smizrahi
6971ebd2d1
fix(security): Security fix for WSTG-INPV-02. Fix assertion on NSRange
2022-11-29 17:34:34 +01:00
smizrahi
27860648c1
fix(core): Fix NSException when c_content is NULL. Closes #5644 . Original fix by @jvdsn.
2022-11-23 14:25:15 +01:00
smizrahi
d3634747d5
feat(password-recovery): Change secondary email obfuscation
2022-11-23 10:06:43 +01:00
smizrahi
b1f84891b0
fix(security): Security fix for WSTG-INPV-02. Add unit test.
2022-11-23 09:34:54 +01:00
smizrahi
f5c6fcc350
fix(security): Security fix for WSTG-INPV-02. Fix build issue in ubuntu trusty
2022-11-22 17:37:15 +01:00
smizrahi
c62b043e26
fix(addressbook): Fix NSException on address book where uppercaseString is called on data
2022-11-22 15:12:58 +01:00
smizrahi
efac49ae91
fix(security): Security fix for WSTG-INPV-02. Add XSS protection on identity fullName. Fixes #5642 .
2022-11-22 10:54:06 +01:00
smizrahi
1e0f5f0089
fix(security): Security fix for WSTG-INPV-02. Add XSS protection on folders and mail title / content
2022-11-22 10:09:41 +01:00
smizrahi
dcbfd830d4
fix(security): Security fix for WSTG-INPV-02. Add XSS protection on folders and mail title / content. Fix build issue in ubuntu trusty.
2022-11-18 09:16:40 +01:00
smizrahi
714acfc838
fix(security): Security fix for WSTG-INPV-02. Add XSS protection on folders and mail title / content
2022-11-14 14:36:46 +01:00
smizrahi
d50080ea5b
feat(password-recovery): Add LDAP password recovery
2022-10-16 14:46:19 +02:00
smizrahi
cddfdb90f9
feat(calendar): Add SOGoDisableOrganizerEventCheck parameter - this parameter is used to avoid checking calendar event's organizer
2022-10-05 22:12:14 +02:00
smizrahi
c4dd695b12
feat(password-recovery): Fix dictionary with nil value issue. Changed parameter to SOGoPasswordRecoveryEnabled
2022-10-04 18:22:57 +02:00
Le Programmeur
d5ad0ddf5d
Merge pull request #324 from the-nic/fix-5416
...
(fix) NSString+Utilities: Fix safeStringByEscapingXMLString on gnuste…
2022-10-04 09:45:45 +02:00
smizrahi
2e1b22cb23
feat(password-recovery): Fix build issue
2022-10-03 13:45:10 +02:00
smizrahi
656807b77d
feat(password-recovery): Add password recovery with secret question or secondary email
2022-10-03 08:56:41 +02:00
Nicolas Höft
3b3e0195b1
(fix) NSString+Utilities: Fix safeStringByEscapingXMLString on gnustep-base-1.28
...
Newer gnustep version would add a byte-order-mark on
NSString:dataUsingEncoding:NSUTF32StringEncoding, use NSUTF32LittleEndianStringEncoding
instead to skip the BOM.
Fixes #5416
2022-08-15 17:06:00 +02:00
Francis Lachapelle
95eecc402a
fix(dav): return 405 when collection already exists
...
See https://datatracker.ietf.org/doc/html/rfc4918#section-9.3.1
2022-08-09 12:17:55 -04:00
Le Programmeur
5e6ad77d4c
fix(i18n): new localized strings for SQL-based password policies
2022-07-26 12:22:53 -04:00
adetk
d1971b76e2
i18n(kk): Add Kazakh translation by Nazym Idrissova
2022-07-25 07:39:28 -04:00
Francis Lachapelle
adfd175681
fix(preferences): regex in Sieve scripts are now case sensitive
...
Fixes #5561
2022-07-22 16:45:47 -04:00
Francis Lachapelle
0720dc44fd
fix(addressbook(dav)): improve handling of addressbook-query
2022-07-13 16:46:00 -04:00
Francis Lachapelle
2f9f610210
fix(core): handle argon2i password scheme
...
Fixes #5531
2022-07-05 12:42:57 -04:00
Francis Lachapelle
580a73c857
fix(mail): add default label & color for $forwarded flag
...
Fixes #5534
2022-06-10 08:25:54 -04:00
Francis Lachapelle
2ef849ca65
feat(preferences): password constraints for SQL sources
...
Initial implementation of some password policy support for SQL sources.
