 Linus Rath
|
2f8b4863ff
|
Merge pull request #1338 from HOLOEYE-JZ/feat/plugin-search-results
|
2026-10-26 19:32:56 +01:00 |
|
|
Linus Rath
|
7c00a02319
|
Merge pull request #1345 from HOLOEYE-JZ/feat/plugin-action-badge
|
2026-10-26 19:32:08 +01:00 |
|
|
Linus Rath
|
12ee24a81a
|
Merge pull request #1355 from maxhaomh/fix/outlook-quote-lines
|
2026-10-26 19:28:56 +01:00 |
|
|
Linus Rath
|
78efeec7b2
|
fix: find the quick reply setting in the settings search
|
2026-10-26 19:25:37 +01:00 |
|
|
Linus Rath
|
7677b87c5e
|
Merge pull request #1373 from motofix/fix/1371-download-name-slash
|
2026-10-26 19:23:56 +01:00 |
|
 Julien Béti
|
460343d86d
|
fix: show inline images whose part name is a path #1371
|
2026-10-26 18:34:57 +01:00 |
|
|
Linus Rath
|
bec17e6a7b
|
test: reset the stored-credential budget between pairing tests
|
2026-10-26 16:33:08 +01:00 |
|
|
Linus Rath
|
89be5f1e5b
|
fix: keep every calendar hidden after reload when the user hid them all
|
2026-10-26 16:13:52 +01:00 |
|
|
Linus Rath
|
d72bff95f9
|
fix: stop acting on a message of a signed-out account through the active account
|
2026-10-26 16:11:51 +01:00 |
|
|
Linus Rath
|
2e9bb56071
|
fix: apply a subscribed calendar feed's changes to events it still carries
|
2026-10-26 15:15:58 +01:00 |
|
|
Linus Rath
|
f0392a6705
|
fix: check a meeting reply's sender against the attendee who answers, not the organizer
|
2026-10-26 15:15:58 +01:00 |
|
|
Linus Rath
|
e120ac6361
|
fix: let plugins read the message of the account they name, as ids repeat across accounts
|
2026-10-26 15:15:58 +01:00 |
|
|
Linus Rath
|
f829d4a2e8
|
fix: ask the next user again before running plugins installed by someone who signed out
|
2026-10-26 15:15:58 +01:00 |
|
|
Linus Rath
|
d29309ed0d
|
fix: keep plugin embed origins out of the page CSP while plugins are turned off
|
2026-10-26 15:15:58 +01:00 |
|
|
Linus Rath
|
42117da498
|
fix: stop replaying a stored credential the mail server refused, so a stale session cannot get the webmail banned (GHSA-g6c7-r7wq-xrm2)
|
2026-10-26 15:00:56 +01:00 |
|
|
Linus Rath
|
ae897b42a4
|
fix: make the impersonation handoff really clear the previous account list and ignore ?impersonated=1 links from elsewhere
|
2026-10-26 14:58:31 +01:00 |
|
|
Linus Rath
|
f02e96b47a
|
fix: stop the password and TOTP sign-in from re-posting the password to another host when the mail server redirects
|
2026-10-26 14:58:31 +01:00 |
|
|
Linus Rath
|
eb2787bcc9
|
fix: end admin sessions on sign-out and when the admin password changes
|
2026-10-26 14:52:04 +01:00 |
|
|
Linus Rath
|
121d2d5e31
|
fix: stop buffering up to 100 MB of every unauthenticated request body before routing
|
2026-10-26 14:52:04 +01:00 |
|
|
Linus Rath
|
08969fde67
|
fix: stop reading a mail server's answer past a size limit in the JMAP, WebDAV, push preview and agenda routes
|
2026-10-26 14:52:04 +01:00 |
|
|
Linus Rath
|
07e6ecce1a
|
fix: show a plain new-mail notification instead of another login's message when two signed-in logins have the same account id
|
2026-10-26 14:52:04 +01:00 |
|
|
Linus Rath
|
885ecdaa07
|
fix: keep the server's path prefix in the CalDAV addresses shown in calendar settings
|
2026-10-26 14:52:04 +01:00 |
|
|
Linus Rath
|
fb793220b7
|
fix: keep plugin switches from shrinking next to long labels, like the app's settings switches
|
2026-10-26 14:52:04 +01:00 |
|
|
Linus Rath
|
e314e56661
|
fix: keep the own and a group's scheduled mail apart when their ids are the same
|
2026-10-26 12:26:58 +01:00 |
|
|
Linus Rath
|
d355e45b77
|
fix: stop Send now from dropping a group identity's delayed mail back into Drafts
|
