- Dev - Roundcube mailing lists

Enigma logging
by Kyle Francis 23 Aug '16

23 Aug '16

2 1

QP-encoding and decoding within a plugin
by Rimas Kudelis 18 Aug '16

18 Aug '16

Hi, is there an official way to QP-encode and QP-decode a text string from within a RoundCube plugin? Thanks! Rimas

2 2

RC 1.2.1 - Enigma signed e-mail validation failure
by sgironella＠schema31.it 28 Jul '16

28 Jul '16

Hi. I'm facing a strange behaviour on latest RC version. I've enabled Enigma plugin and I'm able to create my key pairs, sign and encrypt messages. The strange thing is I couldn't verify signed messages at all, even if decryption in perfectly working. I've debugged GPG class (vendor/pear-pear.php.net/Crypt_GPG/Crypt/GPG.php) to verify what he was doing and why sign validation always fails. Within _SIGN() method, I've added following lines to log what he was going to sign: _$rc = rcmail::get_instance();_ _$rc->console('---------------------------------');_ _$rc->console('SIGN INPUT');_ _$rc->console($input);_ _$rc->console('---------------------------------');_ Same thing within _VERIFY() method, to log what is going to verify: _$rc = rcmail::get_instance();_ _$rc->console('---------------------------------');_ _$rc->console('VERIFY INPUT');_ _$rc->console($input);_ _$rc->console('---------------------------------');_ _$rc->console('VERIFY SIGNATURE');_ _$rc->console($signature);_ _$rc->console('---------------------------------');_ Here is my full output for the sequence: * user send a new signed email to himself * user goes to inbox and open signed e-mail I've noticed that the signed message has an extra newline between main headers and body (take a look at the highlited rows) so I thing that's why sign verification fails (content doesn't match with original message). _[27-Jul-2016 15:10:38 +0200]: <cmnloql4> ---------------------------------_ _[27-Jul-2016 15:10:38 +0200]: <cmnloql4> SIGN INPUT_ _[27-JUL-2016 15:10:38 +0200]: <CMNLOQL4> CONTENT-TYPE: MULTIPART/ALTERNATIVE;_ _ BOUNDARY="=_944CBD90B0D51928FF049222817A4B03"_ _--=_944CBD90B0D51928FF049222817A4B03_ _Content-Transfer-Encoding: 7bit_ _Content-Type: text/plain; charset=US-ASCII_ _This is an HTML content..._ _--=_944cbd90b0d51928ff049222817a4b03_ _Content-Transfer-Encoding: quoted-printable_ _Content-Type: text/html; charset=UTF-8_ _<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; charset=_ _=3DUTF-8" /></head><body style=3D'font-size: 10pt; font-family: Verdana,Gen=_ _eva,sans-serif'>_ _<p>This is an HTML content...</p>_ _</body></html>_ _--=_944cbd90b0d51928ff049222817a4b03--_ _[27-Jul-2016 15:10:38 +0200]: <cmnloql4> ---------------------------------_ _[27-Jul-2016 15:10:45 +0200]: <cmnloql4> ---------------------------------_ _[27-Jul-2016 15:10:45 +0200]: <cmnloql4> VERIFY INPUT_ _[27-JUL-2016 15:10:45 +0200]: <CMNLOQL4> CONTENT-TYPE: MULTIPART/ALTERNATIVE;_ _ BOUNDARY="=_944CBD90B0D51928FF049222817A4B03"_ _--=_944CBD90B0D51928FF049222817A4B03_ _Content-Transfer-Encoding: 7bit_ _Content-Type: text/plain; charset=US-ASCII_ _This is an HTML content..._ _--=_944cbd90b0d51928ff049222817a4b03_ _Content-Transfer-Encoding: quoted-printable_ _Content-Type: text/html; charset=UTF-8_ _<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; charset=_ _=3DUTF-8" /></head><body style=3D'font-size: 10pt; font-family: Verdana,Gen=_ _eva,sans-serif'>_ _<p>This is an HTML content...</p>_ _</body></html>_ _--=_944cbd90b0d51928ff049222817a4b03--_ _[27-Jul-2016 15:10:45 +0200]: <cmnloql4> ---------------------------------_ _[27-Jul-2016 15:10:45 +0200]: <cmnloql4> VERIFY SIGNATURE_ _[27-Jul-2016 15:10:45 +0200]: <cmnloql4> -----BEGIN PGP SIGNATURE-----_ _Version: GnuPG v1_ _iQEcBAEBAgAGBQJXmLLOAAoJEB1v3mO3A8Wpz6QH/015jrt7YkfGT8pE1nyjpHHe_ _JoCEmugkpmEgJ6wjTgU1SHQos5l1mKqFhsrzpdNghO11yqB/NxOjxOpqSkE9c9c1_ _dXr/H53cLfqPULMD5dqGBFua180BUdLAQ0Nvyll7kD8Y/irU5ccrwA1e3Cb9RYp0_ _sGplLYcD7pPKthCGQfFzPslL9Fj82MBJigm46cKa7pqYhJDNkM4q4zsqtNXcTUqB_ _HcFhEL3+Q21bAbie+B8hDw2SUYGEZORf+sLUrW1oQLLG5ld6XZywCDDKdpq6F+ET_ _OzVaXta8cMIg5dwP/10VALlqYavlzjY/0h7lBmEgm5W/ehs7XuReur45LsS1KJg=_ _=Q6j9_ _-----END PGP SIGNATURE-----_ _[27-Jul-2016 15:10:45 +0200]: <cmnloql4> --------------------------------_ Anyone is facing the same issue? Maybe it's not an Enigma related issue but a Roundcube behaviour because it happes even on not signed e-mails (but in this case it doesn't bother at all). Any help would be really appreciate. Thanks. Stefano

