Lucas Gaitzsch
dd322d4c9d
some fixes
2026-05-20 20:04:46 +02:00
Lucas Gaitzsch
3dc1b4ceee
rework
2026-05-20 19:56:28 +02:00
Lucas Gaitzsch
1a3d359fee
fix bugs
2026-05-20 08:28:31 +02:00
Lucas Gaitzsch
891c3250be
Merge branch 'main' into feature/scheduled-send
2026-05-20 08:17:46 +02:00
Linus Rath
9a92271f6f
fix: prevent mobile dual-scroll and use full width for mail content
2026-05-19 14:38:28 +02:00
Linus Rath
97ddf935a8
fix: mobile handoff flow for OAuth authentication
2026-05-19 00:45:35 +02:00
Linus Rath
973ce1e5bd
feat: add mobile handoff page and JMAP authentication verification
2026-05-19 00:05:40 +02:00
Linus Rath
5cdc5997af
feat: pro: pane-aware responsiveness, scoped sidebar overlay, stable pane keys
2026-05-18 20:42:21 +02:00
Linus Rath
c3b4707f85
feat: pro: drop top/bottom split, keep side-by-side only
2026-05-18 19:51:43 +02:00
Linus Rath
2b3094a4ef
feat: pro: unify split panes under a single tab bar
2026-05-18 19:39:57 +02:00
Linus Rath
ecd0467ffa
fix: stop pulling node:dns into client bundle via OAuth discovery
2026-05-18 19:31:38 +02:00
Linus Rath
43ac0725ce
feat: pro: drag tabs to reorder, drag to edge to split
2026-05-18 19:30:54 +02:00
Linus Rath
98879802ae
feat: add Pro interface
2026-05-18 19:17:39 +02:00
Linus Rath
cf9292262d
feat: pluggable reply/forward quote header #295
2026-05-18 17:53:23 +02:00
Linus Rath
dcd2f4b079
fix: wire orphaned admin policy gates and surface OAuth scope settings
2026-05-18 16:47:20 +02:00
Linus Rath
c2eb2c081b
fix: gate admin routes against cross-origin CSRF
2026-05-18 13:21:01 +02:00
Linus Rath
b299a0b602
fix: validate plugin/theme id in marketplace install to block path traversal
2026-05-18 13:03:49 +02:00
Linus Rath
f275fbe2e4
fix: bind stalwart auth context to credential, not cookie-claimed username
2026-05-18 13:00:40 +02:00
Linus Rath
48aa607b56
feat: lock down plugin runtime in sandbox + signing + approval
2026-05-18 12:44:23 +02:00
Linus Rath
088810bd20
feat: harden plugin sandbox and migrate in-tree plugins
2026-05-18 12:17:54 +02:00
Linus Rath
9f312aa556
feat: sandbox plugins in null-origin iframes with postMessage RPC
2026-05-18 10:50:49 +02:00
Linus Rath
c5ac68e137
fix: prevent plugin config leak to non-admin users
2026-05-18 10:24:29 +02:00
Linus Rath
bb7e1c4538
fix: per-account push subscriptions so multi-account notifications work #298
2026-05-16 22:50:01 +02:00
Linus Rath
356abcfc2d
fix: redact sensitive config secrets from admin API response
2026-05-16 22:48:06 +02:00
Linus Rath
fc641e94ac
fix: carry configSchema + settingsSchema through marketplace install
2026-05-16 19:51:59 +02:00
Linus Rath
8c93941d8d
feat: render app-top-banner slot on every authenticated page
2026-05-16 19:39:45 +02:00
Linus Rath
3a559479bd
fix: make impersonation cookies session-only
2026-05-16 18:59:46 +02:00
Linus Rath
349406723c
fix: use relative Location header in redirect
2026-05-16 18:33:44 +02:00
Linus Rath
997bedc91b
feat: allow admin password overwrite during setup recovery
2026-05-16 18:21:48 +02:00
Linus Rath
307e6d5d34
fix: warn + block install when app version is below plugin's minAppVersion
2026-05-16 18:11:52 +02:00
Linus Rath
ca1108f455
