Linus Rath 235f4ea77f fix: stop replies and forwards loading the remote images the viewer blocked ...

The composer's editor page had no Content-Security-Policy, so quoting a
message loaded every remote image and tracking pixel in it, even when
the viewer had shown that message with remote content blocked.

The editor page now carries a CSP that mirrors the viewer's: nothing
loads but our inline script, styles and images, and remote images and
fonts are blocked whenever the quoted original is one the viewer would
block (untrusted sender and a policy other than "allow"). A reopened
draft that carries a quote counts as untrusted. Inline and pasted
images (`data:`, `blob:`) keep working, and the sent HTML is unchanged.

2026-09-24 19:10:44 +02:00

..

__tests__

fix: stop replies and forwards loading the remote images the viewer blocked

2026-09-24 19:10:44 +02:00

sieve

fix: file "Keep" filter rules into the inbox so allow-lists beat the spam filter #1027

2026-09-24 19:01:23 +02:00

account-utils.ts

feat: folder actions, tags and unified views in the drawer, folder parent/role editing, tag discovery and account-routed unified actions (#404, #498, #495, #175, #658, #855)

2026-08-29 18:39:45 +02:00

attachment-display.ts

fix: hide body-embedded cid parts typed octet-stream from the attachment chips

2026-09-24 18:50:55 +02:00

avatar-utils.ts

feat: show the sender's contact photo as their avatar #54

2026-09-24 19:03:34 +02:00

birthday-calendar.ts

fix: gate event editing on calendar rights and keep read-only calendars out of the pickers (#762)

2026-08-29 17:57:54 +02:00

calendar-alert-scheduler.ts

feat: fire calendar and task reminders as local notifications

2026-08-29 18:41:06 +02:00

calendar-alerts.ts

feat: add a send-invitations switch and custom reminder offsets, keeping alerts the picker cannot show

2026-08-29 18:53:58 +02:00

calendar-component-detection.ts

fix: query events by date window, scan tasks separately and stop re-probing denied shared accounts (#907)

2026-08-29 18:05:56 +02:00

calendar-editability.ts

fix: gate event editing on calendar rights and keep read-only calendars out of the pickers (#762)

2026-08-29 17:57:54 +02:00

calendar-ics-export.ts

feat: duplicate, share as .ics and copy the meeting link of an event; link imported UIDs instead of skipping them (#113)

2026-08-29 18:49:08 +02:00

calendar-invitation.ts

feat: assess invitation trust, read the iTIP method from the ICS and pick the target calendar in the invitation banner

2026-08-29 18:22:00 +02:00

calendar-locale.ts

feat: localize the calendar, add Saturday week start, ISO week numbers, month chips and 12h labels (#666)

2026-08-29 18:35:46 +02:00

calendar-notifications.ts

feat: fire calendar and task reminders as local notifications

2026-08-29 18:41:06 +02:00

calendar-participants.ts

fix: send invitations with a server-scheduled organizer and match RSVPs against identities and aliases (#731)

2026-08-29 17:52:26 +02:00

calendar-timezone.ts

fix: save all-day events with the right length, a time zone and explicit nulls for cleared fields (#805)

2026-08-29 17:45:43 +02:00

calendar-user-addresses.ts

fix: send invitations with a server-scheduled organizer and match RSVPs against identities and aliases (#731)

2026-08-29 17:52:26 +02:00

calendar-utils.ts

feat: localize the calendar, add Saturday week start, ISO week numbers, month chips and 12h labels (#666)

2026-08-29 18:35:46 +02:00

capabilities.ts

feat: manage filters and vacation of shared and group accounts

2026-09-24 19:01:24 +02:00

clear-cached-data.ts

fix: stop rewriting the mail, contacts and calendar caches on every state change

2026-09-24 18:56:38 +02:00

client-cert.ts

fix: resolve redirects in JS for client-certificate requests and pass blob deadlines to the native path (#627)

