Commit Graph

1743 Commits

Author SHA1 Message Date
Marcus Bointon acd264bf17
Merge branch 'CVE-2021-34551'
# Conflicts:
#	SECURITY.md
#	changelog.md
2021-06-16 16:02:29 +02:00
Marcus Bointon 0063f83e8c
Changelog 2021-06-15 20:12:22 +02:00
Marcus Bointon 707205f255
Changelog 2021-06-15 20:04:30 +02:00
Marcus Bointon 1047838e84
Changelog 2021-06-15 20:03:50 +02:00
Marcus Bointon c2f191be6b
Changelog 2021-06-15 19:53:27 +02:00
Marcus Bointon 45f3c18dc6
Deny string-based callables altogether 2021-06-15 17:37:24 +02:00
Marcus Bointon 6334bab2af
CVE docs 2021-06-15 14:54:52 +02:00
Marcus Bointon de90099080
Add tests for injected validators 2021-06-15 14:54:40 +02:00
Marcus Bointon ce14f76dc6
More effective check 2021-06-15 14:49:48 +02:00
Marcus Bointon c40964df54
Filter callables with deny-list of built-in names 2021-06-15 11:02:33 +02:00
Marcus Bointon c718164ad3
WIP 2021-06-15 10:41:56 +02:00
Marcus Bointon 8107a91852
WIP 2021-06-10 22:31:30 +02:00
Marcus Bointon 4839207650
Clarify comment 2021-05-10 23:22:22 +02:00
Marcus Bointon 9256f12d8f
6.4.1 2021-04-29 14:25:04 +02:00
Marcus Bointon fd7ec67a7c
Add more tests for bad paths 2021-04-29 10:53:19 +02:00
Marcus Bointon 26f2848d3b
Reorder path checks, fixes CVE-2020-36326 2021-04-29 10:52:38 +02:00
Marcus Bointon bc51d1f607
Add not-strictly-necessary backslash to avoid ambiguity 2021-04-29 10:51:05 +02:00
Marcus Bointon 7f267fb4aa
Match all RFC3986 scheme patterns 2021-04-29 10:50:09 +02:00
Marcus Bointon b1038ee356
Add composer scripts for syntax check and tests 2021-04-29 10:49:27 +02:00
taras-budzyn 0acc57db14
make text compliance with Ukrainian orthography (#2317) 2021-04-22 20:08:21 +02:00
Marcus Bointon 08cf13b39e
Make use of $to in doCallback consistent, see #2305 2021-04-08 12:11:57 +02:00
Marcus Bointon be427db8e5
Make use of $to in doCallback consistent 2021-04-08 11:30:41 +02:00
Marcus Bointon 050d430203
6.4.0 2021-03-31 22:06:42 +02:00
Robert L Mathews 95438b776d
Revert change that made the `mail()` and sendmail transports set the envelope sender if one isn't explicitly provided, as it causes problems described at <https://github.com/PHPMailer/PHPMailer/issues/2298> (#2300)
Co-authored-by: Robert L Mathews <rob@tigertech.net>
2021-03-31 21:48:35 +02:00
Marcus Bointon e8db1cd5da
Tidelift enterprise 2021-03-22 18:15:45 +01:00
Marcus Bointon 3843c6b401
Tidelift funding 2021-03-22 17:59:04 +01:00
Marcus Bointon a792de883b
Tidelift security 2021-03-22 17:55:59 +01:00
Marcus Bointon 59173eb2bf
Speed 2021-03-20 01:00:04 +01:00
Marcus Bointon 5f93907aa5
CS 2021-03-20 00:59:13 +01:00
Marcus Bointon 4c2197250d
Changelog 2021-03-19 22:25:48 +01:00
Marcus Bointon a9a634274e
Change locale filename as Serbian Latin is apparently `sr_latn` as per https://unicode-org.github.io/cldr-staging/charts/37/summary/sr_Latn.html 2021-03-19 22:25:39 +01:00
Marcus Bointon 48a91d2723
Drop unstable badge 2021-03-19 22:18:21 +01:00
Marcus Bointon f037388959
Comment about AUTH PLAIN format 2021-03-19 22:18:08 +01:00
Marcus Bointon 6b6badad3f
Check for mbstring before trying to use it in parseAddresses 2021-03-19 22:17:22 +01:00
Nemanja Jeremić c626b9e165
Add Serbian(Latin) translation (#2288) 2021-03-19 20:31:54 +01:00
Puneet Gopinath d13d6006a4
Fix links (#2285) 2021-03-17 09:38:27 +01:00
Steve 33fc96f877
correct invalid br (#2280) 2021-03-14 13:02:44 +01:00
Marcus Bointon 4a08cf4cdd
6.3.0 2021-02-19 16:28:08 +01:00
Marcus Bointon e86e4e3f2a
CS 2021-02-19 16:04:57 +01:00
Marcus Bointon 85b4c9cd2d
Remove dead code 2021-02-19 16:04:47 +01:00
Marcus Bointon 09bc306529
Handle envelope sender the same way in sendmail as in mail() 2021-02-19 16:04:33 +01:00
Marcus Bointon 79ead3b070
More debug info for sendmail & qmail 2021-02-19 16:01:19 +01:00
Marcus Bointon 2a8e3a2fc9
Improve debug output from mail() 2021-02-19 13:43:34 +01:00
Marcus Bointon 0f24617b0c
Consistent comment style 2021-02-19 13:42:01 +01:00
Marcus Bointon e28e3552a5
Remove test env diagnostic 2021-02-19 09:37:25 +01:00
Marcus Bointon 0a191cc7ec
More IDN twiddling 2021-02-18 23:46:33 +01:00
Marcus Bointon 7f22287bdb
More IDN twiddling 2021-02-18 23:14:13 +01:00
Marcus Bointon f9cc642d6d
CS 2021-02-18 14:44:15 +01:00
Marcus Bointon 34e1c900be
Charset woes 2021-02-18 14:35:27 +01:00
Marcus Bointon 60126a1b90
Back to xdebug we go... 2021-02-18 13:18:58 +01:00