X-Git-Url: https://vcs.fsf.org/?p=squirrelmail.git;a=blobdiff_plain;f=ChangeLog;h=30557ce21f7eab88355c9948534fbc66f34f3942;hp=f10bd73909dc00f296d759c85c9e681b6b2205e3;hb=bb27e0c3c1046bc2e6f63aac5ed105d28dc17a36;hpb=13fb02bbf189cf664a8dd72c22e9f681e5683ada;ds=sidebyside

diff --git a/ChangeLog b/ChangeLog
index f10bd739..30557ce2 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -13,8 +13,37 @@ Version 1.5.2 - CVS
     pure TLS not to be used to assume STARTTLS.
   - Fixed quotes in configuration strings in administrator plugin.
   - Fixed View as HTML link so it doesn't forget it was part of a seach result.
-  
-	
+  - Don't use delimiter in IMAP subscription command, when noselect folder is
+    created.
+  - Security: Possible cookie theft in src/redirect.php if 
+    register_globals is enabled, and malicous site is running
+    in same domain.
+  - Stop URL parsing, if 8bit symbols or HTML entities are detected (#1356798).
+  - Added new color themes by Jeremy Landes, Tammi Maggard and Lucas Austin-Howe 
+    (#1378332), (#1377567), (#1377529), (#1377528), (#1377527), (#1377526), 
+    (#1377525), (#1393188).
+  - Issue loading options page always loaded the prefs 
+    initial_value on display, instead of the users' value.
+  - Adding the message_body hook to src/view_html.php and src/view_text.php,
+    allowing display of unsafe images when viewing HTML attachments and when
+    HTML is in an <iframe>.
+  - Fixed from address in case of MDN receipts (patch from Dimitar Pashev)
+  - Advanced tree folder listing is moved to templates. $advanced_tree 
+    configuration variable is removed.
+  - Added system locale tests to configtest.php script.
+  - Fixed invalid HTML output that caused error notices in compose.php (#1454409).
+  - Introduction of centralised initialization file init.php.
+  - Added session regenrate id functionality to prohibit session hijacking.
+  - Fixed sqsession_cookie function for setting HttpOnly cookie attribute.
+  - Reduce references header in a smart way to avoid "header too long"
+    errors from SMTP servers in really long threads (#1167754, #1465342).
+  - Added code that allows to use internal password functions in sqimap_login().
+    Switched plugins to use this code instead of accessing key and otp information
+    directly.
+  - Fixed automatic mailbox creation in left_main.php. 1.5.1 mailbox caching 
+    broke detection of unsubscribed special folders.
+  - Undo extra sanitizing in decodeHeader() function (#1460638).
+
 Version 1.5.1 (branched on 2006-02-12)
 --------------------------------------
   - New reply citation to include date and author.