3 4

Update 1.2.1 published
by Thomas Bruederli 26 Jul '16

26 Jul '16

Dear subscribers We just published the first service release to update the stable version 1.2. It contains some important bug fixes and improvements in the recently introduced Enigma plugin for PGP encryption. See the detailed Changelog in the wiki [1] or on the the release page [2]. This release is considered stable and we recommend to update all productive installations of Roundcube with this version. Download it from GitHub via https://roundcube.net/download. As usual, don’t forget to backup your data before updating! Best, Thomas [1] https://github.com/roundcube/roundcubemail/wiki/Changelog#release-121 [2] https://github.com/roundcube/roundcubemail/releases/tag/1.2.1

1 0

RC 1.2 - Corrupted e-mail headers while sending an html empty message
by sgironella＠schema31.it 14 Jul '16

14 Jul '16

Hello all, I've recently posted a bug reporting to the Roundcube community forum [1] We have noticed a strange behavior with a fresh Roundcube 1.2 install (no additional plugins enabled nor 'strange' custom config defined). To reproduce this, send an e-mail using the html editor, leaving a blank content. Received e-mail has a 'text/html' content-type (instead of the expected 'multipart'). therefore client view raw mime-parts as e-mail content. Note that sent e-mail (taken from sender 'sent' mailbox) has the right content-type (multipart) so it's perfectly readable. In addition, we have recorded a tcpdump session, that confirm our impression of having two separate libraries handling in a different way SMPT (for delivery) and IMAP (for storing e-mail within 'sent' inbox) sections; that's what we got: IMAP SESSION (SAVE E-MAIL TO 'SENT' MAILBOX) - Note the right mime-type and boundary here * OK [CAPABILITY IMAP4rev1 AUTH=LOGIN AUTH=CRAM-MD5 ID LITERAL+] dbmail 3.2.3 ready. A0001 LOGIN xxxxx@xxxxxx xxxxxxx A0001 OK [CAPABILITY IMAP4rev1 ACL RIGHTS=texk NAMESPACE CHILDREN SORT QUOTA THREAD=ORDEREDSUBJECT UNSELECT IDLE ID UIDPLUS WITHIN CONDSTORE LITERAL+ ENABLE QRESYNC] User utente1(a)mail.qa.schema31.it authenticated A0002 LSUB "" Sent * LSUB (\hasnochildren) "/" "Sent" A0002 OK LSUB completed A0003 LIST "" Sent * LIST (\hasnochildren) "/" "Sent" A0003 OK LIST completed A0004 APPEND Sent (\Seen) {936+} MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="=_17681037babd7dadb94a79c2cf51cb1f" Content-Transfer-Encoding: quoted-printable Date: Thu, 14 Jul 2016 14:23:01 +0200 From: Utente di TEST <utente1(a)mail.qa.schema31.it> To: stefano.gironella(a)gmail.com Subject: prova 2 Organization: SC31 Message-ID: <a46919e3b0380e0dc85f82e475581740(a)mail.qa.schema31.it> X-Sender: utente1(a)mail.qa.schema31.it User-Agent: Roundcube Webmail/1.2.0 --=_17681037babd7dadb94a79c2cf51cb1f Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII --=_17681037babd7dadb94a79c2cf51cb1f Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=UTF-8 <html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; charset= =3DUTF-8" /></head><body style=3D'font-size: 10pt; font-family: Verdana,Gen= eva,sans-serif'> </body></html> --=_17681037babd7dadb94a79c2cf51cb1f-- A0004 OK [APPENDUID 2028 2695213] APPEND completed A0005 LOGOUT * BYE A0005 OK LOGOUT completed SMTP SESSION (E-MAIL