| | |
|---|
| | | CHANGELOG Roundcube Webmail |
|---|
| | | =========================== |
|---|
| | | |
|---|
| | | - Fix wrong handling of links with '|' character (#1489276) |
|---|
| | | - Fix XSS vulnerability when saving HTML signatures (#1489251) |
|---|
| | | - Installer: Remove system() function use (#1490139) |
|---|
| | | - Password plugin: Added 'kpasswd' driver by Peter Allgeyer |
|---|
| | | - Add initdb.sh to create database from initial.sql script with prefix support (#1490188) |
|---|
| | | - Plugin API: Added message_part_body hook |
|---|
| | | - Plugin API: Added message_ready hook |
|---|
| | | - Plugin API: Add special onload() method to execute plugin actions before startup (session and GUI initialization) |
|---|
| | | - Add option to place signature at bottom of the quoted text even in top-posting mode [sig_below] |
|---|
| | | - Fix handling of %-encoded entities in mailto: URLs (#1490346) |
|---|
| | | - Fix zipped messages downloads after selecting all messages in a folder (#1490339) |
|---|
| | | - Fix vpopmaild driver of password plugin |
|---|
| | | - Fix PHP warning: Non-static method PEAR::setErrorHandling() should not be called statically (#1490343) |
|---|
| | | - Fix tables listing routine on mysql and postgres so it skips system or other database tables and views (#1490337) |
|---|
| | | - Fix message list header in classic skin on window resize in Internet Explorer (#1490213) |
|---|
| | | - Fix so text/calendar parts are listed as attachments even if not marked as such (#1490325) |
|---|
| | | - Fix so unrecognized TNEF attachments are displayed on the list of attachments (#1490351) |
|---|
| | | - Fix lack of signature separator for plain text signatures in html mode (#1490352) |
|---|
| | | - Fix font artifact in Google Chrome on Windows (#1490353) |
|---|
| | | - Fix bug where forced extwin page reload could exit from the extwin mode (#1490350) |
|---|
| | | - Fix bug where some unrelated attachments in multipart/related message were not listed (#1490355) |
|---|
| | | |
|---|
| | | RELEASE 1.1.1 |
|---|
| | | ------------- |
|---|
| | | - ACL: Allow other plugins to adjust the list of permissions and groups to edit |
|---|
| | | - Add possibility to print contact information (of a single contact) |
|---|
| | | - Add possibility to configure max_allowed_packet value for all database engines (#1490283) |
|---|
| | | - Improved handling of storage errors after message is sent |
|---|
| | | - Update to TinyMCE 4.1.9 |
|---|
| | | - Unified request* event arguments handling, added support for _unlock and _action parameters |
|---|
| | | - Security: Generate random hash for the per-user local storage prefix (#1490279) |
|---|
| | | - Fix refreshing of drafts list when sending a message which was saved in meantime (#1490238) |
|---|
| | | - Fix saving/sending emoticon images when assets_dir is set |
|---|
| | | - Fix PHP fatal error when visiting Vacation interface and there's no sieve script yet (#1490292) |
|---|
| | | - Fix setting max packet size for DB caches and check packet size also in shared cache |
|---|
| | | - Fix needless security warning on BMP attachments display (#1490282) |
|---|
| | | - Fix handling of some improper constructs in format=flowed text as per the RFC3676[4.5] (#1490284) |
|---|
| | | - Fix performance of rcube_db_mysql::get_variable() |
|---|
| | | - Fix missing or not up-to-date CATEGORIES entry in vCard export (#1490277) |
|---|
| | | - Fix fatal errors on systems without mbstring extension or mb_regex_encoding() function (#1490280) |
|---|
| | | - Fix cursor position on reply below the quote in HTML mode (#1490263) |
|---|
| | | - Fix so "over quota" errors are displayed also in message compose page |
|---|
| | | - Fix duplicate entries supression in autocomplete result (#1490290) |
|---|
| | | - Fix "Non-static method PEAR::isError() should not be called statically" errors (#1490281) |
|---|
| | | - Fix parsing invalid HTML messages with BOM after <!DOCTYPE> (#1490291) |
|---|
| | | - Fix duplicate entry on timezones list in rcube_config::timezone_name_from_abbr() (#1490293) |
|---|
| | | - Fix so localized folder name is displayed in multi-folder search result (#1490243) |
|---|
| | | - Fix javascript error after creating a folder which is a subfolder of another one (#1490297) |
|---|
| | | - Fix bug where subject of sent/saved message was removed if mbstring wasn't installed (#1490295) |
|---|
| | | - Fix missing vcard_attachment icon on messages list (#1490303) |
|---|
| | | - Fix storing signatures with big images in MySQL database (#1490306) |
|---|
| | | - Fix Opera browser detection in javascript (#1490307) |
|---|
| | | - Fix so search filter, scope and fields are reset on folder change |
|---|
| | | - Fix rows count when messages search fails (#1490266) |
|---|
| | | - Fix bug where spellchecking in HTML editor do not work after switching editor type more than once (#1490311) |
|---|
| | | - Fix bug where TinyMCE area height was too small on slow network connection (#1490310) |
|---|
| | | - Fix backtick character handling in sql queries (#1490312) |
|---|
| | | - Fix redirect URL for attachments loaded in an iframe when behind a proxy (#1490191) |
|---|
| | | - Fix menu container references to point to the actual <ul> element (#1490313) |
|---|
| | | - Fix javascripts errors in IE8 - lack of Event.which, focusing a hidden element (#1490318) |
