Jan Kahmen 045a0b9c0a fix(mail): escape mail data placed in attributes of a compiled part
the generic attribute writer used for these two spots does not escape what it
writes, so a value taken from the message ends the attribute and starts a new
one. both are inside a part that is compiled, which is where an injected
handler runs.

* the organizer link took inEvent.organizer.email verbatim. a value such as
  mailto:x@y" onpointerover="... produced a live handler on the anchor, and an
  entity encoded scheme such as javascript: reached the href, where the
  browser decodes it. the href is now built as mailto: plus the parsed address
  and escaped as an attribute value.

* the attachment name paragraph of the image and the link viewer took
  filenameForDisplay verbatim. a quote inside an RFC 2231 encoded filename
  ended the title attribute. the writer escapes & < > there but not the quote,
  so the accessor drops the quote instead of escaping it, which keeps a plain
  filename such as A&B.pdf unchanged in the tooltip.

the img title of the image viewer is left alone: attributes of that element are
escaped by the framework already.
2026-08-17 23:48:41 +02:00
2026-03-02 15:01:52 +01:00
2022-08-12 17:28:46 +02:00
2015-06-12 12:03:55 -04:00
2023-03-28 21:28:35 +02:00
2026-08-13 10:17:59 +02:00
2026-03-02 15:01:52 +01:00
2015-10-06 09:55:32 -04:00
2026-08-13 10:17:59 +02:00

Contribute

SOGo is a collaborative effort in order to create the best Free and Open Source groupware solution.

There are multiple ways you can contribute to the project

  • Documentation reviews, enhancements and translations
  • Feature requests or by sharing your ideas (see the roadmap)
  • Participate in the discussion on mailing lists
  • Patches for bugs or enhancements
  • Provide new translations

Source Code

You can browse the lastest version of the source code online from Alinto's github repository:

To compile SOGo, you first need to obtain the source code of both SOGo and SOPE. The source code of SOPE and SOGo can be obtained from Alinto's github repositories:

The source code of the SOGo Connector extension for Thunderbird 78+ can be obtained from Alinto's github repository:

Please refer to the FAQ for compilation instructions.

Dev Container

A dev container is available to use, read more there read more there

Translations

SOGo and its associated components are available in various languages. The following list describes the official translations alongside their maintainers:

  • [en] English - Alinto
  • [ar] Arabic - Anass Ahmed
  • [eu] Basque - Gorka Gonzalez
  • [bs_BA] Bosnian - Refik Bećirović
  • [pr_BR] Brazilian Portuguese - Alexandre Marcilio
  • [bg] Bulgarian - Todor Todorov
  • [ca] Catalan - Hector M. Rulot Segovia
  • [zh_CN] Chinese (China) - Thomas Kuiper
  • [zh_TW] Chinese (Taiwan)
  • [hr_HR] Croatian - Jens Riecken
  • [cs] Czech - Šimon Halamásek
  • [da_DK] Danish (Denmark) - Altibox
  • [nl] Dutch - Roel van Os
  • [fi] Finnish - Kari Salmu
  • [fr] French - Alinto
  • [gl] Galician - Simon Lang
  • [de] German - Alexander Greiner-Baer
  • [he] Hebrew - Raz Aidlitz
  • [hu] Hungarian - Sándor Kuti
  • [id] Indonesian - Woka
  • [is] Icelandic - Anna Jonna Armannsdottir
  • [it] Italian - Alessio Fattorini
  • [jp] Japanese - Ryo Yamamoto
  • [kk] Kazakh - Nazym Idrissova
  • [lv] Latvian - Juris Balandis
  • [lt] Lithuanian - Mantas Liobė
  • [mk_MK] Macedonian - Miroslav Jovanovic
  • [sr_ME] Montenegrin - Ivan Pleskonjić
  • [nb_NO] Norwegian (Bokmål) - Jan Ivar Karlsen / Altibox
  • [nn_NO] Norwegian (Nynorsk) - Altibox
  • [pl] Polish - Paweł Bogusławski
  • [pt] Portuguese - Eduardo Crispim
  • [ro_RO] Romanian - Vasile Razvan Luca
  • [ru] Russian - Alex Kabakaev
  • [sr] Serbian - Bogdanović Bojan
  • [sr@latin)] Serbian (Latin) - Zlatko Štulić
  • [sk] Slovak - Martin Pastor
  • [sl_SI] Slovenian - Jens Riecken
  • [es_AR] Spanish (Argentina) - Federico Alberto Sayd
  • [es_ES] Spanish (Spain) - Dominique Couot
  • [sv] Swedish - Peter Johansson
  • [tr_TR] Turkish (Turkey) - Muhammed Yalçınkaya, Sinan Kurşunoğlu
  • [uk] Ukrainian - Oleksa Stasevych
  • [cy] Welsh - Iona Bailey

If you would like to translate the software in an other language, please consult the FAQ.

S
Description
No description provided
Readme
191 MiB
Languages
Objective-C 67.9%
JavaScript 14.6%
Rich Text Format 9.7%
SCSS 2.2%
C 1.5%
Other 4%