Commit Graph

  • 34ad859ce4 fix: refuse Undo and Send now for a delayed send of a signed-out account instead of acting through the active one Linus Rath 2026-10-26 15:41:32 +01:00
  • ceaa9cea39 fix: highlight only the open message in lists that mix accounts, not another account's message with the same id Linus Rath 2026-10-26 15:12:32 +01:00
  • 54b197080c fix: keep a discarded draft of a signed-out account instead of deleting another account's message with its id Linus Rath 2026-10-26 15:06:39 +01:00
  • 0b917d6262 fix: mark the replied, forwarded or receipted message as answered in its own account, not another account's message with the same id Linus Rath 2026-10-26 15:03:50 +01:00
  • ea6d414e5b fix: show the scheduled badge and its buttons only on the scheduled message, not on another account's message with the same id Linus Rath 2026-10-26 14:53:01 +01:00
  • acac3128bc fix: archive and delete a message from its own account's folders in tag and unified views Linus Rath 2026-10-26 14:46:44 +01:00
  • d72bff95f9 fix: stop acting on a message of a signed-out account through the active account Linus Rath 2026-10-26 14:37:55 +01:00
  • 87701c8c20 fix: keep the calendars shown or hidden in the Pro interface as the user set them Linus Rath 2026-10-26 15:08:58 +01:00
  • 7da326b86e fix: keep the server's path in the fallback CalDAV address Linus Rath 2026-10-26 14:55:47 +01:00
  • 2e9bb56071 fix: apply a subscribed calendar feed's changes to events it still carries Linus Rath 2026-10-26 14:39:58 +01:00
  • f0392a6705 fix: check a meeting reply's sender against the attendee who answers, not the organizer Linus Rath 2026-10-26 14:27:52 +01:00
  • e120ac6361 fix: let plugins read the message of the account they name, as ids repeat across accounts Linus Rath 2026-10-26 14:22:27 +01:00
  • f829d4a2e8 fix: ask the next user again before running plugins installed by someone who signed out Linus Rath 2026-10-26 14:14:44 +01:00
  • 8a3351bbc9 fix: refuse an oversized plugin approval upload before reading it Linus Rath 2026-10-26 14:09:40 +01:00
  • d29309ed0d fix: keep plugin embed origins out of the page CSP while plugins are turned off Linus Rath 2026-10-26 14:08:23 +01:00
  • 42117da498 fix: stop replaying a stored credential the mail server refused, so a stale session cannot get the webmail banned (GHSA-g6c7-r7wq-xrm2) Linus Rath 2026-10-26 14:55:04 +01:00
  • abef4224b5 fix: switch to the remaining account on sign-out instead of signing out of all when it was signed in before the page loaded Linus Rath 2026-10-26 14:54:24 +01:00
  • ae897b42a4 fix: make the impersonation handoff really clear the previous account list and ignore ?impersonated=1 links from elsewhere Linus Rath 2026-10-26 14:54:18 +01:00
  • f02e96b47a fix: stop the password and TOTP sign-in from re-posting the password to another host when the mail server redirects Linus Rath 2026-10-26 14:26:52 +01:00
  • b88397dfd2 fix: renew a background OAuth account with its own token instead of the active account's #989 Linus RathandAlmost-Senseless-Coder 2026-10-26 14:26:46 +01:00
  • 72faa57367 fix: keep the app files in the Docker image read-only for the user it runs as Linus Rath 2026-10-26 14:40:49 +01:00
  • eb2787bcc9 fix: end admin sessions on sign-out and when the admin password changes Linus Rath 2026-10-26 14:39:55 +01:00
  • 121d2d5e31 fix: stop buffering up to 100 MB of every unauthenticated request body before routing Linus Rath 2026-10-26 14:32:27 +01:00
  • 08969fde67 fix: stop reading a mail server's answer past a size limit in the JMAP, WebDAV, push preview and agenda routes Linus Rath 2026-10-26 14:22:08 +01:00
  • 07e6ecce1a fix: show a plain new-mail notification instead of another login's message when two signed-in logins have the same account id Linus Rath 2026-10-26 14:14:06 +01:00
  • 885ecdaa07 fix: keep the server's path prefix in the CalDAV addresses shown in calendar settings Linus Rath 2026-10-26 14:10:44 +01:00
  • f8c429f217 fix: re-prompt for a pasted session secret under 32 characters in setup.sh, which broke admin sign-in and remember-me Linus Rath 2026-10-26 14:09:11 +01:00
  • fb793220b7 fix: keep plugin switches from shrinking next to long labels, like the app's settings switches Linus Rath 2026-10-26 14:08:16 +01:00
  • ff3e088cbb fix: update undici to 7.30.1 for a decompression denial of service (GHSA-xjj6-f33q-929c) Linus Rath 2026-10-26 14:06:37 +01:00
  • e314e56661 fix: keep the own and a group's scheduled mail apart when their ids are the same Linus Rath 2026-10-26 12:06:32 +01:00
