Commit Graph

13558 Commits

Author SHA1 Message Date
llamaonaskateboard
daa9c17b79 Fix syntax error in DDL scripts for Postgres (#10052) (#10070) 2026-01-25 10:15:22 +01:00
Aleksander Machniak
719b8be259 Fix handling of string-list format values for date tests in Out of Office (#10075) 2026-01-25 09:42:52 +01:00
Aleksander Machniak
d8363fbd7d Fix new phpstan error 2026-01-25 08:40:17 +01:00
Aleksander Machniak
0e5712b89f Update localization 2026-01-11 10:13:10 +01:00
Aleksander Machniak
3cebe59538 Remove some old code for IE 2026-01-04 13:39:51 +01:00
Aleksander Machniak
cb7f2d0066 Fix a UI issue on using browser Back button after allowing remote resources (#10062) 2026-01-04 13:34:43 +01:00
Aleksander Machniak
42794a40aa Support request_url config option for resolving relative URLs (#9868) 2026-01-01 15:14:18 +01:00
Aleksander Machniak
7a3843f9b7 Support X-Forwarded-Host/X-Forwarded-Port in self URLs generation (#9952) 2026-01-01 12:57:02 +01:00
Aleksander Machniak
2e43fe13de Update changelog
[skip ci]
2025-12-28 19:49:57 +01:00
James Renken
fd395ddf0d Support $HasAttachment/$HasNoAttachment keywords for "With attachment" search filter (#10056)
Also make content-types consistent between app.js:add_message_row() & rcmail_action_mail_index()

Fixes #10053
2025-12-28 19:49:04 +01:00
Aleksander Machniak
d5737b2a68 Makefile: Keep Makefile in the package 2025-12-27 11:41:53 +01:00
Aleksander Machniak
98c811dc90 CS fixes, cleanup 2025-12-27 11:21:30 +01:00
Michal Stanke
64bfcb6df1 Extend Dovecot passwdfile driver with dynamic file path support (#10038) 2025-12-27 11:13:34 +01:00
addyreal
58eeb2c0c7 Added explicit type for main in plugins/password/helpers preventing compilation (#10058) 2025-12-27 10:54:25 +01:00
Pablo Zmdl
c605db4370 Actually push the tag if instructed to do so (Makefile) 2025-12-15 15:46:53 +01:00
Aleksander Machniak
e5d5ed91bd Fix the regexp so it will produce less false-positives 2025-12-15 11:36:05 +01:00
Aleksander Machniak
366ad7a174 Fix syntax error in DDL scripts for Postgres (#10052) 2025-12-14 12:30:50 +01:00
Aleksander Machniak
dc4ffea1d0 CS fix 2025-12-14 09:15:49 +01:00
Aleksander Machniak
7c3267b9b0 Fix Information Disclosure vulnerability in the HTML style sanitizer
reported by somerandomdev
2025-12-14 09:02:25 +01:00
Aleksander Machniak
5162a0d9d7 Fix Cross-Site-Scripting vulnerability via SVG's animate tag
reported by Valentin T., CrowdStrike.
2025-12-14 09:01:26 +01:00
Pablo Zmdl
59700c5ee8 Fix Makefile for release 2025-12-11 17:50:58 +01:00
Pablo Zmdl
1421d0d96f Changelog item for rel=noopener (a361fa79f1) 2025-12-10 16:34:41 +01:00
Pablo Zmdl
f32fb5e3d2 Fix renaming SQL index in sqlite migration 2025-12-10 15:13:40 +01:00
Pablo Zmdl
42a5289958 Fix table name in SQL migration 2025-12-10 15:13:40 +01:00
Pablo Zmdl
202daa6f97 Replace changed by expires_at in session handling
This prepares using extended session lifetimes configurable per session
2025-12-04 14:47:16 +01:00
Aleksander Machniak
ea110e9b4b Bump managesieve version, update changelog 2025-11-29 18:29:36 +01:00
Philip Weir
b79692c50a managesieve: show warning when actions in wrong order (#10015)
* managesieve: show warning when actions in wrong order
* simplify action prioirty detection
2025-11-29 18:26:44 +01:00
Aleksander Machniak
305ff6a791 Update changelog
[skip ci]
2025-11-29 18:22:20 +01:00
Dominik Schmidt
ce893b2e1d Preserve requested url on oidc login (#10033)
* feat: preserve requested url on oidc login
* fix(oidc): redirect to idp when session timed out
2025-11-29 18:21:16 +01:00
Aleksander Machniak
4583641133 Localization: Remove empty lines 2025-11-29 18:18:58 +01:00
Aleksander Machniak
7d960125dc rcube_db_param implements Stringable interface 2025-11-29 15:53:38 +01:00
Aleksander Machniak
39cc3b1df1 Localization import 2025-11-29 15:04:09 +01:00
Aleksander Machniak
f0d63004d6 Localization update 2025-11-29 13:57:20 +01:00
Aleksander Machniak
161fdf05d0 Update changelog
[skip ci]
2025-11-23 14:56:52 +01:00
Michael Steininger
cdd3d1ed69 Allow "target" in html attributes when saving signature (#10017) 2025-11-23 14:55:33 +01:00
Dominik Schmidt
01a362aa9f feat: add getter for cached oauth options (#10029) 2025-11-23 12:39:21 +01:00
Aleksander Machniak
e84c5ad54f Fix for Windows OS 2025-11-22 15:28:29 +01:00
Aleksander Machniak
7cab146f7b Fix new phpstan errors 2025-11-22 15:07:31 +01:00
Aleksander Machniak
7ca48152d4 Fix skin_logo with a relative URL (#10030) 2025-11-22 14:54:03 +01:00
Pablo Zmdl
a361fa79f1 Add rel='noopener' to all links opening in a new window
Browsers younger than ~5 years don't need this, but older browsers might cause problems.

