X-Git-Url: https://vcs.fsf.org/?a=blobdiff_plain;ds=sidebyside;f=ChangeLog;h=e4fe81e56790d44184e99bd361959fa2c600d55d;hb=4e2b1aada4825dfbe37a1d7cea0a0bff66f2a05c;hp=9fd8464e7f61e012880acf907d17dca8b69b19bc;hpb=aef36f9ae70d79be0f9887c4ab80305e803c0466;p=squirrelmail.git
diff --git a/ChangeLog b/ChangeLog
index 9fd8464e..8c6b47ab 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -5,24 +5,24 @@
Version 1.5.1 -- CVS
--------------------
- New reply citation to include date and author.
- - Fix quite some possible XSS-bugs.
- - Norwegian Bokmal translation uses nb_NO
- - Integrated Msg_Flags plugin - turn on/off icons using configuration tool, menu
- number 11 (Tweaks), option number 3, after which users must select an icon
- theme in Options/Display Preferences. "Flag"/"Unflag" buttons are implemented
- as separate plugin.
+ - Security: Fix some possible XSS bugs.
+ - Norwegian Bokmal translation uses nb_NO.
+ - Integrated Msg_Flags plugin - turn on/off icons using configuration tool,
+ menu number 11 (Tweaks), option number 3, after which users must select an
+ icon theme in Options/Display Preferences.
+ "Flag"/"Unflag" buttons are implemented as separate plugin.
- Added Farsi and Tagalog translation support.
- Enabled Ukrainian and Russian-Ukrainian support
- - Fix that subfolders named "foo.inbox" didn't always work well.
- - sqimap_create_stream() was not obeying passed params properly. Fixed.
- - Fix non selectable inbox.
+ - Fixed subfolders named "foo.inbox" didn't always work well.
+ - sqimap_create_stream() was not obeying passed params properly.
+ - Fix non-selectable inbox.
- Add src/configtest.php script which checks for common errors in the config.
- Improve display of some unparsable/absent dates (#891354).
- Add comment (Highest,Normal,Lowest) to X-Priority header.
Some SpamAssassin rule triggers on the absence of such a comment.
- - Corrected moving of last message in a folder using Delete-Move-Next
+ - Corrected moving of last message in a folder using Delete-Move-Next
functionality added to core in 1.5.0.
- - Fix test for LOGINDISABLED, should only test when the auth_mech actually
+ - Fix test for LOGINDISABLED, should only test when the auth mech actually
is 'login'.
- Update required PHP version to 4.1.0, and remove PHP 4.0.x legacy code.
- Make writing of preferences, abook, calendars fail better when disk full
@@ -32,18 +32,395 @@ Version 1.5.1 -- CVS
- Added option to suppress Received: line in outbound SM headers (#847107).
- Changed read_body header from links to buttons (looks like message index).
- Add functions for building HTML forms (functions/forms.php).
- - Moved javascript_on to session (from prefs). Centralized javascript detection
- in prefs.php method checkForJavascript.
+ - Moved javascript_on to session (from prefs). Centralized JavaScript
+ detection in prefs.php method checkForJavascript.
- Added abook_init and abook_add_class hooks.
- Fixed "Resume Draft" to continue using selected identities (#845290).
- Fixed RFC2821 incompliancy by adding a fallback mechanism to HELO if
EHLO is not supported.
- - Fixed RFC2298 incompliancy by setting envelop sender to null.
+ - Fixed RFC2298 incompliancy by setting envelope sender to null.
- Fixed problem where setting all the messages on the last page of the
message list would return one page higher.
-
-Version 1.5.0
---------------------
+ - Remove call to perform expunge on mailbox select - auto-expunge will
+ still be performed on message delete, etc.
+ - Allow single quotes to be used in theme name in conf.pl (#805309).
+ - Fixed on the fly decoding of base64 encoded attachments.
+ - Fixed message rejects by the Postfix sendmail wrapper when attachments were
+ involved.
