Jan Kahmen
8813677ecb
fix(core): keep the @import cleanup working in stringWithoutHTMLInjection
...
the trailing while loop reuses the regex variable, which by then points at the
angular brace pattern whenever stripAngular is YES. that pattern has two
capture groups while the loop substitutes $1@im****$3, so NSRegularExpression
raises NSInvalidArgumentException and the NS_HANDLER swallows it.
give the @import pattern its own variable and use it in both the replacement
and the loop. the replacement also used the template of the block above, which
dropped the whole style element instead of masking the @import in place, so
test_stringWithoutHTMLInjection failed. it passes again, and a case with
stripAngular YES covers the loop.
2026-08-17 23:03:41 +02:00
Hivert Quentin
1caa25711f
fix(bug): incorrect method called
2026-08-11 17:06:27 +02:00
Hivert Quentin
c45233c11e
fix(pref): prevent onevent cleaning to remove legitimate words
2026-05-19 09:30:58 +02:00
Jordi Mallach and QHivert
e27b083213
Update onEvent test to match expectation after the XSS fixes
2026-05-12 13:19:09 +02:00
smizrahi
64f17880c7
fix(tests): Add timeout on all async tests
2024-09-26 21:02:50 +02:00
smizrahi
455fe97cbe
feat(core): Add message of the day. Remove all html tags except for anchor tags (mobile only)
2024-01-29 17:16:08 +01:00
smizrahi
2146870071
fix(mail): Fix security @import css injection
2024-01-23 15:01:47 +00:00
Hivert Quentin
7481ccf370
fix(hmtl): prevent html injection of tag form
2023-11-06 14:04:53 +01:00
smizrahi
1c93796ae1
test(timeout): Change some timeouts fo tests
2023-08-17 11:27:04 +02:00
Hivert Quentin
528d178256
chore(packaging): debian 12
2023-08-02 11:36:36 +02:00
smizrahi
f9fdad251d
fix(mail): Removed invalid HTML tags in mail body. Fixes #5755
2023-06-07 14:42:21 +02:00
smizrahi
1a06996381
test(core): Add junit output format
2023-05-24 18:17:41 +02:00
smizrahi
754f3aa230
test(js): Increase test timeout for CI
2023-02-27 10:29:49 +01:00
smizrahi
b1f84891b0
fix(security): Security fix for WSTG-INPV-02. Add unit test.
2022-11-23 09:34:54 +01:00
Francis Lachapelle
95eecc402a
fix(dav): return 405 when collection already exists
...
See https://datatracker.ietf.org/doc/html/rfc4918#section-9.3.1
2022-08-09 12:17:55 -04:00
Francis Lachapelle
4e79a1e995
test: we now encode everything in XML documents
2022-08-04 16:15:45 -04:00
Francis Lachapelle
4f7981b1c3
test: improve TestNGMimeHeaderFieldGenerator
2022-08-04 16:09:33 -04:00
Francis Lachapelle
ac602dd58c
test: improve error message in localhost test
2022-08-04 16:06:06 -04:00
Nicolas Höft and GitHub
edd64a396e
fix(core): adjustments for IPv6
2022-07-06 08:49:48 -04:00
Francis Lachapelle
5452cd7396
fix(calendar): filter by matching property values
...
Added test for calendar-query DAV request
2022-05-24 17:29:56 -04:00
Francis Lachapelle
5d2877cf0a
test: add plus sign to timezone in Sieve script
2022-03-24 15:26:37 -04:00
Francis Lachapelle
896fe27c61
test: handle DST change in CalDAVSchedulingSpec.js
2022-03-11 10:28:44 -05:00
Francis Lachapelle
04ffc01768
test: temporary fix for CardDAVSpec.js
2022-03-01 17:48:29 -05:00
Francis Lachapelle
d15e3b949f
test: fix CardDAVSpec.js
2022-03-01 16:38:30 -05:00
Francis Lachapelle
7f31686bc5
test: fix CardDAVSpec.js
2022-03-01 07:52:53 -05:00
Francis Lachapelle
7faab9117a
fix(addressbook(dav)): improve handling of addressbook-query
2022-02-28 17:07:39 -05:00
Francis Lachapelle
e513a7242a
test: fix DAVCalendarSuperUserAclTest
2022-01-24 08:29:59 -05:00
Francis Lachapelle
bf36279e0e
test: improve functions names related to sync-collection
2022-01-21 16:56:54 -05:00
Francis Lachapelle
2ecd441f32
feat(mail): enable autoreply on specific days or at a specific time
...
Fixes #5328
2021-12-02 14:20:47 -05:00
Francis Lachapelle
e62dd42d2b
test: simplify MailDAV test of mailboxes creation
2021-11-29 13:51:40 -05:00
Francis Lachapelle
d70486f983
test: print response when MKCOL fails for a mailbox
2021-11-26 11:08:52 -05:00
Francis Lachapelle
1a7ba3d4ef
test: migration from Python to JavaScript
2021-11-17 19:13:36 -05:00
Francis Lachapelle
71b67259c6
test: migration from Python to JavaScript
2021-11-16 21:51:13 -05:00
Francis Lachapelle
a3e21cbf9d
test: migration from Python to JavaScript
2021-11-16 17:14:36 -05:00
Francis Lachapelle
8eb255ad61
test: migration from Python to JavaScript
2021-11-16 15:23:55 -05:00
Francis Lachapelle
92820db3bb
test: migration from Python to JavaScript
2021-11-10 06:31:25 -05:00
Francis Lachapelle
ae637c49d5
test: migration from Python to JavaScript
2021-11-10 02:27:09 -05:00
Francis Lachapelle
7474967c4f
test: migration from Python to JavaScript
2021-11-10 01:54:35 -05:00
Francis Lachapelle
54dae3bc28
test: migration from Python to JavaScript
2021-11-09 22:38:50 -05:00
Francis Lachapelle
8d294467ef
test: migration from Python to JavaScript
2021-11-09 22:35:05 -05:00
Francis Lachapelle
c860bf4f58
test: migration from Python to JavaScript
2021-11-09 21:56:11 -05:00
Francis Lachapelle
d7fde6d2bb
test: migration from Python to JavaScript
2021-11-09 17:13:18 -05:00
Francis Lachapelle
620d8a0a2a
test: migration from Python to JavaScript
2021-11-09 13:35:50 -05:00
Francis Lachapelle
78d0410400
test: migration from Python to JavaScript
2021-11-09 12:56:47 -05:00
Francis Lachapelle
5afb659dc0
test: migration from Python to JavaScript
2021-11-09 11:13:23 -05:00
Francis Lachapelle
2f739fdc21
test: migration from Python to JavaScript
2021-11-08 16:49:23 -05:00
Francis Lachapelle
d43b28ca73
test: migration from Python to JavaScript
2021-11-05 16:47:31 -04:00
Francis Lachapelle
262400a92e
test: migration from Python to JavaScript
2021-11-04 16:43:35 -04:00
Francis Lachapelle
d6c3c4b1a3
test: migration from Python to JavaScript
2021-11-01 16:46:48 -04:00
Francis Lachapelle
fa68c864f1
test: migration from Python to JavaScript
2021-10-12 16:24:47 -04:00