mirror of
https://github.com/bulwarkmail/native.git
synced 2026-10-31 08:06:36 +00:00
Linus Rath
cb6ddd6fcf
The read receipt is assembled as raw RFC 5322 text, and every header value in it comes from the message being answered. Stalwart returns subjects already RFC 2047-decoded, so a sender could hide CRLF in an encoded-word subject (or in the Message-ID or Disposition-Notification-To) and have it interpolated verbatim. That let them add headers such as Reply-To, or a whole body, to a message the user's own account files in Sent and submits. `encodeHeaderWord` passed any pure-ASCII value through untouched, CR/LF included. Port the webmail fix: free-text values go through `stripHeaderControls` (controls collapse to a space, then RFC 2047 if non-ASCII), address-like values and message-ids through `headerAtom` (controls and whitespace removed), and the From display name is quoted when it uses specials.
Bulwark Mobile
Beta - work in progress. Many features are unfinished or rough. Expect bugs, missing functionality, and breaking changes between releases. Do not rely on this for primary email yet.
React Native (Expo SDK 54) client for Bulwark Webmail - a JMAP-based mail, calendar, and contacts app.
What works today
- Sign in to any JMAP server (e.g. Stalwart)
- Multiple accounts
- Email list, threads, compose
- Calendar (basic)
- Contacts (basic)
- Push notifications via the Bulwark relay - FCM by default, or UnifiedPush (e.g. ntfy) for devices without Google Play services
- In-app sideload updates from GitHub Releases
What's missing or rough
- iOS builds, but push notifications and client certificates are Android-only so far
- S/MIME, plugins, themes - UI stubs only (filters & rules, the vacation responder and file storage are real implementations)
- Calendar editing is partial; contacts editing is basic
- No Play Store distribution yet (sideload APK from Releases); iOS ships via TestFlight
Run locally
npm install
npx expo start
Then press a for Android, i for iOS, or scan the QR with Expo Go.
For a release APK build see .github/workflows/release-android.yml. For iOS builds and TestFlight distribution see docs/ios-release.md.
License
AGPL-3.0-only. See LICENSE.