+ - Fixed date display bug for messages of today. Show short format in case
+ of long format. (only occurs in the timeframe around 0:00 AM till
+ timezone).
+ - Added address book sorting options. Ascending/descending sorting code
+ written by Bryan Loniewski.
+ - Use Special Folder Color config option works again (#931956).
+ - In POP3-class, be more liberal regarding RFC-incompliant POP3-servers.
+ - Set up language before outputing errors in auth.php to make them appear in
+ the correct language.
+ - Added Basque translation support.
+ - Remove flag buttons / links from display if mailbox doesn't allow it.
+ - Make used of cached ordered uid list in case of server_side_sorting.
+ - Rewrite of internal mailbox sorting routines.
+ - Added sort by message size.
+ - Security: Fixed XSS vulnerability in content-type display in the attachment
+ area of read_body.php discovered by Roman Medina.
+ - Removed src/move_messages.php, move_before_move and move_messages_button_action
+ hooks. Mailbox listing actions should be handled by src/right_main.php and
+ functions/mailbox_display.php hooks.
+ - Get alternating row colors of addressbook in sync with mailbox list.
+ - Give proper error when PEAR DB not found.
+ - Remove inappropriate strip_tags() from add-to-addressbook (#968475).
+ - Prefs caching didn't work properly with register_globals off (#995102).
+ - Security: fix SQL injection vulnerability in addressbook.
+ [CAN-2004-0521]
+ - Removed html_top and html_bottom hooks. No longer used/needed.
+ - Added "trailing text" for options built by SquirrelMail (text placed
+ after text and select list inputs on options pages)
+ - Custom option page values now repopulate correctly
+ - Added "no focus" option for compose page in display preferences (setting
+ reply focus to "No focus" also affects composing new messages)
+ - Current hook name is now globally available when running a hook
+ ($currentHookName)
+ - Fix bug when Saving to Draft folder that contains special characters.
+ - Added size limit to signatures saved in file backend. Created
+ error_option_save function, that allows sending error message to options
+ page. Thanks to Martynas Bieliauskas for spotting big signature "option".
+ - Make SquirrelSpell work with safe_mode enabled, if using PHP >=4.3.0.
+ Patch by Ray Ferguson.
+ - Make IP-address in Message-ID RFC822 compliant.
+ - Uneditable address book entries no longer have checkboxes on addresses page.
+ - Alignment of title text above folder list fixed.
+ - Changed structure of xtra_code functions that are used by some translations.
+ - Added Uighur language support.
+ - Added status bar to compose window when "Compose In New Window" is used.
+ - Reenabled the move_messages_button_action hook and changed its name to
+ mailbox_display_button_action to promote the new location
+ - Making delete button, when viewing a message, consider which page was viewed
+ before.
+ - $agresive_decoding configuration option changed to $aggressive_decoding.
+ Fixed spelling.
+ - Added $lossy_encoding option (provides fix for #806698)
+ - Reenabled use of $default_charset option. Option works only with en_US
+ translation in order to prevent language/charset misconfiguration.
+ - Fixes for nonpopulation of folder lists and errors when emptying the trash
+ (provides fixes for #1019185 and #1017941)
+ - Fixed $custom_css loading in squirrelspell plugin.
+ - Turkish translation uses C character case conversion rules. Fixes PHP and
+ SquirrelMail functions are assume English conversion rules.
+ - Fixed problem that caused an error when deleting all messages on the last
+ page of a paginated view (provides fix for #1014612).
+ - Added MySQL password/UNIX crypt support to mysql backend in the
+ change_password plugin.
+ - Make SMTP Authentication detection in conf.pl more RFC-compliant.
+ - Fixed IMAP errors when using mail_fetch plugin to auto-fetch on login.
+ - Fixed folder list in Create Folders list for Courier (properly skip INBOX).
+ - Fixed undefined variables in sqimap_create_stream().
+ - Added Bengali translation support.
