Commit Graph

13 Commits

Author SHA1 Message Date
thomascube
4cc74f7269 Treat 'background' attributes the same way as 'src' (another XSS vulnerability) 2009-01-20 16:28:33 +00:00
alecpl
7f62581c10 - Smart Tags and NOBR tag support in html messages (#1485363, #1485327) 2008-09-17 07:47:32 +00:00
thomascube
a47acc56c6 Allow content of HTML head sections to be processes 2008-09-16 13:06:20 +00:00
thomascube
c505e59a6d Respect Content-Location headers in multipart/related messages (#1484946) 2008-09-05 09:29:06 +00:00
thomascube
d368a68ed7 Reverted r1607. See #1485137 for explanations 2008-07-22 17:13:47 +00:00
alecpl
4897adcbd4 #1485137: added 'form' to allowed elements list 2008-07-22 10:38:43 +00:00
thomascube
21e724153e Improve HTML sanitization with washtml 2008-07-22 08:01:42 +00:00
alecpl
18ebb902d5 #1485097: Re-enable background attribute in HTML messages 2008-06-15 11:23:18 +00:00
thomascube
350459486d Change meta-charset specififcation in HTML to UTF-8; no need for mb_convert_encoding() anymore 2008-06-07 12:51:21 +00:00
thomascube
a8755664af Allow <body> tag in HTML messages which will be converted to <div class='rcmBody'> 2008-06-04 09:40:17 +00:00
thomascube
65cc1c196f Chech for mb_convert_encoding first because mbstring is optional for RoundCube + add some phpdoc 2008-06-04 09:13:06 +00:00
alecpl
68217c548a -add convert encoding before html parsing 2008-06-03 17:07:53 +00:00
thomascube
45f56c1c40 Replace our crappy html sanitization with the dom-based washtml script + fix inline message parts + remove old code + add some doc comments 2008-05-29 16:10:42 +00:00