Allowing display of unsafe images when viewing HTML attachments and when HTML is...

[squirrelmail.git] / ChangeLog

diff --git a/ChangeLog b/ChangeLog
index f8825386f462f77d749ffe6b615acd6a34090eb5..4e6db3459a9c6aa60635eca3571a4d96419697f0 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -15,7 +15,15 @@ Version 1.5.2 - CVS
   - Fixed View as HTML link so it doesn't forget it was part of a seach result.
   - Don't use delimiter in IMAP subscription command, when noselect folder is
     created.
-  
+  - Security: Possible cookie theft in src/redirect.php if 
+    register_globals is enabled, and malicous site is running
+    in same domain.
+  - Stop URL parsing, if 8bit symbols or HTML entities are detected (#1356798).
+  - Added new color themes by Jeremy Landes, Tammi Maggard and Lucas Austin-Howe 
+    (#1378332), (#1377567), (#1377529), (#1377528), (#1377527), (#1377526), 
+    (#1377525), (#1393188).
+  - Issue loading options page always loaded the prefs 
+    initial_value on display, instead of the users' value.
        
 Version 1.5.1 (branched on 2006-02-12)
 --------------------------------------