| | |
| | | CHANGELOG Roundcube Webmail |
| | | =========================== |
| | | |
| | | - Support contacts import in GMail CSV format |
| | | - Added namespace filter in Folder Manager |
| | | - Added folder searching in Folder Manager |
| | | - Added config option/user preference to disable saving messages in localStorage (#1489979) |
| | | - Added config option 'imap_log_session' to enable Roundcube <-> IMAP session ID logging |
| | | - Added config option 'log_session_id' to control the lengh of the session identifer in logs |
| | | - Implemented 'storage_connected' API hook after successful IMAP login (#1490025) |
| | | - Intergrate Net_LDAP3 and rcube_ldap_generic classes |
| | | - Add option (disabled_actions) to disable UI elements/actions (#1489638) |
| | | - Support password encryption using openssl extension (#1489989) |
| | | - Create/rename groups in UI dialogs (#1489951) |
| | | - Added 'contact_search_name' option to define autocompletion entry format |
| | | - Display quota information for current folder not INBOX only (#1487993) |
| | | - Support images in HTML signatures (#1488676) |
| | | - Display full quota information in popup (#1485769, #1486604) |
| | | - Mail compose: Selecting contact inserts recipient to previously focused input - to/cc/bcc accordingly (#1489684) |
| | | - Add option to set default message list mode - default_list_mode (#1487312) |
| | | - Close "no subject" prompt with Enter key (#1489580) |
| | | - Add config option to specify IMAP connection socket parameters - imap_conn_options (#1489948) |
| | | - Password: Add option to force new users to change their password (#1486884) |
| | | - Improve support for screen readers and assistive technology using WCAG 2.0 and WAI ARIA standards |
| | | - Enable basic keyboard navigation throughout the UI (#1487845) |
| | | - Select/scroll to previously selected message when returning from message page (#1489023) |
| | | - Display a warning if popup window was blocked (#1489618) |
| | | - Remove (was: ...) from message subject on reply (#1489375) |
| | | - Update to TinyMCE 4.1 (#1489057) |
| | | - Enable autolink plugin in TinyMCE (#1488845) |
| | | - Support image operations with Imagick extension (#1489734) |
| | | - Support upload progress with session.upload_progress and PECL uploadprogress module (#1488702) |
| | | - Make identity name field optional (#1489510) |
| | | - Utility script to remove user records from the local database |
| | | - Plugin API: Added message_saved hook (#1489752) |
| | | - Plugin API: Added imap_search_before hook |
| | | - Support messages import from zip archives |
| | | - Zipdownload: Added mbox format support (#1486069) |
| | | - Drop support for IE6, move IE7/IE8 support to legacy_browser plugin |
| | | - Update to jQuery-2.1.1 |
| | | - Search across multiple folders (#1485234) |
| | | - Improve UI integration of ACL settings |
| | | - Drop support for PHP < 5.3.7 |
| | | - Set In-Reply-To and References for forwarded messages (#1489593) |
| | | - Removed redundant default_folders config option (#1489737) |
| | | - Implemented IMAP SPECIAL-USE extension support [RFC6154] (#1487830) |
| | | - Optimize some framed pages content for better performance (#1489792) |
| | | - Improve text messages display and conversion to HTML (#1488937) |
| | | - Don't remove links when html signature is converted to text (#1489621) |
| | | - Fix page title when using search filter (#1490023) |
| | | - Fix mbox files import |
| | | - Fix some mime-type to extension mapping checks in Installer (#1489983) |
| | | - Fix errors when using localStorage in Safari's private browsing mode (#1489996) |
| | | - Fix bug where $Forwarded flag was being set even if server didn't support it (#1490000) |
| | | - Fix various iCloud vCard issues, added fallback for external photos (#1489993) |
| | | - Fix invalid Content-Type header when send_format_flowed=false (#1489992) |
| | | - Fix errors when adding/updating contacts in active search (#1490015) |
| | | - Fix incorrect thumbnail rotation with GD and exif orientation data (#1490029) |
| | | - Fix contacts list update after adding/deleting/moving a contact (#1490028, #1490033) |
| | | - Fix handling of email addresses with quoted domain part (#1490040) |
| | | - Fix comm_path update on task switch (#1490041) |
| | | - Fix error in MSSQL update script 2013061000.sql (#1490061) |
| | | |
| | | RELEASE 1.0.2 |
| | | ------------- |