  • d355e45b77 fix: stop Send now from dropping a group identity's delayed mail back into Drafts Linus Rath 2026-10-26 11:44:10 +01:00
  • 3508412b8b fix: stop reply and send from slowing down on deeply nested quotes Linus Rath 2026-10-26 11:35:02 +01:00
  • 8c9cf8e63e test: check draft account and threading headers in createDraft's options after the merge Linus Rath 2026-10-26 11:32:26 +01:00
  • dcde570ebe fix: say the directory can't be browsed instead of that a refresh failed when the server lists only the people you know Linus Rath 2026-10-26 12:06:43 +01:00
  • 5b4db7f1d8 fix: keep emoji and organizer names with a colon intact in exported events Linus Rath 2026-10-26 12:02:17 +01:00
  • 292ccce9ee fix: delete, move and change groups of another signed-in account's contacts in that account Linus Rath 2026-10-26 11:59:06 +01:00
  • 4cfdc877d1 fix: keep a contact created in a shared address book from being mistaken for an own contact with the same id Linus Rath 2026-10-26 11:55:09 +01:00
  • b038c82dcc fix: only offer to apply a counter proposal sent by one of the meeting's participants Linus Rath 2026-10-26 11:46:09 +01:00
  • 82de3c8df1 fix: translate the strings Estonian was missing after the Stalwart 1.0 merge Linus Rath 2026-10-26 11:36:43 +01:00
  • 7e0be4625a test: copy a file the reworked demo drive still has in the mock server tests Linus Rath 2026-10-26 11:34:27 +01:00
  • 02e8541571 test: search the reworked demo calendar in the demo search tests Linus Rath 2026-10-26 11:33:44 +01:00
  • cd2bcc0520 fix: load the calendar range once, not twice, after creating a recurring event Linus Rath 2026-10-26 11:32:44 +01:00
  • 33c5ca8125 test: check bulk moves against the per-login routing Linus Rath 2026-10-26 12:18:05 +01:00
  • 72e5af2c52 fix: take a shared folder's Trash from the viewed folder list when bulk deleting Linus Rath 2026-10-26 12:18:04 +01:00
  • 88b960d605 fix: stop deleting the active account's mail after removing the account whose folder is open Linus Rath 2026-10-26 12:12:33 +01:00
  • eeb6ccc4db fix: create each account's Archive when bulk archiving in the unified inbox Linus Rath 2026-10-26 11:53:37 +01:00
  • 2f8c6e13bf feat: offer to restore the saved account list on a new device lucamzanon 2026-10-26 09:43:09 +01:00
  • e6c911899c fix: refuse a session secret under 32 characters in the setup wizard, which broke admin sign-in afterwards Linus Rath 2026-10-26 11:43:40 +01:00
  • 863aa81d1c fix: stop a synced settings file from passing as an admin session Linus Rath 2026-10-26 11:39:15 +01:00
  • 30cb676fad fix: write the admin config, password hash and setup token readable only by the app's own user Linus Rath 2026-10-26 11:37:12 +01:00
  • 3036769645 fix: let the allowed frame ancestors saved in the admin dashboard reach the frame-ancestors header Linus Rath 2026-10-26 11:34:13 +01:00
  • a4c6d7867a test: expect the plugin sandbox assets among the CORS-enabled static paths Linus Rath 2026-10-26 11:23:38 +01:00
  • 0f0ebc906b fix: stop trusting the unprefixed sidebar-app frame cookie when COOKIE_SECURE=true (GHSA-cjm9-m826-mh78) Linus Rath 2026-10-26 11:23:20 +01:00
  • fa3e76652f fix: keep plugin credentials of a bare-name token sign-in under the account it resolved to Linus Rath 2026-10-26 11:36:57 +01:00
  • 5bd03d175d fix: show all-day events on their own day in the Calendar Agenda for viewers west of the server's time zone Linus Rath 2026-10-26 11:25:13 +01:00
  • b9fc9bc9c0 fix: stop synced settings from piling up a new file for every extra slash after the server address Linus Rath 2026-10-26 11:15:26 +01:00
  • 01a1dc47a6 fix: load push notification previews when the webmail reaches the mail server on an internal address Linus Rath 2026-10-26 11:11:40 +01:00
  • 1fc44b4813 fix: show the push notification for mail in an account shared into another signed-in login Linus Rath 2026-10-26 11:08:20 +01:00
  • 9ed3354550 fix: send a password and TOTP sign-in to the server the user typed, not the default one Linus Rath 2026-10-26 11:18:31 +01:00
  • f9ccc6adf1 fix: clear the refresh token of an OAuth account that could not be restored Linus Rath 2026-10-26 11:13:55 +01:00
  • 192d32819c fix: stop a bare login name from claiming an address on another domain Linus Rath 2026-10-26 11:11:39 +01:00
  • 680742c3ef fix: end a password and TOTP sign-in without remember me with the browser session Linus Rath 2026-10-26 11:08:44 +01:00
  • ec0fed19cc fix: stop reading a marketplace bundle download once it passes the package size limit Linus Rath 2026-10-26 11:15:27 +01:00
