Jan Kahmen
8813677ecb
fix(core): keep the @import cleanup working in stringWithoutHTMLInjection
...
the trailing while loop reuses the regex variable, which by then points at the
angular brace pattern whenever stripAngular is YES. that pattern has two
capture groups while the loop substitutes $1@im****$3, so NSRegularExpression
raises NSInvalidArgumentException and the NS_HANDLER swallows it.
give the @import pattern its own variable and use it in both the replacement
and the loop. the replacement also used the template of the block above, which
dropped the whole style element instead of masking the @import in place, so
test_stringWithoutHTMLInjection failed. it passes again, and a case with
stripAngular YES covers the loop.
2026-08-17 23:03:41 +02:00
Hivert Quentin
f7fce46371
chore(release): 5.12.10
2026-08-13 10:17:59 +02:00
Hivert Quentin
f0c23407bf
chore(sendmail): disable sendmail for now
2026-08-11 17:34:50 +02:00
Hivert Quentin
47133fdf3b
fix(mail): escape angularJS directive for description
2026-08-10 19:34:25 +02:00
Hivert Quentin
c45233c11e
fix(pref): prevent onevent cleaning to remove legitimate words
2026-05-19 09:30:58 +02:00
Hivert Quentin
93b82a0f60
fix(openid): check the userinfo mail + avoid infinite loop
2026-05-05 10:39:38 +02:00
Hivert Quentin
67ce01ec2a
fix(mail): sanitise mail with ics (invitation to event)
2026-05-03 15:08:15 +02:00
Hivert Quentin
d902756aaf
fix(acl): fix folder path
2026-04-21 13:52:19 +02:00
Hivert Quentin and QHivert
f9b71059f4
fix(acl): only add existing uid
2026-04-20 09:08:40 +02:00
Hivert Quentin
d7f02b6083
fix(typo): pass the correct arg to checkLogin
2026-03-26 09:07:05 +01:00
Hivert Quentin
1f7e5d2b2c
fix(sql): use proper sql adaptor for usr source
2026-03-24 15:26:37 +01:00
Hivert Quentin
1fdb4d3026
i18n(pt): Add Greek (partial)
2026-03-02 15:01:52 +01:00
Hivert Quentin
83d4c522f8
fix(vulnerability): properly change the totp code after disabling it
2026-02-25 15:23:57 +01:00
Hivert Quentin
389e8e64c4
fix(ui): prevent UI to search for users with empty string
2026-01-29 15:58:00 +01:00
Hivert Quentin
95efe73e69
fix(encryptedUrl): fix cache key data and expect uncrypted name for freebusy
2025-12-22 17:28:49 +01:00
Hivert Quentin
981748754a
fix(mailer): don't add mailto: to string starting with @
2025-09-24 09:18:08 +02:00
Hivert Quentin
5d616600df
feat(mail): Add a setting to show the attachments above the mail body
2025-09-19 15:30:45 +02:00
Hivert Quentin
0fb3db0608
fix(label): ensure the translation kept is not null
2025-09-16 16:09:01 +02:00
Emily Kooistra and QHivert
f48f27c812
perf(core): store translations in a globally static NSMutableDictionary
...
fetching public ICS files without this patch result in continual opening
and closing of the "Localizable.strings" to create a NSDictionary,
looking up one key and closing it again. By caching it in a static
variable this greatly improves the performance.