feat: master-user impersonation route + app-top-banner plugin slot
2026-05-16 17:59:07 +02:00
Linus Rath
0ff88f36ed
Merge branch 'main' of https://github.com/bulwarkmail/webmail
2026-05-16 16:35:43 +02:00
Linus Rath
2b4ebb1fbb
feat: add HTTPS requirement warning in setup wizard
2026-05-16 16:31:12 +02:00
Timo Streule and Linus Rath
a829c2818f
fix: pad safe-area-inset-top
2026-05-16 00:55:24 +02:00
Timo Streule and Linus Rath
c54cf73c3a
fix: respect safe-area insets on mobile bottom bars
2026-05-15 23:50:29 +02:00
Timo Streule and Linus Rath
c45ef86924
fix: add viewport export with 'initialScale: 1'
2026-05-15 23:01:39 +02:00
Linus Rath
f39366b470
fix: read OAUTH_SCOPES at runtime instead of build time
2026-05-15 20:37:00 +02:00
Timo Streule and Linus Rath
d0d6632b24
chore: drop redundant '-- ' prefix from dev identity signatures
...
The signature separator is already controlled by the
signatureSeparatorEnabled setting (lib/email-composer), which prepends
'-- ' at compose time when enabled. Baking it into the fixture
double-prefixed it.
2026-05-15 14:46:43 +02:00
Linus Rath
d5dddba6df
fix: hide Files settings/nav when filesEnabled policy is off #291
2026-05-15 14:41:57 +02:00
Linus Rath
fae15f073e
fix: honor cookieSameSite admin config override #284
2026-05-14 21:49:37 +02:00
Linus Rath
c646c87030
fix: standardize punctuation in tooltips and comments across multiple locales and code files
2026-05-14 21:44:24 +02:00
Linus Rath
b4a76bc4d1
chore: expand demo fixtures with more emails, contacts, and portrait photos
2026-05-14 15:19:24 +02:00
Linus Rath
dfe886636b
fix: broaden body font for non Latin script rendering #265
2026-05-13 14:43:07 +02:00
Linus Rath
32fe871b70
fix: support HTTP basic auth in iCal subscription URLs #275
2026-05-13 14:27:54 +02:00
Linus Rath
ea424cad7e
fix: honor admin-uploaded favicon in root metadata #274
2026-05-13 00:33:23 +02:00
Lucas Gaitzsch and Linus Rath
3f444a8912
Feature/protocol handlers
...
* Added account selection for protocol links when multiple connected accounts are available, including mailto: links
* Added support for handling mailto: links in an already-open PWA/session instead of always opening a new tab
* Added webcal: protocol handling for calendar links
* Added account selection for webcal: links when multiple calendar-capable accounts are connected
* Added an import-or-subscribe choice for detected webcal calendars
* Added protocol handler settings for registering mail and calendar handlers and choosing the open mode
* Added service worker/session coordination for passing protocol requests between browser/PWA contexts
* Added tests and translations for the new protocol handler flows
2026-05-12 20:49:05 +02:00
Linus Rath
8b0e2052cf
fix: honor NEXT_PUBLIC_BASE_PATH in admin sidebar nav links #271
2026-05-12 16:10:29 +02:00
Linus Rath
f9f8af2f11
fix: preserve signature styling and reactivity in above-quote mode #272
2026-05-12 16:03:10 +02:00
Linus Rath
9571f2e185
fix: skip upstream JMAP reverify for trusted URLs #237
2026-05-11 19:22:37 +02:00
Linus Rath
8c21f462c2
feat: add signature position to email behavior settings search
2026-05-11 17:07:24 +02:00
Lucas Gaitzsch