| | | - Fix storing unsaved drafts in localStorage (#1489818) |
| | | - Add configurable LDAP_OPT_DEREF option (#1489864) |
| | | - Fix so when switching editor mode original version of signature is used (#1488849) |
| | | - Fix unintentional draft autosave request if autosave is disabled (#1489882) |
| | | - Fix malformed References: header in send/saved mail (#1489891) |
| | | - Fix handling unicode characters in links (#1489898) |
| | | - Fix incorrect handling of HTML comments in messages sanitization code (#1489904) |
| | | - Fix so current page is reset on list-mode change (#1489907) |
| | | - Fix so responses menu hides on click in classic skin (#1489915) |
| | | - Fix unintentional line-height style modification in HTML messages (#1489917) |
| | | - Fix broken normalize_string(), add support for ISO-8859-2 (#1489918) |
| | | - Support csv contacts import in German localization (#1489920) |
| | | - Fix so message list and counters are updated when a message is opened in new window (#1489919) |
| | | - Fix malformed recipient name when composing a message by clicking on mailto link (#1489942) |
| | | - Fix list reload after sending message in another window (#1489931) |
| | | - Fix so address format errors are ignored when saving a draft (#1489954) |
| | | - Fix incorrect label translation in return receipt (#1489963) |
| | | - Fix security issue in delete-response action - allow only ajax request |
| | | - Fix Delete button state after deleting identity/response (#1489972) |
| | | - Fix bug where contacts with no email address were listed on compose addressbook (#1489970) |
| | | - Fix images import from various vCard formats (#1489977) |
| | | - Fix sorting messages by size on servers without SORT capability (#1489981) |
| | | |
| | | RELEASE 1.0.1 |
| | | ------------- |
| | | - Support 'error' and 'body_file' return attribs in 'message_before_send' hook (#1489595) |
| | | - Apply user-specific replacements to group's base_dn property (#1489779) |
| | | - Fix missing email address when importing contacts from outlook csv (#1489830) |
| | | - Fix bug where "With attachment" option in search filter wasn't selected after return from mail view (#1489774) |
| | | - Fix "washing" of unicoded style attributes (#1489777) |
| | | - Fix unintentional redirect from compose page in Webkit browsers (#1489789) |
| | | - Fix messages index cache update under some conditions (e.g. proxy) (#1489756) |
| | | - Fix lack of translation of special folders in some configurations (#1489799) |
| | | - Fix XSS issue in plain text spellchecker (#1489806) |
| | | - Fix invalid page title for some folders (1489804) |
| | | - Fix redundant alert message on over-size uploads (#1489817) |
| | | - Fix next message display after removing a message (#1489800) |
| | | - Fix missing Mail-Followup-To header in sent mail (#1489829) |
| | | - Fix error when spell-checking an empty text (#1489831) |
| | | - Avoid popupmenus being closed when scrollbar is clicked (#1489832) |
| | | - Add proxy_whitelist configuration option (#1489729) |
| | | - Fix identities_level=4 handling in new_user_dialog plugin (#1489840) |
| | | - Fix various db_prefix issues (#1489839) |
| | | - Fix too small length of users.preferences column data type on MySQL |
| | | - Fix redundant warning when switching from html to text in empty editor (#1489819) |
| | | - Fix invalid host validation on login (#1489841) |
| | | - Fix IMAP connection test in installer so it is aware of imap_auth_type (#1489746) |
| | | |
| | | RELEASE 1.0.0 |
| | | ------------- |
| | | - Added toolbar button to move message in message view |
| | | - Fix style of disabled protocol handler link on IE (#1489569) |
| | | - Fix message import dialog when no file is selected (#1489685) |
| | | - Fix opening compose screen in new window after saving as draft (#1489643) |
| | | - Fix directories check in Installer on Windows (#1489576) |
| | | - Fix issue when default_addressbook option is set to integer value (#1489407) |
| | | - Fix Opera > 15 detection (#1489562) |
| | | - Fix security issue in DomainFactory driver of Password plugin |
| | | - Fix invalid X-Draft-Info on forwarded message draft (#1489587) |
| | | - Fix regression in handling of 'attachments' result in message_compose hook (#1489627) |
| | | - Fix issue where msgexport.sh printed the message to STDOUT instead of a file (#1489634) |
| | | - Fix fatal error in database_attachments plugin under some conditions (#1489726) |
