X-Git-Url: https://vcs.fsf.org/?a=blobdiff_plain;f=ChangeLog;h=b4c361f80620642bf2e8c9a683f551bc570f3b2b;hb=c191316b99b967419437de3aef6a4ee3272afed4;hp=5516631a26c5ffc181248f00588e41ceede7e179;hpb=4f40a59dc3b472439d14ea1d4918861fc80465e3;p=squirrelmail.git diff --git a/ChangeLog b/ChangeLog index 5516631a..b4c361f8 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,12 +1,350 @@ +************************************* +*** SquirrelMail Devel Series 1.5 *** +************************************* + +Version 1.5.0 -- CVS +-------------------- + - Added support in conf.pl for MS cls command. + - conf.pl changes for relative paths outside the SM tree (#715119). + - conf.pl changes for delete_folder restrictions with Courier-IMAP and + UW-IMAP (#715550). + - Fixed code to allow for \ in password/username (#718116). + - Added mailto: support for Windows clients. See + contrib/squirrelmail.mailto.reg + - Added lowsrc to the list of attributes to be removed. + - Fixed message highlighting for To, CC and From and + for RFC1522 headers (bug #719564) + - Fixed incorrect folding inside message-id's + - Fix for Folders being listed in create/remove/rename operations + (#725443, #722823, #729225) + - Fix for bad attachment view link (#697381, #729295) + - Fix comp_in_new in search and addressbook not having right parameters (#731768). + - Fix max attachment filesize off by factor 10 when ini_var set in bytes (#730742). + - Fix for parsing fetch results. We are now able to extract the UID if it's + returned after the header. + - Remove obsoleted parsing functions. + - Fixed language bug in posting on modifying/deleting servers on mail_fetch plugin + (#742705). + - Fixed infinite loop in parseAddress on invalid mailadress (#742584). + - Rewrote ugly "Not a very useful errormessage" to something more friendly. + - Make central function for compose links to make sure compose_in_new always + works the same way. + - Fix that when JavaScript off, compose in new was broken (#749654). + - Do not output JavaScript functions in page_header when JavaScript off. + - Support MS Exchange "DOMAIN/username/mailbox"-style usernames (#745814). + - Do not set Full Name to empty when edit_identity is false and edit_name is true (#750728). + - Added koi8-u, windows-1255, windows-1256, iso-8859-6 charset decoding support. + - Rewrite of sqimap_read_data_list which as result we better handle the + returned imap responses and we display error messages when connections are + dropped. + - Rewrite of email address parser and solve the infinite loops issues due to + bad formatted addresses. + - Modified conf.pl: default to force usernames lowercase for servers which + are case-insensitive. + - Applied bugfixes from stable to htmlfilter code. + - Fix bug #722933 where resuming a draft message would lose the reference headers. + - Removed hard coded colors from login.php and made it use the default theme and css file + - Fix that sending of read receipts failed when JavaScript on and comp in new off (#738130). + - Replaced search with new version by Alex Lemaresquier. (Originally + "asearch" plugin). + - New debugging function: sm_print_r() in strings.php. + - Use SM_PATH in config_default. Change default server type to 'other' in stead + of cyrus. (#766577). + - Added feature to allow user to switch on full date display in mailboxes instead + of just partial date/time based on time of email, and current date. + - Fixed bug that would cause e-mails dated in the future to be displayed with only + the time. + - Fixed unseen/total notifications to return behaviour back to 1.2.x style. + - Added 4 hooks (internal_link, mailbox_display_buttons, move_messages_button_action, create_collapse_link) + - Fix SquirrelSpell JS problem with other plugins that use forms (ie Menu Buttons). + - Fix when forwarding messages as attachment from message list, the displayed subject + was wrong (appearing to the user that the wrong messages were attached). + Closes #772371. + - Fix that when user has no theme preference set, Alien Glow would be selected under + display preferences in stead of Default. + - Updated 'action' to be 'smaction' so that plugins can modify the submit/action of + forms. This was suggested for the gpg plugin, but might be useful elsewhere. + - Add support for Mail-Followup-To header. + - Add a confirmation for the user that their mail has been sent. + - Fixed issue with forwarding emails having a ) appended to the end. + - Add "attachments_bottom" hook to allow manipulating/adding to the attachments + - Fix to prevent username & password from being displayed in error messages + if IMAP connection dropped during login + - Modified preference loading code to always have a complete $color array + set in case a user uses an incomplete theme. + - new function sqimap_msgs_list_move() to replace sqimap_msgs_list_copy() + - sqimap_msgs_list_copy() no longer deletes messages copied. + - Workaround for Mozilla bug #200412 in order to show multipart/related html mail. + - Fix for disapearing '0' from decoded