DISPATCH) - Note that content-type here is 'text/html' (maybe taken from the first non-empty mime-part?) 220 litio.roma.schema31.it ESMTP Sendmail 8.14.5/8.14.5; Thu, 14 Jul 2016 14:23:01 +0200 (CEST) EHLO localhost 250-litio.roma.schema31.it Hello [10.33.100.158], pleased to meet you 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-8BITMIME 250-SIZE 250-DSN 250-ETRN 250-STARTTLS 250-DELIVERBY 250 HELP MAIL FROM:<utente1(a)mail.qa.schema31.it> 250 2.1.0 <utente1(a)mail.qa.schema31.it>... Sender ok RCPT TO:<stefano.gironella(a)gmail.com> 250 2.1.5 <stefano.gironella(a)gmail.com>... Recipient ok DATA 354 Enter mail, end with "." on a line by itself MIME-Version: 1.0 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Date: Thu, 14 Jul 2016 14:23:01 +0200 From: Utente di TEST <utente1(a)mail.qa.schema31.it> To: stefano.gironella(a)gmail.com Subject: prova 2 Organization: SC31 Message-ID: <a46919e3b0380e0dc85f82e475581740(a)mail.qa.schema31.it> X-Sender: utente1(a)mail.qa.schema31.it User-Agent: Roundcube Webmail/1.2.0 --=_6e4cf8211c48e997305a4faab4020297 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII --=_6e4cf8211c48e997305a4faab4020297 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=UTF-8 <html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; charset= =3DUTF-8" /></head><body style=3D'font-size: 10pt; font-family: Verdana,Gen= eva,sans-serif'> </body></html> --=_6e4cf8211c48e997305a4faab4020297-- . 250 2.0.0 u6ECN1Je026469 Message accepted for delivery QUIT 221 2.0.0 litio.roma.schema31.it closing connection Links: ------ [1] http://www.roundcubeforum.net/index.php/topic,23529.0.html

3 4

Mailvelope default keyring identifier
by Kyle Francis 12 Jul '16

12 Jul '16

I noticed in app.js the default mailvelope keyring identifier is set to this.user_id, which is a long unique identifier. This produced an unexpected behavior for me. My use case was as such: I initially installed Mailvelope, exported my GPG keys from roundcube/enigma and loaded them into Mailvelope (no issues). Then I attempted to encrypt an outgoing email using the Mailvelope api plugin (vice the enigma plugin) and was told that Mailvelope was unable to find the requisite public keys for the intended recipient. Wait, what? I just imported those in the last step... In debugging app.js through the browser I saw that the keyring was in fact empty, yet the only keyring I saw through the plugin interface in Firefox was the default keyring that I had previously imported keys into. It wasn't until I used the mailvelope API to manually open the settings page for the new keyring that I was able to in face see the alternate keyring (and subsequently add keys to it). As it turns out, the default keyring identifier used by the Mailvelope plugin is in fact 'mailvelope'. Would it make more sense to default to that keyring instead of initializing a new one off of the user_id in Roundcube? Are there any conflicts that I'm not thinking of? I suggest this change since I wasn't even able to find the new roundcube keyring from the user interface in the first place. To me this seems "more intuitive", but then again my HCI course isn't until the fall semester ;) If this would be useful I would be more than happy to submit a PR. Kyle

