summaryrefslogtreecommitdiff
path: root/program/lib
AgeCommit message (Collapse)Author
2014-03-26Add config variable 'proxy_whitelist'Felix Eckhofer
HTTP headers X_FORWARDED_* and X_REAL_IP are only evaluated when received from an IP listed in proxy_whitelist. Furthermore, only the last non-trusted IP from X-Forwarded-For is used in place of the real ip. Without this, an attacker can easily spoof the headers and control the result of the ip or ssl check. This fixes several problems with [3a4c9f42], [4d480b36] and [a520f331] as mentioned in #1489729.
2014-03-23Skip IMAP SORT request if folder is emptyAleksander Machniak
2014-03-22Drop support for PHP < 5.3.7Aleksander Machniak
2014-03-19Bump version number to 1.1-gitAleksander Machniak
2014-03-11Avoid useless connection attempts if host is emptyThomas Bruederli
2014-03-06Implement ArrayAccess interface for conveniently accessing rcube_result_set ↵Thomas Bruederli
as array
2014-03-06Support structured data for autocompletion results; map 'type' attribute to ↵Thomas Bruederli
CSS class for autocomplete list items
2014-02-24Fix some PDO::MYSQL_* constants (wrongly described in PHP manual before 5.3.21)Aleksander Machniak
2014-02-23Improvement in handling invalid email address stringsAleksander Machniak
2014-02-19Declare LOGIN commands to be anonymized in debug loggingThomas Bruederli
2014-02-13Added toolbar button to move message in message viewAleksander Machniak
2014-02-11Fix invalid X-Draft-Info on forwarded message draft (#1489587)Aleksander Machniak
2014-02-10Add setter for user object to rcube class; we already have getters for ↵Thomas Bruederli
various user properties there
2014-02-07Fix directories check in Installer on Windows (#1489576)Aleksander Machniak
Added rcube_utils::is_absolute_path() method
2014-02-04Fix infinite loop when converting invalid html to plaintext (#1489566)Thomas Bruederli
2014-02-03Don't EVER log passwordsThomas Bruederli
2014-02-03Fixed Opera > 15 detection (#1489562)Aleksander Machniak
2014-01-24Fix confusing intersect/filter methods naming/behaviour.Aleksander Machniak
Removed rcube_result_index::intersect() method. Changed rcube_result_index::filter() to filter in the same way as rcube_result_thread::filter(), which means it actually does array_intersect(). Added tests scripts for rcube_result_index class.
2014-01-24Remove quotes around addressee name in case they are encoded.Aleksander Machniak
Some clients encode quotes with name using base64/quoted-printable encoding. Quotes were removed only for unencoded strings. Now also encoded names are handled this way. So, recipient/sender strings are displayed without quotes around and e.g. saving to addressbook does not save these redundant quotes.
2014-01-24Allow single quote in style attribute values.Aleksander Machniak
E.g. "font-family: 'Tahoma'" should not be removed.
2014-01-21Support SMTP socket context options via new config option 'smtp_conn_options'Aleksander Machniak
2014-01-16Merge branch 'master' of github.com:roundcube/roundcubemailThomas Bruederli
2014-01-16Merge branch 'master' of github.com:roundcube/roundcubemailAleksander Machniak
2014-01-16Fix compatibility with PHP 5.2 in html.php file (#1489514)Aleksander Machniak
2014-01-16* New option that write logs to per-user directories. (Debug) logs will only ↵Thomas Bruederli
be written if a directory for the current user exists. * The 'write_log' plugin hook now also supports the return property 'dir' to let plugins specify the log directory.
2014-01-16Improve parse_thread so it uses much less recursive callsAleksander Machniak
2014-01-16Don't log error if no plugin config is found in global directoriesThomas Bruederli
2014-01-16Use the right base_dn for listing records of the selected groupThomas Bruederli
2014-01-14Fall back to load plugin config from global config directories only if no ↵Thomas Bruederli
local config file exists
2014-01-07Load plugin config file from any configured pathTakika
Try to load plugin_name.inc.php config file from any pre-configured config path (rcube_config::path array) so webmail admins can move plugin configurations out of www root.
2014-01-07Make sure prefs always is a valid array (otherwise causes fatal errors if ↵Thomas Bruederli
language if not set)
2014-01-02Fix an obvious mistake in search_once() casing wrong result when calledAleksander Machniak
with empty 2nd argument (which also is not what should happen, should we return error?)
2014-01-02Use '0' instead of 0, to fix possible issue.Aleksander Machniak
2014-01-02Small perf. improvementAleksander Machniak
2014-01-01CS fixesAleksander Machniak
2013-12-28Fix issue where deprecated syntax for HTML lists was not handled properly ↵Aleksander Machniak
(#1488768)
2013-12-27Add some code for S/MIME signatures verification, update Crypt_GPG packageAleksander Machniak
2013-12-23Fix so message flags modified by another client are applied on the list on ↵Aleksander Machniak
refresh (#1485186)
2013-12-22Remove deprecated functions (these listed in bc.php file) usageAleksander Machniak
2013-12-21Fix broken text/* attachments when forwarding/editing a message (#1489426)Aleksander Machniak
2013-12-20Fix PHP warning when 1st argument of parse_host() is not a string (#1489486)Aleksander Machniak
2013-12-17Fix handling of X-Forwarded-For header with multiple addresses (#1489481)Aleksander Machniak
2013-12-12In normalize_string() replace 4-byte unicode characters with '?' character.Aleksander Machniak
These are not supported in default utf-8 charset on mysql, the chance we'd need them in searching is very low.
2013-12-08Clarify update() result description, return boolean when ID didn't changeAleksander Machniak
2013-12-04Fix issue where groups were not deleted when "Replace entire addressbook" ↵Aleksander Machniak
option on contacts import was used (#1489420)
2013-12-01Fix performance of listing writeable folders (#1489451)Aleksander Machniak
2013-11-28Display version from composer.json even if not intstalledThomas Bruederli
2013-11-28Fix preparation of message object before saving into the cache.Aleksander Machniak
The bug cased e.g. displaying HTML content as plain text for messages with Content-Type: text/html.
2013-11-28Exec config_get hook also in rcube_config::all() (#1485981)Aleksander Machniak
2013-11-28Fix handling of invalid closing tags in HTML messages (#1489446)Aleksander Machniak
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-23 07:49:38 +0000