Commit Graph

22 Commits

Author SHA1 Message Date
Aleksander Machniak
dcabc1d814 Merge remote-tracking branch 'upstream/master'
Conflicts:
	tests/Framework/Washtml.php
2016-07-31 09:26:19 +02:00
Aleksander Machniak
bf5b3072c4 Fix MathML test on older PHP versions 2016-07-18 11:19:53 +02:00
Aleksander Machniak
edfd9da42a Support MathML in HTML message preview (#5182) 2016-07-17 11:15:37 +02:00
Aleksander Machniak
6737e293bb Wash position:fixed style in HTML mail for better security (#5264) 2016-05-29 17:09:41 +02:00
Aleksander Machniak
ca9ad75d96 Add some more tests for HREF attribute washing 2016-05-08 10:06:24 +02:00
Aleksander Machniak
6652367d65 Fix XSS issue in href attribute on area tag (#5240, #5241) 2016-05-06 08:28:15 +02:00
Aleksander Machniak
ed1d212ae2 Improved SVG cleanup code 2016-01-16 09:03:51 +01:00
Aleksander Machniak
9234903287 Fix HTML sanitizer to skip <!-- node type X --> in output (#1490583) 2015-11-05 08:46:43 +01:00
Aleksander Machniak
f4c512336d Fix "washing" of style elements wrapped into many lines 2015-08-10 10:17:05 +02:00
Aleksander Machniak
786aa0725e Fix XSS issue in style attribute handling (#1490227) 2015-01-13 09:41:41 +01:00
Aleksander Machniak
5bf83d551e Fix unintentional line-height style modification in HTML messages (#1489917) 2014-05-27 14:44:52 +02:00
Aleksander Machniak
82ed256f6e Fix incorrect handling of HTML comments in messages sanitization code (#1489904) 2014-05-20 19:25:45 +02:00
Aleksander Machniak
f96fec6b8c Fix "washing" of unicoded style attributes (#1489777) 2014-04-11 09:13:59 +02:00
Aleksander Machniak
5e3ee8418e Add test case for #1489777 2014-04-08 12:29:59 +02:00
Aleksander Machniak
68cf8f19d2 Add some tests 2014-03-18 11:12:08 +01:00
Aleksander Machniak
c7250749ab Fix issue where deprecated syntax for HTML lists was not handled properly (#1488768) 2013-12-28 19:14:51 +01:00
Aleksander Machniak
ffec857b69 Fix handling of invalid closing tags in HTML messages (#1489446) 2013-11-28 09:12:03 +01:00
Aleksander Machniak
cb3e2fe0c2 Fix displaying messages with invalid self-closing HTML tags (#1489137) 2013-05-31 15:42:22 +02:00
Aleksander Machniak
f773259412 Fix washtml test after "unsupported node type" fix 2013-05-25 20:38:04 +02:00
Aleksander Machniak
1e2468e4b9 Added two tests for HTML comments handling in rcube_washtml class 2013-03-22 10:24:32 +01:00
Aleksander Machniak
1f910cb50d Fix handling link href attribute value with (valid) newline characters (#1488940) 2013-02-01 20:04:00 +01:00
Aleksander Machniak
7ac94421bf Move washtml class into Roundcube Framework (rcube_washtml), add some improvements 2012-12-25 18:06:17 +01:00