Commit Graph

1753 Commits

Author SHA1 Message Date
smizrahi 1e0f5f0089 fix(security): Security fix for WSTG-INPV-02. Add XSS protection on folders and mail title / content 2022-11-22 10:09:41 +01:00
smizrahi dcbfd830d4 fix(security): Security fix for WSTG-INPV-02. Add XSS protection on folders and mail title / content. Fix build issue in ubuntu trusty. 2022-11-18 09:16:40 +01:00
smizrahi 714acfc838 fix(security): Security fix for WSTG-INPV-02. Add XSS protection on folders and mail title / content 2022-11-14 14:36:46 +01:00
smizrahi d50080ea5b feat(password-recovery): Add LDAP password recovery 2022-10-16 14:46:19 +02:00
smizrahi cddfdb90f9 feat(calendar): Add SOGoDisableOrganizerEventCheck parameter - this parameter is used to avoid checking calendar event's organizer 2022-10-05 22:12:14 +02:00
smizrahi c4dd695b12 feat(password-recovery): Fix dictionary with nil value issue. Changed parameter to SOGoPasswordRecoveryEnabled 2022-10-04 18:22:57 +02:00
Le Programmeur d5ad0ddf5d Merge pull request #324 from the-nic/fix-5416
(fix) NSString+Utilities: Fix safeStringByEscapingXMLString on gnuste…
2022-10-04 09:45:45 +02:00
smizrahi 2e1b22cb23 feat(password-recovery): Fix build issue 2022-10-03 13:45:10 +02:00
smizrahi 656807b77d feat(password-recovery): Add password recovery with secret question or secondary email 2022-10-03 08:56:41 +02:00
Nicolas Höft 3b3e0195b1 (fix) NSString+Utilities: Fix safeStringByEscapingXMLString on gnustep-base-1.28
Newer gnustep version would add a byte-order-mark on
NSString:dataUsingEncoding:NSUTF32StringEncoding, use NSUTF32LittleEndianStringEncoding
instead to skip the BOM.

Fixes #5416
2022-08-15 17:06:00 +02:00
Francis Lachapelle 95eecc402a fix(dav): return 405 when collection already exists
See https://datatracker.ietf.org/doc/html/rfc4918#section-9.3.1
2022-08-09 12:17:55 -04:00
Le Programmeur 5e6ad77d4c fix(i18n): new localized strings for SQL-based password policies 2022-07-26 12:22:53 -04:00
adetk d1971b76e2 i18n(kk): Add Kazakh translation by Nazym Idrissova 2022-07-25 07:39:28 -04:00
Francis Lachapelle adfd175681 fix(preferences): regex in Sieve scripts are now case sensitive
Fixes #5561
2022-07-22 16:45:47 -04:00
Francis Lachapelle 0720dc44fd fix(addressbook(dav)): improve handling of addressbook-query 2022-07-13 16:46:00 -04:00
Francis Lachapelle 2f9f610210 fix(core): handle argon2i password scheme
Fixes #5531
2022-07-05 12:42:57 -04:00
Francis Lachapelle 580a73c857 fix(mail): add default label & color for $forwarded flag
Fixes #5534
2022-06-10 08:25:54 -04:00
Francis Lachapelle 2ef849ca65 feat(preferences): password constraints for SQL sources
Initial implementation of some password policy support for SQL sources.
2022-06-06 16:39:26 -04:00
Francis Lachapelle 2aaad3de22 perf(tool): cache IMAP delimiters when updating sieve filters 2022-05-27 10:16:22 -04:00
Francis Lachapelle c87ce46d29 perf(tool): cache IMAP delimiters when updating sieve filters 2022-05-26 09:25:42 -04:00
Francis Lachapelle 373ac51e62 fix(core): don't auto-remove a subscription if any source is in error 2022-05-11 16:29:49 -04:00
Francis Lachapelle 8ed4fc88b5 feat(mail): always forward incoming messages, before all filters
This new "Always forward" checkbox allows the user to forward incoming
messages before evaluating the other filters, if any. When unchecked,
the "redirect" directive is executed after all filters; if a filter
stops evaluating the remaining rules, the message won't be forwarded.
2022-04-06 15:43:07 -04:00
Francis Lachapelle 6d50dee063 fix(core): encode reserved HTML characters in RTF parser
Fixes #5388
2022-03-29 10:44:35 -04:00
Francis Lachapelle a5d18bfced fix(core): improve escaping of double-quotes
Fixes #5351
2022-03-29 10:39:09 -04:00
Francis Lachapelle 3140a9dc1d fix(acls): fix SQL conversion for LIKE operator to find groups
Fixes #5492
2022-03-28 13:50:03 -04:00
Francis Lachapelle fbd2eb8294 fix(calendar): rely on organizer's event state before updating attendee
When an attendee is adding a new event for which the organizer is local
but doesn't have the event anymore, return a 412 error code.