  • e762943f7b fix: let a plugin move a single message that is not in the open list Linus Rath 2026-10-26 11:13:30 +01:00
  • 8e66c9f6ad fix: keep plugin approval requests that several users send at once Linus Rath 2026-10-26 11:06:38 +01:00
  • c4a399f5b8 fix: stop plugin moves from filing another account's messages while its folder is open Linus Rath 2026-10-26 11:04:19 +01:00
  • cb51847ab3 fix: refuse plugin approval requests while user plugins or their review are turned off (GHSA-qc44-275p-gqw9) Linus Rath 2026-10-26 10:48:03 +01:00
  • b5c6b67ba4 fix: keep a link in a printed message from redirecting the webmail tab Linus Rath 2026-10-26 11:10:48 +01:00
  • 3f2f27321c fix: keep an unquoted cid: image from swallowing the rest of the message Linus Rath 2026-10-26 11:08:33 +01:00
  • 6014142358 fix: show conversation and attached-message attachment names without directional override characters Linus Rath 2026-10-26 11:06:19 +01:00
  • c133659c83 fix: run links in conversation messages through the reader's link gate Linus Rath 2026-10-26 11:03:15 +01:00
  • afdd79b29d fix: keep a mail full of bare blockquotes from freezing the reader Linus Rath 2026-10-26 11:00:26 +01:00
  • 3caa83f1a6 fix: download winmail.dat parts whose type a browser would drop instead of opening them Linus Rath 2026-10-26 10:53:45 +01:00
  • d76a472022 Merge branch 'feat/stalwart-1.0' Linus Rath 2026-10-26 10:14:20 +01:00
  • cf2c27157d Merge branch 'main' into feat/stalwart-1.0 Linus Rath 2026-10-26 10:14:12 +01:00
  • 52bdc9fb16 fix: honor full-height app page slots yontani 2026-10-26 13:28:57 +09:00
  • 5430b9e446 fix: honor borderless Outlook-style HTML quotes Max Hao 2026-10-25 22:22:41 -04:00
  • fc438c275f feat: open the message a plugin's search result names Jacob ZeitzandClaude Opus 5.5 2026-10-25 08:46:58 +01:00
  • d02988f431 feat: show the results plugins provide through onProvideSearchResults Jacob ZeitzandClaude Opus 5.5 2026-10-25 07:32:11 +01:00
  • 4a130bc1f9 feat: let plugins show a count on their buttons Jacob Zeitz 2026-10-25 14:36:01 +01:00
  • 7845b2caea fix: place calendar events at their clock time on DST change days Linus Rath 2026-10-25 14:17:59 +01:00
  • 3bfba19ca5 fix: give Mountain View's list chips Gmail's height and spacing Linus Rath 2026-10-25 13:14:24 +01:00
  • f7a4087c91 feat: split the Mountain View inbox into Unread and Everything else, as Gmail's unread first Linus Rath 2026-10-25 13:13:46 +01:00
  • e31f55064e fix: use the current calendar and contacts icons in the Mountain View side panel Linus Rath 2026-10-25 12:56:48 +01:00
  • cb663d2222 fix: keep settings switches full width next to long labels Linus Rath 2026-10-25 12:49:55 +01:00
  • 0b1463b7d5 feat: show attachment and code chips as Gmail pills in Mountain View Linus Rath 2026-10-25 12:48:49 +01:00
  • 39c8b14574 fix: open the admin panel in the desktop layout without a phone-layout flash Linus Rath 2026-10-25 12:42:02 +01:00
  • 5a9c318ec5 fix: keep mails that paint their own page background from flashing white in dark mode Linus Rath 2026-10-25 12:39:28 +01:00
  • 07627b3a60 fix: give every app's sidebar header and toolbar the same height as mail Linus Rath 2026-10-25 12:30:23 +01:00
  • 9c360694bf fix: send paragraphs with the spacing the composer shows #1340 Linus Rath 2026-10-25 12:27:13 +01:00
  • 171fd1ea4c perf: load React DOM and the UI kit only in plugin frames that draw Linus Rath 2026-10-25 02:56:14 +01:00
  • a7cfa5b160 fix: rebuild the plugin sandbox while npm run dev runs, and build it for the integration image Linus Rath 2026-10-25 02:26:18 +01:00
  • f20892ccec fix: start plugins when the sign-in races the first plugin start Linus Rath 2026-10-25 02:24:41 +01:00
  • 5edbbf0816 perf: start plugin slot frames without waiting for the plugin's own frame Linus Rath 2026-10-25 02:23:20 +01:00
  • e38e326efb perf: load plugin frames as a plain page instead of a Next app Linus Rath 2026-10-25 02:01:47 +01:00
  • 6be0f70452 perf: skip plugin round trips when a slot re-renders with the same props Linus Rath 2026-10-25 02:40:43 +02:00
  • 181a0d7d88 perf: send plugin frames only the translations of the current language Linus Rath 2026-10-25 02:26:17 +02:00
  • 52959e8135 fix: stop plugin panels flashing white in the dark theme Linus Rath 2026-10-25 02:22:59 +02:00
  • c066d40180 perf: check cached plugin bundles without reading them, and download in parallel Linus Rath 2026-10-25 02:18:18 +02:00
  • be8adde945 perf: fetch the server plugin list once per page load Linus Rath 2026-10-25 02:15:13 +02:00