Mirrors/roundcubemail
2
0
Fork 0
mirror of https://github.com/roundcube/roundcubemail.git synced 2026-03-20 06:46:58 +01:00
Code Issues Packages Projects Releases Wiki Activity
12,496 Commits 72 Branches 208 Tags
d742954ccbcdee7020f8f2e7c49ce0fca5a0efab
Commit Graph

4 Commits

Author SHA1 Message Date
Aleksander Machniak
c222ea8b99 - Fix XSS vulnerability in serving of attachments other than HTML or SVG [CVE-2024-42008] 
Credits to Oskar Zeino-Mahmalat (Sonar) https://www.sonarsource.com
 2024-08-04 10:30:06 +02:00
Aleksander Machniak
9d55dd14d8 Fix XSS issue in handling attachment filename extension in mimetype mismatch warning (#8193) 2021-08-31 19:20:39 +02:00
Aleksander Machniak
00d52a02bf Fix displaying inline images with incorrectly declared content-type (#8158) 2021-08-15 09:59:55 +02:00
Aleksander Machniak
545a1569f1 Steps -> Actions refactoring (#7688) 
* Move action handling code to rcmail class
* Add rcmail_action class
* Add action aliases
* Get rid of $OUTPUT global
* Move some methods from rcmail to rcmail_action
* PHP8 compat. fixes
* Add framework for testing actions
* Fix obvious code mistakes
 2020-11-01 11:25:38 +01:00