amorfo77/sogo
1
0
Fork 0
mirror of https://github.com/inverse-inc/sogo.git synced 2026-08-29 02:07:36 +00:00
Code Issues Projects Releases Wiki Activity
17,613 Commits 51 Branches 147 Tags
045a0b9c0ac57aeea1b619f281acff0427cd81c7
Commit Graph
89 Commits
Author SHA1 Message Date
Jan Kahmen 045a0b9c0a fix(mail): escape mail data placed in attributes of a compiled part 
the generic attribute writer used for these two spots does not escape what it
writes, so a value taken from the message ends the attribute and starts a new
one. both are inside a part that is compiled, which is where an injected
handler runs.

* the organizer link took inEvent.organizer.email verbatim. a value such as
  mailto:x@y" onpointerover="... produced a live handler on the anchor, and an
  entity encoded scheme such as javascript: reached the href, where the
  browser decodes it. the href is now built as mailto: plus the parsed address
  and escaped as an attribute value.

* the attachment name paragraph of the image and the link viewer took
  filenameForDisplay verbatim. a quote inside an RFC 2231 encoded filename
  ended the title attribute. the writer escapes & < > there but not the quote,
  so the accessor drops the quote instead of escaping it, which keeps a plain
  filename such as A&B.pdf unchanged in the tooltip.

the img title of the image viewer is left alone: attributes of that element are
escaped by the framework already.
 2026-08-17 23:48:41 +02:00
Jan Kahmen 0d66d7503d fix(mail): stop interpreting iMIP card text fields as markup 
the whole server built html of an iMIP card is rendered through sg-compile
(Message.service.js sets part.compile for UIxMailPartICalViewer), and the user
comment and the description are emitted with escapeHTML="NO". event data from
the invitation is therefore both an angular template and raw html.

47133fdf3 closed the description against interpolation with ng-non-bindable.
this closes both paths for every remaining field:

* ng-non-bindable on the user comment, the location, the organizer common name
  and the raw body shown when the calendar cannot be parsed
* the user comment and the description are read through accessors that escape
  them, so the url detection and insertBR produce the only markup left in the
  output