strings (bug #784193) + + ************************************** -*** Squirrelmail Stable Series 1.2 *** +*** SquirrelMail Stable Series 1.4 *** ************************************** -Version 1.2.5 -- CVS --------------------- +Version 1.4.0 -- 3 April 2003 +----------------------------- + - Fixed mail_fetch plugin. Now folder edition defaults to actual value. + All settings from other servers are preserved when deleting one. + - Added Vietnamese translation. + - Fixed the newmail plugin. + - Added RECENT response to sqimap_get_status. + - Fixed attachment filename resolving. + - Added check for X-Confirm-Reading-To to make MDN work for messages sent by Pine. + - sqextractGlobalVar removed (use sqgetGlobalVar instead). + - Subfolders of Sent and Drafts show To field instead of From + - Updates in conf.pl to infamous delete_folder setting, including + addition of appropriate default value for courier and UW. + - Fix for date/time display in certain timezones. + - Fix some features of login.php that are used by some plugins and was broken + by register_globals = off. + - Added Greek locale. Thanks to George P. Kremmydas + and Alexandros Vellis + - Added notes about PHP 4.3.x to documentation. + - Fixed \Noselect mailbox detection. + - Fixed charset decode of base64 encoded strings. + - Fixed encoding of email addresses in our composed messages. + - Fixed folder creation for Courier using Autoconfig options. + - Fixed encoded string handling inside MDN notifications. + - Fixed unfold header routine in imap_messages (for mailbox_display). + - Fixed subject_line hook. + - Fixed sqgetGlobalVar switching. + - Fixed handling of encoding/decoding strings. + - Fixed wrong array_slice call for a subset of the headers. + - Allow encoded personal names in compose.php. + - Improved address parsing of addresses coming from the compose form. + - Fixed uninitialized indices when parsing attachments. + - Support text/directory MIME-type for vCards (RFC 2425). + - Added Arabic locale. Thanks to Asrar Abbasi and + Naveed Saqib . + - Update required PHP version in documentation to 4.0.6. + - Fixed delete_move_next plugin to remember where it moved mail to. + - Fixed compose to remember attachments. + - Fixed possible XSS in compose when replying to malicious sources. + - Add display of the maximum filesize for attachment uploads. + - Do not add < and > if an identity doesn't contain a full name. + - Fixed bug in parsing Content-Type properties part. + - Added move_before_move hook to allow plugins to act upon the different buttons + - Fixed bug in Forwarding of Emails (move_messages.php) + - Fixed variable spelling error in filters.php + - Fixed some operator bugs in compose.php, move_messages.php, and spamcop.php + +Version 1.4.0 RC 2a +------------------- + - Fix broken themes box in display options. + - Massive overhaul of administrator plugin. + - Added new function sqgetGlobalVar to global.php to provide direct access + to variables in $_GET, $_POST, $_SESSION, $_COOKIE and $_SERVER. + - Patch from O'Shaughnessy Evans to allow disabled $org_logo + - Lots of language/internationalization updates + - conf.pl fixes for certain uses of SM_PATH, esp. $signout_page. + - SMTP & IMAP auth method "plain" was a misnomer - now corrected to + the more accurate name "login" (Plain to be implemented soon). + - Fix for compose after search bug. (Closes #662346) + - Improved error reporting when sending mail with SMTP. + - Changed SquirrelMail identification to use User-Agent instead of X-Mailer. + - Prevent endless loop when timezone config is not found. Thanks Joshua Colson. + - Fix IMAP error when returning to message from viewing image attachment. + - Do more trimming to indented subjects in threadview so they don't wrap. + - Trash folder now displays purge link in all cases. (Closes #655943) + - Fix typo in delete_move_next plugin which caused php file-handle errors. + - Make vCard more liberal in what it accepts (thanks Kurt Pires). + - Fix problem with subject encoding when using Japanse. + - Move login_form hook to be actually in the login form. + - Fix message_details plugin ability to save a raw message. + - Try better to get the filename of an attachment. + - Deliver_SMTP class now uses HTTP_HOST in SMTP HELO. Should fix DNS + issues some people have reported. (Closes #560524) + - Obsolete sqm_topdir(), which caused login trouble with installs that + have open_basedir restrictions. Thanks Jimmy Connor. + - Fix broken abook_take plugin. + - Fix HTML errors that caused display problems in NS4. + - Correctly fold encoded header lines. + - Fix prefs caching not working correctly in PHP 4.3 caused by a stupid + version checking mechanism. + - Fix XXS hole that allowed JavaScript execution by sending someone + an email with specially crafted headers. Thanks Jason Munro, and + Masato Higashiyama. + + +Version 1.4.0 RC 1 +------------------ + - Change the way highlighting rules are stored to make them more reliable and + easier to manage. + - Reorganization of conf.pl, menu #2 + - Added CRAM-MD5 and DIGEST-MD5 authentication support for IMAP and SMTP + - Experimental TLS support for IMAP and SMTP (requires PHP 4.3.x) + - Override settings with config_local.php + - Compose form no longer shows attachment options if php file_uploads + disabled + - Improved bodystructure parsing. + - Support for windows-1257 charset. + - Optimizations to the number of IMAP calls. + - Fix problem with IE6 + iso-8859-13. + - Allow Mail Fetch to use a different POP3 server port number. + - Force magic_quotes_runtime to be off to avoid problems with this setting. + - Introduce check_sm_version function for plugins wanting to know + which version of SquirrelMail this is. + - Configurable session name to avoid conflicts with other PHP applications. + - Miscellaneous fixes for systems with error_reporting set to E_ALL. + - Many many other bugfixes and tweaks! + + +************************************* +*** SquirrelMail Devel Series 1.3 *** +************************************* + + +Version 1.3.2 +------------- + - Rewrite of message delivery related functions. + - User interface modifications. + - Added Japanese support thanks to Masato HIGASHIYAMA + - Remove NOOP checks in the POP3 client of mail_fetch to make things more + compatible and not break things which don't need to be broken. + - Fix src directory being moved on Windows systems, bugs #586518 #605256 #610676. + - This release is compatible with installations that have register_globals set to off. + - Do not lose user prefs/sigs/abooks when trying to save to a full disk. + - Make the SquirrelMail link on the right top configurable so a provider can point + to their own FAQ for example. + - Enable TZ in safe_mode if safe_mode_allowed_env_vars permits this bug #612148. + - Fix some bugs in folder management (create, delete,...) and add enhancements. + +Version 1.3.1 +------------- + - lots of fixes by Marc, including #596781 and #596930 + +Version 1.3.0 +------------- + - allow_call_time_by_reference=off fixes. + - Added forward as attachment in read_body. + - Better clean-up of left attachments at login. + - Restore compose sessions in case of a expired session. + - Added "Display Message" / "Up" links in read_body to navigate in messages with + attached messages (message/rfc822). + - Don't activate the Send Receipt link when the folder is the Sent folder. + - Moved view_header code out of read_body.php and put it in view_header.php. + - Open message/rfc822 attachments in read_body what makes it possible to + reply to attached messages. + - Rewrite of the newMail function in compose.php. This simplifies the + interface between read_body.php and compose.php. + - Moved compose related code from read_body to compose. + - Rewrite of mailbox-display to make it more modular (we use it in search.php). + - Added support for displaying multiple entities. + - Changed finding display entities. + - Extract disposition and xmailer header information in the headerparser + instead of request them individualy by an imap-call. + - Store message objects in the current session. This saves a lot of imap-calls. + - Added UID support. + - Store addresses in an object instead of a string. + - Rewrite of the bodystructureparser function. Now the message object contains + all described parameters in RFC2060. + - Introduction of the mime class where all mime related functions are situated + - Fixed removing MDN attachments. + - Fixed MDN problems with js confirmbox. + - Speedimprovements in case we download mime-entities. + - Added possibility to extract message/rfc822 attachments and store them as + the original message in a folder. + - Right to left languages implementation initiated + - Enable people with file_uploads = off to still send mail. Patch from Seth + E. Randall. + - Moved the generic_header hook back to page_header.php. bug #554278 + - Make default theme work. Bug #557313, thanks Tyler Bannister. + + +Version 1.2.7 -- June 21 2002 +----------------------------- + - fix for 'compose as new' link. bug #554886 + - fix charset format in the admin plugin. bug #550725 + - fix for errant '.' in default_folder_prefix. bug #551310 + - fix for folder names with '?' and '*'. bug # 559257, #552180 + - added the ability to search without the charset argument. #552288 + - Made /noselect node display optional. bug #554988, patch #452178 + - Improved support for macosx IMAP server thanks Brian Haun + - Added macosx friendly search, thanks Brian Haun bug #553038 + - Fixed word wrap problems when sending mail. bug #552961, #556143 + - Added possibility to use multiple compose windows without loss + of attachements. + - Fixed forward message/rfc822 attachments from a search + - Fix SpamCop plugin. + - Fixed send MDN link. + - Fixed dealing with \r\n and \n in smtp.php. + - Fixed to, cc, bcc arrays in message->header + - Speed optimizements in generating message-lists. + - Fixed loss of attachment with html addressbook. + - Fixed saving drafts with attachments + +Version 1.2.6 -- April 29 2002 +------------------------------ + - A complete MagicHTML rewrite since the existing codebase was + causing too many XSS problems. Hopefully now Nick Cleaton will + leave us alone. :) Testing credits go to Nick. + - Fix for cross-site scripting vulnerability (bug #545933) + Reported by Nick Cleaton. + - Changing "emtpy" to "purge" for more clarity. + - Fix for cross-site scripting vulnerability (bug #544658) + Reported by Nick Cleaton. + - Fix for incorrect word wrap in Opera (bug #495073) + - Workaround for older prefs: some of them contain "None" for + left_refresh (bug #540108) + - Fix for entities in cc and bcc fields on message display (bug #522493) + - Fixes for quoted values in the addressbook by David Rees (bug #538389) + - Fixed src/src problem (bug #538803) + - Fixed so non-ascii searches no longer fail both when searching + and when applying filters (bug #520918) + - Added POP3 Before SMTP option (feature request: #498428) + - Added a server-side thread sorting option per folder + - Added a server-side sorting global option + - Compose in new window size can be set in Display prefs. + - Logout error system unified. + - Fix for a "theme passed as cookie" exploit. + - PostgreSQL is now supported for database backed use + - Added user option to sort messages by internal date + - Changed attachment handling now attachments are adressed to + unique compose session. + - Added forward messages as message/rfc822 attachment + - Fixed handling message/rfc822 attachments + - Fixed folder list display when special folders have subfolders + - Added option to auto-append sig before reply/forward text (523853) + - Fixed subfolders being "orphaned" when renaming parents (498167) + - Filters can be applied to only new mail. + - Filters are updated when renaming/deleting folders (512056) + - Filtering now happens on login (filters plugin) + - Added option for WIDTH and HEIGHT tags to Org. Logo. (patch #412754) + - Fixed resume draft bug #513521, #514639 + - Newmail plugin: admin can disable the use of audio (patch #517698) + - Fixed quoting problem in safe html (patch #516542) + - SPAM folder no longer special folder (filters plugin) + - Filtering now happens on folder list refresh (filters plugin) + - Added checking of input of the folders page + - Made erronous deleting of folders harder (patch #514208) + - Made SquirrelMail display \Noselect nodes in Cyrus also made it + impossible to try to delete \Noselect nodes. (patch #452178) + - SquirrelSpell version 0.3.8 -- pretty configuration error reporting + added by popular demand. + - Improved the handling of IMAP [PARSE] messages to reduce retrieval error. + - Fixed small bug in handeling timezone (bug #536149). + - MDN message now RFC compatible (bug #537662). + - Fixed html tables in printer_friendly_bottom.php (patch #542367), and + make it so that printer friendly uses black-on-white colors in stead + of the theme colors. + - Fixed return address of MDN receipts when having multiple identities + (patch #530139). + +Version 1.2.5 -- 22 February 2002 +--------------------------------- + - Multiple mailbox list calls cached. + - Added 'View unsafe images' link to the bottom of pages which contain + unsafe images. + - Fixed 'too many close table tags' and various other issues + which meant SM output didn't always validate as clean HTML. + - Added the ability to add special folders through plugins. + - Added an Always compose in a pop-up window option. + - Search page update with ability to save searches and search + all folders at once. - Made searching on multiple criteria possible, with thanks to Jason Munro - Fixed 'list all' in addressbook (#506624, thanks to Kurt Yoder) - - Fixed a small bug in db_prefs + - Fixed small bugs in db_prefs - Allowed SquirrelMail to work from within a frame, eg. not using _top this is configureable. (thanks to Simon Dick) - Added options to conf.pl to enable automated plugin installation: @@ -14,8 +352,20 @@ Version 1.2.5 -- CVS distributed in packages. Conf.pl now also reports when saving fails. - Attachment hooks now also allow specification of generic rules like text/* which will be used when no specific rule is available. - - conf.pl can now configure database backed address books. - + - conf.pl can now configure database backed address books and + preferences. + - Version 0.3.7 of SquirrelSpell. Fixes a potential privacy + vulnerability (symlink attack), plus introduces formatting fixes + and javadoc-style comments. + - Bugfix in mailfetch reported by Mateusz Mazur + - Administrator plugin. A web based conf.pl replacement. + - Removed GLOBALS from conf.pl + - HTML messages optimization. + - Added support for requesting read receipts (MDN) and delivery receipts. + - Added the ability to stop users changing their names and email addresses. + - Added signature into multiple identities (Stefan Meier ) + - Updated user help files to reflect UI chanegs and added functionality. + Version 1.2.4 -- 25 January 2002 -------------------------------- - Fixes a nasty remote arbitrary command execution vulnerability