 Niklas VossandLinus Rath
|
52326326e2
|
fix: check plugin http.post url against origin and add regression tests
|
2026-04-01 11:26:12 +02:00 |
|
|
Niklas VossandLinus Rath
|
2734fa08b7
|
feat: instead of exposing auth headers, offer a http proxy api for plugins
|
2026-04-01 11:26:12 +02:00 |
|
|
Niklas VossandLinus Rath
|
67a0d622bc
|
feat: add auth:read permission and ability to retrieve auth headers
|
2026-04-01 11:26:12 +02:00 |
|
|
chrilepandGitHub
|
58968a1cbf
|
updated to show latest version in badge
|
2026-04-01 09:49:23 +02:00 |
|
|
Linus Rath
|
01c8afbfe8
|
Merge branch 'dev'
1.4.11
|
2026-03-31 18:34:49 +02:00 |
|
|
Linus Rath
|
be2e0f2b68
|
chore: update version to 1.4.11
|
2026-03-31 18:24:25 +02:00 |
|
|
Linus Rath
|
aa40c8be26
|
fix: harden proxy auth and SSRF defenses
|
2026-03-31 17:47:09 +02:00 |
|
|
Linus Rath
|
b3d4c9241c
|
i18n: add missing translation keys to all non-English locales
|
2026-03-31 16:40:36 +02:00 |
|
|
Linus Rath
|
34dd5122b3
|
feat: logging to include categories for better log management
|
2026-03-31 16:31:27 +02:00 |
|
|
Linus Rath
|
dab3606b04
|
fix: strip server-immutable fields from updates before sending to JMAP #128
|
2026-03-31 16:15:56 +02:00 |
|
|
Linus Rath
|
0f7638055c
|
fix: auto-focus input fields in email composer for improved user experience #126
|
2026-03-31 16:10:14 +02:00 |
|
|
Linus Rath
|
66fe7fd359
|
fix: enhance security by blocking plugins with dangerous JS patterns and enforcing strict session secret length
|
2026-03-31 15:56:32 +02:00 |
|
|
Linus Rath
|
1b2ee7da3a
|
fix: prevent orphaning of nested mailboxes by restricting deduplication to root-level folders
|
2026-03-31 15:29:09 +02:00 |
|
|
Linus Rath
|
f6bec519f4
|
fix: update file feature disabled messages and add stability warnings
|
2026-03-31 15:18:13 +02:00 |
|
|
Linus Rath
|
7102add194
|
fix: add self-signed certificate detection and update status messages for S/MIME signatures
|
2026-03-31 15:13:48 +02:00 |
|
|
Linus Rath
|
a3d894730b
|
fix: hardened security, CSP enforcement, SSRF redirect validation, reenabled S/MIME chain verify, IP spoofing prevention, PDF iframe sandbox
|
2026-03-31 15:11:38 +02:00 |
|
|
Linus Rath
|
79b99ed4f8
|
Merge branch 'dev'
1.4.10
|
2026-03-31 00:53:10 +02:00 |
|
|
Linus Rath
|
68214c3e91
|
chore: update version to 1.4.10
|
2026-03-31 00:51:36 +02:00 |
|
|
Linus Rath
|
5da0e2bdf1
|
fix: patch critical auth bypass and credential leak vulnerabilities
|
2026-03-31 00:46:15 +02:00 |
|
|
Linus Rath
|
92ada0460a
|
Merge branch 'main' of https://github.com/bulwarkmail/webmail
|
2026-03-31 00:27:45 +02:00 |
|
|
Linus Rath
|
1cce5c3c8a
|
fix: JSCalendar 2.0 recurrenceRule single-object compatibility 116
|
2026-03-31 00:11:04 +02:00 |
|
|
Linus RathandGitHub
|
40fd7799e9
|
Update security vulnerability reporting contact
|
2026-03-30 23:47:01 +02:00 |
|
|
Linus Rath
|
aaa283357e
|
feat: implemented plugin configuration UI and calendar event action slot
- Add configSchema support to plugin manifest and ServerPlugin registry
- Add schema-driven admin config page (string, secret, boolean, number, select fields)
- Add per-plugin config storage backend (JSON files + REST API)
- Add calendar-event-actions and admin-plugin-page slot names to plugin store
- Add registerCalendarEventAction and registerAdminPage to plugin API
- Add calendarFormHooks (onCalendarEventFormOpen/Save) to hook bus
- Add PluginSlot in calendar event modal for plugin action buttons
- Style calendar event action buttons to match Bulwark outline button design
- Add Configure link per plugin in admin plugins dashboard
- Add Jitsi Meet plugin with tests (repos/plugins/jitsi-meet)
- Exclude data/admin/plugins from ESLint (deployed plugin bundles)
|
2026-03-30 21:12:05 +02:00 |
|
|
Linus Rath
|
066ab1bc32
|
debug: add diagnostic logging to 3DES S/MIME decrypt path
Log legacy key import success/failure, CMS algorithm OIDs (content
encryption + key transport), legacy key availability during decrypt
attempts, and detailed error messages from both RSA-OAEP and
RSAES-PKCS1-v1_5 decrypt paths.