| | | |
| | | RELEASE 1.0-rc |
| | | -------------- |
| | | - Small CSS fix with message notice boxes in Larry skin (#1489497) |
| | | - Include groups in contacts search on mail compose (#1489082) |
| | | - Add mime-type mapping for .7z files (#1489512) |
| | | - Invoke update scripts with php to circumvent execution restrictions (#1489322) |
| | | - Fix drag & drop message/contact moving on touch device (#1489431) |
| | | - Fix canned responses in HTML mode (#1489536) |
| | | - Check/create default folders on every login not only the first (#1489423) |
| | | - Update to jQuery-1.11.0 and jQuery-UI-1.9.2 |
| | | - Support SMTP socket context options via new config option 'smtp_conn_options' |
| | | - Fix compatibility with PHP 5.2 in html.php file (#1489514) |
| | | - Remove expand/collapse with plus/minus keys (on numeric keypad) (#1489513) |
| | | - Fix issue where filesystem path was added to all-attachments (zip) file (#1489507) |
| | | - Fix case-sensitivity of email addresses handling on compose (#1485499) |
| | | - Don't alter Message-ID of a draft when sending (#1489409) |
| | | - Fix issue where deprecated syntax for HTML lists was not handled properly (#1488768) |
| | | - Display different icons when Trash folder is empty or full (#1485775) |
| | | - Remember last position of more headers switch (#1488323) |
| | | - Fix so message flags modified by another client are applied on the list on refresh (#1485186) |
| | | - Fix broken text/* attachments when forwarding/editing a message (#1489426) |
| | | - Improved minified files handling, added css minification (#1486988) |
| | | - Fix handling of X-Forwarded-For header with multiple addresses (#1489481) |
| | | - Fix border issue on folders list in classic skin (#1489473) |
| | | - Implemented menu actions to copy/move messages, added folder-selector widget (#1484086) |
| | | - Fix security rules in .htaccess preventing access to base URL without the ending slash (#1489477) |
| | | - Fix regression where only first new folder was placed in correct place on the list (#1489472) |
| | | - Fix issue where children of selected and collapsed thread were skipped on various actions (#1489457) |
| | | - Fix issue where groups were not deleted when "Replace entire addressbook" option on contacts import was used (#1489420) |
| | | - Fix unreliable mimetype tests in Installer (#1489453) |
| | | - Fix performance of listing writeable folders (#1489451) |
| | | |
| | | RELEASE 1.0-beta |
| | | ---------------- |
| | | - Fix handling of invalid closing tags in HTML messages (#1489446) |
| | | - Set real content-type for file downloads (#1489439) |
| | | - Update TinyMCE to version 3.5.10 (#1489442) |
| | | - Fix keyboard navigation in list widgets (#1489392) |
| | | - Allow plugins to grab the reference of opened windows (#1489413) |
| | | - Larry skin: Improved status message display for better visibility (#1488974) |
| | | - Fix Internet Explorer 11 detection (#1489434) |
| | | - Fix date column width to fit the widest possible date format (#1489368) |
| | | - Move certain user preference options to a collapsed "advanced" block (#1488829) |
| | | - Add file type icons for Powerpoint and Open Office presentations (#1489225) |
| | | - Fix operations on folders with trailing spaces in name (#1489419) |
| | | - Improve identity selection based on From: header (#1489378) |
| | | - Fix issue where mails with inline images of the same name contained only the first image multiple times (#1489406) |
| | | - Use left/right arrow keys to collapse/expand thread and spacebar to select a row, change Ctrl key behavior (#1489392) |
| | | - Fix an issue where using arrow keys to go up a list can result in selected message being under headers (#1489403) |
| | | - Fix an issue where Home/End keys don't focus list row properly, don't scrollTo properly (#1489396) |
| | | - Add an option to disable smart Reply-List behaviour - reply_all_mode (#1488734) |
| | | - Fix an issue where pressing minus key on contacts list was hiding list records (#1489393) |
| | | - Fix an issue where shift + arrow-up key wasn't selecting all messages in collapsed thread (#1489397) |
| | | - Added icon for priority column in messages list header (#1489234) |
| | | - New feature "Canned Responses" to save and recall boilerplate text snippets |
| | | - Fix HTML part detection when encapsulated inside multipart/signed (#1489372) |
| | | - Add spellchecker backend for the After the Deadline service |