|---|
| | | |
|---|
| | | RELEASE 1.1.0 |
|---|
| | | ------------- |
|---|
| | | - Make SMTP error log more verbose - include server response and error code |
|---|
| | | - Fix download options menu (added by zipdownload plugin) in classic skin (#1490228) |
|---|
| | | - Fix blocked.gif image usage with assets_dir set |
|---|
| | | - Fix bug where max_group_members was ignored when adding a new contact (#1490214) |
|---|
| | | - Hide MDN and DSN options in compose if disabled by admin (#1490221) |
|---|
| | | - Fix checks based on window.ActiveXObject in IE > 10 |
|---|
| | | - Fix XSS issue in style attribute handling (#1490227) |
|---|
| | | - Fix bug where Drafts list wasn't updated on draft-save action in new window (#1490225) |
|---|
| | | - Fix so "set as default" option is hidden if identities_level > 1 (#1490226) |
|---|
| | | - Fix bug where search was reset after returning from compose visited for reply |
|---|
| | | - Fix javascript error in "IE 8.0/Tablet PC" browser (#1490210) |
|---|
| | | - Fix bug where Reply-To address was ignored on reply to messages sent by self (#1490233) |
|---|
| | | - Fix bug where empty fieldmap config entries caused empty results of ldap search (#1490229) |
|---|
| | | - Fix bug where drafts list wasn't refreshed after draft message was sent from another window (#1490238) |
|---|
| | | - Fix keyboard navigation and css in datepicker widget across many Firefox versions |
|---|
| | | - Fix false warning when opening attached text/plain files (#1490241) |
|---|
| | | - Fix bug where signature could have been inserted twice after plain-to-html switch (#1490239) |
|---|
| | | - Fix security issue in DBMail driver of password plugin (#1490261) |
|---|
| | | - Enable FollowSymLinks option in .htaccess file which is required by rewrite rules (#1490255) |
|---|
| | | - Fix so JSON.parse() errors on localStorage items are ignored (#1490249) |
|---|
| | | |
|---|
| | | RELEASE 1.1-rc |
|---|
| | | -------------- |
|---|
| | | - Update jQuery to version 2.1.3 |
|---|
| | | - Allow to override any config option through env variables |
|---|
| | | - Improve system security by using optional special URL with security token - use_secure_urls |
|---|
| | | - Allow to define separate server/path for image/js/css files - assets_url/assets_dir |
|---|
| | | - Sync vendor folder if exists in source package (#1490145) |
|---|
| | | - Avoid useless reloading list when resetting search with active filter (#1490057) |
|---|
| | | - Fix invalid folder selection if clicked while busy (#1490158) |
|---|
| | | - Fix import of multiple contact email addresses from Outlook-csv format (#1490169) |
|---|
| | | - Fix drag-n-drop to folders expanded while dragging (#1490157) |
|---|
| | | - Fix import of multiple contact groups from Google-csv format (#1490159) |
|---|
| | | - Fix import of contacts with multiple email addresses from Google-csv format (#1490178) |
|---|
| | | - Fix bugs where CSRF attacks were still possible on some requests |
|---|
| | | - Fix some rcube_utils::anytodatetime() corner cases with timezone mismatches (#1490163) |
|---|
| | | - Improve move-to and contact-export button in classic skin (#1490166) |
|---|
| | | - Fix wrong icon for download button in classic skin |
|---|
| | | - Fix bug where sent message was saved in Sent folder even if disabled by user (#1490208) |
|---|
| | | |
|---|
| | | RELEASE 1.1-beta |
|---|
| | | ---------------- |
|---|
| | | - Fix skin path handling in plugin context (#1488967) |
|---|
| | | - Prevent memory exhaustion on image resizing with GD on Windows (#1489937) |
|---|
| | | - Add plugin hook for database table name lookups as requested in #1489837 |
|---|
| | | - Added Oracle database support |
|---|
| | | - Support contacts import in GMail CSV format |
|---|
| | | - Added namespace filter in Folder Manager |
|---|
| | | - Added folder searching in Folder Manager |
|---|
| | | - Fix restoring draft messages from localStorage if editor mode differs (#1490016) |
|---|
| | | - Added config option/user preference to disable saving messages in localStorage (#1489979) |
|---|
| | | - Added config option 'imap_log_session' to enable Roundcube <-> IMAP session ID logging |
|---|
| | | - Added config option 'log_session_id' to control the lengh of the session identifer in logs |
|---|
| | | - Implemented 'storage_connected' API hook after successful IMAP login (#1490025) |
|---|
| | | - Intergrate Net_LDAP3 and rcube_ldap_generic classes |
|---|
| | | - Add option (disabled_actions) to disable UI elements/actions (#1489638) |
|---|
| | | - Support password encryption using openssl extension (#1489989) |
|---|
| | | - Create/rename groups in UI dialogs (#1489951) |
|---|
| | | - Added 'contact_search_name' option to define autocompletion entry format |
|---|
| | | - Display quota information for current folder not INBOX only (#1487993) |
|---|
| | | - Support images in HTML signatures (#1488676) |
|---|
| | | - Display full quota information in popup (#1485769, #1486604) |
|---|
| | | - Mail compose: Selecting contact inserts recipient to previously focused input - to/cc/bcc accordingly (#1489684) |
|---|
| | | - Close "no subject" prompt with Enter key (#1489580) |
|---|
| | | - Password: Add option to force new users to change their password (#1486884) |
|---|
| | | - Improve support for screen readers and assistive technology using WCAG 2.0 and WAI ARIA standards |