2 1

Updating Crypt_GPG version
by Kyle Francis 11 Jul '16

11 Jul '16

I saw the changes for adding the option to exporting Private GPG keys from the Enigma plugin which is awesome. I was doing some testing with my SMIME work making sure I didn't break anything when I noticed that exporting private GPG keys fails for me because I don't have the latest version of Crypt_GPG which has the new exportPrivateKeys function. Since the vendor folder isn't included in the github repo, what would be the best way to update my local copy of Crypt_GPG? Can I just copy Crypt_GPG-1.4.2/{Crypt,data} to roundcubemail/vendor/pear-pear.php.net/Crypt_GPG? Kyle

2 2

Accessing Mailvelope Keyring
by Kyle Francis 11 Jul '16

11 Jul '16

I just started playing around with the Mailvelope support in v1.2 and I it looks quite nice. I wasn't aware that Mailvelope now supports adding attachements and that was a pleasant surprise. In attempting to implement the hybrid PGP decryption model (decrypting the session key in the client and passing the session key back to the server for full decryption) I was hoping to tap into the mailvelope keyring as I figure it will be more secure in terms of storage than attempting to write my own using openpgp.js. I see where mailvelope is loaded in app.js and "this" refers to an instance of rcube_webmail. However, from the plugin space (i.e. enigma.js) the "this" class is of type rcmail and notably "this" does not contain the previously initialized "mailvelope_keyring". Since my javascript fu is not as strong as my php fu, would anyone be able to point me in the right direction of how to access the mailvelope_keyring from inside the plugin space, specifically enigma.js? -Kyle

2 1

[1.3] Drop mail() support
by A.L.E.C 28 Jun '16

28 Jun '16

PHP mail() is just too simple for such a sophisticated app as Roundcube. I propose to drop mail() support and require smtp_server setting. Is there any reason to keep it? https://github.com/roundcube/roundcubemail/issues/5340 -- Aleksander 'A.L.E.C' Machniak Kolab Groupware Developer [http://kolab.org] Roundcube Webmail Developer [http://roundcube.net] --------------------------------------------------- PGP: 19359DC1 @@ GG: 2275252 @@ WWW: http://alec.pl

1 0

Enigma decryption password prompt
by Kyle Francis 28 Jun '16

28 Jun '16

2 5

Patch for french translation
by Olivier Thauvin 20 Jun '16

20 Jun '16

Hi, There is a small but very anoying typo in the french translation. In a nutshell the current translation is: on = No off = Yes. I did a patch few month ago, can please apply it to definitivly solve this issue. Regards. -- Olivier Thauvin CNRS - LATMOS ♖ ♘ ♗ ♕ ♔ ♗ ♘ ♖

2 1

Security issue in centos_rhel_install.sh
by Alex H. 14 Jun '16

14 Jun '16

Hi, I just subscribed to tell you this issue I stumbled upon. In centos_rhel_install.sh [1] there is this line for generating the des key and then putting it in the config. The way it is made, the key might contain characters which break the sed expression putting the key in the config file, so that the configured key is broken: The line generating the key: deskey=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9-_#&!*%?' | fold -w 24 | head -n 1) Taking a look on this example key: 2S0?w1*6GXrxFSah!%&xjnaq It can contain a '&', which will break the sed expression: sed -i "s|^$\$config\['des_key'\] =$.*$|\1 \'${deskey}\';|" /var/www/html/roundcube/config/config.inc.php so that the example key will bring this result in the config: $config['des_key'] = '2S0?w1*6GXrxFSah!%$config['des_key'] = 'rcmail-!24ByteDESkey*Str';xjnaq'; instead of: $config['des_key'] = '2S0?w1*6GXrxFSah!%&xjnaq'; Some info about my environment: # cat /etc/centos-release CentOS release 6.8 (Final) # sed --version GNU sed version 4.2.1 Best regards, Alex H. [1] https://gist.github.com/rcubetrac/cc85589b837d58680a86e7b5cbb09a4f#file-cen…