2026-10-26 12:26:58 +01:00 |
|
|
Linus Rath
|
3508412b8b
|
fix: stop reply and send from slowing down on deeply nested quotes
|
2026-10-26 12:26:58 +01:00 |
|
|
Linus Rath
|
5b4db7f1d8
|
fix: keep emoji and organizer names with a colon intact in exported events
|
2026-10-26 12:25:32 +01:00 |
|
|
Linus Rath
|
7e0be4625a
|
test: copy a file the reworked demo drive still has in the mock server tests
|
2026-10-26 12:25:31 +01:00 |
|
|
Linus Rath
|
02e8541571
|
test: search the reworked demo calendar in the demo search tests
|
2026-10-26 12:25:31 +01:00 |
|
|
Linus Rath
|
88b960d605
|
fix: stop deleting the active account's mail after removing the account whose folder is open
|
2026-10-26 12:25:08 +01:00 |
|
|
Linus Rath
|
863aa81d1c
|
fix: stop a synced settings file from passing as an admin session
|
2026-10-26 11:48:39 +01:00 |
|
|
Linus Rath
|
30cb676fad
|
fix: write the admin config, password hash and setup token readable only by the app's own user
|
2026-10-26 11:48:38 +01:00 |
|
|
Linus Rath
|
3036769645
|
fix: let the allowed frame ancestors saved in the admin dashboard reach the frame-ancestors header
|
2026-10-26 11:48:38 +01:00 |
|
|
Linus Rath
|
a4c6d7867a
|
test: expect the plugin sandbox assets among the CORS-enabled static paths
|
2026-10-26 11:48:38 +01:00 |
|
|
Linus Rath
|
0f0ebc906b
|
fix: stop trusting the unprefixed sidebar-app frame cookie when COOKIE_SECURE=true (GHSA-cjm9-m826-mh78)
|
2026-10-26 11:48:38 +01:00 |
|
|
Linus Rath
|
fa3e76652f
|
fix: keep plugin credentials of a bare-name token sign-in under the account it resolved to
|
2026-10-26 11:36:57 +01:00 |
|
|
Linus Rath
|
5bd03d175d
|
fix: show all-day events on their own day in the Calendar Agenda for viewers west of the server's time zone
|
2026-10-26 11:33:38 +01:00 |
|
|
Linus Rath
|
b9fc9bc9c0
|
fix: stop synced settings from piling up a new file for every extra slash after the server address
|
2026-10-26 11:33:38 +01:00 |
|
|
Linus Rath
|
01a1dc47a6
|
fix: load push notification previews when the webmail reaches the mail server on an internal address
|
2026-10-26 11:33:37 +01:00 |
|
|
Linus Rath
|
1fc44b4813
|
fix: show the push notification for mail in an account shared into another signed-in login
|
2026-10-26 11:33:37 +01:00 |
|
|
Linus Rath
|
9ed3354550
|
fix: send a password and TOTP sign-in to the server the user typed, not the default one
|
2026-10-26 11:33:37 +01:00 |
|
|
Linus Rath
|
192d32819c
|
fix: stop a bare login name from claiming an address on another domain
|
2026-10-26 11:33:37 +01:00 |
|
|
Linus Rath
|
680742c3ef
|
fix: end a password and TOTP sign-in without remember me with the browser session
|
2026-10-26 11:33:37 +01:00 |
|
|
Linus Rath
|
ec0fed19cc
|
fix: stop reading a marketplace bundle download once it passes the package size limit
|
2026-10-26 11:29:37 +01:00 |
|
|
Linus Rath
|
e762943f7b
|
fix: let a plugin move a single message that is not in the open list
|
2026-10-26 11:29:37 +01:00 |
|
|
Linus Rath
|
8e66c9f6ad
|
fix: keep plugin approval requests that several users send at once
|
2026-10-26 11:29:37 +01:00 |
|
|
Linus Rath
|
c4a399f5b8
|
fix: stop plugin moves from filing another account's messages while its folder is open
|
2026-10-26 11:29:37 +01:00 |
|
|
Linus Rath
|
3f2f27321c
|
fix: keep an unquoted cid: image from swallowing the rest of the message
|
2026-10-26 11:22:10 +01:00 |
|
|
Linus Rath
|
afdd79b29d
|
fix: keep a mail full of bare blockquotes from freezing the reader
|
2026-10-26 11:22:10 +01:00 |
|
|
Linus Rath
|
3caa83f1a6
|
fix: download winmail.dat parts whose type a browser would drop instead of opening them
|
2026-10-26 11:22:10 +01:00 |
|