Roundcubemail devel
parent: b01689 | patch | commitdiff
Thomas Bruederli
2016-01-16 699af1e5206ed9114322adaa3c25c1c969640a53
refs
author Thomas Bruederli <thomas@roundcube.net>
Saturday, January 16, 2016 11:48 -0500
committer Aleksander Machniak <alec@alec.pl>
Sunday, March 6, 2016 08:35 -0500
commit699af1e5206ed9114322adaa3c25c1c969640a53
tree 8bb1df0a2e3a412efc4d3130b9f752e1eeab08e0 tree | zip | gz
parent b01689caf8e372d40112eda0f14a84eed41389d5 view | diff 
Protect download urls against CSRF using unique request tokens (#1490642)
Send X-Frame-Options headers with every HTTP response

Conflicts:
	plugins/enigma/enigma.js
	plugins/enigma/lib/enigma_ui.php
	program/lib/Roundcube/rcube_message.php
12 files modified
68 ■■■■■ changed files
plugins/managesieve/lib/Roundcube/rcube_sieve_engine.php 2 ●●●●● diff | view | raw | blame | history
plugins/managesieve/managesieve.js 2 ●●●●● diff | view | raw | blame | history
plugins/zipdownload/zipdownload.js 2 ●●●●● diff | view | raw | blame | history
plugins/zipdownload/zipdownload.php 6 ●●●●● diff | view | raw | blame | history
program/include/rcmail.php 2 ●●●●● diff | view | raw | blame | history
program/include/rcmail_output_html.php 6 ●●●●● diff | view | raw | blame | history
program/js/app.js 24 ●●●●● diff | view | raw | blame | history
program/lib/Roundcube/rcube_message.php 9 ●●●●● diff | view | raw | blame | history
program/lib/Roundcube/rcube_output.php 5 ●●●●● diff | view | raw | blame | history
program/steps/addressbook/export.inc 2 ●●●●● diff | view | raw | blame | history
program/steps/mail/get.inc 4 ●●●●● diff | view | raw | blame | history
program/steps/mail/viewsource.inc 4 ●●●●● diff | view | raw | blame | history