Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Since context may be AuthUser, we must refresh the cookie where we have a user. | Mark Sapiro | 2011-04-26 | 1 | -2/+2 | |
| | ||||||
* | Yet another change to the broken browser HTML escaping. | Mark Sapiro | 2011-04-26 | 1 | -1/+2 | |
| | ||||||
* | Don't try converting non-ascii to HTML entities in unicode. | Mark Sapiro | 2011-04-26 | 1 | -2/+5 | |
| | ||||||
* | Don't redefine existing authentication contexts. | Mark Sapiro | 2011-04-25 | 1 | -2/+2 | |
| | ||||||
* | A new list poster password has been implemented. This password may only | Mark Sapiro | 2011-04-25 | 7 | -6/+55 | |
| | | | | | | be used in Approved: or X-Approved: headers for pre-approving posts. Using this password for that purpose precludes compromise of a more valuable password sent in plain text email. Bug #770581. | |||||
* | Strengthened escaping of user web data by including some characters that | Mark Sapiro | 2011-04-25 | 2 | -0/+11 | |
| | | | | some older browsers misinterpret as < or >. | |||||
* | A new mm_cfg.py setting AUTHENTICATION_COOKIE_LIFETIME has been added. | Mark Sapiro | 2011-04-25 | 3 | -1/+15 | |
| | | | | | | If this is set to a non-zero value, web authentication cookies will expire that many seconds following their last use. Its default value is zero to preserve current behavior. | |||||
* | Mailman now sets the 'secure' flag in cookies set via https URLs. | Mark Sapiro | 2011-04-25 | 2 | -1/+9 | |
| | | | | Bug #770377. | |||||
* | Added a logout link to the admindb interface and made both admin and | Mark Sapiro | 2011-04-23 | 3 | -3/+31 | |
| | | | | | admindb logout effective for a site admin cookie if allowed. Bug #769318. | |||||
* | Replaced old logos with new ones. | Mark Sapiro | 2011-04-23 | 4 | -0/+4 | |
| | ||||||
* | Changed bin/genaliases to only call the POSTFIX_*_CMD commands once when | Mark Sapiro | 2011-04-16 | 3 | -4/+12 | |
| | | | | MTA = 'Postfix'. Bug #266408. | |||||
* | Updated mailman.pot and various mailman.po files for previous change. | Mark Sapiro | 2011-04-15 | 37 | -8326/+8920 | |
| | ||||||
* | Refactor last change for i18n. | Mark Sapiro | 2011-04-15 | 1 | -5/+7 | |
| | ||||||
* | Added a report of the affected members to the warnings issued when | Mark Sapiro | 2011-04-14 | 2 | -3/+10 | |
| | | | | | setting a list with digest members digestable=No and when setting a list with non-digest members nondigestable=no. Bug #761232. | |||||
* | Fixed a problem where content filtering could remove the headers from | Mark Sapiro | 2011-04-12 | 3 | -1/+263 | |
| | | | | | an attached message/rfc822 part if the message in that part is multipart/alternative and collapse_alternatives is Yes. Bug #757062. | |||||
* | Fix for bug #701558 went to far. Don't recast message/rfc822 parts. | Mark Sapiro | 2011-04-07 | 1 | -2/+4 | |
| | | | | We want to keep the headers. | |||||
* | Changed the subscribe CGI to strip leading and trailing whitespace from | Mark Sapiro | 2011-03-29 | 2 | -2/+5 | |
| | | | | the supplied email address. Bug #745432. | |||||
* | Changed the maximum number of arguments for the who command to be | Mark Sapiro | 2011-03-21 | 2 | -2/+6 | |
| | | | | | considered administrivia from 2 to 1 to help avoid false positives. Bug #739524. | |||||
* | Added the list name as 'display-name' in added Sender: headers to help | Mark Sapiro | 2011-03-21 | 2 | -3/+7 | |
| | | | | mitigate Outlook et al 'on behalf of' displays. Bug #736849. | |||||
* | An XSS vulnerability, CVE-2011-0707, has been fixed. | Mark Sapiro | 2011-02-18 | 2 | -3/+7 | |
| | ||||||
* | Fixed a typo in the usage() definition cron/gate_news. Bug #721015. | Mark Sapiro | 2011-02-17 | 2 | -2/+4 | |
| | ||||||
* | - Fixed an uncaught KeyError when poster tries to cancel a post which was | Mark Sapiro | 2011-02-07 | 2 | -2/+6 | |
| | | | | already handled. Bug #266224. | |||||
* | - Held message user notifications now come From: list-owner instead of | Mark Sapiro | 2011-02-07 | 2 | -5/+5 | |
| | | | | list-bounces. Bug #714424. | |||||
* | - A new mm_cfg.py setting RESPONSE_INCLUDE_LEVEL has been added to control | Mark Sapiro | 2011-02-07 | 4 | -19/+98 | |
