Commit Graph

69 Commits

Author SHA1 Message Date
Victor Benincasa
daeb66ee99 Fix login form
Fix a small bug introduced on commit 43f3c5f that breaks the login form ($attrib['form'] is checked at line 1899, so it cannot be unset).
2016-08-26 05:31:28 -03:00
Aleksander Machniak
43f3c5fb2a Implement "one click" attachment upload (#5024) 2016-08-20 19:38:48 +02:00
Aleksander Machniak
184de7735c CS fixes (mostly phpdoc) 2016-08-18 08:50:59 +02:00
Thomas Bruederli
4a408843b0 Protect download urls against CSRF using unique request tokens (#1490642)
Send X-Frame-Options headers with every HTTP response
2016-03-06 14:31:07 +01:00
Aleksander Machniak
10e5192a2b Fix path traversal vulnerability in setting a skin (#1490620) 2015-12-22 12:40:36 +01:00
dsoares
234fd19505 Replace deprecated call to Q within array_map() 2015-10-26 16:13:14 +00:00
Aleksander Machniak
93e64008a6 Small code improvements 2015-08-05 09:30:51 +02:00
Aleksander Machniak
252cc4c4ac Password: Allow temporarily disabling the plugin functionality with a notice 2015-07-27 10:47:34 +02:00
Aleksander Machniak
a958748947 CS fixes 2015-06-07 15:26:33 +02:00
Thomas Bruederli
0bd99db08d Localize common error messages; improve explanation for CSRF check failures 2015-03-23 18:33:40 +01:00
Aleksander Machniak
681ba6fc3c Improve system security by using optional special URL with security token
Allows to define separate server/path for image/js/css files
Fix bugs where CSRF attacks were still possible on some requests
2014-12-16 13:28:48 +01:00
Thomas Bruederli
8d526c4938 Fix skin path handling in plugin context (#1488967):
The plugin skin directories are removed again from the search path after parsing of a plugin template has finished.
2014-11-03 16:15:44 +01:00
Aleksander Machniak
1ffab0ad4a Fix possible issues in skin/skin_path config handling (#1490125) 2014-10-30 12:34:16 +01:00
Thomas Bruederli
8ef203827f Make noshow attribute for roundcube:label tags actually work as supposed 2014-09-18 09:01:30 +02:00
Aleksander Machniak
d01f9fc7f5 Add option (disabled_actions) to disable UI elements/actions (#1489638) 2014-08-04 19:03:27 +02:00
Aleksander Machniak
ef51ae6d19 Reset also page header/footer on "dummy frames" - to prevent js error e.g. if some script depends on jQuery 2014-07-02 18:20:19 +02:00
Aleksander Machniak
19138ef7a9 Make sure set_env and add_label commands are always sent first - other commands might depend on them.
Fixes loading message in managesieve filters frame.