| | | - Replace markdown-style [1] link indexes in plain text email bodies |
| | | - Improved mailto: link arguments handling (#1489363) |
| | | - Use DOMDocument LIBXML_PARSEHUGE and LIBXML_COMPACT options if possible (#1489302) |
| | | - Support HTTP_HOST, SERVER_NAME and SERVER_ADDR values in include_host_config feature |
| | | - Make default font size for HTML messages configurable (request #118) |
| | | - Fix XSS issue in addressbook group name field [CVE-2013-5646] (#1489333) |
| | | - After message is sent refresh messages list of replied message folder (#1489249) |
| | | - Add option force specified domain in user login - username_domain_forced (#1489264) |
| | | - Add option to import Vcards with group assignments |
| | | - Save groups membership in Vcard export (#1488509) |
| | | - Workaround broken PHP function timezone_name_from_abbr (#1489261) |
| | | - Fix error_reporting directive check (#1489323) |
| | | - Make cached message size limit configurable - messages_cache_threshold (#1489317) |
| | | - Log also failed logins to userlogins log |
| | | - Add temp_dir_ttl configuration option (#1489304) |
| | |
| | | - Fix export of selected contacts from search result (#1488905) |
| | | - Feature to export only selected contacts from addressbook (by Phil Weir) |
| | | |
| | | RELEASE 0.9.5 |
| | | ------------- |
| | | - Fix failing vCard import when email address field contains spaces (#1489386) |
| | | - Fix default spell-check configuration after Google suspended their spell service |
| | | - Fix vulnerability in handling _session argument of utils/save-prefs [CVE-2013-6172] (#1489382) |
| | | - Fix iframe onload for upload errors handling (#1489379) |
| | | - Fix address matching in Return-Path header on identity selection (#1489374) |
| | | - Fix text wrapping issue with long unwrappable lines (#1489371) |
| | | - Fixed issues where HTML comments inside style tag would hang Internet Explorer |
| | | - Hide Delivery Status Notification option when smtp_server is unset (#1489336) |
| | | - Display full attachment name using title attribute when name is too long to display (#1489320) |
| | | - Fix attachment icon issue when rare font/language is used (#1489326) |
| | | - Fix expanded thread root message styling after refreshing messages list (#1489327) |
| | | - Fix issue where From address was removed from Cc and Bcc fields when editing a draft (#1489319) |
| | | - Fix error_reporting directive check (#1489323) |
| | | - Fix de_DE localization of "About" label in Help plugin (#1489325) |
| | | |
| | | RELEASE 0.9.4 |
| | | ------------- |
| | | - Make identities matching case insensitive (#1485480) |
| | |
| | | - Fix base URL resolving on attribute values with no quotes (#1489275) |
| | | - Fix wrong handling of links with '|' character (#1489276) |
| | | - Fix colorspace issue on image conversion using ImageMagick (#1489270) |
| | | - Fix XSS vulnerability when editing a message "as new" or draft (#1489251) |
| | | - Fix XSS vulnerability when saving HTML signatures (#1489251) |
| | | - Fix XSS vulnerability when editing a message "as new" or draft [CVE-2013-5645] (#1489251) |
| | | - Fix XSS vulnerability when saving HTML signatures [CVE-2013-5645] (#1489251) |
| | | - Fix rewrite rule in .htaccess (#1489240) |
| | | - Fix detecting Turkish language in ISO-8859-9 encoding (#1489252) |
| | | - Fix identity-selection using Return-Path headers (#1489241) |
| | |
| | | - Fix #countcontrols issue in IE<=8 when text is very long (#1488890) |
| | | - Fix unwanted horizontal scrollbar in message preview header (#1488866) |
| | | - Add workaround for IE<=8 bug where Content-Disposition:inline was ignored (#1488844) |
| | | - Fix XSS vulnerability in vbscript: and data:text links handling (#1488850) |
| | | - Fix XSS vulnerability in vbscript: and data:text links handling [CVE-2012-6121] (#1488850) |
| | | - Fix absolute positioning in HTML messages (#1488819) |
| | | - Fix cache (in)validation after setting \Deleted flag |
| | | - Fix keybord events on messages list in opera browser (#1488823) |
| | |
| | | - Fix bug where domain name was converted to lower-case even with login_lc=false (#1488593) |
| | | - Fix lower-casing email address on replies (#1488598) |
| | | - Fix line separator in exported messages (#1488603) |
| | | - Fix XSS issue where plain signatures wasn't secured in HTML mode (#1488613) |
| | | - Fix XSS issue where href="javascript:" wasn't secured (#1488613) |