| | | | | | | | | | | | | | | | | | | | | how much of the original message is included in automatic responses to email commands. The default is 2 to preserve the prior behavior of including the full message. Setting this to 1 in mm_cfg.py will include only the original headers, and 0 will include none of the original. It is recommended to set this to 0 in mm_cfg.py to minimize the effects of backscatter. Bug #265835. - A new mm_cfg.py setting DEFAULT_RESPOND_TO_POST_REQUESTS has been added to control the default for respond_to_post_requests for new lists. It is set to Yes for backwards compatibility, but it is recommended that serious consideration be given to setting it to No. Bug #266051. - A new mm_cfg.py setting DISCARD_MESSAGE_WITH_NO_COMMAND has been added to control whether a message to the -request address without any commands or a message to -confirm whose To: address doesn't match VERP_CONFIRM_REGEXP is responded to or just logged. It defaults to Yes which is different from prior behavior. Bug #410236. | |||||
* | Updated copyright year for previous change. | Mark Sapiro | 2011-02-05 | 1 | -1/+1 | |
| | ||||||
* | Issue an HTTP 404 status for private archive file not found. | Mark Sapiro | 2011-02-05 | 2 | -0/+3 | |
| | ||||||
* | Added one and changed two MimeDel tests for rev 1272 changes. | Mark Sapiro | 2011-01-25 | 1 | -10/+72 | |
| | ||||||
* | @listname entries in *_these_nonmembers are no longer case sensitive. | Mark Sapiro | 2011-01-24 | 2 | -4/+8 | |
| | | | | Bug #705715. | |||||
* | - Changed bin/rmlist to also remove heldmsg files for the removed list and | Mark Sapiro | 2011-01-13 | 2 | -8/+19 | |
| | | | | fixed a problem with removal of stale locks for the list. Bug #700528. | |||||
* | - Fixed a bug where content filtering could leave a multipart message or | Mark Sapiro | 2011-01-13 | 2 | -1/+25 | |
| | | | | | part with just one sub-part. These should be recast to just the sub-part. Bug #701558. | |||||
* | - Fixed a bug that could erroneously handle posts from addresses in | Mark Sapiro | 2011-01-13 | 2 | -5/+11 | |
| | | | | | *_these_nonmembers and send held/rejected notices to bogus addresses when The From or other sender header is RFC 2047 encoded. Bug #702516. | |||||
* | - Updated contrib/mm-handler-2.1.10 to better handle lists with names that | Mark Sapiro | 2011-01-04 | 3 | -3/+13 | |
| | | | | look like admin addresses. Bug #697161. | |||||
* | Added bounce recognition for a bogus Dovecot MDN. Bug #693134. | Mark Sapiro | 2010-12-22 | 4 | -1/+80 | |
| | ||||||
* | - Fixed a problem where an emailed command in the Subject: header with a | Mark Sapiro | 2010-12-04 | 3 | -5/+12 | |
| | | | | | | | non-ascii l10n of an 'Re:' prefix is ignored. Bug #685261. - Fixed a problem with approving a post by email when the body of the approval mail is base64 encoded. Bug #677115. | |||||
* | - Fixed a missing format character in the Spanish translation. | Mark Sapiro | 2010-11-04 | 3 | -3/+18 | |
| | | | | | | | Bug #670988. - Fixed the host name in the From: address of the owner notification from bin/add_members. Bug #666181. | |||||
* | Preparing 2.1.14 release. | Mark Sapiro | 2010-09-20 | 2 | -4/+4 | |
| | ||||||
* | Removed '#, fuzzy' indicators resulting from prior change. | Mark Sapiro | 2010-09-10 | 36 | -159/+0 | |
| | ||||||
* | Made minor wording improvements and typo corrections in some messages. | Mark Sapiro | 2010-09-10 | 42 | -3863/+4054 | |
| | | | | Bug #426979. | |||||
* | Preparing 2.1.14rc1 release. | Mark Sapiro | 2010-09-09 | 201 | -1265/+1331 | |
| | ||||||
* | Two potential XSS vulnerabilities have been identified and fixed. | Mark Sapiro | 2010-09-09 | 4 | -98/+104 | |
| | ||||||
* | It's not necessary to catch KeyError - dict is a SafeDict(). | Mark Sapiro | 2010-09-07 | 1 | -1/+1 | |
| | ||||||
* | Fixed i18n._() to catch exceptions due to bad formats. Bug #632660. | Mark Sapiro | 2010-09-07 | 2 | -2/+8 | |
| | ||||||
* | Fixed admindb interface to decode base64 and quoted-printable encoded | Mark Sapiro | 2010-09-03 | 2 | -1/+4 | |
| | | | | message body excerpts for display. Bug #629738. | |||||
* | Fixed a missing format character in the German bin/mailmanctl docstring. | Mark Sapiro | 2010-08-31 | 2 | -1/+3 | |
| | ||||||
* | Fixed web CGI tracebacks to properly report sys.path. Bug #615114. | Mark Sapiro | 2010-08-08 | 2 | -2/+4 | |
| | ||||||
* | Changed the member options login page unsubscribe request to include the | Mark Sapiro | 2010-07-27 | 2 | -1/+5 | |
| | | | | requesters IP address in the confirmation request. Bug #610527. | |||||
* | Updated mailman.pot and msgmerged the message catalogs for added fix_url ↵ | Mark Sapiro | 2010-07-27 | 37 | -1622/+2311 | |
| | | | | message. | |||||
* | Changed fix_url to lock the list if not locked. Bug #610364. | Mark Sapiro | 2010-07-27 | 2 | -1/+8 | |
| | ||||||
* | Minor technical changes to Finnish translation. | Mark Sapiro | 2010-07-26 | 1 | -4/+4 | |
| | ||||||
* | Updated Finnish translation from Joni Toyryla. | Mark Sapiro | 2010-07-24 | 4 | -3/+7 | |
| | | | | | Changed English welcome message template to clarify that a password is only required to unsubscribe without confirmation. |