summaryrefslogtreecommitdiff
path: root/program/steps/utils
AgeCommit message (Collapse)Author
2015-03-23Localize common error messages; improve explanation for CSRF check failuresThomas Bruederli
2014-12-16Improve system security by using optional special URL with security tokenAleksander Machniak
Allows to define separate server/path for image/js/css files Fix bugs where CSRF attacks were still possible on some requests
2014-09-26Set comm_path env variable after resetThomas Bruederli
2014-09-12Use consistent column/table quoting in sql queriesAleksander Machniak
2014-05-28Merge branch 'tinymce4'Aleksander Machniak
Conflicts: program/js/app.js program/js/editor.js program/js/tiny_mce/tiny_mce.js program/steps/utils/spell_html.inc
2014-05-28Bring back "Add To Dictionary" featureAleksander Machniak
2014-05-17Merge branch 'dev-text2html'Aleksander Machniak
Conflicts: program/js/app.js Fix handling magic_quotes in rcube_text2html and rcube_html2text - move stripslashes from these classes to action files
2014-05-11Improved display of plain text messages and text to HTML conversion (#1488937)Aleksander Machniak
Now instead of <pre> we use <div class="pre"> styled with monospace font. We replace whitespace characters with non-breaking spaces where needed. I.e. plain text is always unwrappable, until it uses format=flowed, in such a case only flowed paragraphs are wrappable. Also conversion of text to HTML in compose editor was modified in the same way.
2014-05-08Don't use $HTTP_RAW_POST_DATA deprecated in PHP 5.6Aleksander Machniak
2014-05-06Allow <> characters in spellchecking textAleksander Machniak
2014-05-01Update to TinyMCE 4.xAleksander Machniak
2014-04-25Fix error when spell-checking an empty text (#1489831)Aleksander Machniak
2014-03-22CS fixesAleksander Machniak
2014-02-11modcss.inc: Fixed CSSteffen185
2014-02-11Make modcss.inc work with allow_url_fopen = OffSteffen185
Alternatively use the PHP cURL extension
2013-12-25CS fixesAleksander Machniak
2013-12-22Remove deprecated functions (these listed in bc.php file) usageAleksander Machniak
2013-11-10Fix errors in error page :-)Thomas Bruederli
2013-10-18Get supported spell-check languages from the configured backend; replace ↵Thomas Bruederli
suspended google spell service with our new service at spell.roundcube.net
2013-10-17Fix vulnerability in handling _session argument of utils/save-prefs (#1489382)Aleksander Machniak
2013-08-25Strip spell checker error message for logging; remove unused sprintf()Thomas Bruederli
2013-05-03Log spellchecker error also in html modeAleksander Machniak
2013-05-03Check Google spell check service response for errors and report them accordinglyThomas Bruederli
2013-03-27Whitelist configuration options (user preferences) that can be changed using ↵Aleksander Machniak
save-pref command
2012-12-26Framework'ize html2text classAleksander Machniak
2012-11-19Improve line wrapping behavior where message charset is changed by plugins ↵Thomas Bruederli
(including html2plaintext conversion)
2012-10-04Fix HTTP User-Agent XSS vulnerability (#1488737)Thomas Bruederli
2012-08-08Fix SQL errors handlingAleksander Machniak
2012-08-08Remove unused variableAleksander Machniak
2012-07-10Use file_get_contents() to make code simpler and to fix possible infinite loopAleksander Machniak
2012-06-28Fix empty user agent string on error page for "incompatible browser" errorAleksander Machniak
2012-05-22Removed $Id$Aleksander Machniak
2012-04-13- Merge devel-framework branch, resolved conflictsalecpl
2012-02-25Slighlty increase minimum browser requirementsthomascube
2012-01-18Changed license to GNU GPLv3+ with exceptions for skins and pluginsthomascube
2011-12-08- Update killcache with new cache tablesalecpl
2011-09-06- Merge devel-spellcheck branch:alecpl
- Added spellchecker exceptions dictionary (shared or per-user) - Added possibility to ignore words containing caps, numbers, symbols (spellcheck_ignore_* options)
2011-05-30- Provided rcube_spellchecker class, simplified code in utils task (less ↵alecpl
spell* files)
2011-04-22- Fix usage of non-standard HTTP error codes (#1487797)alecpl
2011-03-17- Use \n as a word separator to workaround some strange Google spellchecker ↵alecpl
issue
2011-02-08Add optional referer check to prevent CSRF in GET requeststhomascube
2011-02-03Prevent from relaying arbitrary requests through modcss.inc (security issue)thomascube
2011-01-12Bumbed version; Roundcube development is not Switzerland onlythomascube
2010-12-06- Fix plaintext versions of HTML messages don't contain placeholders for ↵alecpl
emotions (#1485206)
2010-09-29- Fix HTML to plain text conversion doesn't handle citation blocks (#1486921)alecpl
2010-09-25- s/RoundCube/Roundcube/alecpl
2010-09-17- update ID keywordalecpl
2010-09-17- Fix list_cols is not updated after column dragging (#1486999)alecpl
- Improved save-pref action and moved to separate file in utils task directory - Improved http_post/http_request to support first argument in form 'task/action'
2010-07-25Strip protocol from hostname in HTTP headers (#1486868)thomascube
2010-06-30- fix for empty suggestions resultalecpl