1 0

Searching for messages...
by Michael Heydekamp 11 Jun '16

11 Jun '16

...still seems to be quite a strange thing in Roundcube. Just did a search for the term "Ibiza" in the subject: 1) First of all, some messages even when searching in just one specific folder are not found at all. Although the subject clearly contains this string, a message with the subject "Auftragsbestätigung Düsseldorf-Valencia-Ibiza 12JUN16" is not being found. Looking at the source of the message, it becomes quite clear, why: > Subject: =?UTF-8?Q?Auftragsbest=C3=A4tigung_D=C3=BCsseldorf-Valencia-Ibiz?= > =?UTF-8?Q?a_12JUN16?= See...? The subject is folded right before the last character of "Ibiza", and the search routine apparently doesn't unfold such headers. Not good. 2) OTOH, a search for the same string "Ibiza" across ALL folders does find messages which do not contain this string in the subject at all and therefore shouldn't be found: "Re: Anfrage Mexiko-Miami 02DEC16 und Montréal-New York 10DEC16" "Re: IBZ - Vigo" "✈ Aktuelle Flugzeugverfügbarkeiten" "Re: EMPTY LEG C650 (CITATION III ) Availability" "Re: ZRH - DUS" Just a few examples of HUNDREDS of (wrong) matches. What's the search routine looking for? Apparently not only for "Ibiza", but for what else? Indeed, those messages DO contain the string "Ibiza" in the body, but I didn't ask for a search in the subject AND the body. I still may have more issues with regards to searching messages which I did report last year already, but that should be it for today. Searching for messages is quite critical for me, as I'm using Roundcube not (only) for private purposes - as you may see above. Cheers, -- Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany

3 7

[1.3] Modify search box
by A.L.E.C 10 Jun '16

10 Jun '16

https://github.com/roundcube/roundcubemail/issues/5312 This one is not so significant, but there is a couple of options. -- Aleksander 'A.L.E.C' Machniak Kolab Groupware Developer [http://kolab.org] Roundcube Webmail Developer [http://roundcube.net] --------------------------------------------------- PGP: 19359DC1 @@ GG: 2275252 @@ WWW: http://alec.pl

1 0

[1.3] Drop legacy browser support
by A.L.E.C 10 Jun '16

10 Jun '16

Hi! there's a couple of things that should be discussed/voted for Roundcube 1.3. So, please put your comment here or in the ticket in case you are against the proposed changes. This is about dropping IE7, IE8, and maybe IE9 support, including removal of legacy_browser plugin. https://github.com/roundcube/roundcubemail/issues/5167 -- Aleksander 'A.L.E.C' Machniak Kolab Groupware Developer [http://kolab.org] Roundcube Webmail Developer [http://roundcube.net] --------------------------------------------------- PGP: 19359DC1 @@ GG: 2275252 @@ WWW: http://alec.pl

1 0

[1.3] Addressbook -> Contacts
by A.L.E.C 10 Jun '16

10 Jun '16

Hi! there's a couple of things that should be discussed/voted for Roundcube 1.3. So, please put your comment here or in the ticket in case you against the proposed changes. https://github.com/roundcube/roundcubemail/issues/5233 -- Aleksander 'A.L.E.C' Machniak Kolab Groupware Developer [http://kolab.org] Roundcube Webmail Developer [http://roundcube.net] --------------------------------------------------- PGP: 19359DC1 @@ GG: 2275252 @@ WWW: http://alec.pl

1 0

Roundcube Webmail 1.2.0 released
by Thomas Bruederli 26 May '16

26 May '16

Dear subscribers Today we proudly announce the stable version 1.2.0 of Roundcube Webmail which is now available for download. It introduces new features since version 1.1 covering security and PGP encryption topics: - PHP7 compatibility - PGP encryption - Drag-n-drop attachments from mail preview to compose window - Mail messages searching with pre-defined date interval - Improved security measures to protect from brute-force attacks And of course plenty of small improvements and bug fixes. There wasn't much feedback on the 1.2-beta version and the release candidate which we consider a good sign. Some cleanup and stabilization of the Enigma plugin just happened for the now stable version. As already announced with the 1.2-beta release [1], PGP encryption comes in two flavors: client-side using the Mailvelope browser extension and server-side with the Enigma plugin using GnuPG on the server. Support with the Mailvelope browser plugin comes out of the box and is automatically enabled if the Mailvelope API is detected in a user’s browser. The Mailvelope documentation [2] explains how to enable it for your site. The features of the Enigma plugin, which comes with the release package and simply needs to be activated for your Roundcube installation are explained in Alec's blog post [3]. With the release of Roundcube 1.2.0, the previous stable release branches 1.0.x and 1.1.x will switch in to LTS low maintenance mode which means they will only receive important security updates but no longer any regular improvements from upstream. See the complete Changelog in our wiki [4] and download the new packages from https://roundcube.net/download. Roundcube 1.2.0 is considered stable and we recommend to update all productive installations of Roundcube. As usual, don’t forget to backup your data before updating ;-) Best, Thomas [1] https://roundcube.net/news/2015/11/23/roundcube-webmail-1.2-beta-out-now [2] https://www.mailvelope.com/en/help#watchlist [3] https://kolabian.wordpress.com/2015/10/13/enigma-plugin-pgp-encryption/ [4] https://github.com/roundcube/roundcubemail/wiki/Changelog

