Michael Kuron dfc99fb265 Escape generated password in mobileconfig ...

Escape ampersand, less than, greater than to avoid generating invalid XML.

Fixes #7171

2026-05-02 16:24:01 +02:00

..

admin

[Web] Add forced 2FA setup and password update enforcement

2026-02-24 10:44:33 +01:00

api

Add endpoint for editing quarantine mails

2026-02-03 21:31:32 +00:00

css

[Web] Use absolute paths for flag SVGs

2025-03-26 10:59:56 +01:00

domainadmin

[Web] Add forced 2FA setup and password update enforcement

2026-02-24 10:44:33 +01:00

fonts

[Web] remove remote Google fonts from lumen theme

2023-01-06 09:11:51 +01:00

img

[BS5] add light and dark rspamd logo

2022-07-08 11:27:34 +02:00

inc

[Web][Dovecot] Add parameterized queries and input validation for quarantine_category

2026-03-29 12:08:45 +02:00

js

escape HTML in autodiscover logs

2026-03-19 12:44:50 +01:00

lang

Translations update from Weblate (#7190)

2026-04-11 21:25:03 +02:00

oauth

[Web] oauth authorize - added missing twig templating

2021-10-22 14:37:26 +02:00

templates

Improve template URI escaping and parameter handling

2026-03-19 12:48:43 +01:00

_rspamderror.php

Enable password protection for Redis

2024-11-19 14:25:31 +01:00

_status.502.html

mailcow.github.io -> docs.mailcow.email

2023-09-27 18:34:53 +02:00

autoconfig.php

Fixes issue #6489

2025-12-21 16:56:16 +01:00

autodiscover-json.php

[Web] Fix potential XSS in autodiscover-json.php

2021-09-07 18:58:05 +02:00

autodiscover.php

[Web] Add fail2ban logging to passwordless autodiscover endpoint

2026-03-03 13:24:44 +01:00

edit.php

[Web] Add forced 2FA setup and password update enforcement

2026-02-24 10:44:33 +01:00

f2b-banlist.php

[Web] remove f2b banlist from json_api.php

2024-11-19 14:13:37 +01:00

favicon.png

fixed favicon.png (#6570)

2025-08-06 09:42:43 +02:00

index.php

[Web] Add forced 2FA setup and password update enforcement

2026-02-24 10:44:33 +01:00

json_api.php

Merge pull request #7089 from mailcow/fix/7039

2026-03-03 15:07:17 +01:00

mobileconfig.php

Escape generated password in mobileconfig

2026-05-02 16:24:01 +02:00

mta-sts.php

Add MTA-STS support for alias domains (#6972)

2025-12-15 16:29:21 +01:00

qhandler.php

[Web] qhandler - added missing twig templating

2021-10-22 08:52:05 +02:00

quarantine.php

[BS5] Replace FooTable with jquery Datatables

2022-05-19 15:06:18 +02:00

reset-password.php

[Web] Fix password reset

2025-04-01 16:39:15 +02:00

resource.php

[Web] Fix resource.php and /cache/ warning message

2022-03-20 22:05:28 +01:00

robots.txt

mailcow dockerized

2016-12-09 20:39:02 +01:00

sogo-auth.php

[Web] Add forced 2FA setup and password update enforcement

2026-02-24 10:44:33 +01:00

user.php

[Web] Add forced 2FA setup and password update enforcement

2026-02-24 10:44:33 +01:00