|---|
| | | - Enable basic keyboard navigation throughout the UI (#1487845) |
|---|
| | | - Select/scroll to previously selected message when returning from message page (#1489023) |
|---|
| | | - Display a warning if popup window was blocked (#1489618) |
|---|
| | | - Remove (was: ...) from message subject on reply (#1489375) |
|---|
| | | - Update to TinyMCE 4.1 (#1489057) |
|---|
| | | - Enable autolink plugin in TinyMCE (#1488845) |
|---|
| | | - Support image operations with Imagick extension (#1489734) |
|---|
| | | - Support upload progress with session.upload_progress and PECL uploadprogress module (#1488702) |
|---|
| | | - Make identity name field optional (#1489510) |
|---|
| | | - Utility script to remove user records from the local database |
|---|
| | | - Plugin API: Added message_saved hook (#1489752) |
|---|
| | | - Plugin API: Added imap_search_before hook |
|---|
| | | - Support messages import from zip archives |
|---|
| | | - Zipdownload: Added mbox format support (#1486069) |
|---|
| | | - Drop support for IE6, move IE7/IE8 support to legacy_browser plugin |
|---|
| | | - Update to jQuery-2.1.1 |
|---|
| | | - Search across multiple folders (#1485234) |
|---|
| | | - Improve UI integration of ACL settings |
|---|
| | | - Drop support for PHP < 5.3.7 |
|---|
| | | - Set In-Reply-To and References for forwarded messages (#1489593) |
|---|
| | | - Removed redundant default_folders config option (#1489737) |
|---|
| | | - Implemented IMAP SPECIAL-USE extension support [RFC6154] (#1487830) |
|---|
| | | - Optimize some framed pages content for better performance (#1489792) |
|---|
| | | - Improve text messages display and conversion to HTML (#1488937) |
|---|
| | | - Don't remove links when html signature is converted to text (#1489621) |
|---|
| | | - Fix page title when using search filter (#1490023) |
|---|
| | | - Fix mbox files import |
|---|
| | | - Fix some character sets detection (#1490135) |
|---|
| | | - Fix so attachment charset is set in headers of forward/draft message (#1490109) |
|---|
| | | - Fix bug where wrong charset could be used for text attachment preview page (#1490106) |
|---|
| | | |
|---|
| | | RELEASE 1.0.5 |
|---|
| | | ------------- |
|---|
| | | - Fix wrong icon for download button in classic skin |
|---|
| | | - Fix checks based on window.ActiveXObject in IE > 10 |
|---|
| | | - Fix XSS issue in style attribute handling (#1490227) |
|---|
| | | - Fix bug where Drafts list wasn't updated on draft-save action in new window (#1490225) |
|---|
| | | - Fix so "set as default" option is hidden if identities_level > 1 (#1490226) |
|---|
| | | - Fix javascript error in "IE 8.0/Tablet PC" browser (#1490210) |
|---|
| | | - Fix bug where empty fieldmap config entries caused empty results of ldap search (#1490229) |
|---|
| | | - Fix bug where sent message was saved in Sent folder even if disabled by user (#1490208) |
|---|
| | | |
|---|
| | | RELEASE 1.0.4 |
|---|
| | | ------------- |
|---|
| | | - Disable TinyMCE contextmenu plugin as there are more cons than pros in using it (#1490118) |
|---|
| | | - Fix bug where show_real_foldernames setting wasn't honored on compose page (#1490153) |
|---|
| | | - Fix issue where Archive folder wasn't protected in Folder Manager (#1490154) |
|---|
| | | - Fix compatibility with PHP 5.2. in rcube_imap_generic (#1490115) |
|---|
| | | - Fix setting flags on servers with no PERMANENTFLAGS response (#1490087) |
|---|
| | | - Fix regression in SHAA password generation in ldap driver of password plugin (#1490094) |
|---|
| | | - Fix displaying of HTML messages with absolutely positioned elements in Larry skin (#1490103) |
|---|
| | | - Fix font style display issue in HTML messages with styled <span> elements (#1490101) |
|---|
| | | - Fix download of attachments that are part of TNEF message (#1490091) |
|---|
| | | - Fix handling of uuencoded messages if messages_cache is enabled (#1490108) |
|---|
| | | - Fix handling of base64-encoded attachments with extra spaces (#1490111) |
|---|
| | | - Fix handling of UNKNOWN-CTE response, try do decode content client-side (#1490046) |
|---|
| | | - Fix bug where creating subfolders in shared folders wasn't possible without ACL extension (#1490113) |
|---|
| | | - Fix reply scrolling issue with text mode and start message below the quote (#1490114) |
|---|
| | | - Fix possible issues in skin/skin_path config handling (#1490125) |
|---|
| | | - Fix lack of delimiter for recipient addresses in smtp_log (#1490150) |
|---|
| | | - Fix generation of Blowfish-based password hashes (#1490184) |
|---|
| | | - Fix bugs where CSRF attacks were still possible on some requests [CVE-2014-9587] |
|---|
| | | |
|---|
| | | RELEASE 1.0.3 |
|---|
| | | ------------- |
|---|
| | | - Initialize HTML editor before restoring a message from localStorage (#1490016) |
|---|
| | | - Add 'sig_max_lines' config option to default config file (#1490071) |
|---|
| | | - Add config option to specify IMAP connection socket parameters - imap_conn_options (#1489948) |
|---|
| | | - Add option to set default message list mode - default_list_mode (#1487312) |
|---|
| | | - Enable contextmenu plugin for TinyMCE editor (#1487014) |
|---|
| | | - Fix insert-signature command in external compose window if opened from inline compose screen (#1490074) |
|---|
| | | - Fix some mime-type to extension mapping checks in Installer (#1489983) |