+ - Fixed left frame mailbox list when sorting by case.
+ - Separated fortune plugin configuration variables from main plugin scripts.
+ See plugins/fortune/INSTALL.
+ - Fix for #906217 when checking spelling of inline replies, the corrected
+ words would appear through original email.
+ - Fixed empty information menu when viewing vCards without information
+ but name and e-mail address.
+ - User may now add an e-mail address when adding vCards without one to the
+ address book. No need to wait for the error message anymore.
+ - Removed japanese_xtra function used by older XTRA_CODE calls. Plugins
+ should use separate xtra_code functions. Older function does not provide
+ information about supported options.
+ - Added php-gettext classes (see class/l10n/*.php) and ngettext support
+ functions (provides fix for #1019007).
+ - LC_NUMERIC locale is set to C. (workaround for #1027130). Some plugins
+ might use decimal delimiters incorrectly.
+ - Added sq_is8bit function that can be used to detect 8bit strings.
+ - Added sq_mb_list_encodings function that provides list of encodings
+ supported by PHP mbstring module.
+ - Added Content-Transfer-Encoding: 8bit header for read receipts that contain
+ 8bit symbols. (provides fix for #934033).
+ - Fixed decoding function problems when mbstring.func_override has
+ MB_OVERLOAD_REGEX enabled.
+ - Security: Fixed XSS exploit in decodeHeader function. [CAN-2004-1036]
+ - Added site configuration and custom translation engine support to translate
+ plugin.
+ - Fixed SquirrelSpell error output. Patch courtesy David Boone.
+ - Fixed bug in IMAP read routines that treated "0" as false instead of
+ a string (patch courtesy Maurice Makaay).
+ - Fixed PHP notice when header property value is blank.
+ - Added compact paginator option. Patch by Felix Egli.
+ - Fixed reply/forward form in order to avoid warnings in SSL enabled sites.
+ Patch by Felix Egli.
+ - Removed command line option unsupported by qmail-inject in
+ class/deliver/Deliver_SendMail.class.php. Thanks to Ken Brush.
+ - Global file based address book is controled in configuration. Removed
+ global_file address book backend (use 'local_file' instead).
+ - Added Net-Style theme by Gabriele Maidecchi. Closes patch #1041323.
+ - Fix: Messages shown with bad times in message list due to misinterpreted
+ UW IMAP internal date.
+ - Fixed path used by random theme.
+ - Utf7-imap encoding/decoding functions will check, if required charset is
+ supported by mbstring and use it. Fixes bug #1005353.
+ - LDAP backend will use internal SquirrelMail charset conversion functions
+ instead of PHP XML extension. Fixes bug #655137.
+ - Added Wood and Silver Steel themes by Pavel Spatny and Simple Green theme.
+ - Fix two time zone calculation bugs, thanks to David White. Fixes #1063879.
+ - 'Priority' and 'Importance' headers are now also recognised, next to the
+ 'X-Priority' header that we've supported since a long time. Fixes #1039935.
+ - Handle a reload of the signout page gracefully: do not present an error
+ about having to be logged in to be able to sign out. Fixes #1070069.
+ - Prevent & being eaten in set_url_var, thanks Marcin Orlowski (#1053725).
+ - Removed internal_link hook.
+ - Added sq_setlocale function in order to use multiple locale names.
+ - Set up language before outputing errors in signout.php to make them appear
+ in the correct language.
+ - Added size attributes to new_mail sound tags. Fixes #818958.
+ - Removed extra ; in SquirrelMail added Received header per RFC 822
+ (#1088548).
+ - Add IMAP server type "hmailserver" to make search work with hMailServer.
+ Fixes #1085377.
+ - Reuploaded newmail plugin sounds. Fixes files uploaded to cvs without binary
+ option.
+ - Changing your JavaScript preference required a re-login to work.
+ Fixes #983614.
+ - Fix listcommands plugin to behave like normal reply/compose
+ links, and return to message page that originally called from.