2025-09-15 15:43:05 +02:00
Hivert Quentin
dfcbbba514
chore(build): remove unnecessary import
2025-07-29 13:50:52 +02:00
Hivert Quentin
7bee193413
fix(mail): preoperly generates the message-id header value
2025-07-28 17:40:14 +02:00
Hivert Quentin
4ef79e219c
fix(openid): correcly type userTokenInterval
2025-07-28 16:08:17 +02:00
Hivert Quentin
736d7589b1
fix(ldap): fetch the correct user source when creating an event with an attendee
2025-07-28 13:52:15 +02:00
Hivert Quentin
c8dd5535b3
fix(sieveà: Sieve use the correct imap auth mechanism
2025-07-24 15:03:30 +02:00
Hivert Quentin
42f620e562
fix(curl): properly close curl connection
2025-07-24 14:46:45 +02:00
Hivert Quentin
f5f8f112cd
chore(language): Add Thai language
2025-07-03 16:59:56 +02:00
Hivert Quentin
08bc6aff3f
chore(language): Add Korean language
2025-07-03 09:35:50 +02:00
Hivert Quentin
51f1521dba
feat(api): add endpoint for caldav/cardav url
2025-06-23 17:14:39 +02:00
Hivert Quentin
516606baff
fix(session): allow password/token to be longer than userkey
2025-06-23 09:27:51 +02:00
Hivert Quentin
a782424a30
feat(openid): swicth to libcurl for http request
...
It was using an internal library before and there were too much errors due to incomplete http's protocol implementation
2025-06-23 09:24:02 +02:00
Hivert Quentin
f53d7b73db
fix(sieve): add requirements for notify when doing a filter
2025-06-19 09:40:58 +02:00
Hivert Quentin
085fc4a9eb
fix(openid): add state in connection flow
2025-05-20 09:08:46 +02:00
Hivert Quentin
e36d0d219b
fix(password): put correct regex for special char
2025-05-13 16:51:08 +02:00
Hivert Quentin
c5fb3482e2
fix(openid): make end_session_endpoint optional
2025-05-13 16:03:13 +02:00
Hivert Quentin
3616e56289
fix(db): log an error if the table sogo_folder_info is malformed
2025-04-16 15:54:11 +02:00
Hivert Quentin
ca425e6752
fix(ldap): update baseDN with correct domain if needed
2025-04-09 08:52:46 +02:00
Hivert Quentin
788ece452b
fix(smtp): fix string type
2025-04-01 10:05:26 +02:00
Slávek Banko and QHivert
ab9f0c1bf1
fix(calendar): Fix typo Jisti × Jitsi
...
Signed-off-by: Slávek Banko <slavek.banko@axis.cz >
2025-03-31 21:03:47 +02:00
Slávek Banko and QHivert
4a68909060
feat(calendar): Make the Jitsi meeting room prefix configurable
...
Signed-off-by: Slávek Banko <slavek.banko@axis.cz >
2025-03-31 21:03:47 +02:00
Hivert Quentin
d1d9024eca
fix(auth): add missing method to auth class
2025-03-19 14:05:49 +01:00
Hivert Quentin
a1f2670485
revert: feat add url for creating account on login page
2025-03-13 15:47:16 +01:00
Hivert Quentin
c3234882eb
feat(openID): second part with a lot of fixes and cleaning
2025-03-13 15:25:56 +01:00
Hivert Quentin
458d39d48a
feat(openID): first stable version
2025-03-13 15:24:03 +01:00
y9048a and QHivert
02dd5c3501
feat(mail) Introduce option SOGoVacationAllowZeroDays to allow a sieve vacation days value of 0
2025-02-11 17:17:58 +01:00
Hivert Quentin
9f4f48a44f
feat(calendar): Can defined the Jitsi server url for meeting created
2025-02-03 14:19:02 +01:00
Hivert Quentin
42c227beca
feat(calendar): Can now create Jitsi link when making event
2025-01-27 14:27:09 +01:00
Hivert Quentin
78655ae127
fix(users): try to always use the user domain in the basDN with %d
2025-01-22 16:16:47 +01:00
Hivert Quentin
beb0d9cb1b
fix(users): when using multi-domains configuration, only request the apopriate usersources.
2025-01-22 16:16:47 +01:00
smizrahi
c05b331ac0
fix(calendar): Fix SOGoDAVCalendarStartTimeLimit parameter. Events are retrieved when initial sync is done.
2024-12-17 16:35:52 +01:00
smizrahi
178b1a3a0e
feat(core): Check password strength on login (SQL Source). Closes #6025 .
2024-12-02 11:08:39 +01:00
Jan Kahmen
Hivert Quentin
Emily KooistraandQHivert
Slávek BankoandQHivert
y9048aandQHivert
smizrahi