385 Commits

Author SHA1 Message Date
FreeScout
56867a0b79 Fix parsing of addresses without a space between display name and < #5678 from il2020/master
Fix parsing of addresses without a space between display name and <
2026-09-29 15:45:57 +03:00
FreeScout
8d4eb9b899 Fix fetching several messages when one of them fails - closes #5668 2026-09-29 05:43:22 -07:00
il2020
a42a2a7134 Fix parsing of addresses without a space between display name and < 2026-09-29 11:23:44 +04:00
il2020
24d0177cf8 Strip RFC 5322 quotes from display names in From/To/Cc 2026-09-23 09:40:56 +04:00
il2020
2f6b583bf1 Fix extra space inserted into long customer names 2026-09-19 19:30:34 +04:00
FreeScout
bd7fa38500 Implement client->getLastError() function for webklex/php-imap - closes #5633 2026-09-15 06:45:25 -07:00
FreeScout
29f057aa4c Fix fetching from Stalwart mail server - closes #5581 2026-09-15 06:09:44 -07:00
il2020
e5d1065743 Fix "Show Original" on IMAP servers which reject searching by Message-ID 2026-09-12 22:25:46 +04:00
FreeScout
8293c064d9 Keep CRLF header separators in MailTransport so mail() output stays valid MIME - closes #5615 2026-09-03 10:28:09 -07:00
Joost de Valk
09a18e6d0f Fix preserving CSS custom properties during minification 2026-09-03 07:15:21 +02:00
Dmitry Rantovov
c1d63c7549 Drop the dead $uri self-assignment in the laroute override 2026-09-02 18:53:53 +03:00
FreeScout
4e8e4d80c7 Do not allow unsafe symlinks when UnZipping - GHSA-rw7g-qq32-c669 2026-08-26 02:51:43 -07:00
FreeScout
26ac7e2c62 Apply module migrations when the Modules folder resolves outside the app folder #5574 from RhinoBag/fix/5569-module-migrate-path
Apply module migrations when the Modules folder resolves outside the app folder
2026-08-17 20:53:32 +03:00
Jörn Bungartz
34d2a019b0 Apply module migrations when the Modules folder is outside the app folder
module:migrate hands the module's migrations folder to the migrate command
after removing base_path() from it. Module::getPath() is a realpath(), so on
installations where the Modules folder is a symlink leading outside of the
application folder (a common container layout: /var/www/html/Modules ->
/data/Modules) base_path() does not occur in that path. The value stays
absolute, migrate prepends base_path() to it anyway (BaseCommand::
getMigrationPaths()), the resulting folder does not exist, and the migration
reports "Nothing to migrate" with exit code 0.

Updating a module through the Modules page then leaves the old schema in
place, because Module::updateModule() relies on freescout:module-install and
nothing reports the failure. Activating a module is not affected, as
ModulesController runs a plain migrate afterwards.

Modules now remember the path they have been scanned from, which still
contains the symlink and is therefore relative to base_path(), and the
module:migrate command builds the --path option from it. The scanned path
also travels through the modules cache, as Collection::toArray() keeps the
resolved path only. When neither path is inside the application folder the
command reports it instead of reporting success.

