Linus Rath c20527cc29 fix: block remote content in the .eml attachment preview ...

An attached `.eml` was sanitized and shown in a locked sandbox iframe,
but its remote images still loaded, with no CSP, whatever the user's
remote-content policy said. The preview now uses the viewer's
`sanitizeEmailBodyForIframe` and the strict iframe CSP unless the policy
is `allow`, and sends no referrer.

2026-09-26 14:50:22 +02:00

..

__tests__

fix: block remote content in the .eml attachment preview

2026-09-26 14:50:22 +02:00

eml-preview.tsx

fix: block remote content in the .eml attachment preview

2026-09-26 14:50:22 +02:00

file-browser.tsx

fix: handle the file names and types Stalwart refuses

2026-09-22 20:54:01 +02:00

file-preview-modal.tsx

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00

file-upload-area.tsx

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00

files-app.tsx

feat: open office attachments in mail read-only in the document editor #1047

2026-09-23 19:01:47 +02:00

files-settings-dialog.tsx

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00

folder-tree-sidebar.tsx

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00

image-preview-modal.tsx

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00

new-folder-dialog.tsx

fix: handle the file names and types Stalwart refuses

2026-09-22 20:54:01 +02:00

pdf-mobile-viewer.tsx

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00

rename-dialog.tsx

fix: handle the file names and types Stalwart refuses

2026-09-22 20:54:01 +02:00

wopi-editor.tsx

feat: open office attachments in mail read-only in the document editor #1047

2026-09-23 19:01:47 +02:00