Commit Graph
367 Commits
Author SHA1 Message Date
Jan Kahmen 8813677ecb fix(core): keep the @import cleanup working in stringWithoutHTMLInjection
the trailing while loop reuses the regex variable, which by then points at the
angular brace pattern whenever stripAngular is YES. that pattern has two
capture groups while the loop substitutes $1@im****$3, so NSRegularExpression
raises NSInvalidArgumentException and the NS_HANDLER swallows it.

give the @import pattern its own variable and use it in both the replacement
and the loop. the replacement also used the template of the block above, which
dropped the whole style element instead of masking the @import in place, so
test_stringWithoutHTMLInjection failed. it passes again, and a case with
stripAngular YES covers the loop.
2026-08-17 23:03:41 +02:00
Hivert Quentin 1caa25711f fix(bug): incorrect method called 2026-08-11 17:06:27 +02:00
Hivert Quentin c45233c11e fix(pref): prevent onevent cleaning to remove legitimate words 2026-05-19 09:30:58 +02:00
Jordi MallachandQHivert e27b083213 Update onEvent test to match expectation after the XSS fixes 2026-05-12 13:19:09 +02:00
smizrahi 64f17880c7 fix(tests): Add timeout on all async tests 2024-09-26 21:02:50 +02:00
smizrahi 455fe97cbe feat(core): Add message of the day. Remove all html tags except for anchor tags (mobile only) 2024-01-29 17:16:08 +01:00
smizrahi 2146870071 fix(mail): Fix security @import css injection 2024-01-23 15:01:47 +00:00
Hivert Quentin 7481ccf370 fix(hmtl): prevent html injection of tag form 2023-11-06 14:04:53 +01:00
smizrahi 1c93796ae1 test(timeout): Change some timeouts fo tests 2023-08-17 11:27:04 +02:00
Hivert Quentin 528d178256 chore(packaging): debian 12 2023-08-02 11:36:36 +02:00
smizrahi f9fdad251d fix(mail): Removed invalid HTML tags in mail body. Fixes #5755 2023-06-07 14:42:21 +02:00
smizrahi 1a06996381 test(core): Add junit output format 2023-05-24 18:17:41 +02:00
smizrahi 754f3aa230 test(js): Increase test timeout for CI 2023-02-27 10:29:49 +01:00
smizrahi b1f84891b0 fix(security): Security fix for WSTG-INPV-02. Add unit test. 2022-11-23 09:34:54 +01:00
Francis Lachapelle 95eecc402a fix(dav): return 405 when collection already exists
See https://datatracker.ietf.org/doc/html/rfc4918#section-9.3.1
2022-08-09 12:17:55 -04:00
Francis Lachapelle 4e79a1e995 test: we now encode everything in XML documents 2022-08-04 16:15:45 -04:00
Francis Lachapelle 4f7981b1c3 test: improve TestNGMimeHeaderFieldGenerator 2022-08-04 16:09:33 -04:00
Francis Lachapelle ac602dd58c test: improve error message in localhost test 2022-08-04 16:06:06 -04:00
Nicolas HöftandGitHub edd64a396e fix(core): adjustments for IPv6 2022-07-06 08:49:48 -04:00
Francis Lachapelle 5452cd7396 fix(calendar): filter by matching property values
Added test for calendar-query DAV request
2022-05-24 17:29:56 -04:00
Francis Lachapelle 5d2877cf0a test: add plus sign to timezone in Sieve script 2022-03-24 15:26:37 -04:00
Francis Lachapelle 896fe27c61 test: handle DST change in CalDAVSchedulingSpec.js 2022-03-11 10:28:44 -05:00
Francis Lachapelle 04ffc01768 test: temporary fix for CardDAVSpec.js 2022-03-01 17:48:29 -05:00
Francis Lachapelle d15e3b949f test: fix CardDAVSpec.js 2022-03-01 16:38:30 -05:00
Francis Lachapelle 7f31686bc5 test: fix CardDAVSpec.js 2022-03-01 07:52:53 -05:00
Francis Lachapelle 7faab9117a fix(addressbook(dav)): improve handling of addressbook-query 2022-02-28 17:07:39 -05:00
Francis Lachapelle e513a7242a test: fix DAVCalendarSuperUserAclTest 2022-01-24 08:29:59 -05:00
Francis Lachapelle bf36279e0e test: improve functions names related to sync-collection 2022-01-21 16:56:54 -05:00
Francis Lachapelle 2ecd441f32 feat(mail): enable autoreply on specific days or at a specific time
Fixes #5328
2021-12-02 14:20:47 -05:00
Francis Lachapelle e62dd42d2b test: simplify MailDAV test of mailboxes creation 2021-11-29 13:51:40 -05:00
Francis Lachapelle d70486f983 test: print response when MKCOL fails for a mailbox 2021-11-26 11:08:52 -05:00
Francis Lachapelle 1a7ba3d4ef test: migration from Python to JavaScript 2021-11-17 19:13:36 -05:00
Francis Lachapelle 71b67259c6 test: migration from Python to JavaScript 2021-11-16 21:51:13 -05:00
Francis Lachapelle a3e21cbf9d test: migration from Python to JavaScript 2021-11-16 17:14:36 -05:00
Francis Lachapelle 8eb255ad61 test: migration from Python to JavaScript 2021-11-16 15:23:55 -05:00
Francis Lachapelle 92820db3bb test: migration from Python to JavaScript 2021-11-10 06:31:25 -05:00
Francis Lachapelle ae637c49d5 test: migration from Python to JavaScript 2021-11-10 02:27:09 -05:00
Francis Lachapelle 7474967c4f test: migration from Python to JavaScript 2021-11-10 01:54:35 -05:00
Francis Lachapelle 54dae3bc28 test: migration from Python to JavaScript 2021-11-09 22:38:50 -05:00
Francis Lachapelle 8d294467ef test: migration from Python to JavaScript 2021-11-09 22:35:05 -05:00
Francis Lachapelle c860bf4f58 test: migration from Python to JavaScript 2021-11-09 21:56:11 -05:00
Francis Lachapelle d7fde6d2bb test: migration from Python to JavaScript 2021-11-09 17:13:18 -05:00
Francis Lachapelle 620d8a0a2a test: migration from Python to JavaScript 2021-11-09 13:35:50 -05:00
Francis Lachapelle 78d0410400 test: migration from Python to JavaScript 2021-11-09 12:56:47 -05:00
Francis Lachapelle 5afb659dc0 test: migration from Python to JavaScript 2021-11-09 11:13:23 -05:00
Francis Lachapelle 2f739fdc21 test: migration from Python to JavaScript 2021-11-08 16:49:23 -05:00
Francis Lachapelle d43b28ca73 test: migration from Python to JavaScript 2021-11-05 16:47:31 -04:00
Francis Lachapelle 262400a92e test: migration from Python to JavaScript 2021-11-04 16:43:35 -04:00
Francis Lachapelle d6c3c4b1a3 test: migration from Python to JavaScript 2021-11-01 16:46:48 -04:00
Francis Lachapelle fa68c864f1 test: migration from Python to JavaScript 2021-10-12 16:24:47 -04:00