webmail

mirror of https://github.com/bulwarkmail/webmail.git synced 2026-10-31 08:13:50 +00:00

Files

T

Linus Rath 6c4acdc655 fix: prevent browser auth dialog when viewing emails with inline images

Inline CID images were replaced with raw JMAP download URLs that require authentication. When the browser loaded these as <img src>, the server responded with WWW-Authenticate: Basic, triggering a native login popup.

- Add fetchBlobAsObjectUrl() to JMAPClient that fetches blobs via authenticated request and returns blob: object URLs
- Update email-viewer and thread-conversation-view to fetch CID images asynchronously with auth, using blob: URLs instead of raw server URLs
- Add ALLOWED_URI_REGEXP to DOMPurify config so blob: URLs are not stripped during sanitization
- Add tests for fetchBlobAsObjectUrl and CID/blob URL sanitization

2026-03-14 13:39:56 +01:00

calendar

feat: implement hover functionality for calendar events and enhance email deletion confirmation

2026-03-12 19:53:08 +01:00

contacts

feat: enhance contact management and vCard support

2026-03-12 15:54:09 +01:00

fix: prevent browser auth dialog when viewing emails with inline images

2026-03-14 13:39:56 +01:00

error

Initial release: JMAP Webmail Client

2025-12-10 17:54:22 +01:00