X-Git-Url: https://vcs.fsf.org/?a=blobdiff_plain;f=ChangeLog;h=7da195a1b0573b659ae536282ca00074e1823137;hb=6aef76f3ece2c7a1dbeecf59e9186c0b12cb5fd2;hp=5c29fa57a8828868bba2988cb1cac411ecdb8ab4;hpb=db1dec9795e882ec0c531f472c268898d98c9b18;p=squirrelmail.git

diff --git a/ChangeLog b/ChangeLog
index 5c29fa57..7da195a1 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -4,6 +4,16 @@
 
 Version 1.5.2 - CVS
 -------------------
+  - The search expression in the LDAP backend of the Addressbook is now
+    configurable, which can allow the result set to be expanded.
+  - Preliminary support for NAMESPACE in Squirrelmail IMAP Backend: NAMESPACE
+    is parsed and stored in session upon login.
+  - Now uses the $Forwarded IMAP keyword for forwarded messages, when it is
+    enabled or when arbitrary keywords ("PERMANENT FLAGS \*") are permitted.
+    RFC 4550, paragraph 2.8.
+  - Added support for authorization identifier in IMAP backend, for SASL
+    authentication mechanisms PLAIN and DIGEST-MD5. This can be set upon login
+    by use of an external plugin.
   - Fix warning about array required in array_keys for display options when no
     fontset is defined.
   - Added "bad plugin" blacklist in configtest.php.
@@ -145,6 +155,17 @@ Version 1.5.2 - CVS
   - Checked if configuration file is readable in configuration utility
     (#1568355).
   - Added PHP pspell extension support to squirrelspell plugin.
+  - Add CEST and MEST (non-standard) timezone codes for +0200.
+  - Add support for SpamAssassin's X-Spam-Status header (#1589520).
+  - Added plugin on/off switch, which completely disables all plugins
+    (optionally for one named user, otherwise for all users).
+  - Security: close cross site scripting vulnerability in draft, compose
+    and mailto functionality [CVE-2006-6142].
+  - Security: work around an issue in Internet Explorer that would guess
+    the mime type of a file based on contents, not Content-Type header.
+  - Security: Multiple IE cross site scripting issues related to the
+    generous parsing of the words 'expression' and 'url' by IE.
+  - Security: Removing @import when sanitizing html mail.
 
 Version 1.5.1 (branched on 2006-02-12)
 --------------------------------------