Jan Kahmen
8813677ecb
fix(core): keep the @import cleanup working in stringWithoutHTMLInjection
...
the trailing while loop reuses the regex variable, which by then points at the
angular brace pattern whenever stripAngular is YES. that pattern has two
capture groups while the loop substitutes $1@im****$3, so NSRegularExpression
raises NSInvalidArgumentException and the NS_HANDLER swallows it.
give the @import pattern its own variable and use it in both the replacement
and the loop. the replacement also used the template of the block above, which
dropped the whole style element instead of masking the @import in place, so
test_stringWithoutHTMLInjection failed. it passes again, and a case with
stripAngular YES covers the loop.
2026-08-17 23:03:41 +02:00
Hivert Quentin
f7fce46371
chore(release): 5.12.10
2026-08-13 10:17:59 +02:00
Hivert Quentin
2a8f20e080
i18n(hu): Update Hungarian translations
2026-08-13 10:03:55 +02:00
Hivert Quentin
f0c23407bf
chore(sendmail): disable sendmail for now
2026-08-11 17:34:50 +02:00
Hivert Quentin
1caa25711f
fix(bug): incorrect method called
2026-08-11 17:06:27 +02:00
Hivert Quentin
47133fdf3b
fix(mail): escape angularJS directive for description
2026-08-10 19:34:25 +02:00
Hivert Quentin
3a78a3bbb4
fix(calendar): do not transmit og http status to external calendar
2026-06-09 10:26:58 +02:00
smizrahi and Hivert Quentin
f11f34cdef
fix(mail): escape References/Organization/Newsgroups headers in HTML forward so message-id chevrons aren't parsed as HTML tags hiding the quoted body. Closes #6046 .
2026-06-04 11:53:58 +02:00
Hivert Quentin
b18f1a09f5
fix(event): clean import of event
2026-05-26 10:30:02 +02:00
Hivert Quentin
c45233c11e
fix(pref): prevent onevent cleaning to remove legitimate words
2026-05-19 09:30:58 +02:00
Hivert Quentin
93b82a0f60
fix(openid): check the userinfo mail + avoid infinite loop
2026-05-05 10:39:38 +02:00
Hivert Quentin
67ce01ec2a
fix(mail): sanitise mail with ics (invitation to event)
2026-05-03 15:08:15 +02:00
Hivert Quentin
d902756aaf
fix(acl): fix folder path
2026-04-21 13:52:19 +02:00
Hivert Quentin and QHivert
f9b71059f4
fix(acl): only add existing uid
2026-04-20 09:08:40 +02:00
Hivert Quentin
d7f02b6083
fix(typo): pass the correct arg to checkLogin
2026-03-26 09:07:05 +01:00
Hivert Quentin
1f7e5d2b2c
fix(sql): use proper sql adaptor for usr source
2026-03-24 15:26:37 +01:00
Hivert Quentin
1fdb4d3026
i18n(pt): Add Greek (partial)
2026-03-02 15:01:52 +01:00
Hivert Quentin
d993227b36
i18n(th): Update Thai translations
2026-03-02 11:49:54 +01:00
Hivert Quentin
83d4c522f8
fix(vulnerability): properly change the totp code after disabling it
2026-02-25 15:23:57 +01:00
Hivert Quentin
389e8e64c4
fix(ui): prevent UI to search for users with empty string
2026-01-29 15:58:00 +01:00
Hivert Quentin
95efe73e69
fix(encryptedUrl): fix cache key data and expect uncrypted name for freebusy
2025-12-22 17:28:49 +01:00
Hivert Quentin
981748754a
fix(mailer): don't add mailto: to string starting with @
2025-09-24 09:18:08 +02:00
Hivert Quentin
a7f7950d91
fix(eas): use proper imap mech for EAS request when using openid
2025-09-19 16:47:16 +02:00
Hivert Quentin
5d616600df
feat(mail): Add a setting to show the attachments above the mail body
2025-09-19 15:30:45 +02:00
Hivert Quentin
0fb3db0608
fix(label): ensure the translation kept is not null
2025-09-16 16:09:01 +02:00
Hivert Quentin
a7651e56c5
fix(task): fix reminder for tasks
2025-09-15 17:21:47 +02:00
Emily Kooistra and QHivert
481a9bf1de
perf(calendar): don't allocate and copy all children for each time we call _filterComponent:
...
