X-Git-Url: https://vcs.fsf.org/?a=blobdiff_plain;f=ChangeLog;h=4d8f6f875118e9aefd359a76f9b976b1e0835f12;hb=d5c472f16d5aa03b3f69dc1e985299cd53c2fb77;hp=87fa1102f4db83cf296168c88507d878b52657fb;hpb=49c0360c62e0735ea0f5a3a36bb56da0be314e16;p=squirrelmail.git diff --git a/ChangeLog b/ChangeLog index 87fa1102..4d8f6f87 100644 --- a/ChangeLog +++ b/ChangeLog @@ -5,7 +5,7 @@ Version 1.5.1 -- CVS -------------------- - New reply citation to include date and author. - - Fix quite some possible XSS-bugs. + - Fix some possible XSS bugs. - Norwegian Bokmal translation uses nb_NO. - Integrated Msg_Flags plugin - turn on/off icons using configuration tool, menu number 11 (Tweaks), option number 3, after which users must select an icon @@ -13,16 +13,16 @@ Version 1.5.1 -- CVS as separate plugin. - Added Farsi and Tagalog translation support. - Enabled Ukrainian and Russian-Ukrainian support - - Fix that subfolders named "foo.inbox" didn't always work well. + - Subfolders named "foo.inbox" didn't always work well. Fixed. - sqimap_create_stream() was not obeying passed params properly. - - Fix non selectable inbox. + - Fix non-selectable inbox. - Add src/configtest.php script which checks for common errors in the config. - Improve display of some unparsable/absent dates (#891354). - Add comment (Highest,Normal,Lowest) to X-Priority header. Some SpamAssassin rule triggers on the absence of such a comment. - Corrected moving of last message in a folder using Delete-Move-Next functionality added to core in 1.5.0. - - Fix test for LOGINDISABLED, should only test when the auth_mech actually + - Fix test for LOGINDISABLED, should only test when the auth mech actually is 'login'. - Update required PHP version to 4.1.0, and remove PHP 4.0.x legacy code. - Make writing of preferences, abook, calendars fail better when disk full @@ -48,21 +48,46 @@ Version 1.5.1 -- CVS - Fixed message rejects by the postfix sendmail wrapper when attachments were involved. - Fixed date display bug for messages of today. Show short format in case - of long format. (only occures in the timeframe around 0:00 AM till + of long format. (only occurs in the timeframe around 0:00 AM till timezone). - Added address book sorting options. Ascending/descending sorting code written by Bryan Loniewski. - Use Special Folder Color config option works again (#931956). - In POP3-class, be more liberal regarding RFC-incompliant POP3-servers. - - Disabled Korean extra functions, because they don't provide all required - options and message composition is broken. - Added Basque translation support. - Remove flag buttons / links from display if mailbox doesn't allow it. - Make used of cached ordered uid list in case of server_side_sorting. - Rewrite of internal mailbox sorting routines. - Added sort by message size. - - Fixed XSS vulnarability in content-type display in the attachment area + - Fixed XSS vulnerability in content-type display in the attachment area of read_body.php discovered by Roman Medina. + - Get alternating row colors of addressbook in sync with mailbox list. + - Give proper error when PEAR DB not found. + - Remove inappropriate strip_tags() from add-to-addressbook (#968475). + - Prefs caching didn't work properly with register_globals off (#995102). + - Security: fix SQL injection vulnerability in addressbook + (CVE ID: CAN-2004-0521). + - Removed html_top and html_bottom hooks. No longer used/needed. + - Added "trailing text" for options built by SquirrelMail (text placed + after text and select list inputs on options pages) + - Custom option page values now repopulate correctly + - Added "no focus" option for compose page in display preferences (setting + reply focus to "No focus" also affects composing new messages) + - Current hook name is now globally available when running a hook ($currentHookName) + - Fix bug when Saving to Draft folder that contains special characters. + - Added size limit to signatures saved in file backend. Created error_option_save + function, that allows sending error message to options page. Thanks to Martynas + Bieliauskas for spotting big signature "option". + - Make SquirrelSpell work with safe_mode enabled, if using PHP >=4.3.0. + Patch by Ray Ferguson. + - Make IP-address in Message-ID RFC822 compliant. + - Uneditable address book entries no longer have checkboxes on addresses page. + - Alignment of title text above folder list fixed. + - Changed structure of xtra_code functions that are used by some translations. + - Added Uighur language support. + - Added status bar to compose window when "Compose In New Window" is used. + - Reenabled the move_messages_button_action hook and changed its name to + mailbox_display_button_action to promote the new location Version 1.5.0 -------------------- @@ -267,7 +292,7 @@ Version 1.4.0 RC 2a - Correctly fold encoded header lines. - Fix prefs caching not working correctly in PHP 4.3 caused by a stupid version checking mechanism. - - Fix XXS hole that allowed JavaScript execution by sending someone + - Fix XSS hole that allowed JavaScript execution by sending someone an email with specially crafted headers. Thanks Jason Munro, and Masato Higashiyama. @@ -677,9 +702,9 @@ Version 1.0.2 -- February 8, 2001 - Better escaped string handling from POST variables - Many more code cleanups and optimizations - Added Hungarian translation by Teemu Junnila - - Added Icelandic translation by Karl Hei�r" + - Added Icelandic translation by Karl Heiðar - Updated Taiwan translation - - Updated Sweedish translation + - Updated Swedish translation - Updated Finnish translation Version 1.0.1 -- February 1, 2001 @@ -705,7 +730,7 @@ Version 1.0 -- January 30, 2001 - Fixed problems in sqimap_read_body(), made it more reliable - Added French translation of help files by gore K - Added Finnish translation by Teemu Junnila - - Updated Sweedish translation + - Updated Swedish translation - Updated Russian translation