source: subversion/trunk/roundcubemail/CHANGELOG @ 440

Last change on this file since 440 was 440, checked in by thomasb, 6 years ago

Error handling for attachment uploads; multibyte-safe string functions; XSS improvements

  • Property svn:eol-style set to native
  • Property svn:keywords set to Author Date Id Revision
File size: 17.9 KB
Line 
1CHANGELOG RoundCube Webmail
2---------------------------
3
42006/12/29 (thomasb)
5----------
6- Added error handling for attachment uploads
7- Use multibyte safe string functions where necessary (closes #1483988)
8- Updated Swiss German localization (de_CH)
9
10
112006/12/22 (thomasb)
12----------
13- Applied security patch to validate the submitted host value (by Kees Cook)
14- Applied security patch to validate input values when deleting contacts (by Kees Cook)
15- Applied security patch that sanitizes emoticon paths when attaching them (by Kees Cook)
16- Applied a patch to more aggressively sanitize a HTML message
17- Visualize blocked images in HTML messages
18
19
202006/12/20 (thomasb)
21----------
22- Fixed wrong message listing when showing search results (closes #1484131)
23- Introduced functions Q() and JQ() as aliases for rep_specialchars_output()
24- Show remote images when opening HTML message part as attachment
25
26
272006/12/17 (thomasb)
28----------
29- Added patch by Ryan Rittenhouse & David Glick for a resizeable preview pane
30
31
322006/12/06 (thomasb)
33----------
34- Improve memory usage when sending mail (closes #1484098)
35- Mark messages as read once the preview is loaded (closes #1484132)
36- Include smtp final response in log (closes #1484081)
37
38
392006/12/04 (thomasb)
40----------
41- Corrected date string in sent message header (closes #1484125)
42- Correclty choose "To" column in sent and draft mailboxes (closes #1483943)
43- Changed srong tooltips for message browse buttons (closes #1483930)
44
45
462006/12/03 (estadtherr)
47----------
48- Added fix to convert HTML signatures for plain text messages
49- Fixed signature delimeter character to be standard (Bug #1484035)
50
51
522006/12/01 (thomasb)
53----------
54- Implemented preview pane
55- Fixed XSS vulnerability (Bug #1484109)
56- Remove newlines from mail headers (Bug #1484031)
57- Selection issues when moving/deleting (Bug #1484044)
58- Applied patch of Clement Moulin for imap host auto-selection
59- ISO-encode IMAP password for plaintext login (Bugs #1483977 & #1483886)
60- Fixed folder name encoding in subscription list (Bug #1484113)
61- Fixed JS errors in identity list (Bug #1484120)
62- Show client debug console on debug_level 8
63- Added Serbian translation
64- Updated Spanish and Bulgarian localization
65
66
672006/11/22 (robin)
68----------
69- Fix a bug introduced with Shift-Del yesterday
70
71
722006/11/21 (robin)
73----------
74- Add missing nl_NL translations
75- Translate foldernames in folder form (closes #1484113)
76
77
782006/11/21 (robin)
79----------
80- Added first and last buttons to message list, address book
81  and message detail
82- Pressing Shift-Del bypasses Trash folder
83- Enable purge command for Junk folder
84
85
862006/11/17 (robin)
87----------
88- Re-initialize message list after shift-select and delete
89
90
912006/11/16 (robin)
92----------
93- Fixed updating message list after expunge and purge
94- Fetch all aliases if virtuser_query is used instead
95  of only the first one
96
97
982006/11/11 (estadtherr)
99----------
100- fixed deletion/moving of messages from within "show" page
101
102
1032006/11/09 (thomasb)
104----------
105- Little bugfix in HTML encoding
106- Fixed encoding issues and delete-on-reply problem
107- Corrected template parsing
108
109
1102006/11/07 (estadtherr)
111----------
112- Upgraded to TinyMCE v2.0.8
113- Fixed CSS path for editor popups
114
1152006/09/26 (estadtherr)
116----------
117- Added spellchecker plugin to TinyMCE configuration
118- Fixed HTML/Plain toggle labels
119
120
