| Commit message (Expand) | Author | Age | Files | Lines |
* | Avoid 500 Internal Server Error for non-member with private roster. | Mark Sapiro | 2022-02-22 | 1 | -2/+2 |
* | Bumped branch version to: 2.1.39 | Mark Sapiro | 2021-12-13 | 1 | -2/+2 |
* | Fix NameError and case sensitivity in CSRF check. | Mark Sapiro | 2021-12-13 | 1 | -2/+2 |
* | Bumped branch version to: 2.1.38 | Mark Sapiro | 2021-11-30 | 1 | -2/+2 |
* | Block CSRF attack against admin or admindb pages. | Mark Sapiro | 2021-11-30 | 4 | -5/+21 |
* | Prior commit was incomplete. | Mark Sapiro | 2021-11-23 | 1 | -4/+5 |
* | Avoid NotAMemberError in CSRF check from user options page. | Mark Sapiro | 2021-11-21 | 1 | -11/+11 |
* | Bumped branch version to: 2.1.37 | Mark Sapiro | 2021-11-12 | 1 | -2/+2 |
* | Fix admindb for list with no mod password. | Mark Sapiro | 2021-11-12 | 2 | -2/+3 |
* | Bumped branch version to: 2.1.36 | Mark Sapiro | 2021-11-11 | 1 | -2/+2 |
* | Use moderator rather than admin for admindb CSRF token. | Mark Sapiro | 2021-11-03 | 1 | -2/+1 |
* | Fix a potentail XSS attack via the user options page. | Mark Sapiro | 2021-11-03 | 1 | -0/+2 |
* | Bumped branch version to: 2.1.35 | Mark Sapiro | 2021-10-19 | 1 | -2/+2 |
* | Fixes for CVEs 2021-42096 and 2021-42097. | Mark Sapiro | 2021-10-18 | 3 | -16/+32 |
* | Improve doc for VERP_PASSWORD_REMINDERS. | Mark Sapiro | 2021-10-01 | 1 | -1/+4 |
* | DMARC policy ignores domains with multiple DMARC records. | Mark Sapiro | 2021-06-06 | 1 | -1/+2 |
* | Translate 'disabled' when used. | Mark Sapiro | 2021-04-07 | 1 | -1/+3 |
* | Improve fix for lp:1921682. | Mark Sapiro | 2021-03-31 | 1 | -2/+4 |
* | Decode message bodies for replies in CommandRunner. | Mark Sapiro | 2021-03-30 | 1 | -0/+3 |
* | Fix bug in prior commit. | Mark Sapiro | 2021-03-06 | 1 | -2/+2 |
* | Thghten conditions for scrubbing text/plain. | Mark Sapiro | 2021-03-05 | 1 | -1/+7 |
* | Fix missing Subject: in some Wrap Message wrappers. | Mark Sapiro | 2021-02-14 | 1 | -2/+8 |
* | Added recognition for a non-compliant DSN from an unknown MTA. | Mark Sapiro | 2020-12-18 | 1 | -0/+4 |
* | Added onhashchange to the HTML _badwords list. | Mark Sapiro | 2020-10-22 | 1 | -0/+1 |
* | Bumped branch version to: 2.1.34 | Mark Sapiro | 2020-06-26 | 1 | -2/+2 |
* | Truncate very long names for scrubbed attachments. | Mark Sapiro | 2020-06-21 | 1 | -1/+2 |
* | Implement WARN_MEMBER_OF_SUBSCRIBE subscribe setting. | Mark Sapiro | 2020-06-10 | 2 | -0/+5 |
* | DMARC mitigation no longer misses upper case names. | Mark Sapiro | 2020-05-28 | 1 | -2/+4 |
* | Extend REFUSE_SECOND_PENDING to unsubscription as well. | Mark Sapiro | 2020-05-18 | 4 | -8/+21 |
* | Fix potential ValueError in MailList.CheckPending. | Mark Sapiro | 2020-05-13 | 1 | -4/+3 |
* | Bumped branch version to: 2.1.33 | Mark Sapiro | 2020-05-07 | 1 | -2/+2 |
* | Fixed content injection vulnerability via the private login page. | Mark Sapiro | 2020-05-07 | 1 | -7/+3 |
* | Bumped branch version to: 2.1.32 | Mark Sapiro | 2020-05-05 | 1 | -2/+2 |
* | Bumped branch version to: 2.1.31 | Mark Sapiro | 2020-05-05 | 1 | -2/+2 |
* | Fixed options login content injection vulnerability. | Mark Sapiro | 2020-05-05 | 1 | -1/+1 |
* | Workaround non-ascii in string.lowercase. | Mark Sapiro | 2020-04-25 | 1 | -0/+4 |
* | Updates to bounce recognition. | Mark Sapiro | 2020-04-25 | 1 | -0/+4 |
* | Bumped branch version to: 2.1.30 | Mark Sapiro | 2020-04-13 | 1 | -3/+3 |
* | Valid address pattern needs to consume the whole string. | Mark Sapiro | 2020-01-16 | 1 | -1/+1 |
* | Fixed SimpleMatch to only return valid addresses. | Mark Sapiro | 2020-01-16 | 2 | -7/+28 |
* | Bumped branch version to: 2.1.30rc1 | Mark Sapiro | 2020-01-11 | 1 | -4/+4 |
* | Implement REFUSE_SECOND_PENDING setting to prevent multiple pending subscribes. | Mark Sapiro | 2020-01-09 | 5 | -0/+37 |
* | Fix possible UnicodeDecodeError in sending subscription confirmation. | Mark Sapiro | 2019-11-08 | 1 | -2/+3 |
* | Implement new drop_cc switch. | Mark Sapiro | 2019-11-08 | 6 | -3/+30 |
* | Changed new 'Successfully unsubscribed:' to existing | Mark Sapiro | 2019-10-05 | 1 | -1/+1 |
* | Implemented web admin sync members. | Mark Sapiro | 2019-09-17 | 2 | -2/+110 |
* | Implement Ralf Jung's captcha feature for the subscribe form. | Mark Sapiro | 2019-06-19 | 4 | -6/+82 |
|\ |
|
| * | Don't enable CAPTCHA if 'en' key is not set | Ralf Jung | 2019-06-10 | 1 | -1/+1 |
| * | Mention in the docs that 'en' is used as the default key | Ralf Jung | 2019-06-10 | 1 | -0/+3 |
| * | fix computing the form hash when there is no CAPTCHA | Ralf Jung | 2019-06-10 | 1 | -1/+1 |