 Lucas Gaitzsch
|
5928c6f73e
|
Merge branch 'main' into feature/scheduled-send
|
2026-05-22 12:21:39 +02:00 |
|
|
Lucas Gaitzsch
|
7dccc2f432
|
fixes from review
|
2026-05-22 12:21:32 +02:00 |
|
|
Lucas Gaitzsch
|
dd322d4c9d
|
some fixes
|
2026-05-20 20:04:46 +02:00 |
|
|
Lucas Gaitzsch
|
7e15782fb3
|
fix err
|
2026-05-20 20:00:17 +02:00 |
|
|
Lucas Gaitzsch
|
1e8bd40b93
|
fix draft duplicating
|
2026-05-20 19:58:41 +02:00 |
|
|
Lucas Gaitzsch
|
3dc1b4ceee
|
rework
|
2026-05-20 19:56:28 +02:00 |
|
|
Linus Rath
|
de847b9e9f
|
i18n: add missing translation keys across 16 locales
|
2026-05-20 18:30:50 +02:00 |
|
|
Lucas Gaitzsch
|
1a3d359fee
|
fix bugs
|
2026-05-20 08:28:31 +02:00 |
|
|
Lucas Gaitzsch
|
891c3250be
|
Merge branch 'main' into feature/scheduled-send
|
2026-05-20 08:17:46 +02:00 |
|
|
Linus Rath
|
d530d9614b
|
fix: serialize draft autosave with send to stop replies stalling in Drafts #303
|
2026-05-19 23:33:11 +02:00 |
|
|
Linus Rath
|
9a92271f6f
|
fix: prevent mobile dual-scroll and use full width for mail content
|
2026-05-19 14:38:28 +02:00 |
|
|
Linus Rath
|
97ddf935a8
|
fix: mobile handoff flow for OAuth authentication
|
2026-05-19 00:45:35 +02:00 |
|
|
Linus Rath
|
973ce1e5bd
|
feat: add mobile handoff page and JMAP authentication verification
|
2026-05-19 00:05:40 +02:00 |
|
|
Linus Rath
|
7003020855
|
fix: prevent duplication of Bulwark rules with literal braces in values
|
2026-05-18 23:58:21 +02:00 |
|
|
Linus Rath
|
5cdc5997af
|
feat: pro: pane-aware responsiveness, scoped sidebar overlay, stable pane keys
|
2026-05-18 20:42:21 +02:00 |
|
|
Linus Rath
|
c3b4707f85
|
feat: pro: drop top/bottom split, keep side-by-side only
|
2026-05-18 19:51:43 +02:00 |
|
|
Linus Rath
|
2b3094a4ef
|
feat: pro: unify split panes under a single tab bar
|
2026-05-18 19:39:57 +02:00 |
|
|
Linus Rath
|
ecd0467ffa
|
fix: stop pulling node:dns into client bundle via OAuth discovery
|
2026-05-18 19:31:38 +02:00 |
|
|
Linus Rath
|
43ac0725ce
|
feat: pro: drag tabs to reorder, drag to edge to split
|
2026-05-18 19:30:54 +02:00 |
|
|
Linus Rath
|
98879802ae
|
feat: add Pro interface
|
2026-05-18 19:17:39 +02:00 |
|
|
Linus Rath
|
cf9292262d
|
feat: pluggable reply/forward quote header #295
|
2026-05-18 17:53:23 +02:00 |
|
|
Linus Rath
|
3d2ed71f3a
|
feat: support multiple flexible event reminders #170
|
2026-05-18 17:31:44 +02:00 |
|
|
Linus Rath
|
dcd2f4b079
|
fix: wire orphaned admin policy gates and surface OAuth scope settings
|
2026-05-18 16:47:20 +02:00 |
|
|
Linus Rath
|
b2d24670ff
|
fix: scope iCal subscriptions per JMAP account and fix refresh/clear
|
2026-05-18 16:39:02 +02:00 |
|
|
Linus Rath
|
fa261fecfd
|
fix: omit empty cc/bcc from Email/set so server does not emit bare Cc: header #301
|
2026-05-18 16:36:45 +02:00 |
|
|
Linus Rath
|
40f36baf94
|
fix: iCal subscription refresh, rollback, and URL normalization
|
2026-05-18 16:31:16 +02:00 |
|
|
Linus Rath
|