2022-06-06 16:39:26 -04:00
Francis Lachapelle
2aaad3de22
perf(tool): cache IMAP delimiters when updating sieve filters
2022-05-27 10:16:22 -04:00
Francis Lachapelle
c87ce46d29
perf(tool): cache IMAP delimiters when updating sieve filters
2022-05-26 09:25:42 -04:00
Francis Lachapelle
373ac51e62
fix(core): don't auto-remove a subscription if any source is in error
2022-05-11 16:29:49 -04:00
Francis Lachapelle
8ed4fc88b5
feat(mail): always forward incoming messages, before all filters
...
This new "Always forward" checkbox allows the user to forward incoming
messages before evaluating the other filters, if any. When unchecked,
the "redirect" directive is executed after all filters; if a filter
stops evaluating the remaining rules, the message won't be forwarded.
2022-04-06 15:43:07 -04:00
Francis Lachapelle
6d50dee063
fix(core): encode reserved HTML characters in RTF parser
...
Fixes #5388
2022-03-29 10:44:35 -04:00
Francis Lachapelle
a5d18bfced
fix(core): improve escaping of double-quotes
...
Fixes #5351
2022-03-29 10:39:09 -04:00
Francis Lachapelle
3140a9dc1d
fix(acls): fix SQL conversion for LIKE operator to find groups
...
Fixes #5492
2022-03-28 13:50:03 -04:00
Francis Lachapelle
fbd2eb8294
fix(calendar): rely on organizer's event state before updating attendee
...
When an attendee is adding a new event for which the organizer is local
but doesn't have the event anymore, return a 412 error code.
Fixes #5496
2022-03-24 15:31:39 -04:00
Francis Lachapelle
b37e68b8ee
fix(dav): use utf-8 as charset name instead of utf8
...
Fixes #5495
2022-03-22 10:41:31 -04:00
Francis Lachapelle
a965f276c8
fix(web): support passwords up to 2048 characters
...
Fixes #5485
2022-03-08 16:34:38 -05:00
Francis Lachapelle
8409c3cbb5
fix(addressbook(dav)): add support for mail property in addressbook-query
...
Fixes #5489
2022-03-04 08:29:03 -05:00
Francis Lachapelle
7faab9117a
fix(addressbook(dav)): improve handling of addressbook-query
2022-02-28 17:07:39 -05:00
Francis Lachapelle
a98b404551
fix(imap): use proxy authentication to detect IMAP delimiter
...
Fixes #5479
2022-02-17 10:09:37 -05:00
Francis Lachapelle
c986422a3d
feat(mail(web)): Templates folder for pre-defined drafts
...
To create a template, the user needs to:
- define a mailbox as the Templates folder;
- move a draft to this special folder.
Fixes #4320
Fixes #5363
2022-02-11 10:06:57 -05:00
Francis Lachapelle
3847b57855
fix(mail): fix type of SOGoMailComposeFontSize defaults
2022-02-09 22:26:11 -05:00
Francis Lachapelle
0c5a2691b0
fix(calendar): handle DST change for all-day events
2022-02-01 17:30:26 -05:00
Francis Lachapelle
96bb8b4cc2
fix(dav): render DAV exceptions as XML
2022-02-01 14:20:32 -05:00
Francis Lachapelle
348a79c795
fix(addressbook): close DB connection after DAV query
2022-02-01 10:14:37 -05:00
Francis Lachapelle
7c81e3acec
fix(core): only escape "%" with the SQL LIKE operator
2022-01-31 14:53:58 -05:00
Francis Lachapelle
2e58ddfae3
fix(dav): render DAV exceptions as XML
2022-01-27 13:05:24 -05:00
Francis Lachapelle
b061046992
fix(calendar(dav)): add DAV:status to DAV:response only when deleted
...
Fixes #5163
2022-01-21 14:47:32 -05:00
Francis Lachapelle
969d68dbb6
fix(core): remove trailing closing angle bracket from detected URLs
...
Fixes #5465
2022-01-21 11:07:00 -05:00
Francis Lachapelle
b967eac1f3
fix(core): remove trailing closing angle bracket from detected URLs
...
Fixes #5465
2022-01-17 16:43:11 -05:00
tfux
c75ac6c321
fix(core): fix compilation warning in SOGoCacheGCSObject
2022-01-17 07:58:15 -05:00
Francis Lachapelle
368360bb95
fix(addressbook): respect visible domains when fetching contact
...
Fixes #4896
2022-01-11 16:40:53 -05:00
