5 Commits

Author	SHA1	Message	Date
Aleksander Machniak	cd87dd013f	Fix cross-site scripting (XSS) vulnerability in setting Content-Type/Content-Disposition for attachment preview/download ... Thanks to rehme.infosec for reporting the issues.	2023-11-04 17:52:00 +01:00
Aleksander Machniak	8cd3ceeb36	Fix "Show source" on mobile with x_frame_options = deny (#9084)	2023-08-20 08:34:20 +02:00
Aleksander Machniak	048e1e8e9b	Fix PHP8 warnings	2023-08-20 08:13:35 +02:00
Aleksander Machniak	7a269a2b84	Replace get_input_value() with get_input_string() where appropriate	2021-09-13 19:31:49 +02:00
Aleksander Machniak	545a1569f1	Steps -> Actions refactoring (#7688) ... * Move action handling code to rcmail class * Add rcmail_action class * Add action aliases * Get rid of $OUTPUT global * Move some methods from rcmail to rcmail_action * PHP8 compat. fixes * Add framework for testing actions * Fix obvious code mistakes	2020-11-01 11:25:38 +01:00