| Commit message (Expand) | Author | Age | Files | Lines |
* | Added dmarc_non_moderation_action to list settings. | Mark Sapiro | 2016-02-02 | 1 | -0/+9 |
* | Merged and tweaked Jim P's mailman-auto-mod-verbose-members branch. | Mark Sapiro | 2016-01-18 | 1 | -1/+48 |
|\ |
|
| * | Improvements based on feedback from Mark Sapiro | jimpop@template.hostname | 2015-11-04 | 1 | -5/+3 |
| * | Removed 2 development debugging lines | jimpop@template.hostname | 2015-11-04 | 1 | -5/+0 |
| * | Auto-Moderate Verbose Members | jimpop@template.hostname | 2015-11-04 | 1 | -0/+26 |
|/ |
|
* | Defended against a user submitting URLs with query fragments or POST | Mark Sapiro | 2015-09-16 | 1 | -0/+16 |
* | Improved identification of remote clients coming via a proxy server. | Mark Sapiro | 2015-06-23 | 1 | -1/+8 |
|\ |
|
| * | Support for HTTP_X_FORWARDED_FOR and HTTP_FORWARDED_FOR (RFC 7239) | Jim Popovitch | 2015-06-23 | 1 | -1/+5 |
|/ |
|
* | The vette log entry for DMARC policy hits now contains the list name. | Mark Sapiro | 2015-05-01 | 1 | -4/+4 |
* | Fix for path traversal vulnerability. | Mark Sapiro | 2015-03-27 | 1 | -0/+6 |
* | Implemented the equivalent domains feature for list posting/moderation. | Mark Sapiro | 2015-01-23 | 1 | -0/+34 |
* | A number of changes from the unofficial 2.2 branch have been backported to | Mark Sapiro | 2015-01-22 | 1 | -1/+57 |
* | The options CGI now rejects all but HTTP GET and POST requests. | Mark Sapiro | 2014-09-21 | 1 | -0/+5 |
* | If checking DNS for dmarc_moderation_action and DNS lookup is not | Mark Sapiro | 2014-05-29 | 1 | -1/+5 |
* | Make dmarc_quarantine_moderaction_action a list setting. | Mark Sapiro | 2014-05-02 | 1 | -3/+2 |
* | More fine tuning of dmarc_moderation_action. | Mark Sapiro | 2014-05-02 | 1 | -8/+8 |
* | The new Utils.IsDMARCProhibited() used collections.defaultdict which | Mark Sapiro | 2014-04-19 | 1 | -3/+2 |
* | Added and modified various options regarding DMARC. See the NEWS file. | Mark Sapiro | 2014-04-15 | 1 | -1/+96 |
|\ |
|
| * | Added suuport for p=quarantine based on feedback from Franck Martin. | Jim Popovitch | 2013-11-08 | 1 | -0/+5 |
| * | Incorporated some feedback from Mark S. | Jim Popovitch | 2013-10-20 | 1 | -1/+1 |
| * | Handle CNAMEs when chasing DMARC TXT records. | Phil Pennock | 2013-03-18 | 1 | -5/+44 |
| * | Hold/Reject/Discard moderation support for Senders with a DMARC p=reject policy | Jim Popovitch | 2013-03-03 | 1 | -0/+39 |
* | | Fixed email address validation to do a bit better in obscure cases. | Mark Sapiro | 2013-12-06 | 1 | -3/+4 |
|/ |
|
* | Strengthened the validation of email addresses. | Mark Sapiro | 2011-11-13 | 1 | -8/+3 |
* | Strengthened the validation of email address domains. | Mark Sapiro | 2011-09-15 | 1 | -0/+6 |
* | Made the web escaping of additional characters a configuration setting. | Mark Sapiro | 2011-05-01 | 1 | -12/+6 |
* | Yet another change to the broken browser HTML escaping. | Mark Sapiro | 2011-04-26 | 1 | -1/+2 |
* | Don't try converting non-ascii to HTML entities in unicode. | Mark Sapiro | 2011-04-26 | 1 | -2/+5 |
* | Strengthened escaping of user web data by including some characters that | Mark Sapiro | 2011-04-25 | 1 | -0/+8 |
* | Changed the maximum number of arguments for the who command to be | Mark Sapiro | 2011-03-21 | 1 | -2/+2 |
* | Two potential XSS vulnerabilities have been identified and fixed. | Mark Sapiro | 2010-09-09 | 1 | -93/+94 |
* | XSS protection in the web interface went too far in escaping HTML | Mark Sapiro | 2009-08-01 | 1 | -1/+3 |
* | Backported several bug fixes from the 2.2 branch. | Mark Sapiro | 2009-07-31 | 1 | -20/+21 |
* | Mailman/Utils.py | Mark Sapiro | 2009-01-02 | 1 | -2/+2 |
* | Changed the regexp for Utils.suspiciousHTML to exempt the | Mark Sapiro | 2008-12-05 | 1 | -1/+2 |
* | Apply Heiko Rommel's patch for hashlib deprecation warnings for bug 293178. | Barry Warsaw | 2008-11-12 | 1 | -3/+14 |
* | Changed Utils.ValidateEmail to not allow specials (particularly ':') | Mark Sapiro | 2008-05-07 | 1 | -2/+9 |
* | Mailman/Cgi/edithtml.py | Mark Sapiro | 2007-12-04 | 1 | -0/+151 |
* | Mailman/Defaults.py.in | Mark Sapiro | 2007-11-25 | 1 | -0/+3 |
* | Detect 'who' with 1 or 2 arguments as administrivia. | Mark Sapiro | 2007-07-17 | 1 | -2/+2 |
* | CVE-2006-3636. Fixes for various cross-site scripting issues. Discovery by | bwarsaw | 2006-08-30 | 1 | -1/+1 |
* | Back port Python 2.5 compatibility changes to Mailman 2.1. Specifically, | bwarsaw | 2006-07-30 | 1 | -3/+5 |
* | - Decorate.py Fixed bug 1507248 by ignoring header/footer characters | msapiro | 2006-06-23 | 1 | -2/+8 |
* | Improved fix for bug 1275856 to return host part of DEFAULT_URL if any from | msapiro | 2006-03-18 | 1 | -7/+5 |
* | Fixed long standing bug (1275856) - get_domain() returned DEFAULT_EMAIL_HOST | msapiro | 2006-03-12 | 1 | -3/+8 |
* | FSF office has moved to 51 Franklin Street. | tkikuchi | 2005-08-27 | 1 | -1/+1 |
* | New names added to ACKNOWLEDGMENTS. Updated NEWS in preparation for 2.1.6b1. | bwarsaw | 2005-01-16 | 1 | -1/+1 |
* | Sorry, leagality of '%' and '!' is a matter of MTA (of the user's). | tkikuchi | 2005-01-11 | 1 | -1/+1 |
* | Add '%' and '!' in _badchars. They are used for source routing. | tkikuchi | 2005-01-11 | 1 | -1/+1 |
* | Secure_MakeRandomPassword(): Log an error when secure passwords were requested | bwarsaw | 2004-12-31 | 1 | -0/+3 |