SqWebMail 4.0.5

Sam Varshavchik <[email protected]> Fri, 11 Jun 2004 22:02:16 -0400
Newsgroups gmane.mail.sqwebmail
Message-ID <[email protected]>
Download: http://www.courier-mta.org/download.php#sqwebmail

Changes:

• When displaying full headers special HTML characters were not escaped, 
making it possible for maliciously-crafted E-mail messages to run Javascript 
scripts.  This only occurs when displaying full headers.  Patch for earlier 
versions of sqwebmail: 
http://www.courier-mta.org/beta/patches/sqwebmail-header-fix/README

• Purging the trash folder didn't update the quota correctly if compiled 
with --with-trashquota.

• Improve MIME encoding of message headers for East Asian character sets, 
and in general.  Sqwebmail has now logic to chose base64 in favor of 
quoted-printable, where appropriate.

• Diagnostic message if the shared index file does not exist.
signature.asc (application/pgp-signature, 189 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQBAymQox9p3GYHlUOIRAgtfAJ9G5gm/ykrCbLjiQlc8n6QENBy5qQCaA5rH
qYzJa6LIoYoGV0wh19XsrSI=
=6Ix0
-----END PGP SIGNATURE-----