|---|
| | | - Fix errors when using localStorage in Safari's private browsing mode (#1489996) |
|---|
| | | - Fix bug where $Forwarded flag was being set even if server didn't support it (#1490000) |
|---|
| | | - Fix various iCloud vCard issues, added fallback for external photos (#1489993) |
|---|
| | | - Fix invalid Content-Type header when send_format_flowed=false (#1489992) |
|---|
| | | - Fix errors when adding/updating contacts in active search (#1490015) |
|---|
| | | - Fix incorrect thumbnail rotation with GD and exif orientation data (#1490029) |
|---|
| | | - Fix contacts list update after adding/deleting/moving a contact (#1490028, #1490033) |
|---|
| | | - Fix handling of email addresses with quoted domain part (#1490040) |
|---|
| | | - Fix comm_path update on task switch (#1490041) |
|---|
| | | - Fix error in MSSQL update script 2013061000.sql (#1490061) |
|---|
| | | - Fix validation of email addresses with IDNA domains (#1490067) |
|---|
| | | |
|---|
| | | RELEASE 1.0.2 |
|---|
| | | ------------- |
|---|
| | | - Fix storing unsaved drafts in localStorage (#1489818) |
|---|
| | | - Add configurable LDAP_OPT_DEREF option (#1489864) |
|---|
| | | - Fix so when switching editor mode original version of signature is used (#1488849) |
|---|
| | | - Fix unintentional draft autosave request if autosave is disabled (#1489882) |
|---|
| | | - Fix malformed References: header in send/saved mail (#1489891) |
|---|
| | | - Fix handling unicode characters in links (#1489898) |
|---|
| | | - Fix incorrect handling of HTML comments in messages sanitization code (#1489904) |
|---|
| | | - Fix so current page is reset on list-mode change (#1489907) |
|---|
| | | - Fix so responses menu hides on click in classic skin (#1489915) |
|---|
| | | - Fix unintentional line-height style modification in HTML messages (#1489917) |
|---|
| | | - Fix broken normalize_string(), add support for ISO-8859-2 (#1489918) |
|---|
| | | - Support csv contacts import in German localization (#1489920) |
|---|
| | | - Fix so message list and counters are updated when a message is opened in new window (#1489919) |
|---|
| | | - Fix malformed recipient name when composing a message by clicking on mailto link (#1489942) |
|---|
| | | - Fix list reload after sending message in another window (#1489931) |
|---|
| | | - Fix so address format errors are ignored when saving a draft (#1489954) |
|---|
| | | - Fix incorrect label translation in return receipt (#1489963) |
|---|
| | | - Fix security issue in delete-response action - allow only ajax request |
|---|
| | | - Fix Delete button state after deleting identity/response (#1489972) |
|---|
| | | - Fix bug where contacts with no email address were listed on compose addressbook (#1489970) |
|---|
| | | - Fix images import from various vCard formats (#1489977) |
|---|
| | | - Fix sorting messages by size on servers without SORT capability (#1489981) |
|---|
| | | |
|---|
| | | RELEASE 1.0.1 |
|---|
| | | ------------- |
|---|
| | | - Support 'error' and 'body_file' return attribs in 'message_before_send' hook (#1489595) |
|---|
| | | - Apply user-specific replacements to group's base_dn property (#1489779) |
|---|
| | | - Fix missing email address when importing contacts from outlook csv (#1489830) |
|---|
| | | - Fix bug where "With attachment" option in search filter wasn't selected after return from mail view (#1489774) |
|---|
| | | - Fix "washing" of unicoded style attributes (#1489777) |
|---|
| | | - Fix unintentional redirect from compose page in Webkit browsers (#1489789) |
|---|
| | | - Fix messages index cache update under some conditions (e.g. proxy) (#1489756) |
|---|
| | | - Fix lack of translation of special folders in some configurations (#1489799) |
|---|
| | | - Fix XSS issue in plain text spellchecker (#1489806) |
|---|
| | | - Fix invalid page title for some folders (1489804) |
|---|
| | | - Fix redundant alert message on over-size uploads (#1489817) |
|---|
| | | - Fix next message display after removing a message (#1489800) |
|---|
| | | - Fix missing Mail-Followup-To header in sent mail (#1489829) |
|---|
| | | - Fix error when spell-checking an empty text (#1489831) |
|---|
| | | - Avoid popupmenus being closed when scrollbar is clicked (#1489832) |
|---|
| | | - Add proxy_whitelist configuration option (#1489729) |
|---|
| | | - Fix identities_level=4 handling in new_user_dialog plugin (#1489840) |
|---|
| | | - Fix various db_prefix issues (#1489839) |
|---|
| | | - Fix too small length of users.preferences column data type on MySQL |
|---|
| | | - Fix redundant warning when switching from html to text in empty editor (#1489819) |
|---|
| | | - Fix invalid host validation on login (#1489841) |
|---|
| | | - Fix IMAP connection test in installer so it is aware of imap_auth_type (#1489746) |
|---|
| | | |
|---|
| | | RELEASE 1.0.0 |
|---|
| | | ------------- |
|---|
| | | - Added toolbar button to move message in message view |
|---|
| | | - Fix style of disabled protocol handler link on IE (#1489569) |
|---|
| | | - Fix message import dialog when no file is selected (#1489685) |
|---|
| | | - Fix opening compose screen in new window after saving as draft (#1489643) |
|---|
| | | - Fix directories check in Installer on Windows (#1489576) |
|---|
| | | - Fix issue when default_addressbook option is set to integer value (#1489407) |
|---|