1212006/09/24 (thomasb)
122----------
123- Partial client re-write with a common list class
124- Re-enabled multi select of contacts (Bug #1484017)
125- Enable contact editing right after creation (Bug #1459641)
126- Updated Hungarian, Estonian and Traditional Chinese localization
127
128
1292006/09/19 (thomasb)
130----------
131- Correct UTF-7 to UTF-8 conversion if mbstring is not available
132
133
1342006/09/13 (estadtherr)
135----------
136- Introduction of TinyMCE HTML editor support for message composition and signatures
137  Note : a new column is added to the "identities" database table
138
139
1402006/09/12 (estadtherr)
141----------
142- Fixed html2text treatment of table headers (Bug #1484020)
143- Fixed IMAP fetch of message body (Bug #1484019)
144
145
1462006/09/08 (thomasb)
147----------
148- Fixed safe_mode problems (Bug #1418381)
149- Fixed wrong header encoding (Bug #1483976)
150
151
1522006/09/07 (thomasb)
153----------
154- Made automatic draft saving configurable
155- Fixed JS bug when renaming folders (Bug #1483989)
156- Don't wait for complete page load when calling JavaScript init()
157- Some improvements to prevent session expiration
158- Prevent from double submit of spell check requests
159
160
1612006/09/01 (thomasb)
162----------
163- Imporoved message parsing and HTML validation
164- Added quota display as image (by Brett Patterson)
165- Corrected creation of a message-id
166- Updated Norwegian (bokmal) localization
167
168
1692006/08/30 (thomasb)
170----------
171- New indentation for quoted message text
172- Improved HTML validity
173
174
1752006/08/28 (estadtherr)
176----------
177- Fixed URL character set (Ticket #1445501)
178- Fixed saving of contact into MySQL from LDAP query results (Ticket #1483820)
179
180
1812006/08/25 (thomasb)
182----------
183- Fixed folder renaming: unsubscribe before rename (Bug #1483920)
184- Finalized new message parsing (+ chaching)
185- Updated SQL scripts and UPGRADING instructions
186
187
1882006/08/23 (thomasb)
189----------
190- Updated Polish, Portuguese, Latvian, Chinese and Japanese localization
191
192
1932006/08/20 (thomasb)
194----------
195- Fixed wrong usage of mbstring (Bug #1462439)
196- Set default spelling language (Ticket #1483938)
197- Added support for Nox Spell Server
198
199
2002006/08/18 (thomasb)
201----------
202- Re-built message parsing (Bug #1327068)
203  Now based on the message structure delivered by the IMAP server.
204- Fixed some XSS and SQL injection issues
205
206
2072006/08/10 (thomasb)
208----------
209- Fixed charset problems with folder renaming
210
211
2122006/08/04 (thomasb)
213----------
214- Fixed Bug in saving identities (Ticket #1483915)
215- Set folder name in window title (Bug #1483919)
216- Don't add imap_root to INBOX path (Bug #1483816)
217- Attempt to create default folders only after login
218- Avoid usage of $CONFIG in rcube_imap class
219
220
2212006/07/30 (thomasb)
222----------
223- Alter links in HTML messages (Bug #1326402)
224- Added fallback if host not found in 'mail_domain' array
225- Applied patch of Charles to highlight droptargets (Ticket #1473034)
226- Fixed folder renaming (Bug #1483914)
227- Added confirmation message after deleting a folder
228
229
2302006/07/25 (thomasb)
231----------
232- Made folder renaming a bit more ajax-style
233- Changed rename-labels and German translation
234- Fixed addressbox countbar width (Bug #1483845)
235- Fixed refresh interval problems in Safari (Bug #1483902)
236- Fixed clear_message_list_header() errors (Bug #1483898)
237- Sanity check of $message_set in imap.inc (Bug #1443200)
238- Added correct changing of message list headers for Sent folder
239- Updated Spanish localization (Ticket #1483887)
240- Applied patch #1483846
241
242
2432006/07/24 (richs)
244----------
245- Draft window no longer reloads. It saves to an iframe in the background instead (fixes bug #1483869)
246- Draft timer now part of program/js/app.js instead of skins/default/templates/compose.inc
