summaryrefslogtreecommitdiff
path: root/roundcubemail/program/lib/washtml.php
AgeCommit message (Collapse)Author
2009-01-20Treat 'background' attributes the same way as 'src' (another XSS vulnerability)thomasb
git-svn-id: https://svn.roundcube.net/trunk@2245 208e9e7b-5314-0410-a742-e7e81cd9613c
2008-09-17- Smart Tags and NOBR tag support in html messages (#1485363, #1485327)alec
git-svn-id: https://svn.roundcube.net/trunk@1811 208e9e7b-5314-0410-a742-e7e81cd9613c
2008-09-16Allow content of HTML head sections to be processesthomasb
git-svn-id: https://svn.roundcube.net/trunk@1805 208e9e7b-5314-0410-a742-e7e81cd9613c
2008-09-05Respect Content-Location headers in multipart/related messages (#1484946)thomasb
git-svn-id: https://svn.roundcube.net/trunk@1736 208e9e7b-5314-0410-a742-e7e81cd9613c
2008-07-22Reverted r1607. See #1485137 for explanationsthomasb
git-svn-id: https://svn.roundcube.net/trunk@1608 208e9e7b-5314-0410-a742-e7e81cd9613c
2008-07-22#1485137: added 'form' to allowed elements listalec
git-svn-id: https://svn.roundcube.net/trunk@1607 208e9e7b-5314-0410-a742-e7e81cd9613c
2008-07-22Improve HTML sanitization with washtmlthomasb
git-svn-id: https://svn.roundcube.net/trunk@1603 208e9e7b-5314-0410-a742-e7e81cd9613c
2008-06-15#1485097: Re-enable background attribute in HTML messagesalec
git-svn-id: https://svn.roundcube.net/trunk@1544 208e9e7b-5314-0410-a742-e7e81cd9613c
2008-06-07Change meta-charset specififcation in HTML to UTF-8; no need for ↵thomasb
mb_convert_encoding() anymore git-svn-id: https://svn.roundcube.net/trunk@1487 208e9e7b-5314-0410-a742-e7e81cd9613c
2008-06-04Allow <body> tag in HTML messages which will be converted to <div ↵thomasb
class='rcmBody'> git-svn-id: https://svn.roundcube.net/trunk@1470 208e9e7b-5314-0410-a742-e7e81cd9613c
2008-06-04Chech for mb_convert_encoding first because mbstring is optional for ↵thomasb
RoundCube + add some phpdoc git-svn-id: https://svn.roundcube.net/trunk@1469 208e9e7b-5314-0410-a742-e7e81cd9613c
2008-06-03-add convert encoding before html parsingalec
git-svn-id: https://svn.roundcube.net/trunk@1467 208e9e7b-5314-0410-a742-e7e81cd9613c
2008-05-29Replace our crappy html sanitization with the dom-based washtml script + fix ↵thomasb
inline message parts + remove old code + add some doc comments git-svn-id: https://svn.roundcube.net/trunk@1452 208e9e7b-5314-0410-a742-e7e81cd9613c