4 7

Enigma S/MIME support
by Kyle Francis 19 May '16

19 May '16

3 6

rc next: ember broccoli error
by Brendan 01 May '16

01 May '16

has anyone encountered this error before? just trying to get things set up for the first time, everything was installed from scratch and latest versions. brendan@xps:~/rcube/roundcube-shell$ export JMAP_HOST=http://127.0.0.1:8080 && STYLEGUIDE=true && ember server version: 1.13.12 BroccoliMergeTrees: Expected Broccoli node, got undefined for inputNodes[0] TypeError: BroccoliMergeTrees: Expected Broccoli node, got undefined for inputNodes[0] at BroccoliMergeTrees.Plugin (/home/brendan/rcube/roundcube-shell/node_modules/broccoli-plugin/index.js:23:13) at new BroccoliMergeTrees (/home/brendan/rcube/roundcube-shell/node_modules/broccoli-merge-trees/index.js:29:10) at BroccoliMergeTrees (/home/brendan/rcube/roundcube-shell/node_modules/broccoli-merge-trees/index.js:23:53) at Class.module.exports.treeForVendor (/home/brendan/rcube/roundcube-shell/node_modules/roundcube-mail/index.js:28:12) at Class._treeFor (/home/brendan/rcube/roundcube-shell/node_modules/ember-cli/lib/models/addon.js:319:31) at Class.treeFor (/home/brendan/rcube/roundcube-shell/node_modules/ember-cli/lib/models/addon.js:289:19) at /home/brendan/rcube/roundcube-shell/node_modules/ember-cli/lib/broccoli/ember-app.js:369:20 at Array.map (native) at EmberApp.addonTreesFor (/home/brendan/rcube/roundcube-shell/node_modules/ember-cli/lib/broccoli/ember-app.js:367:30) at EmberApp._processedVendorTree (/home/brendan/rcube/roundcube-shell/node_modules/ember-cli/lib/broccoli/ember-app.js:796:29)

2 1

Please restore upgrade tutorial
by Zhang Huangbin 27 Apr '16

27 Apr '16

Dear developers, Could you please help restore the Roundcube upgrade tutorial? Old link is: http://trac.roundcube.net/wiki/Howto_Upgrade But i cannot find it in github repo. It's very important to sysadmins who need to upgrade. Thanks. ---- Zhang Huangbin, founder of iRedMail project: http://www.iredmail.org/ Time zone: GMT+8 (China/Beijing).

1 0

bug: html spellcheck on send
by Brendan 25 Apr '16

25 Apr '16

in roundcube-1.1.4 (and almost certainly other versions), we have noticed the following behavior (using the enchant spell engine): if you have a link (ie, {a href="http://blhblh.com"}Happy{/a} - brackets changed so no one's email client interprets them as a link) in an html email, the behavior of using the spellcheck button is different than when you go to send the email (and are configured to check spelling upon send). with the spellcheck button the client only passes the plain text through to the spellcheck engine, ie: Happy when sending, the client sends the full html and before being passed to the spellcheck engine it gets converted into text email content, ie: Happy [1] Links: ------ [1] http://blhblh.com the enchant spell engine then throws errors on "http" and "blhblh.com", both of which it really ought to be ignoring. i see two different solutions: 1) in program/lib/Roundcube/rcube_spellchecker.php function check(), replace: $this->content = $this->html2text($text); with: $this->content = strip_tags($text); 2) in program/lib/Roundcube/rcube_spellchecker_enchant.php (and rcube_spellchecker_pspell.php, etc) function check(), add in a regex to strip out lines matching /^\[\d+\] http:\/\/.*/ prior to tokenizing the text. #1 seems cleaner, but i'm not sure if there is a reason we need to use html2text there. does anyone from kolab have any input on the preferred way to deal with this?