| | | - Fix XSS issue where plain signatures wasn't secured in HTML mode [CVE-2012-4668] (#1488613) |
| | | - Fix XSS issue where href="javascript:" wasn't secured [CVE-2012-3508] (#1488613) |
| | | - Fix impossible to create message with empty plain text part (#1488610) |
| | | - Fix stripped apostrophes when replying in plain text to HTML message (#1488606) |
| | | - Fix inactive Save search option after advanced search (#1488607) |
| | |
| | | - Fix removing contact photo using LDAP addressbook (#1488420) |
| | | - Fix storing X-ANNIVERSARY date in vCard format (#1488527) |
| | | - Update to Mail_Mime-1.8.5 (#1488521) |
| | | - Fix XSS vulnerability in message subject handling using Larry skin (#1488519) |
| | | - Fix XSS vulnerability in message subject handling using Larry skin [CVE-2012-3507] (#1488519) |
| | | - Fix handling of links with various URI schemes e.g. "skype:" (#1488106) |
| | | - Fix handling of links inside PRE elements on html to text conversion |
| | | - Fix indexing of links on html to text conversion |
| | |
| | | - Improved handling of some malformed values encoded with quoted-printable (#1488232) |
| | | - Add possibility to do LDAP bind before searching for bind DN |
| | | - Fix handling of empty <U> tags in HTML messages (#1488225) |
| | | - Add content filter for embedded attachments to protect from XSS on IE (#1487895) |
| | | - Add content filter for embedded attachments to protect from XSS on IE [CVE-2012-1253] (#1487895) |
| | | - Use strpos() instead of strstr() when possible (#1488211) |
| | | - Fix handling HTML entities when converting HTML to text (#1488212) |
| | | - Fix fit_string_to_size() renders browser and ui unresponsive (#1488207) |
| | |
| | | |
| | | RELEASE 0.5.4 |
| | | ------------- |
| | | - Fix XSS vulnerability in UI messages (#1488030) |
| | | - Fix XSS vulnerability in UI messages [CVE-2011-2937] (#1488030) |
| | | |
| | | RELEASE 0.5.3 |
| | | ------------- |
| | |
| | | - Security: add optional referer check to prevent CSRF in GET requests |
| | | - Fix email_dns_check setting not used for identities/contacts (#1487740) |
| | | - Fix ICANN example addresses doesn't validate (#1487742) |
| | | - Security: protect login form submission from CSRF |
| | | - Security: prevent from relaying malicious requests through modcss.inc |
| | | - Security: protect login form submission from CSRF [CVE-2011-1491] |
| | | - Security: prevent from relaying malicious requests through modcss.inc [CVE-2011-1492] |
| | | - Fix handling of non-image attachments in multipart/related messages (#1487750) |
| | | - Fix IDNA support when IDN/INTL modules are in use (#1487742) |
| | | - Fix handling of invalid HTML comments in messages (#1487759) |
| | |
| | | --------------- |
| | | - Fix import of vCard entries with params (#1485453) |
| | | - Fix HTML messages output with empty block elements (#1485974) |
| | | - Use request tokens to protect POST requests from CSRF |
| | | - Use request tokens to protect POST requests from CSRF [CVE-2009-4076, CVE-2009-4077] |
| | | - Added hook when killing a session |
| | | - Added hook to write_log function (#1485971) |
| | | - Performance improvements by use UID commands (#1485690) |
| | |
| | | - Fix large search results on server without SORT capability (#1485668) |
| | | - Get rid of preg_replace() with eval modifier and create_function usage (#1485686) |
| | | - Bring back <base> and <link> tags in HTML messages |
| | | - Fix XSS vulnerability through background attributes as reported by Julien Cayssol |
| | | - Fix XSS vulnerability through background attributes [CVE-2009-0413] |
| | | - Fix problems with backslash as IMAP hierarchy delimiter (#1484467) |
| | | - Secure vcard export by getting rid of preg's 'e' modifier use (#1485689) |
| | | - Fix authentication when submitting form with existing session (#1485679) |
| | |
| | | - Allow deleting identities when multiple_identities=false (#1485435) |
| | | - Added option focus_on_new_message (#1485374) |
| | | - Fix html2text class autoloading on Windows (#1485505) |
| | | - Fix html signature formatting when identity save error occured (#1485426) |
| | | - Fix html signature formatting when identity save error occurred (#1485426) |
| | | - Add feedback and set busy when moving folder (#1485497) |
| | | - Fix 'Empty' link visibility for some languages e.g. Slovak (#1485489) |
| | | - Fix messages count bar overlapping (#1485270) |