Commit Graph

31 Commits

Author SHA1 Message Date
Aleksander Machniak
dcabc1d814 Merge remote-tracking branch 'upstream/master'
Conflicts:
	tests/Framework/Washtml.php
2016-07-31 09:26:19 +02:00
Aleksander Machniak
edfd9da42a Support MathML in HTML message preview (#5182) 2016-07-17 11:15:37 +02:00
Aleksander Machniak
6737e293bb Wash position:fixed style in HTML mail for better security (#5264) 2016-05-29 17:09:41 +02:00
Aleksander Machniak
6652367d65 Fix XSS issue in href attribute on area tag (#5240, #5241) 2016-05-06 08:28:15 +02:00
Aleksander Machniak
0e77b6f1b3 Fix regression where xml mode could be used to parse xhtml messages causing empty result 2016-01-20 08:44:31 +01:00
Aleksander Machniak
ed1d212ae2 Improved SVG cleanup code 2016-01-16 09:03:51 +01:00
Aleksander Machniak
023d3eb031 Refactor wash_attribs() - fix regressions 2016-01-12 13:57:30 +01:00
Aleksander Machniak
a1fdb205f8 Extend rcube_washtml with SVG support 2016-01-09 18:26:09 +01:00
Aleksander Machniak
9234903287 Fix HTML sanitizer to skip <!-- node type X --> in output (#1490583) 2015-11-05 08:46:43 +01:00
Aleksander Machniak
f4c512336d Fix "washing" of style elements wrapped into many lines 2015-08-10 10:17:05 +02:00
Aleksander Machniak
a958748947 CS fixes 2015-06-07 15:26:33 +02:00
Aleksander Machniak
759566fe99 Fix parsing invalid HTML messages with BOM after <!DOCTYPE> (#1490291) 2015-02-27 09:13:39 +01:00
Aleksander Machniak
786aa0725e Fix XSS issue in style attribute handling (#1490227) 2015-01-13 09:41:41 +01:00
Aleksander Machniak
7b924535fd CS fixes 2015-01-03 13:59:07 +01:00
Aleksander Machniak
75bbada03b Remove code for PHP<5.3, use PHP_VERSION_ID instead of version_compare() for version checks 2014-08-24 11:23:33 +02:00
Aleksander Machniak
c5bfe69e21 Improved video support, all tinymce related resources moved to program/js/tinymce/roundcube dir 2014-06-04 18:42:57 +02:00
Aleksander Machniak
5bf83d551e Fix unintentional line-height style modification in HTML messages (#1489917) 2014-05-27 14:44:52 +02:00
Aleksander Machniak
82ed256f6e Fix incorrect handling of HTML comments in messages sanitization code (#1489904) 2014-05-20 19:25:45 +02:00
Aleksander Machniak
f96fec6b8c Fix "washing" of unicoded style attributes (#1489777) 2014-04-11 09:13:59 +02:00
Aleksander Machniak
c77a8497e7 Fix again xdebug.max_nesting_level limit handling (#1489110) 2014-04-05 09:25:57 +02:00
Aleksander Machniak
c0dda0556c Allow single quote in style attribute values.
E.g. "font-family: 'Tahoma'" should not be removed.
2014-01-24 11:22:02 +01:00
Aleksander Machniak
c7250749ab Fix issue where deprecated syntax for HTML lists was not handled properly (#1488768) 2013-12-28 19:14:51 +01:00
Aleksander Machniak
ffec857b69 Fix handling of invalid closing tags in HTML messages (#1489446) 2013-11-28 09:12:03 +01:00
Aleksander Machniak
af79a7b837 Fixed issues where HTML comments inside style tag would hang Internet Explorer 2013-10-04 09:40:37 +02:00
Aleksander Machniak
bfd24fcc04 Use DOMDocument LIBXML_PARSEHUGE and LIBXML_COMPACT options if possible (#1489302) 2013-10-02 13:15:29 +02:00
rodrigo
b6a640bdc9 replaces smart quotes with regular quotes. Fixes improper doctype declarations in html emails 2013-07-24 14:52:45 -07:00
Aleksander Machniak
cb3e2fe0c2 Fix displaying messages with invalid self-closing HTML tags (#1489137) 2013-05-31 15:42:22 +02:00
Aleksander Machniak
a8994090bb Fix fatal error when xdebug.max_nesting_level was exceeded in rcube_washtml (#1489110) 2013-05-24 09:19:57 +02:00
Aleksander Machniak
1bce142058 Fix handling of some conditional comment tags in HTML message (#1489004) 2013-03-22 09:35:47 +01:00
Aleksander Machniak
1f910cb50d Fix handling link href attribute value with (valid) newline characters (#1488940) 2013-02-01 20:04:00 +01:00
Aleksander Machniak
7ac94421bf Move washtml class into Roundcube Framework (rcube_washtml), add some improvements 2012-12-25 18:06:17 +01:00