Pablo Zmdl
cd00b7e85d
Version 1.7-rc4
2026-02-13 21:20:07 +01:00
Pablo Zmdl
3667df44ab
Merge branch 'master' into release-1.7
2026-02-13 21:17:52 +01:00
Pablo Zmdl
6a6d331509
Ensure correct permissions and absence of ACLs in files for release
...
Some combinations of sed executed on virtiofs-mounted file systems produce
files with wrong permissions (0600) and ACLs set, which we want to avoid. This
change makes sure of that.
Signed-off-by: Pablo Zmdl <pablo@nextcloud.com >
2026-02-13 21:14:37 +01:00
Aleksander Machniak
08808138c7
Fix phpstan regression
2026-02-12 14:48:23 +01:00
Aleksander Machniak
c1acfe677a
Installer: Fix broken link to download the created configuration file ( #10092 )
2026-02-12 14:38:59 +01:00
Pablo Zmdl
28f041423b
Version 1.7-rc3
2026-02-09 16:02:51 +01:00
Pablo Zmdl
bd12deef80
Merge branch 'master' into release-1.7
2026-02-09 13:45:07 +01:00
Aleksander Machniak
2af7417d89
Fix str_contains() use
2026-02-08 10:27:30 +01:00
Aleksander Machniak
5096117c62
Fix PHP warnings
2026-02-08 09:31:53 +01:00
Aleksander Machniak
8dac75abbd
Fix CSS injection vulnerability reported by CERT Polska
2026-02-08 09:24:29 +01:00
Aleksander Machniak
26d7677471
Fix remote image blocking bypass via SVG content reported by nullcathedral
2026-02-08 09:21:34 +01:00
Aleksander Machniak
4c378113ce
Set folder property also on a result from the cache
2026-01-28 11:14:13 +01:00
Aleksander Machniak
609124d94f
OAuth: Add oauth_auth_type option
2026-01-25 13:03:05 +01:00
Aleksander Machniak
75dbc2fe11
OAuth: Fix bug where it was impossible to login again after logout ( #10073 )
2026-01-25 12:26:43 +01:00
Aleksander Machniak
343c6a0c2d
Update changelog
...
[skip ci]
2026-01-25 10:16:14 +01:00
llamaonaskateboard
daa9c17b79
Fix syntax error in DDL scripts for Postgres ( #10052 ) ( #10070 )
2026-01-25 10:15:22 +01:00
Aleksander Machniak
719b8be259
Fix handling of string-list format values for date tests in Out of Office ( #10075 )
2026-01-25 09:42:52 +01:00
Aleksander Machniak
d8363fbd7d
Fix new phpstan error
2026-01-25 08:40:17 +01:00
Aleksander Machniak
0e5712b89f
Update localization
2026-01-11 10:13:10 +01:00
Aleksander Machniak
3cebe59538
Remove some old code for IE
2026-01-04 13:39:51 +01:00
Aleksander Machniak
cb7f2d0066
Fix a UI issue on using browser Back button after allowing remote resources ( #10062 )
2026-01-04 13:34:43 +01:00
Aleksander Machniak
42794a40aa
Support request_url config option for resolving relative URLs ( #9868 )
2026-01-01 15:14:18 +01:00
Aleksander Machniak
7a3843f9b7
Support X-Forwarded-Host/X-Forwarded-Port in self URLs generation ( #9952 )
2026-01-01 12:57:02 +01:00
Aleksander Machniak
2e43fe13de
Update changelog
...
[skip ci]
2025-12-28 19:49:57 +01:00
James Renken
fd395ddf0d
Support $HasAttachment/$HasNoAttachment keywords for "With attachment" search filter ( #10056 )
...
Also make content-types consistent between app.js:add_message_row() & rcmail_action_mail_index()
Fixes #10053
2025-12-28 19:49:04 +01:00
Aleksander Machniak
d5737b2a68
Makefile: Keep Makefile in the package
2025-12-27 11:41:53 +01:00
Aleksander Machniak
98c811dc90
CS fixes, cleanup
2025-12-27 11:21:30 +01:00
Michal Stanke
64bfcb6df1
Extend Dovecot passwdfile driver with dynamic file path support ( #10038 )
2025-12-27 11:13:34 +01:00
addyreal
58eeb2c0c7
Added explicit type for main in plugins/password/helpers preventing compilation ( #10058 )
2025-12-27 10:54:25 +01:00
Pablo Zmdl
c605db4370
Actually push the tag if instructed to do so (Makefile)
2025-12-15 15:46:53 +01:00
Pablo Zmdl
d3f0ba59d3
Merge branch 'master' into release-1.7
2025-12-15 12:44:11 +01:00
Aleksander Machniak
e5d5ed91bd
Fix the regexp so it will produce less false-positives
2025-12-15 11:36:05 +01:00
Pablo Zmdl
d7beda2d37
Merge branch 'master' into release-1.7
2025-12-15 09:48:06 +01:00
Aleksander Machniak
366ad7a174
Fix syntax error in DDL scripts for Postgres ( #10052 )
2025-12-14 12:30:50 +01:00
Aleksander Machniak
dc4ffea1d0
CS fix
2025-12-14 09:15:49 +01:00
Aleksander Machniak
7c3267b9b0
Fix Information Disclosure vulnerability in the HTML style sanitizer
...
reported by somerandomdev
2025-12-14 09:02:25 +01:00
Aleksander Machniak
5162a0d9d7
Fix Cross-Site-Scripting vulnerability via SVG's animate tag
...
reported by Valentin T., CrowdStrike.
2025-12-14 09:01:26 +01:00
Pablo Zmdl
79cd15cb4c
Merge branch 'master' into release-1.7
2025-12-11 17:51:45 +01:00
Pablo Zmdl
59700c5ee8
Fix Makefile for release
2025-12-11 17:50:58 +01:00
Pablo Zmdl
6bae45ee96
Merge branch 'master' into release-1.7
2025-12-11 17:50:04 +01:00
Pablo Zmdl
1421d0d96f
Changelog item for rel=noopener ( a361fa79f1)
2025-12-10 16:34:41 +01:00
Pablo Zmdl
f32fb5e3d2
Fix renaming SQL index in sqlite migration
2025-12-10 15:13:40 +01:00
Pablo Zmdl
42a5289958
Fix table name in SQL migration
2025-12-10 15:13:40 +01:00
Pablo Zmdl
202daa6f97
Replace changed by expires_at in session handling
...
This prepares using extended session lifetimes configurable per session
2025-12-04 14:47:16 +01:00
Aleksander Machniak
ea110e9b4b
Bump managesieve version, update changelog
2025-11-29 18:29:36 +01:00
Philip Weir
b79692c50a
managesieve: show warning when actions in wrong order ( #10015 )
...
* managesieve: show warning when actions in wrong order
* simplify action prioirty detection
2025-11-29 18:26:44 +01:00
Aleksander Machniak
305ff6a791
Update changelog
...
[skip ci]
2025-11-29 18:22:20 +01:00
Dominik Schmidt
ce893b2e1d
Preserve requested url on oidc login ( #10033 )
...
* feat: preserve requested url on oidc login
* fix(oidc): redirect to idp when session timed out
2025-11-29 18:21:16 +01:00
Aleksander Machniak
4583641133
Localization: Remove empty lines
2025-11-29 18:18:58 +01:00
Aleksander Machniak
7d960125dc
rcube_db_param implements Stringable interface
2025-11-29 15:53:38 +01:00