2 2

Published Updates 1.1.5 and 1.0.9
by Thomas Bruederli 20 Apr '16

20 Apr '16

Dear subscribers We just published updates to both stable versions 1.0 and 1.1 delivering important bug fixes and helps protecting Roundcube against more XSS and CSRF attacks. Version 1.1.5 also has two new plugin hooks integrated and version 1.0.9 comes with cherry-picked fixes from the more recent version to ensure proper long term support. See the full changelog in the wiki [1] and the selection for 1.0.9 on the release page [2]. Both versions are considered stable and we recommend to update all productive installations of Roundcube with either one of these versions. Download them from GitHub via https://roundcube.net/download. As usual, don’t forget to backup your data before updating! Best, Thomas [1] https://github.com/roundcube/roundcubemail/wiki/Changelog#release-115 [2] https://github.com/roundcube/roundcubemail/releases/tag/1.0.9

1 0

Release candidate for 1.2 out now
by Thomas Bruederli 13 Apr '16

13 Apr '16

Hello folks Roundcube 1.2 is pretty much complete and after adding some last-minute improvements we just published a release candidate to give it another round of testing before we slap the 'stable' tag on it. We hereby invite you all to test the release candidate and report remaining bugs to our issue tracker. The most important features we added in 1.2 are: * PHP7 compatibility * PGP encryption in two flavours * Improved security measures to protect from brute-force and CSRF attacks See the full Changelog in our wiki: https://github.com/roundcube/roundcubemail/wiki/Changelog Download the packages or the signed source directly from Github: https://github.com/roundcube/roundcubemail/releases/tag/1.2-rc Please note that we recommend to test it on a separate environment. And don't forget to backup your data before installing it. Another note: with the upcoming stable release of 1.2.0 the old 1.0.x and the 1.1.x series will only receive important security fixes. Updates to these two branches are to be released soon. So stay tuned! Best, Thomas

1 0

Say goodbye to Trac
by Thomas Bruederli 01 Apr '16

01 Apr '16

Hello devs and list lurkers You all might have noticed the hickups we recently had with our Trac platform. Our Trac site was under heavy attack from spammers which put high load on the system and flooded the database with garbage. None of us really is a Trac expert and we failed at bringing the necessary measures in place to fight the spamming an to clean up the mess they caused. Adam, our volunteer admin who donated his private server for hosting the Trac site wants to resign from his duties which is fair and understandable. As a first action we deactivated user registration while we're looking for alternatives. That said, we're now looking at possible replacements for Trac or a successor for Adam who is willing to take the burden of hosting that crap. The most obvious - and already often requested - option is to migrate the tickets and the wiki pages into github. I already tested the import through the github API and that's a feasible option. But of course there are downsides: issue IDs cannot be kept and would be re-assigned. Also one cannot add tickets and comments with a date in the past. >From the 6.5K tickets we have in the database, there are ~ 200 open. I guess migrating these plus the resolved ones back to milestone 1.0.0 into github issues would give us a clean restart without loosing to much valuable data and - most importantly - without having to setup, host and protect our own tracker system. Anyway, please raise your voice with suggestions, concerns or offers if you have experience with such a post-Trac situation. Many thanks, Thomas

10 11

Can you please build a roundcube mail app for Android?
by Maureen Electa Monte 30 Mar '16

30 Mar '16

I had an app that wasn't by you that didn't work very well. I read that I'm supposed to use the browser and the user interface is impossible to navigate once I log in. Are there options you recommend for people like me who want to use my smart phone to access my email? Please advise, and thank you very much for your time. -- Maureen Electa Monte Success Architect | Building Winning Teams Ideation ~ Strategic ~ Learner ~ Achiever ~ Individualization ~ Maximizer c) 248.821.6821 Learn about Strengths-Based Success at www.maureenmonte.com

2 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Dev