X-Git-Url: https://vcs.fsf.org/?p=squirrelmail.git;a=blobdiff_plain;f=ChangeLog;h=4a0ead584486040eb39d63678236d65e4df773dc;hp=c1edfbb760ebbeb659f38c250f79f8674f228483;hb=b4df37a525c34a317d5f6ff10baa518f75448703;hpb=16a0e3ca9b5d4b571ee7fcb27b968f8dccac1a6e

diff --git a/ChangeLog b/ChangeLog
index c1edfbb7..4a0ead58 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -2,8 +2,10 @@
 *** SquirrelMail Devel Series 1.5 ***
 *************************************
 
-Version 1.5.2 - CVS
+Version 1.5.2 - SVN
 -------------------
+  - Fix broken set_url_var function in functions/html.php (#1729814).
+  - Fix incorrect detection of auth mechanisms in conf.pl (#1727033).
   - The search expression in the LDAP backend of the Addressbook is now
     configurable, which can allow the result set to be expanded.
   - Preliminary support for NAMESPACE in Squirrelmail IMAP Backend: NAMESPACE
@@ -175,6 +177,74 @@ Version 1.5.2 - CVS
   - Add ability for listcommands plugin to show post and reply links for 
     user-configured non-RFC 2369-compliant lists; admin must enable by 
     configuring plugin. Thanks to Peter Steiner.
+  - Fixed HttpOnly cookies again.
+  - Update for switch from CVS to Subversion.
+  - Default provider URI link fixed (was broken when on plugin options pages, etc)
+  - Fix URL to send read receipts from read_body (#1637572).
+  - Add option to ask users for personal information on first login.
+  - Drop redundant call to session_register, which could trigger a segfault
+    in PHP 4.4.5 (#1664155).
+  - If a date-header cannot be parsed, display the unparsed version as a
+    better-than-nothing alternative.
+  - Fix Priority and Receipt compose options being reset after return from
+    HTML addressbook, and allow returning from an empty address book (#1673056).
+  - Do not special case the 'None' folder.
+  - Fixes for filters issues (#1634735).
+  - session_id reporting session id when no active session (#1685031).
+  - Added sq_change_text_domain() for plugins to use when switching text
+    domains.  If plugins use this function, it fixes #1434043.
+  - Add dynamic textarea sizing slider control to compose screen (default_advanced 
+    skin)
+  - Security: fixes for the HTML filter to counter further XSS exploits:
+    HTML attachments containing 'data:' URLs, Internet Explorer-specifc
+    charset conversion exploits, and request forgery through included
+    images. Thanks to Mikhail Markin, Tomas Kuliavas and Michael Jordon
+    for reporting these issues. [CVE-2007-1262, CVE-2007-2589]
+  - Fix busy loop and notice when two literals in IMAP fetch (#1739433).
+  - Resolved issue with compose session not being updated after send/save.
+  - Added ability to detect HTTP_X_FORWARDED_PROTO in get_location(),
+    thanks to Daniel Watts.
+  - Fix test for signout.php in the logged in check in init.php so it
+    cannot be circumvented by manipulating the URL. External plugins might
+    rely on init.php guaranteeing that the user is logged in.
+  - Sort readdir() output in conf.pl (#1755886).
+  - Made the webmail_top hook work again for plugins that want to change
+    the URI of the "right" frame; plugins have to change the value of the
+    global variable $right_frame_url
+  - No longer store all message composition sessions in the PHP session,
+    since it was not made use of and in rare cases, made sessions too big
+  - Composition restoration functionality now correctly restores attachments
+  - Added smtp_auth hook
+  - Removed "Include CCs when Forwarding Messages", which had no functionality
+    whatsoever.
+  - Added "preselected" query argument to mailbox list.
+  - Make the Message Details plugin actually show the correct entity when
+    viewing details of attached messages.
+  - Enabled user selection of address format when adding from address
+    book during message composition.
+  - Added a "short_open_tag" configuration test.
+  - Fixed outgoing messages to allow addresses such as "0@..." or "000@...", 
+    etc. (#1818398).
+  - PAGE_NAME might not be defined in all plugins, which might cause a
+    "not defined" error on session timeouts.
+  - Allow custom session handlers to work correctly (and be defined at the
+    application level with SquirrelMail).
+  - Fix off-by-one in bodystructure parsing triggered by servers sending
+    a body location part (e.g. Sun Java System Messaging Server). Thanks
+    John Callahan (#1808382).
+  - Invalid initialization of To: header (#1772893).
+  - Added SquirrelMail debug mode.
+  - Handle PHP's insistence on setting the value to 'deleted' for destroyed sessions
+    (#1829098).
+  - Some IMAP servers send nil for an empty email body (See RFC2180,
+    section 4.1.3 on empty strings).
+  - Let configtest.php use optional PEAR dynamic extension loading,
+    patch by Walter Huijbers (#1833123).
+  - Fix for IMAP servers that were having problems saving sent messages
+  - Added "Secured Configuration" mode.
+  - Added edit list, checkbox, radio group, multiple-select folder list
+    and multiple-select string list option widget types.
+
 
 Version 1.5.1 (branched on 2006-02-12)
 --------------------------------------