Commit Graph

19 Commits

Author SHA1 Message Date
Aleksander Machniak
4b72a1f498 Fix error when using back button after sending an email (#1490009) 2015-07-31 18:48:17 +02:00
Aleksander Machniak
a958748947 CS fixes 2015-06-07 15:26:33 +02:00
Thomas Bruederli
0bd99db08d Localize common error messages; improve explanation for CSRF check failures 2015-03-23 18:33:40 +01:00
Aleksander Machniak
681ba6fc3c Improve system security by using optional special URL with security token
Allows to define separate server/path for image/js/css files
Fix bugs where CSRF attacks were still possible on some requests
2014-12-16 13:28:48 +01:00
Thomas Bruederli
2e713d00f5 Set comm_path env variable after reset 2014-09-26 19:23:38 +02:00
Aleksander Machniak
c97625e02a CS fixes 2013-12-25 12:11:22 +01:00
Thomas Bruederli
e46d060a4a Fix errors in error page :-) 2013-11-10 13:29:48 +01:00
Thomas Bruederli
95d2892686 Fix HTTP User-Agent XSS vulnerability (#1488737) 2012-10-04 16:59:37 +02:00
Aleksander Machniak
b97d0e11b5 Fix empty user agent string on error page for "incompatible browser" error 2012-06-28 19:13:49 +02:00
Aleksander Machniak
041c93ce0b Removed $Id$ 2012-05-22 12:31:37 +02:00
alecpl
0c259682f6 - Merge devel-framework branch, resolved conflicts 2012-04-13 08:52:02 +00:00
thomascube
1e09cd0811 Slighlty increase minimum browser requirements 2012-02-25 14:48:30 +00:00
thomascube
7fe3811c65 Changed license to GNU GPLv3+ with exceptions for skins and plugins 2012-01-18 11:10:46 +00:00
alecpl
d7b35c22af - Fix usage of non-standard HTTP error codes (#1487797) 2011-04-22 17:48:58 +00:00
thomascube
a77cf2292b Add optional referer check to prevent CSRF in GET requests 2011-02-08 08:13:06 +00:00
thomascube
f5e7b35307 Bumbed version; Roundcube development is not Switzerland only 2011-01-12 18:25:02 +00:00
alecpl
e019f2d0f2 - s/RoundCube/Roundcube/ 2010-09-25 13:03:53 +00:00
alecpl
b25dfd0913 - removed PHP closing tag 2010-06-23 09:55:08 +00:00
alecpl
24c91ed78e - Moved error.inc to /utils
- Removed bugs.inc (content copied into main.inc)
2010-05-20 08:04:25 +00:00