+ - Max upload file size now correctly handles a '-1' value, meaning
+ unlimited. (#1094569).
+ - Security: Added hook for Preferences Backend to resolve potential
+ file inclusions. [CAN-2005-0075]
+ - Remove Printer Friendly Clean Display config option, the cleaning
+ is now always done.
+ - Create new Options section "Compose Preferences" and move some
+ options from Display Preferences there; also move some around within
+ Display Preferences.
+ - Security: Fix possible file/offsite inclusion in src/webmail.php.
+ [CAN-2005-0103]
+ - Security: Fix possible XSS issues in src/webmail.php. [CAN-2005-0104]
+ - Fix undefined variables in src/webmail.php.
+ - 24hr clock format should include a leading 0.
+ - Removed numeric keys for plugin array in config.php.
+ - Fixed translations of "On DATE, AUTHOR Wrote" and "AUTHOR Wrote" replies.
+ - Added sq_str_pad function for padding of multi-byte strings.
+ - Added sq_strlen function for calculation of multi-byte string length.
+ - Quoted "INBOX" in check for the status of INBOX in a LIST call. Fixes an
+ issue with a specific IMAP server.
+ - Move default_pref to the config/ dir, but keep checking legacy locations
+ first for bc. Do not fail with an error when default_pref not found, just
+ create an empty one.
+ - Add trailing slash for data directory used by global file based address
+ book (#1105760).
+ - Fixed sorting problem is get_squirrel_sort() function (#1115403).
+ - Add "Show Only Subscribed Folders" option to allow users to show all
+ folders instead of only subscribed ones (#1105756, #1105250).
+ - Add workaround for Mercury/32 servers that will subscribe again to
+ an already subscribed folder (#1115409).
+ - Added blank.png for missing image support.
+ - Use the proper attachment filenames in case of forwarding a message.
+ - Fix for #855320 where Outlook Express was creating CID: based URLs,
+ but not assigning a content-id to the attachment. This is a bug in
+ Outlook Express and is non-RFC compliant behaviour.
+ - Strip tags out. This is a Microsoft only protocol and
+ references files local to the sending machine. This causes issues
+ with Internet Explorer.
+ - Replace links with clean images to stop
+ issues with Internet Explorer not being able to track down the image.
+ - Empty src attribute on img tags causes logouts (IE only), replacing
+ string with blank.png.
+ - Added vmailmgrd backend to change_password plugin.
+ - Fixed change_password_init hook.
+ - Give an error to the user when SquirrelMail is not configured yet
+ (instead of "failed to include config.php").
+ - Added swf and mp3 support to newmail plugin. Restored custom user media
+ support.
+ - Removed unused save_option_header() function from display and compose
+ option includes.
+ - Fixed bug #1124764, view unsafe images inside printer friendly view.
+ - Fixed bug #1032366, remove NUL characters in text attachments on sent.
+ - URL Encode required for string being passed in mailto: links to pass on
+ additional values (cc, body, subject etc).
+ - Fixed bug #801060. Removed option for INBOX in filters plugin as source
+ is always INBOX.
+ - Always show Purge link next to Trash, even when empty.
+ - errors in addressbook_init() function are no longer fatal. If function
+ fails to activate address book backend, it displays error box (with
+ error_box() function). error box can be hidden by setting first
+ function argument to false.
+ - Sanitized search in ldap address book backend. Use of asterisk
+ together with other symbols is not supported.
+ - Added ldap backend to change_password plugin.
+ - Change defaults of some prefs to more sensible / usable settings.
+ - Revise the documentation of the packaged plugins.
+ - Fixed edit form checks in address listing (#1124018).
+ - After sending resumed draft, return to message list.
+ - Parse and replace mailto: links with internal compose links when
+ viewing in HTML format.
+ - Plugins may now define an "extra" array element to return to the attachment
+ types hook, which will be also inserted in the attachment link for the
+ plugin.
+ - Added mouseover row highlighting on message index.
+ - Added