head	1.2;
access;
symbols
	pkgsrc-2013Q2:1.2.0.8
	pkgsrc-2013Q2-base:1.2
	pkgsrc-2012Q4:1.2.0.6
	pkgsrc-2012Q4-base:1.2
	pkgsrc-2011Q4:1.2.0.4
	pkgsrc-2011Q4-base:1.2
	pkgsrc-2011Q2:1.2.0.2
	pkgsrc-2011Q2-base:1.2;
locks; strict;
comment	@# @;


1.2
date	2010.03.07.03.41.50;	author taca;	state dead;
branches;
next	1.1;

1.1
date	2010.03.04.16.00.37;	author taca;	state Exp;
branches;
next	;


desc
@@


1.2
log
@Update squirrelmail pacakge to 1.4.20.


Version 1.4.20 - 06 Mar 2010
---------------------------
  - Fixed issue with search not using literals correctly (#2846511).
  - Fixed issue with returning to search results due to new security token
    code.
  - Fixed issue with multi-part related messages not showing all attachments
    (#2830140).
  - Fixed for security token missing in newmail plugin (#2919418).
  - Fixed sort in Sent folder to sort by "To" field instead of "From" field
    (#2907412).
  - Fixed mailto: urls containing + characters.  Thanks to Michael Puls II
    for the patch.
  - Made base URL autodetection more robust; fixes some lighttpd issues
    (probably #1741469).
  - Encoded From headers are now properly quoted (#2830141).
  - Multibyte strings (notably subjects) are now handled correctly (#2824813,
    #2925731).
  - X-DNS-Prefetch-Control: off header is now sent to browsers to prevent
    information leakage when Firefox does DNS prefetching for URLs contained
    in emails.
  - Added unread links in message view.
  - Added the ability to configure Google Mail (Gmail) as the mail server
    behind SquirrelMail.
  - Added option in display preferences that allows the signature to be
    stripped from the original message when replying (#2952876).  Thanks to
    Sven Strickroth.
@
text
@$NetBSD: patch-ce,v 1.1 2010/03/04 16:00:37 taca Exp $

--- plugins/squirrelspell/modules/lang_change.mod.orig	2009-04-16 07:00:49.000000000 +0900
+++ plugins/squirrelspell/modules/lang_change.mod
@@@@ -16,6 +16,11 @@@@
  * @@subpackage squirrelspell
  */
 
+if (!sqgetGlobalVar('smtoken',$submitted_token, SQ_POST)) {
+    $submitted_token = '';
+}
+sm_validate_security_token($submitted_token, 3600, TRUE);
+
 global $SQSPELL_APP_DEFAULT;
 
 $use_langs = $_POST['use_langs'];
@


1.1
log
@Overhaul squirrelmail package:

* Add DESTDIR support.
* Add more changes from squirrelmail's repositry including
  secure token support, hoping early release of real 1.4.20.

Bump PKGREVISION.
@
text
@d1 1
a1 1
$NetBSD$
@