Commit Graph

7578 Commits

Author SHA1 Message Date
Aleksander Machniak
747bcd2ff4 Fix handling of table prefix and quoting in insert_or_update()
In all places we use this function the $table argument has already
been passed through table_name() method, i.e. it contains the prefix
and is quoted. So, we should not do this again.
2021-02-15 11:31:06 +01:00
Aleksander Machniak
fdd52a5312 Give more prio to $user_email property in get_user_email(), follow up fix for #7667 2021-02-09 18:31:57 +01:00
Aleksander Machniak
cdd65d91c0 Update localization 2021-02-09 09:47:15 +01:00
Aleksander Machniak
9f19b931e3 Fix cross-site scripting (XSS) via HTML messages with malicious CSS content
and improve css parsing code.

Thanks to Mateusz Szymaniec (CERT Polska) for reporting the issue.
2021-02-08 13:42:12 +01:00
Aleksander Machniak
b7ac23ea5d new_user_identity: Fix missing password for user-specific LDAP operations (#7667) 2021-02-07 09:55:41 +01:00
Aleksander Machniak
a03a1db73c Tabs to spaces
[skip ci]
2021-02-06 16:59:05 +01:00
hefee
8ef57a4173 Add 'reconnect' plugin to retry IMAP connection (#7844)
* Make storage_connect hook ready to be usable for reconnect plugins.
* Add reconnect plugin to retry to login into IMAP server.

