Added 'no focus' option for compose screen

[squirrelmail.git] / ChangeLog

diff --git a/ChangeLog b/ChangeLog
index eb7b6c42a05c313b6937952c28a3fb465264ec5e..c8a9efbee6cfd727ba8e595ca1d0371ea44729f7 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -64,6 +64,17 @@ Version 1.5.1 -- CVS
   - Fixed XSS vulnerability in content-type display in the attachment area
     of read_body.php discovered by Roman Medina.
   - Get alternating row colors of addressbook in sync with mailbox list.
+  - Give proper error when PEAR DB not found.
+  - Remove inappropriate strip_tags() from add-to-addressbook (#968475).
+  - Prefs caching didn't work properly with register_globals off (#995102).
+  - Security: fix SQL injection vulnerability in addressbook
+    (CVE ID: CAN-2004-0521).
+  - Removed html_top and html_bottom hooks.  No longer used/needed.
+  - Added "trailing text" for options built by SquirrelMail (text placed
+    after text and select list inputs on options pages)
+  - Custom option page values now repopulate correctly
+  - Added "no focus" option for compose page in display preferences (setting
+    reply focus to "No focus" also affects composing new messages)
 
 Version 1.5.0
 --------------------