Aleksander Machniak 6d586cfa4d Fix pre-auth arbitrary file write via unsafe deserialization in redis/memcache session handler ...

Disable GuzzleHttp\Cookie\FileCookieJar instantiation.

Reported by y0us.

2026-03-17 15:11:38 +01:00

..

clisetup.php

Refer native constants unambiguously (#9275)

2023-12-23 17:02:19 +01:00

iniset.php

Fix pre-auth arbitrary file write via unsafe deserialization in redis/memcache session handler

2026-03-17 15:11:38 +01:00

rcmail_action.php

CS-Fixer: Enable modernize_strpos

2025-08-15 13:20:24 +02:00

rcmail_attachment_handler.php

Fix washing html from rcube_attachment_handler (#9785)

2025-03-16 12:45:15 +01:00

rcmail_html_page.php

Enforce leading backslash for non-namespaced non-Roundcube uses (#9935)

2025-08-15 10:27:00 +02:00

rcmail_install.php

Add rel='noopener' to all links opening in a new window

2025-11-04 16:03:22 +01:00

rcmail_oauth.php

OAuth: Add oauth_auth_type option

2026-01-25 13:03:05 +01:00

rcmail_output_cli.php

Enforce leading backslash for non-namespaced non-Roundcube uses (#9935)

2025-08-15 10:27:00 +02:00

rcmail_output_html.php

Allow additional attributes for included scripts

2025-10-27 15:34:19 +01:00

rcmail_output_json.php

Enforce leading backslash for non-namespaced non-Roundcube uses (#9935)

2025-08-15 10:27:00 +02:00

rcmail_output.php

Add rel='noopener' to all links opening in a new window

2025-11-04 16:03:22 +01:00

rcmail_resend_mail.php

Enforce leading backslash for non-namespaced non-Roundcube uses (#9935)

2025-08-15 10:27:00 +02:00

rcmail_sendmail.php

Fix new phpstan errors

2026-03-17 14:53:08 +01:00

rcmail_string_replacer.php

Enforce leading backslash for non-namespaced non-Roundcube uses (#9935)

2025-08-15 10:27:00 +02:00

rcmail_utils.php

Use symfony/polyfill-php85 for array_first() and array_last()

2025-10-03 14:27:05 +02:00

rcmail.php

Preserve requested url on oidc login (#10033)

2025-11-29 18:21:16 +01:00