Matthieu MALVACHE 01a7690b28 fix(security): escape linkClassName in plainTextToSafeHtml ...

Defense-in-depth. All current callers pass hardcoded tailwind class
strings, so this is not exploitable today, but a future caller that
forwarded a user-controlled value would get HTML injection through the
class attribute. Run the value through escapeHtml() and add a test
covering the attribute-escape case.

2026-04-16 22:57:10 +02:00

..

__tests__

fix(security): escape linkClassName in plainTextToSafeHtml

2026-04-16 22:57:10 +02:00

auth

feat: add "Remember me" session persistence and simplify 2FA UX

2026-02-26 00:47:53 +01:00

jmap

fix(security): XSS in plain-text linkifier, bump vulnerable dependencies

2026-04-16 22:51:58 +02:00

oauth

feat: v1.4.0 - folder management, mail multi-selection, bug fixes

2026-03-23 15:24:46 +01:00

sieve

feat: add email filters with JMAP Sieve Scripts (RFC 9661)

2026-02-16 23:09:18 +01:00

calendar-alerts.ts

feat(calendar): add event notifications with alert evaluation

2026-02-16 23:49:35 +01:00

calendar-invitation.ts

feat: add participant scheduling with iTIP invitations and inline calendar invitation banner

2026-02-17 01:09:57 +01:00

calendar-participants.ts

fix: participant/invitation handling for Stalwart JMAP and deduplicate self-attendees (#36)

2026-03-18 21:13:36 +01:00

calendar-utils.ts

feat(calendar): add drag-create, resize, recurring scope, quick-create, and duplication

2026-02-22 17:32:10 +01:00

color-transform.ts

feat: v1.4.0 - folder management, mail multi-selection, bug fixes

2026-03-23 15:24:46 +01:00

debug.ts

Initial release: JMAP Webmail Client

2025-12-10 17:54:22 +01:00

email-headers.ts

feat: v1.4.0 - folder management, mail multi-selection, bug fixes

2026-03-23 15:24:46 +01:00

email-sanitization.ts

fix(security): escape linkClassName in plainTextToSafeHtml

2026-04-16 22:57:10 +02:00

error-reporting.ts

Initial release: JMAP Webmail Client

2025-12-10 17:54:22 +01:00

logger.ts

feat: add contacts phase 2, advanced search, vacation responder, Docker & TOTP 2FA

2026-02-16 18:51:30 +01:00

notification-sound.ts

feat(calendar): add event notifications with alert evaluation

2026-02-16 23:49:35 +01:00

sub-addressing.ts

feat: expand internationalization and add identity management

2026-01-08 22:15:32 +01:00

template-types.ts

feat: add email templates with placeholder variables and composer integration

2026-02-17 01:35:26 +01:00

template-utils.ts

feat: add email templates with placeholder variables and composer integration

2026-02-17 01:35:26 +01:00

thread-utils.ts

Initial release: JMAP Webmail Client

2025-12-10 17:54:22 +01:00

utils.ts

Initial release: JMAP Webmail Client

2025-12-10 17:54:22 +01:00

validation.ts

feat: expand internationalization and add identity management

2026-01-08 22:15:32 +01:00

vcard.ts

feat: add contacts phase 2, advanced search, vacation responder, Docker & TOTP 2FA

2026-02-16 18:51:30 +01:00