SRCmail/lib at 5306f7c548658485ef2a4a22426e7e8d96b67a7c - SRCmail - Gitea: Git with a cup of tea

src-advisory/SRCmail

Files

T

History

Stefan HildebrandtandLinus Rath 5306f7c548 fix: cap filename tokens at the full 200-char limit, not 80

renderRaw (and the attachment-template renderer) sanitised each {token}
with sanitizePart's default 80-char cap, so a single long token such as
{subject} was truncated to 80 — well before the documented 200-char
filename limit, which was therefore unreachable per token. Introduce a
FILENAME_MAX_LEN (200) constant and use it for the per-token cap so the
overall limit governs. Adds tests.

2026-06-21 19:28:57 +02:00

..

fix: cap filename tokens at the full 200-char limit, not 80

2026-06-21 19:28:57 +02:00

feat(oauth): add OAUTH_AUTHORIZE_URL to override authorize endpoint

2026-06-19 12:30:23 +02:00

feat: require re-authentication for device pairing and SSO

2026-06-05 19:23:06 +02:00

fix: fix inconsistent behavior with threading email messages in the inbox/folders

2026-06-15 23:00:30 +02:00

feat: expose PWA, app identity, and extension directory keys in JSON config #312

2026-05-21 23:35:58 +02:00

fix: repair pre-existing failing vitest suite

2026-06-19 23:53:20 +02:00

feat: add sessionSecretFile and oauthClientSecretFile for JSON config

2026-05-31 00:14:38 +02:00

fix: repair pre-existing failing vitest suite

2026-06-19 23:53:20 +02:00

protocol-handlers

feat: email a contact or group via the in-app composer

2026-06-19 12:29:43 +02:00

fix: validate URLs before outbound fetch

2026-04-27 22:23:39 +02:00

feat: expose PWA, app identity, and extension directory keys in JSON config #312

2026-05-21 23:35:58 +02:00

Feature: extended filter rules — attachment field + multi-value conditions

2026-05-30 15:45:33 +02:00

fix: repair pre-existing failing vitest suite

2026-06-19 23:53:20 +02:00

feat: lift 5-account cap on HTTP/2

2026-05-07 12:28:33 +02:00

fix: make telemetry opt-in

2026-06-14 14:31:26 +02:00

chore: update version to 1.6.2

2026-05-06 20:07:36 +02:00

fix: prefix remaining <img>, favicon, and WebDAV URLs with basePath #319

2026-05-25 16:45:13 +02:00

account-state-manager.ts

fix: isolate per-account state snapshots from leakage and mutation

2026-06-20 13:09:26 +02:00

account-utils.ts

feat: web setup wizard + admin config/state dir split (#226 )

2026-05-09 17:37:41 +02:00

birthday-calendar.ts

chore: clear pre-commit eslint warnings (unused symbols, stale disables, test any)

2026-06-19 12:31:07 +02:00

browser-navigation.ts

chore: clear pre-commit eslint warnings (unused symbols, stale disables, test any)

2026-06-19 12:31:07 +02:00

builtin-themes.ts

feat: add Aurora Glass built-in theme

2026-06-03 19:30:51 +02:00

calendar-alerts.ts

feat: replace Date constructor with parseISO for improved date handling across calendar components #25

2026-03-26 17:42:44 +01:00

calendar-event-normalization.ts

fix: JSCalendar 2.0 recurrenceRule single-object compatibility 116

2026-03-31 00:11:04 +02:00

calendar-ics-export.ts

i18n: add missing translation keys

2026-04-21 17:42:52 +02:00

calendar-invitation.ts

fix: export isCalendarMimeType for use in email attachment filtering

2026-04-16 16:54:09 +02:00

calendar-participants.ts

fix: add calendarAddress and replyTo to calendar participants for Stalwart compatibility #189 #192

2026-04-14 14:26:28 +02:00

calendar-utils.ts

fix: handle malformed event dates in calendar route #316

2026-05-22 14:04:02 +02:00

color-transform.ts

feat: add participant scheduling with iTIP invitations and inline calendar invitation banner

2026-02-17 01:09:57 +01:00

debug.ts

feat: store trusted senders in a dedicated JMAP address book #176

2026-04-12 01:10:28 +02:00

download-filename.ts

fix: cap filename tokens at the full 200-char limit, not 80

2026-06-21 19:28:57 +02:00

email-composer-utils.ts

feat: split a pasted address list into recipient chips

2026-06-19 12:30:43 +02:00

email-headers.ts

feat: surface most severe SPF result and hide "via" badge on spoofed mail

2026-06-01 17:46:57 +02:00

email-sanitization.ts

fix: tighten HTML sanitization at plain-text email + signature + i18n render sites

