Commit Graph

260 Commits

Author SHA1 Message Date
78ae5cb17b 修复初始化完成跳转与服务退出竞态
Some checks are pending
Security Checks / security (push) Waiting to run
2026-08-30 20:26:19 +08:00
e86f60a429 统一初始化页面请求入口
Some checks are pending
Security Checks / security (push) Waiting to run
2026-08-30 20:14:22 +08:00
7d7f652e93 隔离初始化接口的认证跳转
Some checks are pending
Security Checks / security (push) Waiting to run
2026-08-30 20:10:40 +08:00
00a87948c2 修复初始化状态被旧配置误判
Some checks are pending
Security Checks / security (push) Waiting to run
2026-08-30 20:09:11 +08:00
ffa7378480 完善初始化请求链路与异常响应
Some checks are pending
Security Checks / security (push) Waiting to run
2026-08-30 20:03:37 +08:00
19c596a6d4 开始继续优化配置与初始化流程
Some checks are pending
Security Checks / security (push) Waiting to run
2026-08-30 19:51:14 +08:00
12d5a87762 优化数据库设置请求流程
Some checks are pending
Security Checks / security (push) Waiting to run
2026-08-30 19:47:00 +08:00
0b10489728 优化数据库初始化失败处理
Some checks are pending
Security Checks / security (push) Waiting to run
2026-08-30 19:40:57 +08:00
29cfebd620 完善配置安全校验与数据库迁移处理
Some checks are pending
Security Checks / security (push) Waiting to run
2026-08-30 17:45:52 +08:00
3af1fc4147 完善配置审计与数据库迁移安全链路 2026-08-30 12:05:56 +08:00
84440d8761 完成配置迁移、插件安全整改与初始化向导优化 2026-08-29 23:44:56 +08:00
ce1b557ea9 加固超级管理员本机重置通道权限校验
Some checks failed
Security Checks / security (push) Has been cancelled
2026-08-28 14:54:23 +08:00
dd04bdb49e 完成安全整改、配置重构与邮件认证优化
Some checks are pending
Security Checks / security (push) Waiting to run
2026-08-28 14:33:13 +08:00
18b6dfbdf7 完成安全整改与配置系统重构阶段开发
Some checks are pending
Security Checks / security (push) Waiting to run
2026-08-28 00:42:28 +08:00
6ec462895f 优化密码恢复页面布局
Some checks are pending
Security Checks / security (push) Waiting to run
2026-08-27 22:00:48 +08:00
51767b9f5b 完成安全整改与认证功能重构 2026-08-27 21:51:51 +08:00
e91a64136b 重命名项目并补充插件与安全整改文档 2026-08-24 15:27:19 +08:00
0clickjacking0
a6049bf052
fix(smtp): make audit persistence atomic (#358) 2026-08-20 17:24:38 +08:00
0clickjacking0
1da3e178bf
fix(smtp): 修复下游投递失败后 SMTP DATA 仍返回成功,导致上游误判为已发送 (#356)
* fix(smtp): propagate downstream delivery failures

* test(smtp): support Go 1.26 textproto errors
2026-08-17 10:40:52 +08:00
0clickjacking0
cd8d549a90
fix(email): preserve timezone when rebuilding Date headers (#355) 2026-08-17 10:39:30 +08:00
P家单推人
430c9c6c10
feat(email): 新增 SPF/DKIM 邮件认证追踪 (#354)
新增 EmailAuthentication 统一封装 SPF/DKIM 验证结果与 Dangerous 结论。

重构邮件列表与 SMTP 收信流程,保证认证结果在插件、数据库和列表展示之间一致,并保留伪造邮件处理优先级。

扩展解析邮件 DTO 的认证字段,覆盖历史收件恢复、发送路径隔离、HookDTO 序列化及旧版插件兼容性测试。
2026-08-13 14:24:46 +08:00
NikoCat233
593c3fb720
修复邮件详情与规则更新的水平越权漏洞 (#351)
* fix(auth): enforce email detail ownership