2026-08-29 18:03:24 +02:00

compose-html.ts

feat: port recipient parsing, reply-identity, sub-addressing, signature, quote-header and template helpers; drop the dead submission api

2026-08-29 18:12:15 +02:00

contact-utils.ts

feat: add a setting to sort contacts by last name #963

2026-09-24 19:03:34 +02:00

date-format.ts

fix: reuse the list's date formatters instead of building them per row

2026-09-24 19:10:43 +02:00

debug.ts

feat: validate settings on hydrate, align defaults with the webmail and add export/import/reset

2026-08-29 18:04:21 +02:00

delete-confirm.ts

feat: flip $junk/$notjunk on spam, search all folders by default, keep the search across folders and coalesce refreshes in the mail store (#850, #788, #553, #175)

2026-08-29 18:22:14 +02:00

download-filename.ts

feat: add Sieve filters, account security (TOTP), outbox, and EML import

2026-05-30 15:33:41 +02:00

draft-context.ts

feat: tags, pins, recipients, not-spam, delete confirm, folder-scoped search and draft editing in the mail list

2026-08-29 18:23:08 +02:00

editor-html.ts

fix: stop replies and forwards loading the remote images the viewer blocked

2026-09-24 19:10:44 +02:00

email-body.ts

fix: show large message bodies in full instead of a cut-off stub #884

2026-09-24 18:50:55 +02:00

email-date.ts

feat: conversation view with collapsible cards, header details, auth chips, unsubscribe and read-receipt banners, attachment preview and zip, embedded-message and TNEF unwrap in the reader (#480, #830, #891)

2026-08-29 18:38:53 +02:00

email-export.ts

feat: conversation view with collapsible cards, header details, auth chips, unsubscribe and read-receipt banners, attachment preview and zip, embedded-message and TNEF unwrap in the reader (#480, #830, #891)

2026-08-29 18:38:53 +02:00

email-headers.ts

feat: conversation view with collapsible cards, header details, auth chips, unsubscribe and read-receipt banners, attachment preview and zip, embedded-message and TNEF unwrap in the reader (#480, #830, #891)

2026-08-29 18:38:53 +02:00

email-html.ts

fix: render right-to-left mail right-to-left

2026-09-24 18:50:55 +02:00

email-threading.ts

feat: port the reply-recipient, subject-prefix, threading and mailbox-parsing helpers from the webmail

2026-08-29 17:49:23 +02:00

eml-import.ts

feat: add Sieve filters, account security (TOTP), outbox, and EML import

2026-05-30 15:33:41 +02:00

filenode-name.ts

feat: files API reads modified dates, decodes WebDAV names, copies/moves nodes and streams uploads (#700, #869, #563)

2026-08-29 17:59:44 +02:00

forward-as-attachment.ts

feat: conversation view with collapsible cards, header details, auth chips, unsubscribe and read-receipt banners, attachment preview and zip, embedded-message and TNEF unwrap in the reader (#480, #830, #891)

2026-08-29 18:38:53 +02:00

haptics.ts

feat: add a toast host, prompt dialog, haptics helper and reduce-motion aware animations

2026-08-29 18:20:01 +02:00

install-update.ts

security: fix push SSE breakage, harden APK updates and email rendering

2026-05-05 22:06:07 +02:00

keyword-discovery.ts

feat: folder actions, tags and unified views in the drawer, folder parent/role editing, tag discovery and account-routed unified actions (#404, #498, #495, #175, #658, #855)

2026-08-29 18:39:45 +02:00

keyword-patch.ts

fix: stop mark-read, star, pin and tag from erasing other keywords

2026-09-24 18:44:28 +02:00

keyword-sort-polarity.ts

feat: message-list order presets with the Stalwart keyword-sort polarity probe, avatars-in-junk and folder-count toggles (#718, #498)