| | | - Fix Opera > 15 detection (#1489562) |
|---|
| | | - Fix security issue in DomainFactory driver of Password plugin |
|---|
| | | - Fix invalid X-Draft-Info on forwarded message draft (#1489587) |
|---|
| | | - Fix regression in handling of 'attachments' result in message_compose hook (#1489627) |
|---|
| | | - Fix issue where msgexport.sh printed the message to STDOUT instead of a file (#1489634) |
|---|
| | | - Fix fatal error in database_attachments plugin under some conditions (#1489726) |
|---|
| | | |
|---|
| | | RELEASE 1.0-rc |
|---|
| | | -------------- |
|---|
| | | - Small CSS fix with message notice boxes in Larry skin (#1489497) |
|---|
| | | - Include groups in contacts search on mail compose (#1489082) |
|---|
| | | - Add mime-type mapping for .7z files (#1489512) |
|---|
| | | - Invoke update scripts with php to circumvent execution restrictions (#1489322) |
|---|
| | | - Fix drag & drop message/contact moving on touch device (#1489431) |
|---|
| | | - Fix canned responses in HTML mode (#1489536) |
|---|
| | | - Check/create default folders on every login not only the first (#1489423) |
|---|
| | | - Update to jQuery-1.11.0 and jQuery-UI-1.9.2 |
|---|
| | | - Support SMTP socket context options via new config option 'smtp_conn_options' |
|---|
| | | - Fix compatibility with PHP 5.2 in html.php file (#1489514) |
|---|
| | | - Remove expand/collapse with plus/minus keys (on numeric keypad) (#1489513) |
|---|
| | | - Fix issue where filesystem path was added to all-attachments (zip) file (#1489507) |
|---|
| | | - Fix case-sensitivity of email addresses handling on compose (#1485499) |
|---|
| | | - Don't alter Message-ID of a draft when sending (#1489409) |
|---|
| | | - Fix issue where deprecated syntax for HTML lists was not handled properly (#1488768) |
|---|
| | | - Display different icons when Trash folder is empty or full (#1485775) |
|---|
| | | - Remember last position of more headers switch (#1488323) |
|---|
| | | - Fix so message flags modified by another client are applied on the list on refresh (#1485186) |
|---|
| | | - Fix broken text/* attachments when forwarding/editing a message (#1489426) |
|---|
| | | - Improved minified files handling, added css minification (#1486988) |
|---|
| | | - Fix handling of X-Forwarded-For header with multiple addresses (#1489481) |
|---|
| | | - Fix border issue on folders list in classic skin (#1489473) |
|---|
| | | - Implemented menu actions to copy/move messages, added folder-selector widget (#1484086) |
|---|
| | | - Fix security rules in .htaccess preventing access to base URL without the ending slash (#1489477) |
|---|
| | | - Fix regression where only first new folder was placed in correct place on the list (#1489472) |
|---|
| | | - Fix issue where children of selected and collapsed thread were skipped on various actions (#1489457) |
|---|
| | | - Fix issue where groups were not deleted when "Replace entire addressbook" option on contacts import was used (#1489420) |
|---|
| | | - Fix unreliable mimetype tests in Installer (#1489453) |
|---|
| | | - Fix performance of listing writeable folders (#1489451) |
|---|
| | | |
|---|
| | | RELEASE 1.0-beta |
|---|
| | | ---------------- |
|---|
| | | - Fix handling of invalid closing tags in HTML messages (#1489446) |
|---|
| | | - Set real content-type for file downloads (#1489439) |
|---|
| | | - Update TinyMCE to version 3.5.10 (#1489442) |
|---|
| | | - Fix keyboard navigation in list widgets (#1489392) |
|---|
| | | - Allow plugins to grab the reference of opened windows (#1489413) |
|---|
| | | - Larry skin: Improved status message display for better visibility (#1488974) |
|---|
| | | - Fix Internet Explorer 11 detection (#1489434) |
|---|
| | | - Fix date column width to fit the widest possible date format (#1489368) |
|---|
| | | - Move certain user preference options to a collapsed "advanced" block (#1488829) |
|---|
| | | - Add file type icons for Powerpoint and Open Office presentations (#1489225) |
|---|
| | | - Fix operations on folders with trailing spaces in name (#1489419) |
|---|
| | | - Improve identity selection based on From: header (#1489378) |
|---|
| | | - Fix issue where mails with inline images of the same name contained only the first image multiple times (#1489406) |
|---|
| | | - Use left/right arrow keys to collapse/expand thread and spacebar to select a row, change Ctrl key behavior (#1489392) |
|---|
| | | - Fix an issue where using arrow keys to go up a list can result in selected message being under headers (#1489403) |
|---|
| | | - Fix an issue where Home/End keys don't focus list row properly, don't scrollTo properly (#1489396) |
|---|
| | | - Add an option to disable smart Reply-List behaviour - reply_all_mode (#1488734) |
|---|
| | | - Fix an issue where pressing minus key on contacts list was hiding list records (#1489393) |
|---|
| | | - Fix an issue where shift + arrow-up key wasn't selecting all messages in collapsed thread (#1489397) |
|---|
| | | - Added icon for priority column in messages list header (#1489234) |
|---|
| | | - New feature "Canned Responses" to save and recall boilerplate text snippets |
|---|
| | | - Fix HTML part detection when encapsulated inside multipart/signed (#1489372) |
|---|
| | | - Add spellchecker backend for the After the Deadline service |
|---|
| | | - Replace markdown-style [1] link indexes in plain text email bodies |
|---|