Code style change as demanded by eslint

Remove accidentally added `id` attribute

Fix test as it was intended
2025-11-04 16:03:22 +01:00
Aleksander Machniak
a3071d5d75 CI: Remove use of --ignore-platform-reqs 2025-10-31 07:43:27 +01:00
Aleksander Machniak
bd83492549 Minor phpdoc fix 2025-10-29 14:14:20 +01:00
Pablo Zmdl
e34a813355 New plugin "markdown_editor": compose in markdown, send as HTML
This adds a markdown editor that sends HTML to the server.

It uses codemirror and some custom code to show a syntax highlighted
textarea and some buttons to help editing
(including a preview).

Drafts get marked via an internal email header that causes the markdown
editor to automatically start if a message composition is
continued that was started using the markdown editor.
2025-10-27 15:34:19 +01:00
Pablo Zmdl
3141699a8b Combine some install-steps in one make target 2025-10-27 15:34:19 +01:00
Pablo Zmdl
3273f3bb04 Fix seeings screenshots on host for containerized browser tests with run-in-copy.sh 2025-10-27 15:34:19 +01:00
Pablo Zmdl
ad9cbf23fb Make eslint check ECMAscript 2022
This allows using public and private class fields, which are supported in all major browsers since years, (but just made
it into ECMAScript 2022).
See
<https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Classes/Public_class_fields#browser_compatibility>
and <https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Classes/Private_elements#browser_compatibility>.
2025-10-27 15:34:19 +01:00
Pablo Zmdl
fd8ac88643 Allow additional attributes for included scripts 2025-10-27 15:34:19 +01:00
Pablo Zmdl
ea050faaad Allow event handlers to act after a signature was inserted 2025-10-27 15:34:19 +01:00
Pablo Zmdl
bbd884b957 Allow event handlers to hook into messageform submission
submit() doesn't emit an event prior to sending the data but
requestSubmit() does.
2025-10-27 15:34:19 +01:00
Aleksander Machniak
2205068522 CI: Use --display-deprecations also in the browser tests 2025-10-19 11:55:57 +02:00