Linus Rath c20527cc29 fix: block remote content in the .eml attachment preview ...

An attached `.eml` was sanitized and shown in a locked sandbox iframe,
but its remote images still loaded, with no CSP, whatever the user's
remote-content policy said. The preview now uses the viewer's
`sanitizeEmailBodyForIframe` and the strict iframe CSP unless the policy
is `allow`, and sends no referrer.

2026-09-26 14:50:22 +02:00

..

__tests__

feat(pwa): badge the installed app icon with unread count (Badging API)

2026-09-03 11:37:36 +05:00

auth

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00

calendar

fix: explain why calendar subscriptions fail with not authenticated #1073

2026-09-23 18:31:27 +02:00

connector

feat: resolve deep links to the local instance

2026-09-20 19:59:37 +02:00

contacts

chore: remove unused files and dependencies

2026-09-22 19:36:33 +02:00

email

fix: block remote content in the mobile conversation view

2026-09-26 14:45:20 +02:00

error

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00

files

fix: block remote content in the .eml attachment preview

2026-09-26 14:50:22 +02:00

filters

fix: stop folder rules from pulling spam out of Junk

2026-09-22 20:14:42 +02:00

global-search

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00

icons

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00

identity

fix: sign in and show addresses on internationalized domains #1100

2026-09-24 21:15:22 +02:00

impersonation

fix(impersonation): reconcile stale persisted account chip after handoff

2026-07-27 05:20:53 +03:00

layout

fix: sign in and show addresses on internationalized domains #1100

2026-09-24 21:15:22 +02:00

mail

fix: keep a folder from switching back to the unified inbox while it loads #1102

2026-09-26 12:41:13 +02:00

plugins

chore: remove unused files and dependencies

2026-09-22 19:36:33 +02:00

pro

Merge pull request #1013 from lucamzanon/fix/cross-account-thread-key

2026-09-21 22:33:26 +02:00

protocol

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00

providers

feat: OAuth handler for plugins; extended contacts and addressbook API

2026-08-31 09:55:06 +02:00

search

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00

settings

fix: translate the themes settings panel

2026-09-26 12:54:30 +02:00

templates

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00

tour

feat: add option to disable calendar

2026-06-24 18:39:38 +02:00

ui

fix: show what a mailto unsubscribe sends and limit it to one recipient

2026-09-26 14:41:14 +02:00

favicon-badge.tsx

feat(pwa): badge the installed app icon with unread count (Badging API)

2026-09-03 11:37:36 +05:00

keyboard-shortcuts-modal.tsx

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00

push-notification-prompt.tsx

feat(notifications): add toggleable inbox-only push notifications ✨

2026-09-23 11:07:58 +12:00

pwa-install-prompt.tsx

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00

service-worker-registration.tsx

feat: add Bulwark Lite static export build

2026-09-17 23:54:33 +02:00

theme-color-sync.tsx

fix: sync PWA title bar colour with the active theme #671

2026-08-06 18:23:21 +02:00

totp-reauth-dialog.tsx

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00

trusted-senders-modal.tsx

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00