Commit Graph

79 Commits

Author SHA1 Message Date
Aleksander Machniak
d7fcd8ce42 Fix possible collision in generated thumbnail cache key (#1489069) 2013-04-26 14:25:17 +02:00
Thomas Bruederli
a021d6f187 Skip filename suffix check for embedded images; return blocked.gif instead of HTML warning when embedded (#1489029) 2013-04-10 23:12:23 +02:00
Aleksander Machniak
139635f189 Fix thumbnail size when GD extension is used for image resize (#1488985) 2013-03-05 10:25:12 +01:00
Aleksander Machniak
7c851e669e Don't try to print file extension in a warning message if it's not available 2013-02-21 09:38:21 +01:00
Thomas Bruederli
921115ed56 Ignore file extension difference for text/plain attachments (#1488891) 2013-02-07 18:17:25 +01:00
Thomas Bruederli
1730cf8d7b Load a default stylesheet (embed.css) from skin in plain html pages (e.g. attachment warnings and html messages) 2013-01-24 15:32:24 +01:00
Thomas Bruederli
1ef4033b8d Also block remote images in HTML part view (#1488827) 2013-01-19 17:02:48 +01:00
Thomas Bruederli
d9f180adf9 Minor IE7/8 fixes 2012-12-29 16:54:41 +01:00
Aleksander Machniak
be72fb3597 Unified attachments filenames handling for message parts without a filename 2012-12-28 12:40:57 +01:00
Thomas Bruederli
5f0bd1fcb4 Make html button-links work in IE 2012-12-22 16:40:20 +01:00
Thomas Bruederli
31521613e4 Append filename extension if missing 2012-12-10 22:32:46 +01:00
Aleksander Machniak
c7ff6ec2cb Add workaround for IE<=8 bug where Content-Disposition:inline was ignored (#1488844) 2012-12-05 09:46:03 +01:00
Aleksander Machniak
8afbc8aeea Fix attachment Content-Length for in-memory files (#1488844) 2012-11-30 11:13:43 +01:00
Thomas Bruederli
c14b337450 Fix XSS vulnerability using Flash files (#1488828) by comparing mimetypes and filename extensions 2012-11-27 16:25:42 +01:00
Thomas Bruederli
03149131f7 New feature: display attached images as thumbnails below message body 2012-11-10 21:08:14 +01:00
Aleksander Machniak
4fd5b62194 Add Content-Length for attachments where possible (#1485478) 2012-06-08 11:49:12 +02:00
Aleksander Machniak
19cc5b91c9 Display Tiff as Jpeg in browsers without Tiff support (#1488452) 2012-05-30 11:22:18 +02:00
Aleksander Machniak
041c93ce0b Removed $Id$ 2012-05-22 12:31:37 +02:00
Aleksander Machniak
4bfe4ec22a Remove last instance of storage_connect() with possible performance
improvement when a message part body is in cache
2012-05-22 10:26:36 +02:00
alecpl
b4f95a9387 - Fix attachment name regression (#1488446) 2012-04-19 06:38:59 +00:00
alecpl
0c259682f6 - Merge devel-framework branch, resolved conflicts 2012-04-13 08:52:02 +00:00
thomascube
d1e3430bfa Pass message UID to 'message_part_get' hook 2012-03-16 20:23:53 +00:00
thomascube
7fe3811c65 Changed license to GNU GPLv3+ with exceptions for skins and plugins 2012-01-18 11:10:46 +00:00
thomascube
c321a955a7 Merged devel-framework branch (r5746:5779) back into trunk 2012-01-16 15:14:41 +00:00
thomascube
c29b82d90a Fix crashes with eAccelerator (#1488256) 2011-12-20 08:29:28 +00:00
alecpl
b6da0b76af - Remove deprecated global $IMAP variable usage (#1488148) 2011-12-07 10:41:15 +00:00
thomascube
3f81174e10 Show attachment filename in page title 2011-12-06 07:55:36 +00:00
thomascube
57486f6e58 Content filter for embedded attachments to protect from XSS on IE<=8 (#1487895) 2011-11-29 10:16:42 +00:00
alecpl
e0960f6365 - Prevent from memory_limit exceeding when trying to parse big messages bodies (#1487424):
don't try to parse it, display notice with a link to download it directly
2011-11-25 13:47:07 +00:00
alecpl
5510a5278b - Fix possible infinite redirect on attachment preview (#1488199) 2011-11-24 07:34:32 +00:00
alecpl
9e54e6fd45 - Make the whole PHP output non-cacheable (#1487797) 2011-09-23 10:11:27 +00:00
thomascube
d78771ad3c Add plugin hook message_part_get for message part downloads 2011-08-29 17:06:29 +00:00
thomascube
f5e7b35307 Bumbed version; Roundcube development is not Switzerland only 2011-01-12 18:25:02 +00:00
alecpl
e0bd7054b7 - Add workaround for some Outlook's wrong content-types, per discussion in #1487051 2010-10-20 11:41:48 +00:00
alecpl
e019f2d0f2 - s/RoundCube/Roundcube/ 2010-09-25 13:03:53 +00:00
alecpl
799359457f - Don't create a new rcube_browser object, use browser property from output object 2010-09-21 08:24:52 +00:00
alecpl
b8d96f6e60 - Use random sleep interval up to 3 sec. in 'get' action when IMAP conn. fails 2010-09-16 13:02:27 +00:00
alecpl
431234538a - Fix when IMAP connection fails in 'get' action session shouldn't be destroyed (#1486995)
- Performance: improve mail/get action and skip one IMAP connection
2010-09-16 11:29:53 +00:00
alecpl
9bb1fc7b0b - Make sure attachment name doesn't contain \r\n (#1486832) 2010-07-06 10:38:58 +00:00
alecpl
b25dfd0913 - removed PHP closing tag 2010-06-23 09:55:08 +00:00
alecpl
d311d809d6 - Fix forwarding of messages with winmail attachments
- Remove some redundant code for winmail handling in get.inc, move tnef_decode() to rcube_message
- Fix handling of uuencoded attachments in message body (#1485839)
- Extend rc_mime_content_type() to work with string buffer
2010-05-28 09:38:41 +00:00
alecpl
1097a3cd8a - don't parse text/html attachment body on download 2010-04-26 13:26:39 +00:00
alecpl
ebc619c149 - Fix CVE-2010-0464: Disable DNS prefetching (#1486449) 2010-02-26 08:06:48 +00:00
alecpl
6d479a622b - remove set_magic_quotes_runtime() call, use set_time_limit() with @ (#1486149) 2009-09-22 07:50:32 +00:00
thomascube
35f40fbda7 Set timeout for attachment loading back to 0 2009-09-04 10:38:18 +00:00
alecpl
3e8b11194d - Fix charset bug during loading attachment file (#1486064) 2009-08-28 11:11:32 +00:00
alecpl
3b7e00fbda - don't call FETCH for empty (size=0) message parts 2009-07-19 19:15:40 +00:00
alecpl
d51c93b43e - get rid of some hardcoded action names and move decission about output compression to the user 2009-06-01 07:21:14 +00:00
thomascube
21b160f38c Added TNEF support to decode MS Outlook (winmail.dat) attachments 2009-02-08 20:38:54 +00:00
till
cbbef379a5 * bumping up copyright (happy new year ;-)) 2009-01-17 01:55:39 +00:00