| | | - Improved mailto: link arguments handling (#1489363) |
|---|
| | | - Use DOMDocument LIBXML_PARSEHUGE and LIBXML_COMPACT options if possible (#1489302) |
|---|
| | | - Support HTTP_HOST, SERVER_NAME and SERVER_ADDR values in include_host_config feature |
|---|
| | | - Make default font size for HTML messages configurable (request #118) |
|---|
| | | - Fix XSS issue in addressbook group name field [CVE-2013-5646] (#1489333) |
|---|
| | | - After message is sent refresh messages list of replied message folder (#1489249) |
|---|
| | | - Add option force specified domain in user login - username_domain_forced (#1489264) |
|---|
| | | - Add option to import Vcards with group assignments |
|---|
| | | - Save groups membership in Vcard export (#1488509) |
|---|
| | | - Workaround broken PHP function timezone_name_from_abbr (#1489261) |
|---|
| | | - Make cached message size limit configurable - messages_cache_threshold (#1489317) |
|---|
| | | - Log also failed logins to userlogins log |
|---|
| | | - Add temp_dir_ttl configuration option (#1489304) |
|---|
| | | - Allow setting INBOX as Sent folder (#1489219) |
|---|
| | | - Fix replacement variables in user-specific base_dn in some LDAP requests (#1489279) |
|---|
| | | - Fix image scaling issues when image has only one dimension smaller than the limit (#1489274) |
|---|
| | | - Fix issue where uploaded photo was lost when contact form did not validate (#1489274) |
|---|
| | | - Move identity selection based on non-standard headers into (new) identity_select plugin (#1488553) |
|---|
| | | - Fix colorspace issue on image conversion using ImageMagick (#1489270) |
|---|
| | | - Fix XSS vulnerability when editing a message "as new" or draft (#1489251) |
|---|
| | | - Fix downloading binary files with (wrong) text/* content-type (#1489267) |
|---|
| | | - Fix rewrite rule in .htaccess (#1489240) |
|---|
| | | - Fix detecting Turkish language in ISO-8859-9 encoding (#1489252) |
|---|
| | | - Fix identity-selection using Return-Path headers (#1489241) |
|---|
| | | - Fix parsing of links with ... in URL (#1489192) |
|---|
| | | - Fix compose priority selector when opening in new window (#1489257) |
|---|
| | | - Respect HTTP_X_FORWARDED_FOR and HTTP_X_REAL_IP variables for session IP check |
|---|
| | | - Simplified configuration by merging it into one file + defaults (#1487311) |
|---|
| | | - Make message list header stay on top when scrolling (#1295420) |
|---|
| | | - Fix bug where signature wasn't changed on identity selection when editing a draft (#1489229) |
|---|
| | | - Fix IMAP SETMETADATA parameters quoting (#1489231) |
|---|
| | | - Add support for 'enchant' spellcheck engine |
|---|
| | | - Fix "could not load message" error on valid empty message body (#1489228) |
|---|
| | | - Check filetype detection in installer and update script (#1489193) |
|---|
| | | - Fix handling of message/rfc822 attachments on message forward and edit (#1489214) |
|---|
| | | - Fix folder names truncation in Classic skin (#1489220) |
|---|
| | | - Fix parsing of square bracket characters in IMAP response strings (#1489223) |
|---|
| | | - Don't clear References and in-Reply-To when a message is "edited as new" (#1489216) |
|---|
| | | - Make possible to disable some (broken) IMAP extensions with imap_disable_caps option (#1489184) |
|---|
| | | - Contacts drag-n-drop default action is to move contacts (#1488751) |
|---|
| | | - Added possibility to choose to move or copy contacts from drag-n-drop menu (#1488751) |
|---|
| | | - Fix messages list sorting with THREAD=REFS |
|---|
| | | - Fix Close link and remove About link on error pages (#1489109) |
|---|
| | | - Remove deprecated (in PHP 5.5) PREG /e modifier usage (#1489174) |
|---|
| | | - Fix empty messages list when register_globals is enabled (#1489157) |
|---|
| | | - Improved/unified attachment preview screen, added print button |
|---|
| | | - Fix lack of space between searchfiler and quicksearchbar in Larry skin (#1489158) |
|---|
| | | - Fix so valid and set date.timezone is not required by installer checks (#1489180) |
|---|
| | | - Canonize boolean ini_get() results (#1489189) |
|---|
| | | - Cache LDAP's user_specific search and use vlv for better performance (#1489186) |
|---|
| | | - LDAP: auto-detect and use VLV indices for all search operations |
|---|
| | | - LDAP: additional group configuration options for address books |
|---|
| | | - LDAP: separated address book implementation from a generic LDAP wrapper class |
|---|
| | | - Allow address books to browse a multi-level group hierarchy in the contacts list |
|---|
| | | - Fix so install do not fail when one of DB driver checks fails but other drivers exist (#1489178) |
|---|
| | | - Fix so exported vCard specifies encoding in v3-compatible format (#1489183) |
|---|
| | | - Fix session issues when local and database time differs (#1486132) |
|---|
| | | - Fix thread cache syncronization/validation (#1489028) |
|---|
| | | - Added feature to import messages to the currently selected folder |
|---|
| | |
|---|
| | | - Extended archive plugin with user-configurable options to store messages into subfolders |
|---|
| | | - Fix export of selected contacts from search result (#1488905) |
|---|
| | | - Feature to export only selected contacts from addressbook (by Phil Weir) |
|---|
| | | |
|---|
| | | RELEASE 0.9.5 |
|---|
| | | ------------- |
|---|
