Age | Commit message (Collapse) | Author | |
---|---|---|---|
2013-10-17 | Fix vulnerability in handling _session argument of utils/save-prefs (#1489382) | Aleksander Machniak | |
Conflicts: CHANGELOG program/lib/Roundcube/rcube_plugin_api.php program/steps/utils/save_pref.inc | |||
2013-10-17 | Update changelog | Aleksander Machniak | |
2013-03-27 | Bump version for 0.8.6 releasev0.8.60.8.6 | Thomas Bruederli | |
2013-03-27 | Sanity check the file path for generic message footer before adding it | Thomas Bruederli | |
2013-03-27 | Whitelist configuration options (user preferences) that can be changed using ↵ | Aleksander Machniak | |
save-pref command Conflicts: program/lib/Roundcube/rcube_plugin.php program/lib/Roundcube/rcube_plugin_api.php | |||
2013-02-10 | Properly quote form validation error messages | Thomas Bruederli | |
2013-01-25 | Bump version to 0.8.5v0.8.5 | Thomas Bruederli | |
2013-01-25 | Merge branch 'release-0.8' of github.com:roundcube/roundcubemail into ↵ | Thomas Bruederli | |
release-0.8 | |||
2013-01-10 | Fix logo display in IE8 (#1488889) | Thomas Bruederli | |
2013-01-10 | Mark mime_magic option with old default value as obsolete | Thomas Bruederli | |
Conflicts: installer/rcube_install.php | |||
2013-01-10 | Avoid direct execution of installer includes (#1488895) | Thomas Bruederli | |
2013-01-02 | Fix #countcontrols issue in IE<=8 when text is very long (#1488890) | Aleksander Machniak | |
Conflicts: CHANGELOG | |||
2012-12-15 | Fix escaping of add-contact arguments - fixes JS error in IE | Aleksander Machniak | |
2012-12-14 | Fix unwanted horizontal scrollbar in message preview header (#1488866) | Aleksander Machniak | |
Conflicts: CHANGELOG skins/larry/mail.css | |||
2012-12-05 | Add workaround for IE<=8 bug where Content-Disposition:inline was ignored ↵ | Aleksander Machniak | |
(#1488844) | |||
2012-12-04 | - Fix XSS vulnerability in vbscript: and data:text links handling (#1488850) | Aleksander Machniak | |
Conflicts: CHANGELOG tests/MailFunc.php | |||
2012-11-27 | Unset mime-magic location in order to let PHP use the default location | Thomas Bruederli | |
2012-11-27 | Don't open application/x-shockwave-flash files in browser (quick fix for XSS ↵ | Thomas Bruederli | |
reported in #148882) | |||
2012-11-27 | Fix deleting of collapsed threads, broken in ↵ | Aleksander Machniak | |
2b55d4f4204bdb8c97865e01b960c1d1f23ac0b7 (#1488772) | |||
2012-11-25 | Fix redundant colon after last address in print mode | Aleksander Machniak | |
2012-11-25 | Fix absolute positioning in HTML messages (#1488819) | Aleksander Machniak | |
Conflicts: CHANGELOG | |||
2012-11-23 | Fix selection of collapsed thread rows (#1488772) | Aleksander Machniak | |
Conflicts: CHANGELOG | |||
2012-11-23 | Fix wrapping of quoted text with format=flowed (#1488177) | Aleksander Machniak | |
Conflicts: CHANGELOG program/include/rcube_mime.php | |||
2012-11-23 | Fix cache (in)validation after setting \Deleted flag | Aleksander Machniak | |
2012-11-23 | Fix keybord events on messages list in opera browser (#1488823) | Aleksander Machniak | |
Conflicts: CHANGELOG | |||
2012-11-23 | Update | Aleksander Machniak | |
2012-11-15 | Update versions list with 0.8.4 release | Aleksander Machniak | |
2012-11-15 | Fix wrong (non-specific) error message on crypt or connection error (#1488808) | Aleksander Machniak | |
2012-11-14 | Fix XSS vulnerability in handling of text/enriched messages (#1488806)v0.8.4 | Aleksander Machniak | |
2012-11-14 | Bump version to 0.8.4 | Thomas Bruederli | |
2012-11-13 | Set error_reporting | Aleksander Machniak | |
2012-11-13 | Fix handling of 'media' attribute on linked css (#1488789) | Aleksander Machniak | |
Conflicts: CHANGELOG | |||
2012-11-12 | Fix regression where unintentional page reload was done after request abort ↵ | Aleksander Machniak | |
(#1488802) | |||
2012-11-12 | Fix excessive LFs at the end of composed message with top_posting=true ↵ | Aleksander Machniak | |
(#1488797) Conflicts: CHANGELOG | |||
2012-11-11 | Add 0.8.3 to the list of releases | Aleksander Machniak | |
2012-11-11 | Fix bug where leading blanks were stripped from quoted lines (#1488795) | Aleksander Machniak | |
Conflicts: CHANGELOG | |||
2012-11-10 | Bump version to 0.8.3v0.8.3 | Thomas Bruederli | |
2012-11-08 | Fix AREA links handling (#1488792) | Aleksander Machniak | |
Conflicts: CHANGELOG | |||
2012-11-05 | Fixed rcube_imap_generic::uncompressMessageSet() result when argument is ↵ | Aleksander Machniak | |
empty. Added tests. Conflicts: tests/Framework/ImapGeneric.php | |||
2012-11-03 | Fix count display after inserting a new contact | Thomas Bruederli | |
2012-10-31 | Merge pull request #41 from linagora/release-0.8 | Thomas B. | |
Grancefully handle SSO redirects on Ajax requests | |||
2012-10-31 | Fix possible HTTP DoS on error in keep-alive requests (#1488782) | Aleksander Machniak | |
Conflicts: CHANGELOG | |||
2012-10-30 | Grancefully handle SSO redirections on Ajax requests | jkornobis | |
On some SSO systems, when the SSO session is expired, the system intercept HTTP requests and send a 302 "Found" HTTP code to the login page. This patch handle this case in Roundcube Ajax requests, to redirect to the SSO login page. Note that request.status don't have the 302 code (at least on Firefox), so we have to check the response headers for a Location field and redirect manually. | |||
2012-10-29 | Update changelog | Aleksander Machniak | |
2012-10-29 | Merge pull request #40 from remicollet/track-1488779 | Aleksander Machniak | |
fix call to MDB2::isError for MDB2 2.5.0b4 | |||
2012-10-29 | fix call to MDB2::isError for MDB2 2.5.0b4 | Remi Collet | |
2012-10-25 | Add deprecated alias clear_mailbox() | Aleksander Machniak | |
2012-10-22 | Convert all identity headers into the desired message charset | Thomas Bruederli | |
2012-10-22 | Fix a bug where saving a message in INBOX wasn't possible | Aleksander Machniak | |
2012-10-22 | Fix HTML part detection in messages with attachments (#1488769) | Aleksander Machniak | |