From bd0551b22076b82a6d49e9f7a2b2e0c90a1b2326 Mon Sep 17 00:00:00 2001 From: Aleksander Machniak <alec@alec.pl> Date: Fri, 05 Feb 2016 07:25:27 -0500 Subject: [PATCH] Secure also downloads of addressbook exports, managesieve script exports and Enigma keys exports --- plugins/managesieve/Changelog | 132 +++++++++++++++++++++++++++++++++++++++---- 1 files changed, 118 insertions(+), 14 deletions(-) diff --git a/plugins/managesieve/Changelog b/plugins/managesieve/Changelog index 1e60110..490819f 100644 --- a/plugins/managesieve/Changelog +++ b/plugins/managesieve/Changelog @@ -1,6 +1,110 @@ +* version 8.5 [2015-11-15] +----------------------------------------------------------- +- Add support for :from parameter in vacation action (patch from Michele Locati) + +* version 8.4 [2015-04-20] +----------------------------------------------------------- +- Add option to prepopulate vacation addresses on form init (#1490030) +- Add option to define default vacation interval +- Fix missing position idicator in Larry skin when dragging a filter +- Fix incorrect filter data after filter delete (#1490356) + +* version 8.3 [2015-03-12] +----------------------------------------------------------- +- Fix PHP fatal error when visiting Vacation interface and there's no sieve script yet +- Fix handling of header test with one-element array as header name +- Fix missing host:port in connection error message + +* version 8.2 [2015-01-14] +----------------------------------------------------------- +- Fix bug where actions without if/elseif/else in sieve scripts were skipped +- Support "not allof" test as a negation of all sub-tests +- Fix bug where vacation rule was saved to wrong script if managesieve_kolab_master=true +- Improve procedure of script selection to write a vacation rule + +* version 8.1 [2014-12-09] +----------------------------------------------------------- +- Added simple API to manage vacation rule +- Fix missing css/js scripts in filter form in mail task +- Fix default vacation status (#1490019) +- Make possible to set vacation start/end date and time +- Fix compatibility with contextmenu plugin + +* version 8.0 [2014-07-16] +----------------------------------------------------------- +- Fix bug where non-existing (or unsubscribed) folder wasn't listed in folder selector (#1489956) +- Added optional separate interface for out-of-office management (#1488266) +- Fix disabled "create filter" action +- Fix enotify/notify extension handling +- Improved UI accessibility +- Added option to specify connection socket parameters - managesieve_conn_options +- Support vacation date rules without date extension (#1489978) + +* version 7.2 [2014-02-14] +----------------------------------------------------------- +- Nicely handle server-side modification of script names (#1489412) +- Add Filters tab/section using plugin API hook +- Fix issue where folder selector wasn't visible on new filter form +- Fix issue where multi-select fields were not visible in new filter action rows (#1489600) +- Fix issue in displaying filter form when managesieve_kolab_master=true + and sieve variables extension is supported by the server (#1489599) +- Fix wrong action folder selection if managesieve_domains is not empty (#1489617) +- Fix filter creation from an email when preview frame is disabled (#1489647) + +* version 7.1 [2013-11-22] +----------------------------------------------------------- +- lib/Net_Sieve.php moved to Roundcube /lib directory +- Added managesieve_domains option to limit redirect destinations +- Fix bug where at least one additional address of vacation message was required (#1489345) +- Fix so i;ascii-numeric comparator is not forced as default for :count and :value operators +- Fix date/currentdate related form issues and comparators handling (#1489346) +- Fix a bug where deleted filter was not removed from the list + +* version 7.0 [2013-09-09] +----------------------------------------------------------- +- Add vacation-seconds extension support (RFC 6131) +- Several script parser code improvements +- Support string list arguments in filter form (#1489018) +- Support date, currendate and index tests - RFC5260 (#1488120) +- Split plugin file into two files +- Fix handling of &, <, > characters in scripts/filter names (#1489208) +- Support 'keep' action (#1489226) +- Add common headers to header selector (#1489271) + +* version 6.2 [2013-02-17] +----------------------------------------------------------- +- Support tls:// prefix in managesieve_host option +- Removed depracated functions usage +- Don't trim whitespace in folder names (#1488955) + +* version 6.1 [2012-12-21] +----------------------------------------------------------- +- Fixed filter activation/deactivation confirmation message (#1488765) +- Moved rcube_* classes to <plugin>/lib/Roundcube for compat. with Roundcube Framework autoloader +- Fixed filter selection after filter deletion (#1488832) +- Fixed compatibility with jQueryUI-1.9 +- Don't force 'stop' action on last rule in a script + +* version 6.0 [2012-10-03] +----------------------------------------------------------- +- Fixed issue with DBMail bug [http://pear.php.net/bugs/bug.php?id=19077] (#1488594) +- Added support for enotify/notify (RFC5435, RFC5436, draft-ietf-sieve-notify-00) +- Change default port to 4190 (IANA-allocated), add port auto-detection (#1488713) +- Added request size limits detection and script corruption prevention (#1488648) +- Fix so scripts listed in managesieve_filename_exceptions aren't displayed on the list (#1488724) + +* version 5.2 [2012-07-24] +----------------------------------------------------------- +- Added GUI for variables setting - RFC5229 (patch from Paweł Słowik) +- Fixed scrollbars in Larry's iframes +- Fix performance issue in message_headers_output hook handling + +* version 5.1 [2012-06-21] +----------------------------------------------------------- - Fixed filter popup width (for non-english localizations) - Fixed tokenizer infinite loop on invalid script content - Larry skin support +- Fixed custom header name validity check, made RFC2822-compliant * version 5.0 [2012-01-05] ----------------------------------------------------------- @@ -172,18 +276,18 @@ - Added it_IT localization * version 1.1 [2009-05-27] ------------------------------------------------------------ +----------------------------------------------------------- - Added new icons - Added support for headers lists (coma-separated) in rules - Added de_CH localization * version 1.0 [2009-05-21] ------------------------------------------------------------ +----------------------------------------------------------- - Rewritten using plugin API - Added hu_HU localization (Tamas Tevesz) * version beta7 (svn-r2300) [2009-03-01] ------------------------------------------------------------ +----------------------------------------------------------- - Added SquirrelMail script auto-import (Jonathan Ernst) - Added 'vacation' support (Jonathan Ernst & alec) - Added 'stop' support (Jonathan Ernst) @@ -192,47 +296,47 @@ - Small style fixes * version 0.2-stable1 (svn-r2205) [2009-01-03] ------------------------------------------------------------ +----------------------------------------------------------- - Fix moving down filter row - Fixes for compressed js files in stable release package - Created patch for svn version r2205 * version 0.2-stable [2008-12-31] ------------------------------------------------------------ +----------------------------------------------------------- - Added ru_RU, fr_FR, zh_CN translation - Fixes for Roundcube 0.2-stable -* version rc0.2beta [2008-09-21] ------------------------------------------------------------ +* version 0.2-beta [2008-09-21] +----------------------------------------------------------- - Small css fixes for IE - Fixes for Roundcube 0.2-beta * version beta6 [2008-08-08] ------------------------------------------------------------ +----------------------------------------------------------- - Added de_DE translation - Fix for Roundcube r1634 * version beta5 [2008-06-10] ------------------------------------------------------------ +----------------------------------------------------------- - Fixed 'exists' operators - Fixed 'not*' operators for custom headers - Fixed filters deleting * version beta4 [2008-06-09] ------------------------------------------------------------ +----------------------------------------------------------- - Fix for Roundcube r1490 * version beta3 [2008-05-22] ------------------------------------------------------------ +----------------------------------------------------------- - Fixed textarea error class setting - Added pagetitle setting - Added option 'managesieve_replace_delimiter' - Fixed errors on IE (still need some css fixes) - + * version beta2 [2008-05-20] ------------------------------------------------------------ +----------------------------------------------------------- - Use 'if' only for first filter and 'elsif' for the rest * version beta1 [2008-05-15] ------------------------------------------------------------ +----------------------------------------------------------- - Initial version for Roundcube r1388. -- Gitblit v1.9.1