| | | - Fix failing vCard import when email address field contains spaces (#1489386) |
|---|
| | | - Fix default spell-check configuration after Google suspended their spell service |
|---|
| | | - Fix vulnerability in handling _session argument of utils/save-prefs [CVE-2013-6172] (#1489382) |
|---|
| | | - Fix iframe onload for upload errors handling (#1489379) |
|---|
| | | - Fix address matching in Return-Path header on identity selection (#1489374) |
|---|
| | | - Fix text wrapping issue with long unwrappable lines (#1489371) |
|---|
| | | - Fixed issues where HTML comments inside style tag would hang Internet Explorer |
|---|
| | | - Hide Delivery Status Notification option when smtp_server is unset (#1489336) |
|---|
| | | - Display full attachment name using title attribute when name is too long to display (#1489320) |
|---|
| | | - Fix attachment icon issue when rare font/language is used (#1489326) |
|---|
| | | - Fix expanded thread root message styling after refreshing messages list (#1489327) |
|---|
| | | - Fix issue where From address was removed from Cc and Bcc fields when editing a draft (#1489319) |
|---|
| | | - Fix error_reporting directive check (#1489323) |
|---|
| | | - Fix de_DE localization of "About" label in Help plugin (#1489325) |
|---|
| | | |
|---|
| | | RELEASE 0.9.4 |
|---|
| | | ------------- |
|---|
| | | - Make identities matching case insensitive (#1485480) |
|---|
| | | - Fix issue where too big message data was stored in cache causing sql errors (#1489316) |
|---|
| | | - Fix iframe scrollbars on webkit desktop browsers (#1489306) |
|---|
| | | - Fix issue where legacy config was overriden by default config (#1489288) |
|---|
| | | - Fix newmail_notifier issue where favicon wasn't changed back to default (#1489313) |
|---|
| | | - Fix setting of Junk and NonJunk flags by markasjunk plugin (#1489285) |
|---|
| | | - Fix lack of Reply-To address in header of forwarded message body (#1489298) |
|---|
| | | - Fix bugs when invoking contact creation form when read-only addressbook is selected (#1489296) |
|---|
| | | - Fix identity selection on reply (#1489291) |
|---|
| | | - Fix so additional headers are added to all messages sent (#1489284) |
|---|
| | | - Fix display issue after moving folder in Folder Manager (#1489293) |
|---|
| | | - Fix handling of non-default date formats (#1489294) |
|---|
| | | - Fix unquoted path in PREG expression on Windows (#1489290) |
|---|
| | | - Fix wrong close tag in /template/mail.html (#1489295) |
|---|
| | | |
|---|
| | | RELEASE 0.9.3 |
|---|
| | | ------------- |
|---|
| | | - Fix setting refresh_interval to "Never" in Preferences (#1489286) |
|---|
| | | - Fixed iframe scrolling on touch devices |
|---|
| | | - Optimized message list for touch devices |
|---|
| | | - Fix purge action in folder manager (#1489280) |
|---|
| | | - Fix base URL resolving on attribute values with no quotes (#1489275) |
|---|
| | | - Fix wrong handling of links with '|' character (#1489276) |
|---|
| | | - Fix colorspace issue on image conversion using ImageMagick (#1489270) |
|---|
| | | - Fix XSS vulnerability when editing a message "as new" or draft [CVE-2013-5645] (#1489251) |
|---|
| | | - Fix XSS vulnerability when saving HTML signatures [CVE-2013-5645] (#1489251) |
|---|
| | | - Fix rewrite rule in .htaccess (#1489240) |
|---|
| | | - Fix detecting Turkish language in ISO-8859-9 encoding (#1489252) |
|---|
| | | - Fix identity-selection using Return-Path headers (#1489241) |
|---|
| | | - Fix parsing of links with ... in URL (#1489192) |
|---|
| | | - Fix compose priority selector when opening in new window (#1489257) |
|---|
| | | - Fix bug where signature wasn't changed on identity selection when editing a draft (#1489229) |
|---|
| | | - Fix IMAP SETMETADATA parameters quoting (#1489231) |
|---|
| | | - Fix "could not load message" error on valid empty message body (#1489228) |
|---|
| | | - Fix handling of message/rfc822 attachments on message forward and edit (#1489214) |
|---|
| | | - Fix parsing of square bracket characters in IMAP response strings (#1489223) |
|---|
| | | - Don't clear References and in-Reply-To when a message is "edited as new" (#1489216) |
|---|
| | | - Fix messages list sorting with THREAD=REFS |
|---|
| | | - Remove deprecated (in PHP 5.5) PREG /e modifier usage (#1489174) |
|---|
| | | - Fix empty messages list when register_globals is enabled (#1489157) |
|---|
| | | - Fix so valid and set date.timezone is not required by installer checks (#1489180) |
|---|
| | | - Canonize boolean ini_get() results (#1489189) |
|---|
| | | - Fix so install do not fail when one of DB driver checks fails but other drivers exist (#1489178) |
|---|
| | | - Fix so exported vCard specifies encoding in v3-compatible format (#1489183) |
|---|
| | | |
|---|
| | | RELEASE 0.9.2 |
|---|
| | | ------------- |
|---|
| | |
|---|
| | | - Fix #countcontrols issue in IE<=8 when text is very long (#1488890) |
|---|
| | | - Fix unwanted horizontal scrollbar in message preview header (#1488866) |
|---|
| | | - Add workaround for IE<=8 bug where Content-Disposition:inline was ignored (#1488844) |
|---|
| | | - Fix XSS vulnerability in vbscript: and data:text links handling (#1488850) |
|---|
| | | - Fix XSS vulnerability in vbscript: and data:text links handling [CVE-2012-6121] (#1488850) |
|---|
| | | - Fix absolute positioning in HTML messages (#1488819) |
|---|