2026-05-18 16:07:34 +02:00

email-threading.ts

chore: update version to 1.6.2

2026-05-06 20:07:36 +02:00

eml-import.ts

feat: support importing emails from .zip archives

2026-05-22 15:22:33 +02:00

error-reporting.ts

Initial release: JMAP Webmail Client

2025-12-10 17:54:22 +01:00

file-preview.ts

Feature: preview .eml (message/rfc822) attachments like an email

2026-06-01 17:25:14 +02:00

html-to-text.ts

fix: preserve line breaks in generated text/plain alternative #421

2026-06-15 23:15:04 +02:00

iframe-bridge.ts

fix: pin parent origin in iframe-bridge to block cross-frame postMessage

2026-05-18 16:01:29 +02:00

logger.ts

feat: add contacts phase 2, advanced search, vacation responder, Docker & TOTP 2FA

2026-02-16 18:51:30 +01:00

mdn.ts

Feature: read receipts (MDN, RFC 8098)

2026-05-30 15:58:39 +02:00

notification-sound.ts

feat: logging to include categories for better log management

2026-03-31 16:31:27 +02:00

plugin-hooks.ts

feat: pluggable reply/forward quote header #295

2026-05-18 17:53:23 +02:00

plugin-i18n.ts

fix: standardize punctuation

2026-04-16 19:07:42 +02:00

plugin-loader.ts

Feature: localizable sandboxed plugins (manifest locales + api.i18n.t)

2026-05-30 15:56:55 +02:00

plugin-projection.ts

feat: add /api/translate proxy and expose email body to plugins

2026-05-31 18:01:00 +02:00

plugin-storage.ts

chore: update version to 1.5.3

2026-04-28 17:34:06 +02:00

plugin-types.ts

feat: add /api/translate proxy and expose email body to plugins

2026-05-31 18:01:00 +02:00

plugin-validator.ts

chore: update version to 1.5.3

2026-04-28 17:34:06 +02:00

quote-header.ts

Fix: localize reply/forward quote header incl. sender address

2026-05-30 14:09:23 +02:00

read-file-env.ts

feat: add SESSION_SECRET_FILE and OAUTH_CLIENT_SECRET_FILE env vars

2026-04-09 22:13:08 +02:00

recurrence-expansion.ts

chore: clear pre-commit eslint warnings (unused symbols, stale disables, test any)

2026-06-19 12:31:07 +02:00

reply-identity.ts

fix: standardize punctuation in tooltips and comments across multiple locales and code files

2026-05-14 21:44:24 +02:00

settings-sync.ts

feat: web setup wizard + admin config/state dir split (#226 )

2026-05-09 17:37:41 +02:00

shared-calendar-colors.ts

Feature: per-viewer colors for shared calendars (#345 )

2026-05-31 15:52:27 +02:00

signature-utils.ts

fix: preserve line breaks in generated text/plain alternative #421

2026-06-15 23:15:04 +02:00

sub-addressing.ts

chore: update version to 1.6.2

2026-05-06 20:07:36 +02:00

subject-prefix.ts

Fix: drop single-letter R:/I: subject prefix tokens

2026-05-30 16:04:44 +02:00

template-types.ts

feat: add email templates with placeholder variables and composer integration

2026-02-17 01:35:26 +01:00

template-utils.ts

fix: replace unguarded crypto.randomUUID() with safe generateUUID() utility

2026-04-02 14:51:21 +02:00

theme-compiler.ts

chore: update version to 1.5.3

2026-04-28 17:34:06 +02:00

theme-loader.ts

chore: update version to 1.5.3

2026-04-28 17:34:06 +02:00

thread-utils.ts

fix: fix inconsistent behavior with threading email messages in the inbox/folders

2026-06-15 23:00:30 +02:00

tnef.ts

fix: standardize punctuation

2026-04-16 19:07:42 +02:00

unified-mailbox.ts

feat: include group inboxes in unified mailbox view #328

2026-05-23 16:01:22 +02:00

utils.ts

feat: locale-aware date format in email list with preset picker #331

2026-05-25 16:17:32 +02:00

validation.ts

feat: expand internationalization and add identity management

2026-01-08 22:15:32 +01:00

vcard.ts

feat: expose PWA, app identity, and extension directory keys in JSON config #312

2026-05-21 23:35:58 +02:00

version-compare.ts

feat: expose PWA, app identity, and extension directory keys in JSON config #312

2026-05-21 23:35:58 +02:00

web-push.ts

ix: reap only relay-confirmed-dead leftover push subscriptions

2026-06-17 09:11:29 +02:00