roundcube.git/program/lib/Roundcube/rcube_utils.php, branch 1.0.2 Unnamed repository; edit this file 'description' to name the repository. https://git.hiegel.fr/cgit/roundcube.git/atom?h=1.0.2 2014-05-27T12:59:03Z Fix broken normalize_string(), add support for ISO-8859-2 2014-05-27T12:59:03Z Aleksander Machniak alec@alec.pl 2014-05-27T09:39:31Z urn:sha1:dbd5c184714a14b9944d4f4654fca6c94b81d0de Add config variable 'proxy_whitelist' 2014-04-25T16:40:53Z Felix Eckhofer felix@eckhofer.com 2014-03-26T13:13:40Z urn:sha1:f58a294949547ed132bf3cdb5815b68c659b992a HTTP headers X_FORWARDED_* and X_REAL_IP are only evaluated when received from an IP listed in proxy_whitelist. Furthermore, only the last non-trusted IP from X-Forwarded-For is used in place of the real ip. Without this, an attacker can easily spoof the headers and control the result of the ip or ssl check. This fixes several problems with [3a4c9f42], [4d480b36] and [a520f331] as mentioned in #1489729. Conflicts: CHANGELOG Remove usage of $RCMAIL global variable 2014-04-25T16:39:05Z Felix Eckhofer felix@eckhofer.com 2014-03-26T19:45:33Z urn:sha1:d71a711ab06483e62b1a7343e296ef8639352689 Fix directories check in Installer on Windows (#1489576) 2014-02-07T13:45:25Z Aleksander Machniak alec@alec.pl 2014-02-07T13:43:51Z urn:sha1:f130f9116e1e9ee9735d8026aa5242fc9daceecb Added rcube_utils::is_absolute_path() method Fix PHP warning when 1st argument of parse_host() is not a string (#1489486) 2013-12-20T16:41:10Z Aleksander Machniak alec@alec.pl 2013-12-20T16:41:10Z urn:sha1:f6d23a8dce6258f954257174bc03f2b85a21afdf Fix handling of X-Forwarded-For header with multiple addresses (#1489481) 2013-12-17T08:21:05Z Aleksander Machniak alec@alec.pl 2013-12-17T08:21:05Z urn:sha1:a520f331c16fc703cc92d5b9853fb91805f82305 In normalize_string() replace 4-byte unicode characters with '?' character. 2013-12-12T07:58:54Z Aleksander Machniak alec@alec.pl 2013-12-12T07:58:54Z urn:sha1:d19c0f9f309cbe63411a8ddcbbda3daf7461a30d These are not supported in default utf-8 charset on mysql, the chance we'd need them in searching is very low. Fixed saving contact birthday/anniversary dates before 01-01-1970 2013-10-28T14:28:58Z Aleksander Machniak alec@alec.pl 2013-10-28T14:28:58Z urn:sha1:b1f3c3bee814ee9fadd4145ade9d9542211d2ee4 Fix CSS selector modifications when nested in @media blocks 2013-10-26T09:49:02Z Thomas Bruederli thomas@roundcube.net 2013-10-26T09:49:02Z urn:sha1:fdb30f32790857797ae91520995b02316d2d3673 Some micro-optimizations 2013-10-13T14:12:43Z Aleksander Machniak alec@alec.pl 2013-10-13T14:12:43Z urn:sha1:ff6de99ae4f353f793c95208ad6407ac59a63376