|
2026-03-30 19:15:02 +02:00 |
|
|
Linus Rath
|
92fb9bf132
|
fix: enhance calendar event handling to distinguish between events and tasks
|
2026-03-30 18:04:49 +02:00 |
|
|
Linus Rath
|
4c804d5d2b
|
fix: align tag counts with mailbox folder counts in sidebar
|
2026-03-30 17:31:26 +02:00 |
|
|
Linus Rath
|
63b464641b
|
fix: link existing events to target calendar during iCal import instead of skipping #113
|
2026-03-30 16:47:08 +02:00 |
|
|
Linus Rath
|
67210c9924
|
fix: handle 2FA/TOTP session expiry with basic auth #117
|
2026-03-30 16:37:07 +02:00 |
|
|
Linus Rath
|
8937777bcd
|
fix: support 3DES S/MIME decryption by importing legacy RSAES-PKCS1-v1_5 keys #35
|
2026-03-30 16:00:27 +02:00 |
|
|
Linus Rath
|
789d211a71
|
fix: enhance mailbox handling with logging
|
2026-03-30 15:46:54 +02:00 |
|
|
Linus Rath
|
c512352f77
|
fix: add replyToAddresses to email composer
|
2026-03-30 15:27:50 +02:00 |
|
|
Linus Rath
|
c859230862
|
feat: add virtual location input #121
|
2026-03-30 15:19:47 +02:00 |
|
|
Linus Rath
|
0fb8b81acd
|
fix: deduplicate UIDs during iCal import to prevent mass failures #113
|
2026-03-30 15:06:28 +02:00 |
|
|
Linus Rath
|
1eebec292a
|
fix: enhance email loading and deduplication logic in email store #119
|
2026-03-30 08:32:46 +02:00 |
|
|
Linus Rath
|
2d983c9853
|
fix: improve mailbox tree logic #118
|
2026-03-29 23:47:52 +02:00 |
|
|
Linus Rath
|
a453f7fa67
|
fix: events disappearing after iCal import/subscription refresh
|
2026-03-29 18:33:25 +02:00 |
|
|
Linus Rath
|
4c853f176b
|
feat: add iCal subscription editing and batch event import
|
2026-03-29 18:27:16 +02:00 |
|
|
Linus Rath
|
5583d95ecc
|
feat: preserve activation state when updating or creating Sieve scripts to avoid deactivating server-managed vacation scripts
|
2026-03-29 17:25:15 +02:00 |
|
|
Linus Rath
|
9d1302ef0a
|
feat: skip server-managed vacation script in Sieve script handling
|
2026-03-29 17:18:33 +02:00 |
|
|
Linus Rath
|
75b5d31414
|
feat: implement client-side recurrence expansion for calendar events
|
2026-03-29 17:12:30 +02:00 |
|
|
Linus Rath
|
1e90885f3f
|
i18n: add missing translation keys to all non-English locales
|
2026-03-29 14:20:41 +02:00 |
|
|
Linus Rath
|
02577c7502
|
feat: add calendar hover preview settings and functionality
|
2026-03-29 14:10:28 +02:00 |
|
|
Linus Rath
|
375c0a7339
|
feat: add JMAP server endpoint labels and hints in multiple languages
|
2026-03-29 00:52:42 +01:00 |
|
|
Linus Rath
|
99d5276cfa
|
feat: add support for custom JMAP server endpoints in login and settings
|
2026-03-29 00:47:35 +01:00 |
|
|
Linus Rath
|
60b2cf5911
|
fix: adjust account list spacing and remove push connection indicator
|
2026-03-28 23:33:44 +01:00 |
|
|
Linus Rath
|
8d7cd26fa9
|
feat: enhance compose functionality with button integration and translations
|
2026-03-28 22:53:10 +01:00 |
|
|
Linus Rath
|
1ba8e2fd47
|
feat: add folder expansion state management and settings navigation
|
2026-03-28 22:32:01 +01:00 |
|
|
Linus Rath
|
c7c22bd210
|
fix: account isolation, auto-import signer certs, and no-key error handling #35
|
2026-03-28 17:32:06 +01:00 |
|
|
Linus Rath
|
6e0c79ca2c
|
i18n: add 17 missing translation keys to all non-English locales
|
2026-03-28 15:35:24 +01:00 |
|
|
Linus Rath
|
9140110435
|
feat: add options to hide account switcher and show account avatars on navigation rail
|
2026-03-28 15:20:25 +01:00 |
|