X-Git-Url: https://vcs.fsf.org/?p=squirrelmail.git;a=blobdiff_plain;f=ChangeLog;h=44e9d8334576dfca34bc420908289d83623b4c99;hp=559ab340b972ca5ff15ce5fa447519f37a1acefc;hb=8f5d83e0b5c2f195bd3b6b4cade4f251e214bff1;hpb=805e7c6004153f69ed8f1bf2c7d5b7a7924f2863 diff --git a/ChangeLog b/ChangeLog index 559ab340..44e9d833 100644 --- a/ChangeLog +++ b/ChangeLog @@ -5,15 +5,15 @@ Version 1.5.1 -- CVS -------------------- - New reply citation to include date and author. - - Fix some possible XSS bugs. + - Security: Fix some possible XSS bugs. - Norwegian Bokmal translation uses nb_NO. - - Integrated Msg_Flags plugin - turn on/off icons using configuration tool, menu - number 11 (Tweaks), option number 3, after which users must select an icon - theme in Options/Display Preferences. "Flag"/"Unflag" buttons are implemented - as separate plugin. + - Integrated Msg_Flags plugin - turn on/off icons using configuration tool, + menu number 11 (Tweaks), option number 3, after which users must select an + icon theme in Options/Display Preferences. + "Flag"/"Unflag" buttons are implemented as separate plugin. - Added Farsi and Tagalog translation support. - Enabled Ukrainian and Russian-Ukrainian support - - Subfolders named "foo.inbox" didn't always work well. Fixed. + - Fixed subfolders named "foo.inbox" didn't always work well. - sqimap_create_stream() was not obeying passed params properly. - Fix non-selectable inbox. - Add src/configtest.php script which checks for common errors in the config. @@ -32,8 +32,8 @@ Version 1.5.1 -- CVS - Added option to suppress Received: line in outbound SM headers (#847107). - Changed read_body header from links to buttons (looks like message index). - Add functions for building HTML forms (functions/forms.php). - - Moved javascript_on to session (from prefs). Centralized javascript detection - in prefs.php method checkForJavascript. + - Moved javascript_on to session (from prefs). Centralized JavaScript + detection in prefs.php method checkForJavascript. - Added abook_init and abook_add_class hooks. - Fixed "Resume Draft" to continue using selected identities (#845290). - Fixed RFC2821 incompliancy by adding a fallback mechanism to HELO if @@ -45,7 +45,7 @@ Version 1.5.1 -- CVS still be performed on message delete, etc. - Allow single quotes to be used in theme name in conf.pl (#805309). - Fixed on the fly decoding of base64 encoded attachments. - - Fixed message rejects by the postfix sendmail wrapper when attachments were + - Fixed message rejects by the Postfix sendmail wrapper when attachments were involved. - Fixed date display bug for messages of today. Show short format in case of long format. (only occurs in the timeframe around 0:00 AM till @@ -54,29 +54,33 @@ Version 1.5.1 -- CVS written by Bryan Loniewski. - Use Special Folder Color config option works again (#931956). - In POP3-class, be more liberal regarding RFC-incompliant POP3-servers. + - Set up language before outputing errors in auth.php to make them appear in + the correct language. - Added Basque translation support. - Remove flag buttons / links from display if mailbox doesn't allow it. - Make used of cached ordered uid list in case of server_side_sorting. - Rewrite of internal mailbox sorting routines. - Added sort by message size. - - Fixed XSS vulnerability in content-type display in the attachment area - of read_body.php discovered by Roman Medina. + - Security: Fixed XSS vulnerability in content-type display in the attachment + area of read_body.php discovered by Roman Medina. - Get alternating row colors of addressbook in sync with mailbox list. - Give proper error when PEAR DB not found. - Remove inappropriate strip_tags() from add-to-addressbook (#968475). - Prefs caching didn't work properly with register_globals off (#995102). - - Security: fix SQL injection vulnerability in addressbook - (CVE ID: CAN-2004-0521). + - Security: fix SQL injection vulnerability in addressbook. + [CAN-2004-0521] - Removed html_top and html_bottom hooks. No longer used/needed. - Added "trailing text" for options built by SquirrelMail (text placed after text and select list inputs on options pages) - Custom option page values now repopulate correctly - Added "no focus" option for compose page in display preferences (setting reply focus to "No focus" also affects composing new messages) - - Current hook name is now globally available when running a hook ($currentHookName) + - Current hook name is now globally available when running a hook + ($currentHookName) - Fix bug when Saving to Draft folder that contains special characters. - - Added size limit to signatures saved in file backend. Created error_option_save - function, that allows sending error message to options page. Thanks to Martynas + - Added size limit to signatures saved in file backend. Created + error_option_save function, that allows sending error message to options + page. Thanks to Martynas. Bieliauskas for spotting big signature "option". - Make SquirrelSpell