5 Commits

Author	SHA1	Message	Date
Aleksander Machniak	81ac3c342a	Fix cross-site scripting (XSS) vulnerability in setting Content-Type/Content-Disposition for attachment preview/download ... Thanks to rehme.infosec for reporting the issues.	2023-11-04 17:52:34 +01:00
Aleksander Machniak	5f80470858	Fix "Show source" on mobile with x_frame_options = deny (#9084)	2023-08-20 08:35:06 +02:00
Aleksander Machniak	33ff28080c	Fix PHP8 warnings	2023-08-20 08:34:59 +02:00
Aleksander Machniak	7a269a2b84	Replace get_input_value() with get_input_string() where appropriate	2021-09-13 19:31:49 +02:00
Aleksander Machniak	545a1569f1	Steps -> Actions refactoring (#7688) ... * Move action handling code to rcmail class * Add rcmail_action class * Add action aliases * Get rid of $OUTPUT global * Move some methods from rcmail to rcmail_action * PHP8 compat. fixes * Add framework for testing actions * Fix obvious code mistakes	2020-11-01 11:25:38 +01:00