roundcube.git/CHANGELOG, branch 1.0.1 Unnamed repository; edit this file 'description' to name the repository. https://git.hiegel.fr/cgit/roundcube.git/atom?h=1.0.1 2014-05-02T17:39:02Z Fix IMAP connection test in installer so it is aware of imap_auth_type (#1489746) 2014-05-02T17:39:02Z Aleksander Machniak alec@alec.pl 2014-05-02T17:35:54Z urn:sha1:16ce146d8881410618521ec676cb8e39252bb833 Add changelog line removed by mistake in last commit 2014-04-30T12:51:09Z Aleksander Machniak alec@alec.pl 2014-04-30T12:51:09Z urn:sha1:2ff8b45c48dd12732d5e393baa0a6d4367d329d5 Support 'error' and 'body_file' return attribs in 'message_before_send' hook (#1489595) 2014-04-30T12:30:34Z Aleksander Machniak alec@alec.pl 2014-04-30T12:27:49Z urn:sha1:8b5d16d30a48ea5b4afda7019dd09dbcd303194f Conflicts: CHANGELOG Fix invalid host validation on login (#1489841) 2014-04-30T07:08:28Z Aleksander Machniak alec@alec.pl 2014-04-30T07:07:29Z urn:sha1:34e6526c958f3a0143a2cf5c8f1b9be29ebd65ef Fix redundant warning when switching from html to text in empty editor (#1489819) 2014-04-29T17:24:28Z Aleksander Machniak alec@alec.pl 2014-04-29T17:21:19Z urn:sha1:50fee948fd6dda6774c3e95469023d15add0d9ea We also skip ajax request in such a case. We assume "empty" here means "with no text excluding whitespace". Conflicts: program/js/app.js Fix too small length of users.preferences column data type on MySQL 2014-04-29T10:13:36Z Aleksander Machniak alec@alec.pl 2014-04-29T10:12:26Z urn:sha1:08953a46d95e0165f0bccf9391254ca03195e0ec Fix varius db_prefix issues (#1489839) 2014-04-29T09:59:07Z Aleksander Machniak alec@alec.pl 2014-04-29T09:34:43Z urn:sha1:720e7d376ffe0fb625d0b1e250121823a71da094 - Move DDL script execution code to rcube_db class(es). - Improve prefix replacement code, so index names are also modified Fix identities_level=4 handling in new_user_dialog plugin (#1489840) 2014-04-28T12:22:07Z Aleksander Machniak alec@alec.pl 2014-04-28T12:13:09Z urn:sha1:f25f6cde39bf415585e15c78c3eec9e7c7ee9cac Add config variable 'proxy_whitelist' 2014-04-25T16:40:53Z Felix Eckhofer felix@eckhofer.com 2014-03-26T13:13:40Z urn:sha1:f58a294949547ed132bf3cdb5815b68c659b992a HTTP headers X_FORWARDED_* and X_REAL_IP are only evaluated when received from an IP listed in proxy_whitelist. Furthermore, only the last non-trusted IP from X-Forwarded-For is used in place of the real ip. Without this, an attacker can easily spoof the headers and control the result of the ip or ssl check. This fixes several problems with [3a4c9f42], [4d480b36] and [a520f331] as mentioned in #1489729. Conflicts: CHANGELOG Update changelog 2014-04-25T16:16:23Z Thomas Bruederli thomas@roundcube.net 2014-04-25T16:15:23Z urn:sha1:c3c4842c5f3525679a7f26ddf642532c820d0e33