247- Draft saving now properly returns an error when saving fails
248- Draft timer stops and resets properly when attachments are uploaded, or when saving manually
249- Old compose session/attachments are now cleaned up when a new/forward/reply/draft is made/opened
250
251
2522006/07/19 (thomasb)
253----------
254- Correct entity encoding of link urls (HTML validity)
255- Improved usability in compose step (Ticket #1483807)
256- Added absolute URLs to several buttons (for "open in new window")
257- Applied patch #1328032
258- Fixed Bug/Patch #1443200
259
260
2612006/07/18 (thomasb)
262----------
263- Fixed password with spaces issue (Bug #1364122)
264- Replaced _auth hash with second cookie (Ticket #1483811)
265- Don't use get_input_value() for passwords (Bug #1468895)
266- Made password encryption key configurable
267- Minor bugfixes with charset encoding
268- Added <label> tags to forms (Ticket #1483810)
269
270
2712006/07/07 (thomasb)
272----------
273- Fixed INSTALL_PATH bug #1425663
274
275
2762006/07/03 (richs)
277----------
278- Fixed compatibility with in-body email addresses containing "+" (Bug #1483836)
279- Updated French localizations (Ticket #1483862)
280- Incoming messages can now be moved to Drafts, edited, saved, then moved back (Feature #1436191)
281- Added Firefox workaround when clicking whitespace to drag messages (Bug #1483857)
282- Corrected Dutch and Italian localizations (Ticket #1483851 and #1483848)
283- Enabled 'Empty' (purge) command for Junk mailbox (defined in main.inc.php)
284
285
2862006/06/30 (richs)
287----------
288- Fixed empty INBOX compatibility bug (Patch #1443200)
289- Temporarily fixed French "compact" localization (Patch #1483862)
290- Fixed "Select All" not working with Delete interface button (Bug #1332434)
291- Fixed messsage list column compatibility with Konqueror (Bug #1395711)
292- Fixed "unread count" in window title when count changed (Bug #1483812)
293- Fixed DB error when deleting from message table (Patch #1483835)
294
295
2962006/06/29 (richs)
297----------
298- Added ability to remove attachments (Feature #1436721)
299- Default folders are now auto-created on first login (Feature #1471594)
300- Fixed compatibility with folder apostrophes (e.g.: Joe's Folder) (Bug #1429458)
301- Corrected Italian localizations
302- Tweaked rename-folder form to clear after a rename
303
304
3052006/06/26 (richs)
306----------
307- Added button to immediately check for new messages
308- New message checking now displays status "Checking for new messages..."
309- New message checking now looks for unread messages in all mailboxes (Feature #1326401)
310- Task buttons now respond to clicks by darkening (as in other applications)
311- Fixed "Sender" column changing to "Recipient" for "Sent" and "Drafts" message lists
312- Added ability to sort messages by "Size"
313- Added ability to rename folders (Feature #1326396)
314- Added 'protect_default_folders' option to main.inc.php to prevent renames/deletes/unsubscribes of default folders
315- Corrected 5 typos of "INSTLL" to "INSTALL" in program/include/main.inc
316
317
3182006/06/25
319----------
320- Changed behavior to include host-specific configuration (Bug #1483849)
321- Assume ISO-8859-1 encoding of mail messages by default (Patch #1483839)
322- Fixed spell checker to work with the new URL at google.com
323- Some memory and security optimizations sendmail.inc
324- Updated UGRADING description
325
326
3272006/06/19
328----------
329- Added Drafts support (Feature #1326839) (richs)
330
331
3322006/06/02
333----------
334- Updated Estonian localization and moved from ee to et
335- Added Bulgarian localization
336
337
3382006/05/25
339----------
340- Finalized GoogieSpell integration
341
342
3432006/05/18
344----------
345- Added Arabic and Armenian localizations
346- Updated Russian localization
347- Removed MDB2 classes from repository. Install them seperately if used.