closes #5569
2026-08-17 10:39:21 -06:00
FreeScout
980c6533a8 PHP 8.5 compatibility - closes #5568,#5567 2026-08-15 03:24:53 -07:00
FreeScout
0f41f5cabb Sanitize HTTP_CF_CONNECTING_IP in Request and escape values in Logs Monitor email - GHSA-9cm3-qvj2-8hg4 2026-08-14 07:42:13 -07:00
FreeScout
f9c8089ed5 Fix sequence parameter in Webklex Message 2026-08-14 04:08:23 -07:00
FreeScout
3101b08d8b Fix path to PostTooLargeException - closes #5560 2026-08-14 00:44:43 -07:00
FreeScout
0d9a508f2c Upgrade ezyang/htmlpurifier library - closes #5529 2026-07-27 06:22:57 -07:00
FreeScout
441e46d65d Update Guzzle to the latest version 2026-07-27 02:25:14 -07:00
FreeScout
582961ec86 guzzlehttp/psr7: Host Confusion via Weak URI Host Validation - GHSA-c2w2-prh8-qm98 2026-07-27 00:38:35 -07:00
FreeScout
12863e7ad2 Escape title in symfony ExceptionHandler 2026-07-25 09:39:18 -07:00
FreeScout
2ee52deaa1 Disable /update/ routes 2026-07-25 00:30:28 -07:00
FreeScout
acdc9ef5b5 Build Zipball URL from config in Self-updater 2026-07-24 23:07:45 -07:00
FreeScout
24fdc40dc9 PHP 8.5 compatibility - closes #5516 2026-07-20 09:09:08 -07:00
FreeScout
72a8137b03 Fix Undefined variable $addressString - closes #5487 2026-07-04 07:42:05 -07:00
FreeScout
9406e102ef Fix Undefined variable $ensureAddressesAreSafe - closes #5487 2026-07-04 07:29:15 -07:00
FreeScout
85a5dbd38e Fix Undefined array key 10004 on outbound Guzzle request without a proxy - closes #5486 2026-07-04 07:04:31 -07:00
FreeScout
f4dd553530 Fix proxiying requests with Guzzle 2026-07-04 02:50:42 -07:00
FreeScout
084cb6981b laravel/framework: Validate against line breaks in emails - GHSA-5vg9-5847-vvmq 2026-07-03 23:26:34 -07:00
FreeScout
5f2925efd0 symfony/routing: Fix dot-segment encoding for chained "../" and "./" in generated URLs - GHSA-h5x3-xfc9-m39h 2026-07-03 11:35:00 -07:00
FreeScout
385a55b4b7 guzzlehttp/guzzle: Reject HTTPS proxies when libcurl lacks HTTPS-proxy suppor - GHSA-wpwq-4j6v-78m3 2026-07-03 11:26:35 -07:00
FreeScout
637fce7dbe guzzlehttp/guzzle: Reject HTTPS proxies when libcurl lacks HTTPS-proxy suppor - GHSA-wpwq-4j6v-78m3 2026-07-03 11:25:21 -07:00
FreeScout
e188765c21 guzzlehttp/guzzle: Reject dot-only cookie domains - GHSA-cwxw-98qj-8qjx 2026-07-03 11:00:39 -07:00
FreeScout
5b5ce88a90 guzzlehttp/psr7: Reject malformed Host values when constructing request URIs - GHSA-34xg-wgjx-8xph 2026-07-02 10:50:04 -07:00
FreeScout
7337879a65 guzzlehttp/psr7: Reject control and whitespace characters in URI host components - GHSA-hq7v-mx3g-29hw 2026-07-02 07:39:27 -07:00
FreeScout
adec0de39a guzzlehttp/psr7: Mitigate CRLF Injection in HTTP Start-Line Serialization - GHSA-vm85-hxw5-5432 2026-07-02 06:57:55 -07:00
FreeScout
2a804038ff Hide folders from Log Viewer 2026-06-06 20:35:14 -07:00
FreeScout
2cd2e66b77 Fix path traversal in Log Viewer - GHSA-9ph7-f3hc-95gg 2026-06-06 20:33:08 -07:00
FreeScout
e2b4151e78 Patch symfony/routing - CVE-2026-45065 2026-06-06 00:03:14 -07:00
FreeScout
c7e21d9abe Improve downloading log files logic - GHSA-858x-8f77-9vc5 2026-06-02 10:12:52 -07:00
FreeScout
afa0cb6ba5 Fix preg_replace_callback() error in Html2Text - closes #5433 2026-05-28 04:23:43 -07:00
FreeScout
fc8f50c973 Show detailed error when uploading attachments - closes #5426 2026-05-21 22:56:07 -07:00
FreeScout
65219613b9 Deprecate use_new_pop3_lib config parameter 2026-04-23 05:34:22 -07:00
FreeScout
25edcebd77 Patch PHPUnit - GHSA-qrr6-mg7r-m243 2026-04-19 23:58:03 -07:00
FreeScout
deb6788773 Fix decoding ISO-2022-JP emails - closes #5356 2026-04-19 21:55:46 -07:00
FreeScout
60c01c3707 Fix Zipper: Path traversal detected error - closes #5354 2026-04-16 11:00:29 -07:00
FreeScout
95882ea8f1 PHP 8.5 compatibility 2026-04-15 07:45:18 -07:00
FreeScout
f4590b8279 Fix compact() Undefined variable operator - closes #5308 2026-04-13 21:18:48 -07:00
FreeScout
14f17a5cd2 Check file paths in Zipper before extracting 2026-04-12 11:04:30 -07:00