Fixes #5496
2022-03-24 15:31:39 -04:00
Francis Lachapelle b37e68b8ee fix(dav): use utf-8 as charset name instead of utf8
Fixes #5495
2022-03-22 10:41:31 -04:00
Francis Lachapelle a965f276c8 fix(web): support passwords up to 2048 characters
Fixes #5485
2022-03-08 16:34:38 -05:00
Francis Lachapelle 8409c3cbb5 fix(addressbook(dav)): add support for mail property in addressbook-query
Fixes #5489
2022-03-04 08:29:03 -05:00
Francis Lachapelle 7faab9117a fix(addressbook(dav)): improve handling of addressbook-query 2022-02-28 17:07:39 -05:00
Francis Lachapelle a98b404551 fix(imap): use proxy authentication to detect IMAP delimiter
Fixes #5479
2022-02-17 10:09:37 -05:00
Francis Lachapelle c986422a3d feat(mail(web)): Templates folder for pre-defined drafts
To create a template, the user needs to:

 - define a mailbox as the Templates folder;
 - move a draft to this special folder.

Fixes #4320
Fixes #5363
2022-02-11 10:06:57 -05:00
Francis Lachapelle 3847b57855 fix(mail): fix type of SOGoMailComposeFontSize defaults 2022-02-09 22:26:11 -05:00
Francis Lachapelle 0c5a2691b0 fix(calendar): handle DST change for all-day events 2022-02-01 17:30:26 -05:00
Francis Lachapelle 96bb8b4cc2 fix(dav): render DAV exceptions as XML 2022-02-01 14:20:32 -05:00
Francis Lachapelle 348a79c795 fix(addressbook): close DB connection after DAV query 2022-02-01 10:14:37 -05:00
Francis Lachapelle 7c81e3acec fix(core): only escape "%" with the SQL LIKE operator 2022-01-31 14:53:58 -05:00
Francis Lachapelle 2e58ddfae3 fix(dav): render DAV exceptions as XML 2022-01-27 13:05:24 -05:00
Francis Lachapelle b061046992 fix(calendar(dav)): add DAV:status to DAV:response only when deleted
Fixes #5163
2022-01-21 14:47:32 -05:00
Francis Lachapelle 969d68dbb6 fix(core): remove trailing closing angle bracket from detected URLs
Fixes #5465
2022-01-21 11:07:00 -05:00
Francis Lachapelle b967eac1f3 fix(core): remove trailing closing angle bracket from detected URLs
Fixes #5465
2022-01-17 16:43:11 -05:00
tfux c75ac6c321 fix(core): fix compilation warning in SOGoCacheGCSObject 2022-01-17 07:58:15 -05:00
Francis Lachapelle 368360bb95 fix(addressbook): respect visible domains when fetching contact
Fixes #4896
2022-01-11 16:40:53 -05:00
Francis Lachapelle 07b4ad6c72 i18n(bs_BA): add Bosnian translation 2022-01-05 17:33:55 -05:00
Francis Lachapelle f1912310db fix(preferences): add plus sign to timezone in Sieve script
Fixes #5448
2021-12-16 09:40:52 -05:00
Francis Lachapelle 2daeab3dd7 fix(preferences): add plus sign to timezone in Sieve script
Fixes #5448
2021-12-16 09:14:37 -05:00
Francis Lachapelle 153c1eeb80 fix(core): avoid exception when the user's cn is null 2021-12-09 10:03:59 -05:00
Francis Lachapelle 4eed98d58d feat(mail): delay or disable automatic mark message as read
Fixes #1585
2021-12-07 09:55:13 -05:00
Francis Lachapelle 2ecd441f32 feat(mail): enable autoreply on specific days or at a specific time
Fixes #5328
2021-12-02 14:20:47 -05:00
Francis Lachapelle 1ccfa865bb fix(calendar): send modification notifications for tasks 2021-10-25 15:27:01 -04:00