348- Updated MDB2 wrapper class contributed by Lukas Kahwe Smith
349- Allow & in e-mail addresses
350
351
3522006/05/05
353----------
354- Fixed typos in function rcube_button() (Bugs #1473198 and #1473201)
355- Check for zlib.output_compression before using ob_gzhandler (Bug #1471069)
356- Casting date parts in iil_StrToTime() to avoid warnings (Bug #1482140)
357- Corrected INSTALL description (Bug #1476106)
358- Added charset to javascript HTTP headers
359- Fixed Opera bug with CC and BCC fields (Bug #1474576)
360- Changed login page title regarding product name (Bug #1476413)
361- Pimped search function
362- Applied attachment viewing/forwarding patches by Andrew Fladmark
363- Applied prev/next patch by Leonard Bouchet
364- Applied patches by Mark Bucciarelli
365- Applied patch for requesting receipts by Salvatore Ansani
366- Integrated GoogieSpell as suggested by phil (styling is not perfect yet, localization is missing)
367
368
3692006/04/13
370----------
371- Added Slovenian localization
372- Updated Portuguese localization
373- Fixed parent.location problem for compose-links
374- Added sort order saving patch by Jacob Brunson
375- Added gzip compression support
376
377
3782006/04/02
379----------
380- Added Lithuanian localization
381- Improved search function
382- Added version string as template object
383- Load host-specific configuration file (see config/main.inc.php)
384- New config parameter adding domain to user names for login
385- Strip tags on _auth, _action, _task parameters
386- Corrected labels for next/previous page buttons in address book
387
388
3892006/03/23
390----------
391- Auto-detect mail header delimiters
392- Regard daylight savings
393- Localized quota display
394- Started implementing search function
395
396
3972006/03/20
398----------
399- Avoid error message when saving an unchanged identity (Bug #1429510)
400- Fixed hard-coded cols selection for sent folder (Bug #1354586)
401- Enable some HTML links for use with "open in new window" or "save target"
402- Check meta-key instead of ctrl on Macs
403- Ignore double clicks when holding down a modifier key
404- Fixed reloading of the login page
405- Fixed typo in compose template (Bug #1446852)
406- Added compose button to message read step (Request #1433288)
407- New config parameter for persistent database connections (Bug #1431817)
408
409
4102006/03/14
411----------
412- Don't remove internal HTML tags in plaintext messages
413- Improved error handling in DB connection failure
414
415
4162006/02/22
417----------
418- Updated localizations
419- Fixed bug #1435989
420
421
4222006/02/19
423----------
424- Updated localizations
425- Applied patch of Anders Karlsson
426- Applied patch of Jacob Brunson
427- Applied patch for virtuser_query by Robin Elfrink
428- Added support for References header (patch by Auke)
429- Added support for mbstring module by Tadashi Jokagi
430- Added function for automatic remove of slashes on GET and POST vars
431  if magic_quotes is enabled
432
433
4342006/02/05
435----------
436- Added Slovak, Hungarian, Bosnian and Croation translation
437- Fixed bug when inserting signatures with !?&
438- Chopping message headers before inserting into the message cache table
439  (to avoid bugs in Postgres)
440- Allow one-char domains in e-mail addresses
441- Make product name in page title configurable
442- Make username available as skin object
443- Added session_write_close() in rcube_db class destructor to avoid problems
444  in PHP 5.0.5
445- Use move_uploaded_file() instead of copy() for a more secure handling of
446  uploaded attachments
447- Additional config parameter to show/hide deleted messages
448- Added periodic request for checking new mails (Request #1307821)
449- Added EXPUNGE command
450- Optimized loading time for mail interface
451- Changed to full UTF-8 support
452- Additional timezones (Patch #1389912)
453- Added LDAP public search (experimental)
454- Applied patch for correct ctrl/shift behavior for message selection (Bug #1326364)
455- Casting to strings when adding empty headers to message cache (Bug #1406026)
456- Skip sender-address as recipient when Reply-to-all
457- Fixes in utf8-class