| | | - Fix cache (in)validation after setting \Deleted flag |
|---|
| | | - Fix keybord events on messages list in opera browser (#1488823) |
|---|
| | |
|---|
| | | - Fix bug where domain name was converted to lower-case even with login_lc=false (#1488593) |
|---|
| | | - Fix lower-casing email address on replies (#1488598) |
|---|
| | | - Fix line separator in exported messages (#1488603) |
|---|
| | | - Fix XSS issue where plain signatures wasn't secured in HTML mode (#1488613) |
|---|
| | | - Fix XSS issue where href="javascript:" wasn't secured (#1488613) |
|---|
| | | - Fix XSS issue where plain signatures wasn't secured in HTML mode [CVE-2012-4668] (#1488613) |
|---|
| | | - Fix XSS issue where href="javascript:" wasn't secured [CVE-2012-3508] (#1488613) |
|---|
| | | - Fix impossible to create message with empty plain text part (#1488610) |
|---|
| | | - Fix stripped apostrophes when replying in plain text to HTML message (#1488606) |
|---|
| | | - Fix inactive Save search option after advanced search (#1488607) |
|---|
| | |
|---|
| | | - Fix removing contact photo using LDAP addressbook (#1488420) |
|---|
| | | - Fix storing X-ANNIVERSARY date in vCard format (#1488527) |
|---|
| | | - Update to Mail_Mime-1.8.5 (#1488521) |
|---|
| | | - Fix XSS vulnerability in message subject handling using Larry skin (#1488519) |
|---|
| | | - Fix XSS vulnerability in message subject handling using Larry skin [CVE-2012-3507] (#1488519) |
|---|
| | | - Fix handling of links with various URI schemes e.g. "skype:" (#1488106) |
|---|
| | | - Fix handling of links inside PRE elements on html to text conversion |
|---|
| | | - Fix indexing of links on html to text conversion |
|---|
| | |
|---|
| | | - Improved handling of some malformed values encoded with quoted-printable (#1488232) |
|---|
| | | - Add possibility to do LDAP bind before searching for bind DN |
|---|
| | | - Fix handling of empty <U> tags in HTML messages (#1488225) |
|---|
| | | - Add content filter for embedded attachments to protect from XSS on IE (#1487895) |
|---|
| | | - Add content filter for embedded attachments to protect from XSS on IE [CVE-2012-1253] (#1487895) |
|---|
| | | - Use strpos() instead of strstr() when possible (#1488211) |
|---|
| | | - Fix handling HTML entities when converting HTML to text (#1488212) |
|---|
| | | - Fix fit_string_to_size() renders browser and ui unresponsive (#1488207) |
|---|
| | |
|---|
| | | |
|---|
| | | RELEASE 0.5.4 |
|---|
| | | ------------- |
|---|
| | | - Fix XSS vulnerability in UI messages (#1488030) |
|---|
| | | - Fix XSS vulnerability in UI messages [CVE-2011-2937] (#1488030) |
|---|
| | | |
|---|
| | | RELEASE 0.5.3 |
|---|
| | | ------------- |
|---|
| | |
|---|
| | | - Security: add optional referer check to prevent CSRF in GET requests |
|---|
| | | - Fix email_dns_check setting not used for identities/contacts (#1487740) |
|---|
| | | - Fix ICANN example addresses doesn't validate (#1487742) |
|---|
| | | - Security: protect login form submission from CSRF |
|---|
| | | - Security: prevent from relaying malicious requests through modcss.inc |
|---|
| | | - Security: protect login form submission from CSRF [CVE-2011-1491] |
|---|
| | | - Security: prevent from relaying malicious requests through modcss.inc [CVE-2011-1492] |
|---|
| | | - Fix handling of non-image attachments in multipart/related messages (#1487750) |
|---|
| | | - Fix IDNA support when IDN/INTL modules are in use (#1487742) |
|---|
| | | - Fix handling of invalid HTML comments in messages (#1487759) |
|---|
| | |
|---|
| | | --------------- |
|---|
| | | - Fix import of vCard entries with params (#1485453) |
|---|
| | | - Fix HTML messages output with empty block elements (#1485974) |
|---|
| | | - Use request tokens to protect POST requests from CSRF |
|---|
| | | - Use request tokens to protect POST requests from CSRF [CVE-2009-4076, CVE-2009-4077] |
|---|
| | | - Added hook when killing a session |
|---|
| | | - Added hook to write_log function (#1485971) |
|---|
| | | - Performance improvements by use UID commands (#1485690) |
|---|
| | |
|---|
| | | - Fix large search results on server without SORT capability (#1485668) |
|---|
| | | - Get rid of preg_replace() with eval modifier and create_function usage (#1485686) |
|---|
| | | - Bring back <base> and <link> tags in HTML messages |
|---|
| | | - Fix XSS vulnerability through background attributes as reported by Julien Cayssol |
|---|
| | | - Fix XSS vulnerability through background attributes [CVE-2009-0413] |
|---|
| | | - Fix problems with backslash as IMAP hierarchy delimiter (#1484467) |
|---|
| | | - Secure vcard export by getting rid of preg's 'e' modifier use (#1485689) |
|---|
| | | - Fix authentication when submitting form with existing session (#1485679) |
|---|
| | |
|---|
| | | - Allow deleting identities when multiple_identities=false (#1485435) |
|---|
| | | - Added option focus_on_new_message (#1485374) |
|---|
| | | - Fix html2text class autoloading on Windows (#1485505) |
|---|
| | | - Fix html signature formatting when identity save error occured (#1485426) |
|---|
| | | - Fix html signature formatting when identity save error occurred (#1485426) |
|---|
| | | - Add feedback and set busy when moving folder (#1485497) |
|---|
| | | - Fix 'Empty' link visibility for some languages e.g. Slovak (#1485489) |
|---|
| | | - Fix messages count bar overlapping (#1485270) |
|---|