the marker sits on the leaf containers, not on md-card-content, so the buttons,
the delegation autocomplete and the attendee chips keep being compiled. url
detection still turns a bare url in a comment or a description into a link.
 2026-08-17 23:03:41 +02:00
Hivert Quentin 47133fdf3b fix(mail): escape angularJS directive for description 2026-08-10 19:34:25 +02:00
smizrahi 591d283425 feat(mail): Add location in email ics representation template 2024-06-10 16:35:49 +02:00
Francis Lachapelle ff1eecaf5a fix(mail): show comment attribute of iTIP replies 
Fixes #5410
 2021-11-22 16:20:56 -05:00
Francis Lachapelle 56f9e3e398 fix(mail(js)): allow to add any event invitation 2021-08-25 16:53:40 -04:00
Francis LachapelleandGitHub 045f134321 feat(mail): initial support for ms-tnef (winmail.dat) body part 
Fixes #2242
Fixes #4503
 2021-08-13 11:12:37 -04:00
Francis Lachapelle 40b570cc12 fix(mail): don't render SVG attachments 
Fix #5371
 2021-08-03 16:26:49 -04:00
Francis Lachapelle 2771fe180e fix(mail(html)): format links in comment of Calendar invitations 2021-06-21 12:16:17 -04:00
Francis Lachapelle 088764a3f7 fix(mail(css)): improve visibility of buttons in invitations 
Fixes #5263
 2021-03-02 14:01:15 -05:00
Francis Lachapelle 3cddb54e4e (js) Apply SOGoSearchMinimumWordLength everywhere 
Fixes #4811
 2019-09-18 14:02:21 -04:00
Ludovic Marcotte 879e7a6cd5 (fix) added missing template 2017-12-24 06:49:22 -05:00
Francis Lachapelle 555b7303d1 (js) New images viewer for Mail module 2017-05-29 14:03:59 -04:00
Francis Lachapelle 634cbe3d1b (js) Support SOGoLDAPContactInfoAttrbute 2017-04-24 16:15:39 -04:00
Francis Lachapelle 3bbd61cfd2 (js) Improve sgAvatarImage 2016-11-11 16:46:55 -05:00
Ludovic Marcotte c1c2b3e849 (fix) only show the organizer field of an IMIP REPLY if one is defined 2016-10-19 10:08:34 -04:00
Francis Lachapelle 8cc0b946e7 Fix handling of attendees when updating an event 2016-06-17 15:25:57 -04:00
Francis Lachapelle 8bee076135 Minor HTML improvements 2016-05-26 15:04:42 -04:00
Ludovic Marcotte 6d18db5499 (fix) don't show attendees if there are none (like in cancelation emails) 2016-03-15 08:44:07 -04:00
Francis Lachapelle 4dcf5792c7 (html) Improve display of inline messages 2016-03-11 14:29:29 -05:00
Francis Lachapelle ff1dc9c82d (html) Wrap invitation in a md-card 2016-02-01 16:06:34 -05:00
Francis Lachapelle 609c5aabf7 (html) Improve display of attachments 2016-01-06 12:30:34 -05:00
Francis Lachapelle 0bbdd01025 (html,css) Improve display of mail attachments 
Added extension of file in a small frame
 2016-01-06 12:24:34 -05:00
Francis Lachapelle 8635eab502 Improve display of message attachments 
Images are now "zoomable" by clicking on them.
 2015-12-02 14:03:10 -05:00
Ludovic Marcotte 6d29e50f22 (fix) replace .md-actions with md-dialog-actions 2015-11-27 13:00:39 -05:00
Francis Lachapelle 44158af057 (html) Fix display of avatars in invitation mails 2015-09-11 11:56:26 -04:00
Ludovic Marcotte fcd0140ffd Revert "(fix) by default, open links in new tab/window from html mails" 
This reverts commit 869b3c4cd1.
 2015-08-18 14:52:47 -04:00
Ludovic Marcotte 869b3c4cd1 (fix) by default, open links in new tab/window from html mails 2015-08-18 11:13:27 -04:00
Ludovic Marcotte 2da2937391 (fix) formatting improvements 2015-08-18 11:01:59 -04:00
Ludovic Marcotte d28fccf71e (fix) open attachment in new window 2015-08-10 23:14:40 -04:00
Ludovic Marcotte ad9b969d6d (fix) avoid displaying the chips line 2015-08-07 21:14:17 -04:00
Ludovic Marcotte 704307e6d6 (feat) pimped the mail part viewers 2015-08-07 20:38:26 -04:00
Ludovic Marcotte 15a5ab0b12 (fix) added tooltip for consistency 2015-08-07 13:46:01 -04:00
Luc Charland 923ab97309 Added tooltips for saving/view attachments 2015-08-05 10:05:21 -04:00
Ludovic Marcotte a27f106a4a (fix) pimped ical viewer 2015-08-04 13:52:31 -04:00
Ludovic Marcotte 16885f4ebf (fix) properly handle subparts compilation for message/rfc822 message parts 2015-07-29 15:37:55 -04:00
Francis Lachapelle 2337d4057f Integrate md-icon using the Material Icons font 2015-07-03 21:42:21 -04:00
Francis Lachapelle 1d1f7445cb (html) Remove upper div from image part viewer 2015-06-12 12:05:06 -04:00
Ludovic MarcotteandFrancis Lachapelle 8124faa6d4 (feat) "Materialization" of the IMIP handling template 2015-06-12 12:03:59 -04:00
Ludovic MarcotteandFrancis Lachapelle 4f75499439 (fix) Materalized link and image templates 2015-06-12 12:03:57 -04:00
Francis Lachapelle bed57af015 Improve display of linked attachments 2013-12-20 16:18:19 -05:00
Francis Lachapelle a8e3418a4c Use the UIxMailSizeFormatter in messages listing 2013-12-18 22:18:08 -05:00
Francis Lachapelle f07526423f Fix display of ICal event in message 2013-11-06 15:25:36 -05:00
Ludovic Marcotte 84e999229b Fix for bug #2270 2013-09-27 15:36:46 -04:00
Francis Lachapelle 96f023d108 Mail: Improve iCal viewer 2012-11-29 14:00:10 -05:00
Wolfgang Sourdeau 007a325164 Do not show any signature verification icon at all when SMIME is not supported 2012-10-23 10:52:58 -04:00
Francis Lachapelle ad76ca2d8b Minor change the UIxMailPartICalViewer template. 
Monotone-Parent: bdac9c079f5f6f8a742d138d4a5f9d41043ae013
Monotone-Revision: fe351629b595bd5c5cd4b03a129c97d14d342fc7

Monotone-Author: flachapelle@inverse.ca
Monotone-Date: 2010-07-27T18:42:12
Monotone-Branch: ca.inverse.sogo
 2010-07-27 18:42:12 +00:00
Wolfgang Sourdeau 2bf4b7cf8b Monotone-Parent: 1ccd34fd9ea99e675935d745db7e70d19716428a 
Monotone-Revision: c40151185171e3ba8a257569b8ab5ec86930d393

Monotone-Author: wsourdeau@inverse.ca
Monotone-Date: 2010-05-05T14:40:53
Monotone-Branch: ca.inverse.sogo
 2010-05-05 14:40:53 +00:00
Ludovic Marcotte 84b7582e03 See ChangeLog 
Monotone-Parent: 15a323395e06e9dba494ab7c7ad2871d2e95bdd4
Monotone-Revision: 048651c03289ee8aea9a9d3d3088a91e534dbe5b

Monotone-Author: ludovic@Sophos.ca
Monotone-Date: 2009-12-22T22:45:37
Monotone-Branch: ca.inverse.sogo
 2009-12-22 22:45:37 +00:00
Francis Lachapelle 468073b131 Major refresh of CSS stylesheets. 
Monotone-Parent: 508bbe52515b0ad7119c755b4cc91d17e313c06b
Monotone-Revision: d09001490c2d88332ef3ec446bfd0aa488d0de8c

Monotone-Author: flachapelle@inverse.ca
Monotone-Date: 2009-11-04T22:13:20
Monotone-Branch: ca.inverse.sogo
 2009-11-04 22:13:20 +00:00