458- Added patch for Quota display by Aury Fink Filho <nuny@aury.com.br>
459- Added garbage collector for message cache
460- Added patches for BCC headers
461
462
4632005/12/16
464----------
465- Added Turkish and Simplified Chinese translation
466- Use virtusertable to resolve e-mail addresses at login
467- Configurable mail_domain used to compose correct e-mail addresses
468  on first login
469
470
4712005/12/03
472----------
473- Added Finnish, Romanian, Polish, Czech, British, Norwegian, Greek, Russian,
474  Estonian and Chinese translation
475- Get IMAP server capabilities in array
476- Check for NAMESPACE capability before sending command
477- Set default user language from config 'locale_string'
478- Added sorting patch for message list
479- Make default sort col/order configurable
480- Fixed XSS in address book and identities
481- Added more XSS protection (Bug #1308236)
482- Added tab indexes for compose form
483- Added 'changed' col to contacts table
484- Support for 160-bit session hashes
485- Added input check for contacts and identities (Patch #1346523)
486- Added messages/warning to compose step (Patch #1323895)
487- Added favicon to the default skin
488- Fixed Bug #1334337 as far as possible
489- Added Reply-To-All functionality (Request #1326395, Patch #1349777)
490- Redesign of client side AJAX code (enable multi threading)
491- Added keep-alive signal every minute
492- Make logs dir configurable
493- Added support for SMTPS
494- Decode attachment file names
495- Make delimiter for message headers configurable
496- Add generic footer to sent messages
497- Choose the rigt identity when replying
498- Remove signature when replying (Request #1333167)
499- Signatures for each identity
500- Select charset when composing message
501- Complete re-design of the caching mechanism
502
503
5042005/08/11
505----------
506- Write list header to client even if list is empty
507- Add functions "select all", "select none" to message list
508- Improved filter for HTML messages to remove potentially malicious tags
509  (script, iframe, object) and event handlers.
510- Buttons for next/previous message in view mode
511- Add new created contact to list and show confirmation status
512- Added folder management (subscribe/create/delete)
513- Log message sending (SMTP log)
514- Grant access for Camino browser
515- Added German translation
516
517
5182005/10/20
519----------
520- Added Swedish, Latvian, Portuguese and Catalan translation
521- Make SMTP auth method configurable
522- Make mailboxlist scrollable (Bug #1326372)
523- Fixed SSL support
524- Improved support for Courier IMAP (root folder and delimiter issues)
525- Moved taskbar from bottom to top
526- Added 'session_lifetime' parameter
527- Fixed wrong unread count when deleting message (Bug #1332434)
528- Srip tags when creating a new folder (Bug #1332084)
529- Translate HTML tags in message headers (Bug #1330134)
530- Correction in German translation (Bug #1329434)
531- Display folder names with special chars correctly (Bug #1330157)
532
533
5342005/10/07
535----------
536- Added French, Italian, Spanish, Danish, Dutch translation
537- Clarified license (Bug #1305966)
538- Fixed PHP warnings (Bug #1299403)
539- Fixed english translation (Bug #1295406)
540- Fixed bug #1290833: Last character of email not seen
541- Fixed bug #1292199 when creating new user
542- Allow more browsers (Bug #1285101)
543- Added setting for showing pretty dates
544- Added support for SQLite database
545- Make use of message caching configurable
546- Also add attachments when forwarding a message
547- Long folder names will not flow over message list (Bug #1267232)
548- Show nested mailboxes hieracically
549- Enable IMAPS by host
550
551
5522005/08/20
553----------
554- Improved cacheing of mailbox messagecount
555- Fixed javascript bug when creating a new message folder
556- Fixed javascript bugs #1260990 and #1260992: folder selection
557- Make Trash folder configurable
558- Auto create folders Inbox, Sent and Trash (if configured)
559- Support for IMAP root folder
560- Added support fot text/enriched messages
561- Make list of special mailboxes configurable
562
Note: See TracBrowser for help on using the repository browser.