Co-authored-by: Sandro Knauß <hefee@debian.org>
2021-02-06 16:46:21 +01:00
Aleksander Machniak
79b5343563 Fix handling of address groups in email headers by ignoring their names (#7663) 2021-02-06 16:41:50 +01:00
johndoh
2d38d6e30b fix typo (#7866) 2021-01-31 11:37:33 +01:00
Aleksander Machniak
79f839b2f6 Fix so message flags are updated on refresh also for multifolder search results (#7774) 2021-01-31 10:25:49 +01:00
Aleksander Machniak
cdeccac627 Also ignore PHP8 warnings on iconv() use with invalid encoding 2021-01-30 17:59:09 +01:00
johndoh
79af30e924 Add preauth_ident parameter (#7863) 2021-01-30 15:53:39 +01:00
Aleksander Machniak
d258f845ab Fix PHP8 Fatal error: Uncaught ValueError: mb_convert_encoding() (#7850)
Also, bring back iconv() fallback, it supports much more charsets than mbstring.
2021-01-30 15:51:23 +01:00
Aleksander Machniak
5975742bcb Fix so IMAP ID command is send only after authentication (#7517) 2021-01-24 09:39:25 +01:00
johndoh
1eebfd723b Improve detection of external urls for redirect (#7823) 2021-01-23 10:15:09 +01:00
Aleksander Machniak
5d2668a260 Bring the old error_reporting setting back 2021-01-23 10:02:41 +01:00
Thomas Bruederli
375d668064 Hide login form fields when oauth_login_redirect is configured (#7830) 2021-01-18 21:17:48 +01:00
Aleksander Machniak
ec9c352ecb Fix regression in handling save-pref action 2021-01-18 19:34:19 +01:00
Aleksander Machniak
b4b24f93df Fix some PHP8 warnings 2021-01-15 18:56:48 +01:00
Aleksander Machniak
a9e50951ee Fix PHP warnings/notices 2021-01-14 19:18:53 +01:00
Thomas Bruederli
1d8fc71cad Do not auto-redirect on oauth login failures (#7812) 2021-01-12 22:14:54 +01:00
Aleksander Machniak
118453c6ae Initialise output also in cli mode 2021-01-10 18:07:24 +01:00
Aleksander Machniak
6a12cb7b67 Remove browser compatibility check
Improved code style, localized some more errors.
Added tests for utils/error action
2021-01-10 11:46:47 +01:00
Aleksander Machniak
837078cd23 Fix mail search error on invalid search_mods definition (#7789) 2021-01-10 10:30:43 +01:00
johndoh
5fdf8e62df Add placeholder text when no responses on compose screen (#7807) 2021-01-09 18:59:16 +01:00
Aleksander Machniak
703c9287b1 Use SameSite=Lax for cookies set client-side
to silence an annoying warning in Firefox console.
2021-01-09 13:10:33 +01:00
Michael Stilkerich
ae3f9c215e Improve preciseness of some PHPdoc annotations (#7809) 2021-01-09 10:05:46 +01:00
Aleksander Machniak
a0fbcf3816 Bump copyright year
[skip ci]
2021-01-02 13:46:06 +01:00
Aleksander Machniak
6b8881271f By default do not set the User-Agent header (#7731) 2020-12-28 19:25:33 +01:00
Aleksander Machniak
39b3c0049e Fix cross-site scripting (XSS) via HTML or Plain text messages with malicious content [CVE-2020-35730]
Credits to Alex Birnberg <birnbergalex@gmail.com>
2020-12-27 18:27:42 +01:00
Aleksander Machniak
02ab855c8b Never return null from rcube_addresses::search() 2020-12-27 12:10:49 +01:00
johndoh
dec10e51da Support providing skins for plugins inside the main skin folder (#7445) 2020-12-21 09:45:34 +01:00
Aleksander Machniak
65c9d08e01 PHP8 fixes 2020-12-20 17:22:18 +01:00
Aleksander Machniak
93df53ee9e Fix state of subscription toggle on folders list after changing folder state from the search result (#7653) 2020-12-20 17:01:47 +01:00
Aleksander Machniak
cfc138e9f2 Merge branch 'fix-elastics-folders-settings-toggle-button-in-search' of https://github.com/abshoff/roundcubemail into abshoff-fix-elastics-folders-settings-toggle-button-in-search 2020-12-20 16:29:48 +01:00
Aleksander Machniak
ffe8a0c940 Elastic: Display email size on the list of messages (#7162) 2020-12-20 16:12:52 +01:00
Aleksander Machniak
d88cadf1f2 Fix a few E_NOTICE issues 2020-12-20 10:36:41 +01:00
Aleksander Machniak
5aa0d09def Add array_first() helper, fix some code issues 2020-12-20 09:44:17 +01:00
Aleksander Machniak
66062846ec Fix "unitialized string offset" warnings 2020-12-19 19:43:36 +01:00
johndoh
cfd4fa170f Fix a few PHP notices (#7791) 2020-12-19 19:36:58 +01:00
Aleksander Machniak
8cd202f57f PHP8 fixes 2020-12-19 14:27:59 +01:00
johndoh
9e739faac5 Return 204 rather than 404 on missing contact photo (#7778)
* return 204 rather than 404 on missing contact photo
* a little code cleanup
* don't use blank.gif as placeholder, use data: uri instead
2020-12-19 10:10:54 +01:00
Aleksander Machniak
8b83d29f24 PHP8 fixes, do not require specific error_reporting setting anymore 2020-12-19 10:01:10 +01:00
Aleksander Machniak
90b4b4f946 Fix bug where it wasn't possible to save Spanish (Latin America) locale preference (#7784) 2020-12-19 09:00:32 +01:00
Aleksander Machniak
17ae3693c3 PHP8 fixes + fix fatal error when refreshing compose page in forward-as-attachment state 2020-12-18 19:27:25 +01:00
Aleksander Machniak
84949fbb4e CS fixes, added more tests 2020-12-17 19:45:12 +01:00
johndoh
1cd4839fa2 Fix missing title in contacts list in larry skin (#7779) 2020-12-13 15:32:53 +01:00
Aleksander Machniak
c0510aaab3 GA: See if we can test PHP8 now 2020-12-13 12:27:23 +01:00
Aleksander Machniak
3bbb01fe13 PHP8 fixes, regression fixes 2020-12-13 12:14:15 +01:00
Aleksander Machniak
12547ccf01 Require php-intl extension, get rid of Net_IDNA2, PHP8 fixes, short array syntax
Net_IDNA2 is not compatible, and Intl is a bundled ext since PHP 5.3.
Fixed some regressions.
2020-12-13 10:21:52 +01:00