work with safe_mode enabled, if using PHP >=4.3.0. Patch by Ray Ferguson. @@ -93,17 +97,17 @@ Version 1.5.1 -- CVS - $agresive_decoding configuration option changed to $aggressive_decoding. Fixed spelling. - Added $lossy_encoding option (provides fix for #806698) - - Reenabled use of $default_charset option. Option works only with en_US + - Reenabled use of $default_charset option. Option works only with en_US translation in order to prevent language/charset misconfiguration. - Fixes for nonpopulation of folder lists and errors when emptying the trash (provides fixes for #1019185 and #1017941) - Fixed $custom_css loading in squirrelspell plugin. - - Turkish translation uses C character case conversion rules. Fixes php and - squirrelmail functions are assume English conversion rules. - - Fixed problem that caused an error when deleting all messages on the last page - of a paginated view (provides fix for #1014612) + - Turkish translation uses C character case conversion rules. Fixes PHP and + SquirrelMail functions are assume English conversion rules. + - Fixed problem that caused an error when deleting all messages on the last + page of a paginated view (provides fix for #1014612). - Added MySQL password/UNIX crypt support to mysql backend in the - change_password plugin + change_password plugin. - Make SMTP Authentication detection in conf.pl more RFC-compliant. - Fixed IMAP errors when using mail_fetch plugin to auto-fetch on login. - Fixed folder list in Create Folders list for Courier (properly skip INBOX). @@ -114,28 +118,209 @@ Version 1.5.1 -- CVS See plugins/fortune/INSTALL. - Fix for #906217 when checking spelling of inline replies, the corrected words would appear through original email. - - Fixed empty information menu when viewing vcards without information + - Fixed empty information menu when viewing vCards without information but name and e-mail address. - - User may now add an e-mail address when adding vcards without one to the + - User may now add an e-mail address when adding vCards without one to the address book. No need to wait for the error message anymore. - Removed japanese_xtra function used by older XTRA_CODE calls. Plugins should use separate xtra_code functions. Older function does not provide information about supported options. - - Added php-gettext classes (see class/l10n/*.php) and ngettext support + - Added php-gettext classes (see class/l10n/*.php) and ngettext support functions (provides fix for #1019007). - LC_NUMERIC locale is set to C. (workaround for #1027130). Some plugins might use decimal delimiters incorrectly. - Added sq_is8bit function that can be used to detect 8bit strings. - - Added sq_mb_list_encodings function that provides list of encodings supported - by php mbstring module. + - Added sq_mb_list_encodings function that provides list of encodings + supported by PHP mbstring module. - Added Content-Transfer-Encoding: 8bit header for read receipts that contain 8bit symbols. (provides fix for #934033). - - Fixed decoding function problems when mbstring.func_override has MB_OVERLOAD_REGEX - enabled. - - -Version 1.5.0 --------------------- + - Fixed decoding function problems when mbstring.func_override has + MB_OVERLOAD_REGEX enabled. + - Security: Fixed XSS exploit in decodeHeader function. [CAN-2004-1036] + - Added site configuration and custom translation engine support to translate + plugin. + - Fixed SquirrelSpell error output. Patch courtesy David Boone. + - Fixed bug in IMAP read routines that treated "0" as false instead of + a string (patch courtesy Maurice Makaay). + - Fixed PHP notice when header property value is blank. + - Added compact paginator option. Patch by Felix Egli. + - Fixed reply/forward form in order to avoid warnings in SSL enabled sites. + Patch by Felix Egli. + - Removed command line option unsupported by qmail-inject in + class/deliver/Deliver_SendMail.class.php. Thanks to Ken Brush. + - Global file based address book is controled in configuration. Removed + global_file address book backend (use 'local_file' instead). + - Added Net-Style theme by Gabriele Maidecchi. Closes patch #1041323. + - Fix: Messages shown with bad times in message list due to misinterpreted + UW IMAP internal date. + - Fixed path used by random theme. + - Utf7-imap encoding/decoding functions will check, if required charset is + supported by mbstring and use it. Fixes bug #1005353. + - LDAP backend will use internal SquirrelMail charset conversion functions + instead of PHP XML extension. Fixes bug #655137. + - Added Wood and Silver Steel themes by Pavel Spatny and Simple Green theme. + - Fix two time zone calculation bugs, thanks to David White. Fixes #1063879. + - 'Priority' and 'Importance' headers are now also recognised, next to the + 'X-Priority' header that we've supported since a long time. Fixes #1039935. + - Handle a reload of the signout page gracefully: do not present an error + about having to be logged in to be able to sign out. Fixes #1070069. + - Prevent & being eaten in set_url_var, thanks Marcin Orlowski (#1053725). + - Removed internal_link hook. + - Added sq_setlocale function in order to use multiple locale names. + - Set up language before outputing errors in signout.php to make them appear + in the correct language. + - Added size attributes to new_mail sound tags. Fixes #818958. + - Removed extra ; in SquirrelMail added Received header per RFC 822 + (#1088548). + - Add IMAP server type "hmailserver" to make search work with hMailServer. + Fixes #1085377. + - Reuploaded newmail plugin sounds. Fixes files uploaded to cvs without binary + option. + - Changing your JavaScript preference required a re-login to work. + Fixes #983614. + - Fix listcommands plugin to behave like normal reply/compose + links, and return to message page that originally called from. + - Max upload file size now correctly handles a '-1' value, meaning + unlimited. (#1094569). + - Security: Added hook for Preferences Backend to resolve potential + file inclusions. [CAN-2005-0075] + - Remove Printer Friendly Clean Display config option, the cleaning + is now always done. + - Create new Options section "Compose Preferences" and move some + options from Display Preferences there; also move some around within + Display Preferences. + - Security: Fix possible file/offsite inclusion in src/webmail.php. + [CAN-2005-0103] + - Security: Fix possible XSS issues in src/webmail.php. [CAN-2005-0104] + - Fix undefined variables in src/webmail.php. + - 24hr clock format should include a leading 0. + - Removed numeric keys for plugin array in config.php. + - Fixed translations of "On DATE, AUTHOR Wrote" and "AUTHOR Wrote" replies. + - Added sq_str_pad function for padding of multi-byte strings. + - Added sq_strlen function for calculation of multi-byte string length. + - Quoted "INBOX" in check for the status of INBOX in a LIST call. Fixes an + issue with a specific IMAP server. + - Move default_pref to the config/ dir, but keep checking legacy locations + first for bc. Do not fail with an error when default_pref not found, just + create an empty one. + - Add trailing slash for data directory used by global file based address + book (#1105760). + - Fixed sorting problem is get_squirrel_sort() function (#1115403). + - Add "Show Only Subscribed Folders" option to allow users to show all + folders instead of only subscribed ones (#1105756, #1105250). + - Add workaround for Mercury/32 servers that will subscribe again to + an already subscribed folder (#1115409). + - Added blank.png for missing image support. + - Use the proper attachment filenames in case of forwarding a message. + - Fix for #855320 where Outlook Express was creating CID: based URLs, + but not assigning a content-id to the attachment. This is a bug in + Outlook Express and is non-RFC compliant behaviour. + - Strip tags out. This is a Microsoft only protocol and + references files local to the sending machine. This causes issues + with Internet Explorer. + - Replace links with clean images to stop + issues with Internet Explorer not being able to track down the image. + - Empty src attribute on img tags causes logouts (IE only), replacing + string with blank.png. + - Added vmailmgrd backend to change_password plugin. + - Fixed change_password_init hook. + - Give an error to the user when SquirrelMail is not configured yet + (instead of "failed to include config.php"). + - Added swf and mp3 support to newmail plugin. Restored custom user media + support. + - Removed unused save_option_header() function from display and compose + option includes. + - Fixed bug #1124764, view unsafe images inside printer friendly view. + - Fixed bug #1032366, remove NUL characters in text attachments on sent. + - URL Encode required for string being passed in mailto: links to pass on + additional values (cc, body, subject etc). + - Fixed bug #801060. Removed option for INBOX in filters plugin as source + is always INBOX. + - Always show Purge link next to Trash, even when empty. + - errors in addressbook_init() function are no longer fatal. If function + fails to activate address book backend, it displays error box (with + error_box() function). error box can be hidden by setting first + function argument to false. + - Sanitized search in ldap address book backend. Use of asterisk + together with other symbols is not supported. + - Added ldap backend to change_password plugin. + - Change defaults of some prefs to more sensible / usable settings. + - Revise the documentation of the packaged plugins. + - Fixed edit form checks in address listing (#1124018). + - After sending resumed draft, return to message list. + - Parse and replace mailto: links with internal compose links when + viewing in HTML format. + - Plugins may now define an "extra" array element to return to the attachment + types hook, which will be also inserted in the attachment link for the + plugin. + - Added mouseover row highlighting on message index. + - Added