +02:00
Aleksander Machniak
8cd3ceeb36 Fix "Show source" on mobile with x_frame_options = deny (#9084) 2023-08-20 08:34:20 +02:00
Aleksander Machniak
048e1e8e9b Fix PHP8 warnings 2023-08-20 08:13:35 +02:00
Ashus
50b53776ff Fix errors while upgrading plugins with SQL migrations (#9092) 2023-08-20 07:23:04 +02:00
Aleksander Machniak
35d7b1fa5c Relax uuencode header regexp 2023-08-13 13:15:24 +02:00
Aleksander Machniak
64eb733c39 Fix handling of an error case in Cyrus IMAP BINARY FETCH, fallback to non-binary FETCH (#9097) 2023-08-13 12:27:58 +02:00
Aleksander Machniak
57a285d15e Fix regression in decoding mail parts FETCHed from IMAP (#9096) 2023-08-13 10:51:47 +02:00
Aleksander Machniak
dfa18ab9d1 Fix handling of mail parts that are encoded with x-uuencode (#9096) 2023-08-12 09:53:53 +02:00
Aleksander Machniak
efad759e80 Fix PHP8 warning 2023-08-03 11:54:04 +02:00
Aleksander Machniak
ce99b50a71 Add missing Uyghur localization 2023-08-02 08:56:46 +02:00
Aleksander Machniak
1501ca4858 FIx PHP8 warning (#9071) 2023-07-23 16:29:43 +02:00
Aleksander Machniak
d2e020ae62 Add rcube_db::error_info() 2023-07-20 10:29:19 +02:00
Aleksander Machniak
94c78b350e Fix so install/update scripts do not require PEAR (#9037) 2023-07-15 18:43:00 +02:00
Aleksander Machniak
3b6c06f697 Fix wrong order of a multi-folder search result when sorting by size (#9065) 2023-07-15 08:58:56 +02:00
Aleksander Machniak
52ad2c1486 Fix PHP8 warnings 2023-07-13 11:37:39 +02:00
Aleksander Machniak
6fdcef3b6b Fix PHP8 warnings 2023-07-12 18:55:47 +02:00
Aleksander Machniak
39bc7a53cb Fix regression where LDAP addressbook 'filter' option was ignored (#9061)
Also fix some PHP8 warnings
2023-07-11 10:51:57 +02:00
Aleksander Machniak
6f35b2cc5b More fixes regarding rcmail::url() (#9052) 2023-07-10 18:27:56 +02:00
Adrien Beau
d8146b6150 Fix sort_folder_comparator (#9057)
In case $path2 is longer than $path1, and all folders in $path1 are
equal to the corresponding folder in $path2 (in other words: $path2 is a
subfolder of $path1), sort_folder_comparator currently considers them
equal because it stops comparing when it reaches the end of $path1.

This breaks the ordering done by uasort() above, and breaks code that
relies on the folder list being sorted, notably the folders settings
page.
2023-07-09 19:51:10 +02:00
Aleksander Machniak
f211757286 Fix bug where a duplicate <title> tag in HTML email could cause some parts being cut off (#9029) 2023-07-09 14:46:19 +02:00
Aleksander Machniak
813dacec71 Fix potential PHP fatal error when opening a message with message/rfc822 part (#8953) 2023-07-09 13:18:11 +02:00
Aleksander Machniak
d2e8a889c4 Fix regression that broke use_secure_urls feature (#9052) 2023-07-09 11:23:44 +02:00
Ville Ojamo
25e4a65e24 Update about.php copyright year to 2023 (#9050)
Fixes #9049.
2023-07-08 09:12:33 +02:00
Aleksander Machniak
57b161111f Fix bug where installto.sh/update.sh scripts were removing some essential options from the config file (#9051)
Plus small code improvements
2023-07-08 09:10:45 +02:00
Aleksander Machniak
251a7ae0e7 Don't require specific error_reporting
I think we're E_STRICT and E_NOTICE free now.
2023-07-07 09:13:04 +02:00
Aleksander Machniak
1aaf86f139 Fix one more regression regarding mail delete 2023-06-27 13:37:30 +02:00
Aleksander Machniak
d766cb56cd Fix one more regression regarding mail delete 2023-06-27 12:06:08 +02:00
Aleksander Machniak
02682a5351 Fix Delete button regression (#7141) 2023-06-26 18:52:38 +02:00
Aleksander Machniak
54cdba28d9 Fix bug where inline images in a composed message could get lost on page refresh 2023-06-25 16:19:42 +02:00
Aleksander Machniak
b8c83aa204 Use no-referrer policy for images pasted into HTML editor 2023-06-25 13:40:06 +02:00
Aleksander Machniak
d3bcfba010 Convert images in HTML content pasted into HTML editor to data: URIs (and later to attachments) (#6938) 2023-06-25 10:07:00 +02:00
Aleksander Machniak
9427ec1d35 Mouse-over menu on messages list (#7141) 2023-06-23 21:04:17 +02:00
Aleksander Machniak
b9de4841d3 Don't log an imap authentication error when log_logins=true 2023-06-15 10:54:38 +02:00
Aleksander Machniak
102b04e74e Fix PHP7 compat. break in last commit 2023-06-14 13:00:54 +02:00
Aleksander Machniak
3e32395acd Fix so output of log_date_format with microseconds contains time in server time zone, not UTC 2023-06-14 12:56:00 +02:00
Aleksander Machniak
ed430f0577 Fix PHP8 warnings 2023-06-12 12:14:11 +02:00
Aleksander Machniak
deba22aaa9 Bump version of masterminds/html5
ctype extension is not required anymore
2023-06-09 09:30:39 +02:00
Aleksander Machniak
e25608faae Remove redundant comma 2023-06-08 20:43:40 +02:00
Aleksander Machniak
7ccb8fa21a Add package name to the "Updating database schema..." output 2023-06-08 09:49:54 +02:00
Aleksander Machniak
901fa1163b Remove redundant if() condition 2023-06-06 13:00:59 +02:00