github the-djmaze/snappymail v2.38.0

2 days ago

Important security release!

Read details at GHSA-2rq7-79vp-ffxm

Added

  • Remove tel: links when converting HTML to plain #1724
  • Convert HTML to Markdown instead of plain, by using Turndown #1604
  • Check HTMLInputElement.validity() for #1733

Changed

  • Use a modified Squire 2.3.2
  • cleanHtml use allowedTags instead of disallowedTags and improved CSS handling
  • Update Portuguese by @ner00

Fixed

  • mXSS exploit found by SonarSource CVE-2024-45800
  • Call to a member function Email() on null #1706
  • IMAP capabilities via IMAP Proxy #1725
  • Messages on page setting is not validated against 999 max #1733

Full Changelog: v2.37.3...v2.38.0

Nextcloud

  • Attempt to improve OpenID Connect support #1746
  • Support recurring events from external providers and other improvements #1737

https://apps.nextcloud.com/apps/snappymail

Docker Hub

https://github.com/the-djmaze/snappymail/wiki/Docker

Integrations

https://github.com/the-djmaze/snappymail/wiki/Installation-instructions#integrations

Don't miss a new snappymail release

NewReleases is sending notifications on new releases.