Improving the filtering of the calender objects, keeping a global static of the array of tags
that are allowed. And using removeChildren to prevent the need of a full copy while we iterate
over it.
2025-09-15 15:43:05 +02:00
Emily Kooistra and QHivert
f48f27c812
perf(core): store translations in a globally static NSMutableDictionary
...
fetching public ICS files without this patch result in continual opening
and closing of the "Localizable.strings" to create a NSDictionary,
looking up one key and closing it again. By caching it in a static
variable this greatly improves the performance.
2025-09-15 15:43:05 +02:00
Hivert Quentin
86d94ab8fe
fix(log): remove the ics from the log line
2025-08-27 10:19:42 +02:00
Hivert Quentin
dfcbbba514
chore(build): remove unnecessary import
2025-07-29 13:50:52 +02:00
Hivert Quentin
7bee193413
fix(mail): preoperly generates the message-id header value
2025-07-28 17:40:14 +02:00
Hivert Quentin
4ef79e219c
fix(openid): correcly type userTokenInterval
2025-07-28 16:08:17 +02:00
Hivert Quentin
736d7589b1
fix(ldap): fetch the correct user source when creating an event with an attendee
2025-07-28 13:52:15 +02:00
Hivert Quentin
c8dd5535b3
fix(sieveà: Sieve use the correct imap auth mechanism
2025-07-24 15:03:30 +02:00
Hivert Quentin
42f620e562
fix(curl): properly close curl connection
2025-07-24 14:46:45 +02:00
Hivert Quentin
f5f8f112cd
chore(language): Add Thai language
2025-07-03 16:59:56 +02:00
Hivert Quentin
08bc6aff3f
chore(language): Add Korean language
2025-07-03 09:35:50 +02:00
Hivert Quentin
51f1521dba
feat(api): add endpoint for caldav/cardav url
2025-06-23 17:14:39 +02:00
Hivert Quentin
516606baff
fix(session): allow password/token to be longer than userkey
2025-06-23 09:27:51 +02:00
Hivert Quentin
a782424a30
feat(openid): swicth to libcurl for http request
...
It was using an internal library before and there were too much errors due to incomplete http's protocol implementation
2025-06-23 09:24:02 +02:00
Hivert Quentin
f53d7b73db
fix(sieve): add requirements for notify when doing a filter
2025-06-19 09:40:58 +02:00
Hivert Quentin
085fc4a9eb
fix(openid): add state in connection flow
2025-05-20 09:08:46 +02:00
Hivert Quentin
e36d0d219b
fix(password): put correct regex for special char
2025-05-13 16:51:08 +02:00
Hivert Quentin
c5fb3482e2
fix(openid): make end_session_endpoint optional
2025-05-13 16:03:13 +02:00
Hivert Quentin
3616e56289
fix(db): log an error if the table sogo_folder_info is malformed
2025-04-16 15:54:11 +02:00
Hivert Quentin
148fab9409
fix(calendar): put valarm at the end of vevent block to satisfy outlook.office.com which is too lazy to follow the spec
2025-04-09 11:15:59 +02:00
Hivert Quentin
ca425e6752
fix(ldap): update baseDN with correct domain if needed
2025-04-09 08:52:46 +02:00
Hivert Quentin
788ece452b
fix(smtp): fix string type
2025-04-01 10:05:26 +02:00
Slávek Banko and QHivert
ab9f0c1bf1
fix(calendar): Fix typo Jisti × Jitsi
...
Signed-off-by: Slávek Banko <slavek.banko@axis.cz >
2025-03-31 21:03:47 +02:00
Slávek Banko and QHivert
4a68909060
feat(calendar): Make the Jitsi meeting room prefix configurable
...
Signed-off-by: Slávek Banko <slavek.banko@axis.cz >
2025-03-31 21:03:47 +02:00
Jan Kahmen
Hivert Quentin
smizrahiandHivert Quentin
Emily KooistraandQHivert
Slávek BankoandQHivert