2026-08-29 18:28:43 +02:00

login-errors.ts

feat: localize the sign-in flow and offer previously used addresses

2026-08-29 18:10:25 +02:00

mailbox-label.ts

feat: flip $junk/$notjunk on spam, search all folders by default, keep the search across folders and coalesce refreshes in the mail store (#850, #788, #553, #175)

2026-08-29 18:22:14 +02:00

mailbox-tree.ts

fix: stop viewer actions from hitting another account's message with the same id

2026-09-24 19:06:54 +02:00

mailto.ts

fix: open mailto links whose address contains a plus

2026-09-24 18:43:43 +02:00

mdn.ts

fix: strip CR/LF from read-receipt header values (GHSA-w38p-hpqv-g89c)

2026-09-24 18:36:15 +02:00

message-list-order.ts

feat: flip $junk/$notjunk on spam, search all folders by default, keep the search across folders and coalesce refreshes in the mail store (#850, #788, #553, #175)

2026-08-29 18:22:14 +02:00

network-error.ts

fix: harden the JMAP client with request deadlines, retries, rate-limit state and method-error helpers (#702, #780, #907)

2026-08-29 17:42:32 +02:00

oauth-native.ts

fix: stop adding an OAuth account from signing in the current user again

2026-09-24 18:40:43 +02:00

oauth.ts

fix: stop adding an OAuth account from signing in the current user again

2026-09-24 18:40:43 +02:00

offline-sync.ts

feat: cross-account moves via blob import, shared-account offline sync, parked failed outbox ops with retry and back-off, archive replay with foldering, localized relative dates

2026-08-29 18:47:12 +02:00

open-url.ts

fix: allow cleartext server URLs only on local hosts, name the mail domain as TOTP issuer and guard external links

2026-08-29 18:03:23 +02:00

platform-capabilities.ts

feat: iOS TestFlight release pipeline

2026-08-01 13:29:15 +02:00

push-background-task.ts

fix: open a group mailbox notification's message in the group account #839

2026-09-24 19:09:36 +02:00

push-notifications.ts

fix: open a group mailbox notification's message in the group account #839

2026-09-24 19:09:36 +02:00

quote-collapse.ts

fix: render HTML-only mail as HTML, keep stylesheets and block every external-content vector in the reader (#46, #49)

2026-08-29 18:15:22 +02:00

quote-header.ts

feat: port recipient parsing, reply-identity, sub-addressing, signature, quote-header and template helpers; drop the dead submission api

2026-08-29 18:12:15 +02:00

random.ts

fix: use a CSPRNG for OAuth state, TOTP secrets and UUIDs and validate handoff endpoints

2026-08-29 17:42:31 +02:00

recipients.ts

feat: port recipient parsing, reply-identity, sub-addressing, signature, quote-header and template helpers; drop the dead submission api

2026-08-29 18:12:15 +02:00

recurrence-expansion.ts

feat: shared calendars, custom recurrence editor, and file sharing

2026-06-12 17:15:50 +02:00

recurrence-overrides.ts

fix: edit or delete a single occurrence or the rest of a series instead of the whole series

2026-08-29 17:42:22 +02:00

recurrence.ts

fix: save all-day events with the right length, a time zone and explicit nulls for cleared fields (#805)

2026-08-29 17:45:43 +02:00

reply-identity.ts

feat: port recipient parsing, reply-identity, sub-addressing, signature, quote-header and template helpers; drop the dead submission api

2026-08-29 18:12:15 +02:00

reply-recipients.ts

feat: port the reply-recipient, subject-prefix, threading and mailbox-parsing helpers from the webmail

2026-08-29 17:49:23 +02:00

rfc5322-mailbox.ts

feat: port the reply-recipient, subject-prefix, threading and mailbox-parsing helpers from the webmail

