summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2013-10-21Bump version after security fixv0.8.7Thomas Bruederli
2013-10-17Fix vulnerability in handling _session argument of utils/save-prefs (#1489382)Aleksander Machniak
Conflicts: CHANGELOG program/lib/Roundcube/rcube_plugin_api.php program/steps/utils/save_pref.inc
2013-10-17Update changelogAleksander Machniak
2013-03-27Bump version for 0.8.6 releasev0.8.60.8.6Thomas Bruederli
2013-03-27Sanity check the file path for generic message footer before adding itThomas Bruederli
2013-03-27Whitelist configuration options (user preferences) that can be changed using ↵Aleksander Machniak
save-pref command Conflicts: program/lib/Roundcube/rcube_plugin.php program/lib/Roundcube/rcube_plugin_api.php
2013-02-10Properly quote form validation error messagesThomas Bruederli
2013-01-25Bump version to 0.8.5v0.8.5Thomas Bruederli
2013-01-25Merge branch 'release-0.8' of github.com:roundcube/roundcubemail into ↵Thomas Bruederli
release-0.8
2013-01-10Fix logo display in IE8 (#1488889)Thomas Bruederli
2013-01-10Mark mime_magic option with old default value as obsoleteThomas Bruederli
Conflicts: installer/rcube_install.php
2013-01-10Avoid direct execution of installer includes (#1488895)Thomas Bruederli
2013-01-02Fix #countcontrols issue in IE<=8 when text is very long (#1488890)Aleksander Machniak
Conflicts: CHANGELOG
2012-12-15Fix escaping of add-contact arguments - fixes JS error in IEAleksander Machniak
2012-12-14Fix unwanted horizontal scrollbar in message preview header (#1488866)Aleksander Machniak
Conflicts: CHANGELOG skins/larry/mail.css
2012-12-05Add workaround for IE<=8 bug where Content-Disposition:inline was ignored ↵Aleksander Machniak
(#1488844)
2012-12-04- Fix XSS vulnerability in vbscript: and data:text links handling (#1488850)Aleksander Machniak
Conflicts: CHANGELOG tests/MailFunc.php
2012-11-27Unset mime-magic location in order to let PHP use the default locationThomas Bruederli
2012-11-27Don't open application/x-shockwave-flash files in browser (quick fix for XSS ↵Thomas Bruederli
reported in #148882)
2012-11-27Fix deleting of collapsed threads, broken in ↵Aleksander Machniak
2b55d4f4204bdb8c97865e01b960c1d1f23ac0b7 (#1488772)
2012-11-25Fix redundant colon after last address in print modeAleksander Machniak
2012-11-25Fix absolute positioning in HTML messages (#1488819)Aleksander Machniak
Conflicts: CHANGELOG
2012-11-23Fix selection of collapsed thread rows (#1488772)Aleksander Machniak
Conflicts: CHANGELOG
2012-11-23Fix wrapping of quoted text with format=flowed (#1488177)Aleksander Machniak
Conflicts: CHANGELOG program/include/rcube_mime.php
2012-11-23Fix cache (in)validation after setting \Deleted flagAleksander Machniak
2012-11-23Fix keybord events on messages list in opera browser (#1488823)Aleksander Machniak
Conflicts: CHANGELOG
2012-11-23UpdateAleksander Machniak
2012-11-15Update versions list with 0.8.4 releaseAleksander Machniak
2012-11-15Fix wrong (non-specific) error message on crypt or connection error (#1488808)Aleksander Machniak
2012-11-14Fix XSS vulnerability in handling of text/enriched messages (#1488806)v0.8.4Aleksander Machniak
2012-11-14Bump version to 0.8.4Thomas Bruederli
2012-11-13Set error_reportingAleksander Machniak
2012-11-13Fix handling of 'media' attribute on linked css (#1488789)Aleksander Machniak
Conflicts: CHANGELOG
2012-11-12Fix regression where unintentional page reload was done after request abort ↵Aleksander Machniak
(#1488802)
2012-11-12Fix excessive LFs at the end of composed message with top_posting=true ↵Aleksander Machniak
(#1488797) Conflicts: CHANGELOG
2012-11-11Add 0.8.3 to the list of releasesAleksander Machniak
2012-11-11Fix bug where leading blanks were stripped from quoted lines (#1488795)Aleksander Machniak
Conflicts: CHANGELOG
2012-11-10Bump version to 0.8.3v0.8.3Thomas Bruederli
2012-11-08Fix AREA links handling (#1488792)Aleksander Machniak
Conflicts: CHANGELOG
2012-11-05Fixed rcube_imap_generic::uncompressMessageSet() result when argument is ↵Aleksander Machniak
empty. Added tests. Conflicts: tests/Framework/ImapGeneric.php
2012-11-03Fix count display after inserting a new contactThomas Bruederli
2012-10-31Merge pull request #41 from linagora/release-0.8Thomas B.
Grancefully handle SSO redirects on Ajax requests
2012-10-31Fix possible HTTP DoS on error in keep-alive requests (#1488782)Aleksander Machniak
Conflicts: CHANGELOG
2012-10-30Grancefully handle SSO redirections on Ajax requestsjkornobis
On some SSO systems, when the SSO session is expired, the system intercept HTTP requests and send a 302 "Found" HTTP code to the login page. This patch handle this case in Roundcube Ajax requests, to redirect to the SSO login page. Note that request.status don't have the 302 code (at least on Firefox), so we have to check the response headers for a Location field and redirect manually.
2012-10-29Update changelogAleksander Machniak
2012-10-29Merge pull request #40 from remicollet/track-1488779Aleksander Machniak
fix call to MDB2::isError for MDB2 2.5.0b4
2012-10-29fix call to MDB2::isError for MDB2 2.5.0b4Remi Collet
2012-10-25Add deprecated alias clear_mailbox()Aleksander Machniak
2012-10-22Convert all identity headers into the desired message charsetThomas Bruederli
2012-10-22Fix a bug where saving a message in INBOX wasn't possibleAleksander Machniak