Age | Commit message (Collapse) | Author |
|
N or FN properties
|
|
HTTP headers X_FORWARDED_* and X_REAL_IP are only evaluated when
received from an IP listed in proxy_whitelist. Furthermore, only the
last non-trusted IP from X-Forwarded-For is used in place of the real
ip.
Without this, an attacker can easily spoof the headers and control the
result of the ip or ssl check.
This fixes several problems with [3a4c9f42], [4d480b36] and [a520f331] as
mentioned in #1489729.
Conflicts:
CHANGELOG
|
|
|
|
|
|
move/copy
|
|
|
|
|
|
Conflicts:
program/steps/mail/func.inc
|
|
|
|
|
|
|
|
Conflicts:
program/js/app.js
|
|
Conflicts:
program/js/app.js
|
|
|
|
|
|
|
|
|
|
Conflicts:
tests/Framework/Washtml.php
|
|
|
|
|
|
|
|
number format
|
|
|
|
release-1.0
|
|
|
|
length
|
|
after return from mail view (#1489774)
Conflicts:
CHANGELOG
|
|
|
|
|
|
as array
|
|
|
|
|
|
|
|
|
|
of current folder, even if it does not exist
|
|
|
|
browser (#1489569)
|
|
|
|
for all empty file uploads (#1489685)
|
|
skip_deleted = true.
|
|
- Display alert if no file is chosen
- Unlock the UI if form is not submitted
- Avoid duplicate error messages
- Fix javascript error due to missing attachments list widget
|
|
|
|
|
|
'uibutton'
|
|
attribute to CSS class for autocomplete list items"
This reverts commit e3773d46cb4f06aaab2747db98765edd6d871524.
|
|
rcube_result_set as array"
This reverts commit a7d68eaf1a0df1d954b4d6623ff0419a93739cd2.
|
|
CSS class for autocomplete list items
|
|
as array
|
|
|
|
|