Mirrors/roundcubemail
2
0
Fork 0
mirror of https://github.com/roundcube/roundcubemail.git synced 2026-03-03 23:04:01 +01:00
Code Issues Packages Projects Releases Wiki Activity
7,781 Commits 72 Branches 205 Tags
0b799bee90d897d052d0310300a377e067e1fa34
Commit Graph

26 Commits

Author SHA1 Message Date
Thomas Bruederli
cc850263d4 Add optional timezone argument for date conversion 2014-07-31 14:29:14 +02:00
Aleksander Machniak
49dad5f669 Fix broken normalize_string(), add support for ISO-8859-2 2014-05-27 11:39:31 +02:00
Felix Eckhofer
30e6b980a6 Remove usage of $RCMAIL global variable 2014-03-26 20:45:33 +01:00
Felix Eckhofer
ef721fc430 Add config variable 'proxy_whitelist' 
HTTP headers X_FORWARDED_* and X_REAL_IP are only evaluated when
received from an IP listed in proxy_whitelist. Furthermore, only the
last non-trusted IP from X-Forwarded-For is used in place of the real
ip.

Without this, an attacker can easily spoof the headers and control the
result of the ip or ssl check.

This fixes several problems with [3a4c9f42], [4d480b36] and [a520f331] as
mentioned in #1489729.
 2014-03-26 20:44:16 +01:00
Aleksander Machniak
517c9f9a8d Fix directories check in Installer on Windows (#1489576) 
Added rcube_utils::is_absolute_path() method
 2014-02-07 14:43:51 +01:00
Aleksander Machniak
f6d23a8dce Fix PHP warning when 1st argument of parse_host() is not a string (#1489486) 2013-12-20 17:41:10 +01:00
Aleksander Machniak
a520f331c1 Fix handling of X-Forwarded-For header with multiple addresses (#1489481) 2013-12-17 09:21:05 +01:00
Aleksander Machniak
d19c0f9f30 In normalize_string() replace 4-byte unicode characters with '?' character. 
These are not supported in default utf-8 charset on mysql,
the chance we'd need them in searching is very low.
 2013-12-12 08:58:54 +01:00
Aleksander Machniak
b1f3c3bee8 Fixed saving contact birthday/anniversary dates before 01-01-1970 2013-10-28 15:28:58 +01:00
Thomas Bruederli
fdb30f3279 Fix CSS selector modifications when nested in @media blocks 2013-10-26 11:49:02 +02:00
Aleksander Machniak
ff6de99ae4 Some micro-optimizations 2013-10-13 16:12:43 +02:00
Aleksander Machniak
d1abd8e339 Fix infinite loop in rcube_utils::mod_css_styles() after recent changes in rcube_string_replacer 2013-10-12 12:28:40 +02:00
Aleksander Machniak
af79a7b837 Fixed issues where HTML comments inside style tag would hang Internet Explorer 2013-10-04 09:40:37 +02:00
Aleksander Machniak
eafd5b1aa4 Improved mailto: link arguments handling (#1489363) 2013-10-03 17:36:31 +02:00
Thomas Bruederli
52830ea605 Improve handling of date strings and DateTime values in contacts 2013-09-10 23:37:10 +02:00
Aleksander Machniak
b32fab16ef Fix handling of non-default date formats (#1489294) 
- remove ambiguous m/d/Y format from default config
 2013-08-24 18:08:54 +02:00
Thomas Bruederli
4d480b36ea Respect HTTP_X_FORWARDED_FOR and HTTP_X_REAL_IP variables for session IP check 2013-07-17 08:04:15 +02:00
Aleksander Machniak
39b905b7a8 Canonize boolean ini_get() results (#1489189) 2013-06-20 15:08:10 +02:00
Aleksander Machniak
896e2b4e51 Add more rcube_utils tests 2013-05-28 21:26:44 +02:00
Aleksander Machniak
fe0f1d589b Improve rcube_utils::file2class() to not return duplicates 2013-05-28 20:59:44 +02:00
Aleksander Machniak
3725cfb245 Avoid uninitialized/unused variables 2013-05-07 15:12:22 +02:00
Aleksander Machniak
b7570fb564 Fix parsing invalid date string (#1489035) 2013-04-15 14:57:05 +02:00
Thomas Bruederli
293a5798af Use the right variable for IPv6 check 2013-01-23 17:58:09 +01:00
Aleksander Machniak
d2534c63f2 Cleanup, remove file paths from doc 2012-12-18 09:07:00 +01:00
Thomas Bruederli
60226a75d8 Separate the very application-specific output classes from the Roundcube framework; add autoloader for rmail* classes 2012-11-27 12:13:33 +01:00
Aleksander Machniak
ba6f21caeb Framework files moved to lib/Roundcube 2012-11-21 19:52:03 +01:00