X-Git-Url: https://vcs.fsf.org/?p=squirrelmail.git;a=blobdiff_plain;f=ChangeLog;h=dd2ad379ca91d94a67621726ebb46ad4206c4293;hp=6a545e62c9b459e66e7bfec4a8bbf3ccb5e33138;hb=46489d06566e040f4852385cc6862f65009dfe97;hpb=2aecdb552cdd11913fa18a94631d3d7ff92c8299

diff --git a/ChangeLog b/ChangeLog
index 6a545e62..dd2ad379 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -2,8 +2,18 @@
 *** SquirrelMail Devel Series 1.5 ***
 *************************************
 
-Version 1.5.2 - CVS
+Version 1.5.2 - SVN
 -------------------
+  - The search expression in the LDAP backend of the Addressbook is now
+    configurable, which can allow the result set to be expanded.
+  - Preliminary support for NAMESPACE in Squirrelmail IMAP Backend: NAMESPACE
+    is parsed and stored in session upon login.
+  - Now uses the $Forwarded IMAP keyword for forwarded messages, when it is
+    enabled or when arbitrary keywords ("PERMANENT FLAGS \*") are permitted.
+    RFC 4550, paragraph 2.8.
+  - Added support for authorization identifier in IMAP backend, for SASL
+    authentication mechanisms PLAIN and DIGEST-MD5. This can be set upon login
+    by use of an external plugin.
   - Fix warning about array required in array_keys for display options when no
     fontset is defined.
   - Added "bad plugin" blacklist in configtest.php.
@@ -140,8 +150,38 @@ Version 1.5.2 - CVS
     generated. Safety check for insecure default UW IMAP setup (#1557078).
   - Ignore message copy errors when messages are deleted. Allows to delete
     messages when quota is exceeded. (#614887) (#646386) (#1446026)
-  - Added filter_hook_function() hook type.
   - Fixed unintended literal fetching (#1562271).
+  - Checked if configuration file is readable in configuration utility
+    (#1568355).
+  - Added PHP pspell extension support to squirrelspell plugin.
+  - Add CEST and MEST (non-standard) timezone codes for +0200.
+  - Add support for SpamAssassin's X-Spam-Status header (#1589520).
+  - Added plugin on/off switch, which completely disables all plugins
+    (optionally for one named user, otherwise for all users).
+  - Security: close cross site scripting vulnerability in draft, compose
+    and mailto functionality [CVE-2006-6142].
+  - Security: work around an issue in Internet Explorer that would guess
+    the mime type of a file based on contents, not Content-Type header.
+  - Security: Multiple IE cross site scripting issues related to the
+    generous parsing of the words 'expression' and 'url' by IE.
+  - Security: Removing @import when sanitizing html mail.
+  - Redesigned plugin hook system.  do_hook_function() has been removed
+    and do_hook() now emulates do_hook_function()'s return value and 
+    also has its plugin arguments passed by value, etc.
+  - Drop obsolete ORDB RBL from filters plugin (#1629398).
+  - Add warning about magic_quotes_* in configtest.
+  - Unify accepted versions for imap_server_type and set_defaults (#1629722).
+  - Improve attachment temp file creation.
+  - Add ability for listcommands plugin to show post and reply links for 
+    user-configured non-RFC 2369-compliant lists; admin must enable by 
+    configuring plugin. Thanks to Peter Steiner.
+  - Fixed HttpOnly cookies again.
+  - Update for switch from CVS to Subversion.
+  - Default provider URI link fixed (was broken when on plugin options pages, etc)
+  - Fix URL to send read receipts from read_body (#1637572).
+  - Add option to ask users for personal information on first login.
+  - Drop redundant call to session_register, which could trigger a segfault
+    in PHP 4.4.5 (#1664155).
 
 
 Version 1.5.1 (branched on 2006-02-12)