X-Git-Url: https://vcs.fsf.org/?p=squirrelmail.git;a=blobdiff_plain;f=ChangeLog;h=9ae7ac6c4b05f8025f2fef28f323f3e4a16ca5e9;hp=3e01fb4368049df0d2040e107b1389f83354745b;hb=f99c446918b4b7452891d487df62e871ea03f19b;hpb=805d352e0f203a157a43b8571ad70c18eb90a40b

diff --git a/ChangeLog b/ChangeLog
index 3e01fb43..9ae7ac6c 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -199,7 +199,7 @@ Version 1.5.2 - SVN
     HTML attachments containing 'data:' URLs, Internet Explorer-specifc
     charset conversion exploits, and request forgery through included
     images. Thanks to Mikhail Markin, Tomas Kuliavas and Michael Jordon
-    for reporting these issues. [CVE-2007-1262]
+    for reporting these issues. [CVE-2007-1262, CVE-2007-2589]
   - Fix busy loop and notice when two literals in IMAP fetch (#1739433).
   - Resolved issue with compose session not being updated after send/save.
   - Added ability to detect HTTP_X_FORWARDED_PROTO in get_location(),
@@ -208,6 +208,78 @@ Version 1.5.2 - SVN
     cannot be circumvented by manipulating the URL. External plugins might
     rely on init.php guaranteeing that the user is logged in.
   - Sort readdir() output in conf.pl (#1755886).
+  - Made the webmail_top hook work again for plugins that want to change
+    the URI of the "right" frame; plugins have to change the value of the
+    global variable $right_frame_url
+  - No longer store all message composition sessions in the PHP session,
+    since it was not made use of and in rare cases, made sessions too big
+  - Composition restoration functionality now correctly restores attachments
+  - Added smtp_auth hook
+  - Removed "Include CCs when Forwarding Messages", which had no functionality
+    whatsoever.
+  - Added "preselected" query argument to mailbox list.
+  - Make the Message Details plugin actually show the correct entity when
+    viewing details of attached messages.
+  - Enabled user selection of address format when adding from address
+    book during message composition.
+  - Added a "short_open_tag" configuration test.
+  - Fixed outgoing messages to allow addresses such as "0@..." or "000@...", 
+    etc. (#1818398).
+  - PAGE_NAME might not be defined in all plugins, which might cause a
+    "not defined" error on session timeouts.
+  - Allow custom session handlers to work correctly (and be defined at the
+    application level with SquirrelMail).
+  - Fix off-by-one in bodystructure parsing triggered by servers sending
+    a body location part (e.g. Sun Java System Messaging Server). Thanks
+    John Callahan (#1808382).
+  - Invalid initialization of To: header (#1772893).
+  - Added SquirrelMail debug mode.
+  - Handle PHP's insistence on setting the value to 'deleted' for destroyed sessions
+    (#1829098).
+  - Some IMAP servers send nil for an empty email body (See RFC2180,
+    section 4.1.3 on empty strings).
+  - Let configtest.php use optional PEAR dynamic extension loading,
+    patch by Walter Huijbers (#1833123).
+  - Fix for IMAP servers that were having problems saving sent messages
+  - Added "Secured Configuration" mode.
+  - Added edit list, checkbox, radio group, multiple-select folder list
+    and multiple-select string list option widget types.
+  - Allow database based preferences to read in default settings from the
+    default_pref file next to hardcoding them into the DB class, thanks
+    Thierry Godefroy.
+  - Reimplement printer friendly to make use of CSS.
+  - Enhanced address book page: added address list pagination, added
+    'Compose to' button, put labels around address entries tied to
+    checkboxes, added hook and template plugin output sections for
+    plugins that can filter address book listings and modify the abook
+    navigation bar.  Complements RisuMail team (risumail.jp).
+  - Added submit button type option widget
+  - Allow address lookup by fields other than nickname/alias
+  - Implement preference override hooks for database prefs backend that
+    have long been in the file-based prefs backend
+  - Removed the Address Take (abook_take) plugin; please see the Add Address
+    (third party) plugin.
+  - Allow a different server address for the POP server to be configured when
+    using POP before SMTP.
+  - Seed random number generator in one place during script init.
+  - Add native output buffering.
+  - Allow control over white space wrapping of auto-generated SquirrelMail
+    option widgets.
+  - Add informational type option widget
+  - Add password type option widget
+  - Make all submit button names unique on compose screen
+  - Make address book file permissions 0600 - same as preference files
+  - Added compatibility with Dovecot's bigint UIDs
+  - Ensure that hash directory computation is the same on both 32 and
+    64 bit architectures (#2596879).
+  - Allow multiple addresses in one abook entry (separate with commas),
+    although we HIGHLY DISCOURAGE grouping in this manner - note amongst
+    other issues that can come up, sizing for large groups will be a
+    problem (#2611967)
+  - Added Tamil translation (Thanks to Kengatharaiyer Sarveswaran).
+  - Added Bengali (Bangladesh) translation (Thanks to Jamil Ahmed).
+  - Implemented accesskeys on primary pages; is user-configurable in the
+    Options -> Accessibility Preferences page 
 
 Version 1.5.1 (branched on 2006-02-12)
 --------------------------------------