400703154e
|
fix: ignore plugin-supplied target in ui.openExternalUrl to block host-frame hijack
|
2026-05-18 16:18:00 +02:00 |
|
|
Linus Rath
|
3ceada7b8a
|
fix: tighten HTML sanitization at plain-text email + signature + i18n render sites
|
2026-05-18 16:07:34 +02:00 |
|
|
Linus Rath
|
eb0643d887
|
fix: pin parent origin in iframe-bridge to block cross-frame postMessage
|
2026-05-18 16:01:29 +02:00 |
|
|
Linus Rath
|
1fc670138b
|
fix: update bundleHash to full SHA-256 for integrity verification and migrate legacy hashes
|
2026-05-18 15:57:52 +02:00 |
|
|
Linus Rath
|
313a1fcce9
|
fix: stop persisting S/MIME passphrases in sessionStorage
|
2026-05-18 15:32:04 +02:00 |
|
|
Linus Rath
|
7efd8d59bf
|
fix: escape print-window fields and re-sanitize body to block XSS
|
2026-05-18 13:24:52 +02:00 |
|
|
Linus Rath
|
c2eb2c081b
|
fix: gate admin routes against cross-origin CSRF
|
2026-05-18 13:21:01 +02:00 |
|
|
Linus Rath
|
b299a0b602
|
fix: validate plugin/theme id in marketplace install to block path traversal
|
2026-05-18 13:03:49 +02:00 |
|
|
Linus Rath
|
f275fbe2e4
|
fix: bind stalwart auth context to credential, not cookie-claimed username
|
2026-05-18 13:00:40 +02:00 |
|
|
Linus Rath
|
f134766fd1
|
fix: validate OAuth discovery endpoints against SSRF
|
2026-05-18 12:53:43 +02:00 |
|
|
Linus Rath
|
6ebf720688
|
fix: block script-bearing MIME types from inline attachment preview
|
2026-05-18 12:47:44 +02:00 |
|
|
Linus Rath
|
b1eb2b3c9b
|
fix: correct regex for valid API post path validation
|
2026-05-18 12:44:54 +02:00 |
|
|
Linus Rath
|
48aa607b56
|
feat: lock down plugin runtime in sandbox + signing + approval
|
2026-05-18 12:44:23 +02:00 |
|
|
Linus Rath
|
088810bd20
|
feat: harden plugin sandbox and migrate in-tree plugins
|
2026-05-18 12:17:54 +02:00 |
|
|
Linus Rath
|
e16f572252
|
fix: use plugin slot offer snapshots for useSyncExternalStore
|
2026-05-18 11:00:05 +02:00 |
|
|
Linus Rath
|
9f312aa556
|
feat: sandbox plugins in null-origin iframes with postMessage RPC
|
2026-05-18 10:50:49 +02:00 |
|
|
Linus Rath
|
c5ac68e137
|
fix: prevent plugin config leak to non-admin users
|
2026-05-18 10:24:29 +02:00 |
|
|
Linus Rath
|
ed6b5d5f33
|
fix: clear identity signature fields when emptied
|
2026-05-18 00:53:54 +02:00 |
|
|
Linus Rath
|
7a72903632
|
feat: show size cap on identity signature fields
|
2026-05-18 00:34:01 +02:00 |
|
|
Linus Rath
|
92127e2f00
|
fix: allow table-based layouts in HTML signature sanitizer
|
2026-05-18 00:24:08 +02:00 |
|
|
Linus Rath
|
be5ff96e4d
|
fix: toggle recipient popover when clicking name again
|
2026-05-17 23:45:57 +02:00 |
|
|
Linus Rath
|
1f47b7a6a9
|
fix: remove white halo around photo avatars
|
2026-05-17 23:44:13 +02:00 |
|
|
Linus RathandGitHub
|
551984ac44
|
Bump version from 1.6.6 to 1.6.7
|
2026-05-17 19:22:07 +02:00 |
|
|
Linus Rath
|
8c5aec9ca4
|
chore: update version to 1.6.7
1.6.7
|
2026-05-17 18:17:13 +02:00 |
|