2026-08-29 17:49:23 +02:00

search-utils.ts

chore: add Android release CI and sync local work

2026-04-26 04:12:08 +02:00

server-discovery.ts

fix: accept a pasted JMAP session URL as the server address #971

2026-09-24 18:40:43 +02:00

sha256.ts

security: fix push SSE breakage, harden APK updates and email rendering

2026-05-05 22:06:07 +02:00

share-intent.ts

fix: upload files shared into the app with their real name and type

2026-09-24 18:43:43 +02:00

sidebar-apps.ts

fix: stop the viewer crashing on any message with attachments by keeping store selectors referentially stable

2026-08-29 22:41:09 +02:00

signature-utils.ts

feat: port recipient parsing, reply-identity, sub-addressing, signature, quote-header and template helpers; drop the dead submission api

2026-08-29 18:12:15 +02:00

single-line.ts

fix: keep list previews and subjects on one line

2026-09-24 18:50:55 +02:00

smime.ts

feat: conversation view with collapsible cards, header details, auth chips, unsubscribe and read-receipt banners, attachment preview and zip, embedded-message and TNEF unwrap in the reader (#480, #830, #891)

2026-08-29 18:38:53 +02:00

state-change-bus.ts

feat: refetch filters and vacation on push and fan state changes out to screens

2026-08-29 18:03:24 +02:00

sub-addressing.ts

feat: port recipient parsing, reply-identity, sub-addressing, signature, quote-header and template helpers; drop the dead submission api

2026-08-29 18:12:15 +02:00

subject-prefix.ts

feat: port the reply-recipient, subject-prefix, threading and mailbox-parsing helpers from the webmail

2026-08-29 17:49:23 +02:00

template-utils.ts

feat: port recipient parsing, reply-identity, sub-addressing, signature, quote-header and template helpers; drop the dead submission api

2026-08-29 18:12:15 +02:00

thread-utils.ts

feat: flip $junk/$notjunk on spam, search all folders by default, keep the search across folders and coalesce refreshes in the mail store (#850, #788, #553, #175)

2026-08-29 18:22:14 +02:00

tnef.ts

feat: conversation view with collapsible cards, header details, auth chips, unsubscribe and read-receipt banners, attachment preview and zip, embedded-message and TNEF unwrap in the reader (#480, #830, #891)

2026-08-29 18:38:53 +02:00

totp-login.ts

feat: sign in with OAuth (PKCE) directly against the mail server and revoke refresh tokens on sign-out

2026-08-29 18:05:16 +02:00

totp.ts

fix: allow cleartext server URLs only on local hosts, name the mail domain as TOTP issuer and guard external links

2026-08-29 18:03:23 +02:00

trusted-senders.ts

fix: load remote content only for senders in the trusted senders book

2026-09-24 19:03:33 +02:00

unified-push.ts

feat: add UnifiedPush as an alternative to FCM for push notifications

2026-09-24 18:17:43 +02:00

unsubscribe.ts

fix: render HTML-only mail as HTML, keep stylesheets and block every external-content vector in the reader (#46, #49)

2026-08-29 18:15:22 +02:00

use-back-while-focused.ts

fix: clear the Files selection on Android back instead of switching to Mail

2026-09-24 18:41:23 +02:00

use-sheet-drag.ts

feat: enhance SettingsScreen with dynamic localization and theming

2026-04-27 13:30:45 +02:00

uuid.ts

fix: use a CSPRNG for OAuth state, TOTP secrets and UUIDs and validate handoff endpoints

2026-08-29 17:42:31 +02:00

vacation-dates.ts

feat: vacation responder sends UTC dates, edits an HTML body and is fully localized

2026-08-29 17:48:18 +02:00

vcard.ts

fix: always write the contact's full name so vCards carry FN #430

2026-09-24 19:03:34 +02:00

version-compare.ts

feat: implement update management system with update banner and settings

2026-04-26 04:50:03 +02:00

viewer-pages.ts

fix: keep the viewer on the opened message when new mail arrives

2026-09-24 19:06:54 +02:00