Allowing display of unsafe images when viewing HTML attachments and when HTML is...

[squirrelmail.git] / ChangeLog

diff --git a/ChangeLog b/ChangeLog
index e8d1221d3306b839ca7b94fc66779572af563eb4..48520f6f125a03057ab7935703e61f2bdd04ddaf 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -2,9 +2,31 @@
 *** SquirrelMail Devel Series 1.5 ***
 *************************************
 
-Version 1.5.2 CVS
-  -    Fix warning about array required in array_keys for display options when
-    no fontset is defined.
+Version 1.5.2 - CVS
+-------------------
+  - Fix warning about array required in array_keys for display options when no
+    fontset is defined.
+  - Added "bad plugin" blacklist in configtest.php.
+  - Fix MagicHTML fix with respect to parsing of u\rl in IE.
+  - Added monitored folders option to newmail plugin.
+  - Tweaked STARTTLS option for SMTP/IMAP to allow previous settings of just
+    pure TLS not to be used to assume STARTTLS.
+  - Fixed quotes in configuration strings in administrator plugin.
+  - Fixed View as HTML link so it doesn't forget it was part of a seach result.
+  - Don't use delimiter in IMAP subscription command, when noselect folder is
+    created.
+  - Security: Possible cookie theft in src/redirect.php if 
+    register_globals is enabled, and malicous site is running
+    in same domain.
+  - Stop URL parsing, if 8bit symbols or HTML entities are detected (#1356798).
+  - Added new color themes by Jeremy Landes, Tammi Maggard and Lucas Austin-Howe 
+    (#1378332), (#1377567), (#1377529), (#1377528), (#1377527), (#1377526), 
+    (#1377525), (#1393188).
+  - Issue loading options page always loaded the prefs 
+    initial_value on display, instead of the users' value.
+  - Adding the message_body hook to src/view_html.php and src/view_text.php,
+    allowing display of unsafe images when viewing HTML attachments and when
+    HTML is in an <iframe>.
        
 Version 1.5.1 (branched on 2006-02-12)
 --------------------------------------