X-Git-Url: https://vcs.fsf.org/?a=blobdiff_plain;f=ChangeLog;h=321827804f4d341db53244c7323211cc44a710fc;hb=99786fbc2a02fdbdbc5c773c4a48d8ac0a2c9e08;hp=14c0bf024f08af195f1470161c64b65e5407bcbd;hpb=a9522df494043c9d3514e7c9284492013d464e56;p=squirrelmail.git

diff --git a/ChangeLog b/ChangeLog
index 14c0bf02..32182780 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -9,7 +9,78 @@ Version 1.5.2 - CVS
   - Added "bad plugin" blacklist in configtest.php.
   - Fix MagicHTML fix with respect to parsing of u\rl in IE.
   - Added monitored folders option to newmail plugin.
-	
+  - Tweaked STARTTLS option for SMTP/IMAP to allow previous settings of just
+    pure TLS not to be used to assume STARTTLS.
+  - Fixed quotes in configuration strings in administrator plugin.
+  - Fixed View as HTML link so it doesn't forget it was part of a seach result.
+  - Don't use delimiter in IMAP subscription command, when noselect folder is
+    created.
+  - Security: Possible cookie theft in src/redirect.php if 
+    register_globals is enabled, and malicous site is running
+    in same domain.
+  - Stop URL parsing, if 8bit symbols or HTML entities are detected (#1356798).
+  - Added new color themes by Jeremy Landes, Tammi Maggard and Lucas Austin-Howe 
+    (#1378332), (#1377567), (#1377529), (#1377528), (#1377527), (#1377526), 
+    (#1377525), (#1393188).
+  - Issue loading options page always loaded the prefs 
+    initial_value on display, instead of the users' value.
+  - Adding the message_body hook to src/view_html.php and src/view_text.php,
+    allowing display of unsafe images when viewing HTML attachments and when
+    HTML is in an <iframe>.
+  - Fixed from address in case of MDN receipts (patch from Dimitar Pashev)
+  - Advanced tree folder listing is moved to templates. $advanced_tree 
+    configuration variable is removed.
+  - Added system locale tests to configtest.php script.
+  - Fixed invalid HTML output that caused error notices in compose.php (#1454409).
+  - Introduction of centralised initialization file init.php. Location of some
+    scripts is changed. If code tries to use older script layout, scripts will
+    break and display error messages.
+  - Added session regenrate id functionality to prohibit session hijacking.
+  - Fixed sqsession_cookie function for setting HttpOnly cookie attribute.
+  - Reduce references header in a smart way to avoid "header too long"
+    errors from SMTP servers in really long threads (#1167754, #1465342).
+  - Added code that allows to use internal password functions in sqimap_login().
+    Switched plugins to use this code instead of accessing key and otp information
+    directly.
+  - Fixed automatic mailbox creation in left_main.php. 1.5.1 mailbox caching 
+    broke detection of unsubscribed special folders (#1461578).
+  - Undo extra sanitizing in decodeHeader() function (#1460638).
+  - Added workaround for broken OpenBSD 3.8+ setlocale() function (#1427512).
+  - Fixed session lockups on large attachment downloads.
+  - Added configtest hook in src/configtest.php.
+  - Improved error handling for the help pages.
+  - Fixed possibility to use single quote in provider name (#1475744).
+  - Improve recovery when EHLO not supported on legacy SMTP servers
+    (#1031455).
+  - Added error handling and $onlylocal argument to abook_init hook.
+  - Added PHP 5.1.0 date_default_timezone_set() function support. Allows
+    to use time zone settings in PHP safe_mode.
+  - Sanitized IMAP folder names in error_message() function and filters plugin.
+  - Take X-Forwarded-Host HTTP header in consideration when constructing
+    base_uri for redirects; reduces problems with transparent proxies
+    (#1488590).
+  - Fixed server capability retrieval for "double" cases in capability
+    response, like "FOO FOO=bar".
+  - Various address book database backend modifications. Fixed invalid
+    error checks in insert() and delete() methods (checks caused PHP 
+    warnings). Turned on Pear DB field case portability mode. Escaped SQL
+    wildcards in search() method. Handle nickname changes in modify()
+    method when new nickname is already in use. Made search expressions
+    case insensitive in search() method.
+  - Added special folder (Drafts, Sent, Trash) translations in mailbox 
+    tree and folder selection boxes.
+  - Added write support to address book LDAP backend. Patch by David 
+    Hardeman (#1495763).
+  - Added message copy options.
+  - Removed html formating from address book backend classes. Added
+    fullname() method to addressbook_backend class. Moved
+    htmlspecialchars() sanitizing from address book backend classes to
+    html output code. If third party code displays errors from address
+    book object in html, errors must be sanitized and ASCII line feeds
+    should be converted to html line breaks.
+  - Add note to conf.pl / config_default.php to warn users that set
+    sensitive passwords in that file to properly secure it.
+
 Version 1.5.1 (branched on 2006-02-12)
 --------------------------------------
   - New reply citation to include date and author.