2014-06-09 10:35:32 +02:00
Thomas Bruederli
99cdca46b7 Merge branch 'dev-accessibility'
Conflicts:
	program/include/rcmail_output_html.php
	program/js/app.js
	program/js/treelist.js
	program/lib/Roundcube/html.php
	skins/larry/styles.css
	skins/larry/templates/compose.html
2014-06-05 09:18:07 +02:00
Thomas Bruederli
d58c39126f Some more improvemements on content structure, text representation and keyboard navigation within the mail view 2014-06-02 16:35:12 +02:00
Thomas Bruederli
22a2c5e0ee Localize title and summary attributes; make message count display box a live area 2014-06-02 12:57:28 +02:00
Aleksander Machniak
2441264d00 Improved folders sorting by name - use Intl.Collator if supported 2014-05-28 10:37:24 +02:00
Aleksander Machniak
ffc74814c1 Optimize "empty" framed pages size (#1489792) 2014-05-12 15:53:47 +02:00
Aleksander Machniak
8f57ce136b Code improvements 2014-05-12 13:32:40 +02:00
Aleksander Machniak
7079110c61 Allow data-* attributes (#1489860) 2014-05-08 15:08:45 +02:00
Thomas Bruederli
ea0866a1ad Improve keyboard navigation on compose screen: define tabindex groups + enable keyboard controls of contacts list widget 2014-05-07 20:04:13 +02:00
Thomas Bruederli
184ed2efe2 Declare content language for proper text-to-speech support 2014-05-07 17:27:05 +02:00
Thomas Bruederli
b0ce5c62af Make skin meta/hierarchy information accessible for plugins (#1488831) 2014-05-01 09:05:29 +02:00
Thomas Bruederli
e8bcf08c72 1. Prepare core and Larry skin for improved accessibility
2. Implement full keyboard navigation in main mail view
2014-04-30 16:21:29 +02:00
Thomas Bruederli
b34d679075 Specify licenses in all javascript files and blocks to please LibreJS 2014-04-27 15:35:07 +02:00
Aleksander Machniak
5be6dcf0e2 Remove useless debug_level=8 and javascripts's rcube_console 2014-04-15 19:19:56 +02:00
Aleksander Machniak
904fec7505 Add id for login submit button (#1489676) - make it skin independent 2014-03-11 09:31:45 +01:00
Aleksander Machniak
5e8da2b5c9 Added toolbar button to move message in message view 2014-02-13 14:19:41 +01:00
Thomas Bruederli
9ba4967a73 Create class documentation with latest phpdoc utility 2014-01-30 09:56:56 +01:00
Aleksander Machniak
0301d9347f CS fixes 2014-01-01 12:31:14 +01:00
Aleksander Machniak
c562a31681 Improved minified files handling, added css minification (#1486988) 2013-12-18 21:41:56 +01:00
Aleksander Machniak
538e64c572 Fix Closure-compiler warnings, small code improvements 2013-12-18 20:57:35 +01:00
Thomas Bruederli
e46d060a4a Fix errors in error page :-) 2013-11-10 13:29:48 +01:00
Thomas Bruederli
59cdb433a6 Avoid duplicate elements with the same id in HTML. Fixes broken icons in classic skin. 2013-10-29 09:11:49 +01:00
Thomas Bruederli
98b7b548a2 Merge branch 'dev-canned-responses'
Conflicts (resolved):
	skins/classic/includes/settingstabs.html
	skins/larry/includes/settingstabs.html
2013-10-25 16:50:25 +02:00
Aleksander Machniak
e2f90dbd4e Do not add css files to the page when body is empty, e.g. upload iframes 2013-10-16 09:35:36 +02:00
Thomas Bruederli
c49c35ca0f Generate settings tabs with a template object 'settingstabs' and let plugins register themselves there using the 'settings_actions' hook 2013-09-28 12:03:20 +02:00
Thomas Bruederli
0933d66b59 Keep current selection on IE browsers by adding unselectable=on to link elements 2013-09-04 10:08:42 +02:00
PhilW
fb4474aca9 only call config->get() once 2013-08-31 09:44:50 +01:00
PhilW
d81d69377a use template file name rather than special attribute 2013-08-26 13:45:30 +01:00
PhilW
a77504aeac allow different logos for different functions (eg. normal and print) 2013-08-26 12:22:34 +01:00
Dennis1993
8df6bb9b1f Update rcmail_output_html.php
added required Attribute to Login fields
2013-07-21 20:37:36 +02:00
Thomas Bruederli
deb2b8d080 Allow to load config files for different environments (#1487311); keep (non-default) filename in URLs throughout the webmail app 2013-07-12 10:17:32 +02:00
Aleksander Machniak
b7addfc77c Use absolute paths in is_dir() checks to prevent open_basedir related warnings 2013-06-30 10:30:06 +02:00
Aleksander Machniak
39b905b7a8 Canonize boolean ini_get() results (#1489189) 2013-06-20 15:08:10 +02:00
Aleksander Machniak
76f4f7970d Fix resolving /this/ in file_callback() 2013-06-06 12:19:03 +02:00