X-Git-Url: https://vcs.fsf.org/?p=squirrelmail.git;a=blobdiff_plain;f=ChangeLog;h=7626f47ca2ca746e9bf1dcbf373259cdd0332f43;hp=5a1f8eefa0fc75edb2f2bac89dfd191a7ea96e08;hb=bbb92b4c9ae9b0d54216c109437fe7dfadb76b12;hpb=c9fcea568afbd85d0dc2978fb8e35ce8f50e56d7 diff --git a/ChangeLog b/ChangeLog index 5a1f8eef..7626f47c 100644 --- a/ChangeLog +++ b/ChangeLog @@ -54,8 +54,6 @@ Version 1.5.1 -- CVS written by Bryan Loniewski. - Use Special Folder Color config option works again (#931956). - In POP3-class, be more liberal regarding RFC-incompliant POP3-servers. - - Disabled Korean extra functions, because they don't provide all required - options and message composition is broken. - Added Basque translation support. - Remove flag buttons / links from display if mailbox doesn't allow it. - Make used of cached ordered uid list in case of server_side_sorting. @@ -65,6 +63,82 @@ Version 1.5.1 -- CVS of read_body.php discovered by Roman Medina. - Get alternating row colors of addressbook in sync with mailbox list. - Give proper error when PEAR DB not found. + - Remove inappropriate strip_tags() from add-to-addressbook (#968475). + - Prefs caching didn't work properly with register_globals off (#995102). + - Security: fix SQL injection vulnerability in addressbook + (CVE ID: CAN-2004-0521). + - Removed html_top and html_bottom hooks. No longer used/needed. + - Added "trailing text" for options built by SquirrelMail (text placed + after text and select list inputs on options pages) + - Custom option page values now repopulate correctly + - Added "no focus" option for compose page in display preferences (setting + reply focus to "No focus" also affects composing new messages) + - Current hook name is now globally available when running a hook ($currentHookName) + - Fix bug when Saving to Draft folder that contains special characters. + - Added size limit to signatures saved in file backend. Created error_option_save + function, that allows sending error message to options page. Thanks to Martynas + Bieliauskas for spotting big signature "option". + - Make SquirrelSpell work with safe_mode enabled, if using PHP >=4.3.0. + Patch by Ray Ferguson. + - Make IP-address in Message-ID RFC822 compliant. + - Uneditable address book entries no longer have checkboxes on addresses page. + - Alignment of title text above folder list fixed. + - Changed structure of xtra_code functions that are used by some translations. + - Added Uighur language support. + - Added status bar to compose window when "Compose In New Window" is used. + - Reenabled the move_messages_button_action hook and changed its name to + mailbox_display_button_action to promote the new location + - Making delete button, when viewing a message, consider which page was viewed + before. + - $agresive_decoding configuration option changed to $aggressive_decoding. + Fixed spelling. + - Added $lossy_encoding option (provides fix for #806698) + - Reenabled use of $default_charset option. Option works only with en_US + translation in order to prevent language/charset misconfiguration. + - Fixes for nonpopulation of folder lists and errors when emptying the trash + (provides fixes for #1019185 and #1017941) + - Fixed $custom_css loading in squirrelspell plugin. + - Turkish translation uses C character case conversion rules. Fixes php and + squirrelmail functions are assume English conversion rules. + - Fixed problem that caused an error when deleting all messages on the last page + of a paginated view (provides fix for #1014612) + - Added MySQL password/UNIX crypt support to mysql backend in the + change_password plugin + - Make SMTP Authentication detection in conf.pl more RFC-compliant. + - Fixed IMAP errors when using mail_fetch plugin to auto-fetch on login. + - Fixed folder list in Create Folders list for Courier (properly skip INBOX). + - Fixed undefined variables in sqimap_create_stream(). + - Added Bengali translation support. + - Fixed left frame mailbox list when sorting by case. + - Separated fortune plugin configuration variables from main plugin scripts. + See plugins/fortune/INSTALL. + - Fix for #906217 when checking spelling of inline replies, the corrected + words would appear through original email. + - Fixed empty information menu when viewing vCards without information + but name and e-mail address. + - User may now add an e-mail address when adding vCards without one to the + address book. No need to wait for the error message anymore. + - Removed japanese_xtra function used by older XTRA_CODE calls. Plugins + should use separate xtra_code functions. Older function does not provide + information about supported options. + - Added php-gettext classes (see class/l10n/*.php) and ngettext support + functions (provides fix for #1019007). + - LC_NUMERIC locale is set to C. (workaround for #1027130). Some plugins + might use decimal delimiters incorrectly. + - Added sq_is8bit function that can be used to detect 8bit strings. + - Added sq_mb_list_encodings function that provides list of encodings supported + by php mbstring module. + - Added Content-Transfer-Encoding: 8bit header for read receipts that contain + 8bit symbols. (provides fix for #934033). + - Fixed decoding function problems when mbstring.func_override has MB_OVERLOAD_REGEX + enabled. + - Fixed XSS exploit in decodeHeader function. + - Added site configuration and custom translation engine support to translate + plugin. + - Fixed SquirrelSpell error output. Patch courtesy David Boone. + - Fixed bug in IMAP read routines that treated "0" as false instead of + a string (patch courtesy Maurice Makaay). + - Fixed PHP notice when header property value is blank Version 1.5.0 -------------------- @@ -176,7 +250,7 @@ Version 1.5.0 can enable it by setting variable in plugins/spamcop/setup.php - Fix again for Internet Explorer's stupidity of decoding characters, then executing it blindly. See http://www.securityfocus.com/archive/1/340118. - - Replaced obsolate 2mbit.com RBL with ahbl.org RBL. Bug.No.829887 + - Replaced obsolete 2mbit.com RBL with ahbl.org RBL. Bug.No.829887 - Added a sitewide override for authenticated SMTP - see authentication.txt. - Fixed sorting of sent_subfolders. Sent_subfolder plugin is hooked to special_mailbox hook. @@ -269,7 +343,7 @@ Version 1.4.0 RC 2a - Correctly fold encoded header lines. - Fix prefs caching not working correctly in PHP 4.3 caused by a stupid version checking mechanism. - - Fix XXS hole that allowed JavaScript execution by sending someone + - Fix XSS hole that allowed JavaScript execution by sending someone an email with specially crafted headers. Thanks Jason Munro, and Masato Higashiyama.