* fix(rules): scope updates to owning user
2026-07-22 15:58:56 +08:00
NikoCat233
da55756917
fix: 修复 SpamBlock 配置越权 (#352) 2026-07-22 15:57:22 +08:00
ManBo
87d3ce35d3
给web界面增加全选和反选按钮 (#348) 2026-07-12 10:08:08 +08:00
Cd1s
05bca5d5a8
改进邮件转发的投递兼容性 (#347)
优先使用原始邮件数据转发,保留原始发件人、主题、正文、MIME 和 DKIM 签名,避免重建邮件导致严格 DMARC 收件方拒收。

当原始转发被拒时,回退为使用本地转发账号重新投递,同时保持原始主题不变。

同时修正本地域名转发逻辑:精确识别本地域名,自转发时报错,转发给其他本地用户时直接投递到本地收件箱,避免旧的字符串包含判断误拦截。

测试:go test -v ./services/rule ./dto/parsemail ./utils/send

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-02 23:29:39 +08:00
Jinnrry
6455635f74
Feature/v2.9.2 (#344)
* feature/v2.9.0

ui优化

* add test case

add test case

* feature/v2.9.2

bug fix

---------

Co-authored-by: Your Name <you@example.com>
2026-05-31 18:42:58 +08:00
Cd1s
68dc2f0f47
fix(imap): advertise and clean up IDLE capability (#343)
Co-authored-by: cheek <cheek@cheek-omenbyhpgaminglaptop16n0xxx.omen.lan>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-05-31 18:25:31 +08:00
Jinnrry
cd2c879cfd
Feature/v2.9.1 (#338)
add test case
2026-05-23 00:14:37 +08:00
Jinnrry
db20ed97f4
Update unitTest.yml (#340) 2026-05-23 00:07:49 +08:00
Jinnrry
9908c5353d
Change label addition method on test failure (#339)
Replaced action for adding labels on test failure with a command using GitHub CLI.
2026-05-22 23:58:41 +08:00
QvaaX
b0913ee804
fix: resolve multipart email parsing issue (#336)
* fix: resolve multipart email parsing issue

* resolve multipart email parsing issue

解决邮件正文被附件覆盖的bug

* Update email.go

修改xss过滤
2026-05-22 17:45:06 +08:00
Jinnrry
c347f30c0c
feature/v2.9.0 (#332)
1、ui优化
2、Message Id 格式优化,thanks for @Cd1s
2026-04-18 20:20:19 +08:00
Cd1s
23c2fbbdd5
fix: generate Message-ID once and persist to DB (#328)
Previously, a random suffix was generated every time BuildBytes or
ForwardBuildBytes was called, causing IMAP/POP3 clients to treat the
same message as a new message on every sync and breaking conversation
threading.

Changes:
- Add msg_id column to the email table (synced automatically via Sync2)
- Generate a crypto/rand-based RFC-compliant Message-ID once at email
  creation time (send.go for outgoing, read_content.go for incoming)
- Preserve the original Message-ID from externally received emails
- Load the persisted MsgID when rebuilding Email from DB records
- Use the stored MsgID in BuildBytes, ForwardBuildBytes and the IMAP
  ENVELOPE response; fall back to the old numeric format for legacy rows

Fixes the MSGID_SHORT SpamAssassin penalty and Gmail rejection while
keeping Message-IDs stable across syncs.

Co-authored-by: root <root@Claw-ai.tail1478c.ts.net>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-13 11:43:59 +08:00
Jinnrry
826ac26636
Feature/v2.8.10 (#323)
v2.8.10

1、bug fix #317 #320

2、支持token方式验签,使用参考 PMail_Github/server/main_test.go:135

3、587端口 starttls 问题修复

4、imap 协议功能补全 Tnanks for @HanaKDev
2026-02-01 16:40:24 +08:00
HanaHime
9753b2e09f
[Improve] SMTP & IMAP (#321)
* [Temporarily Fix] SSL Can NOT Renew

* SMTP and IMAP Improve
SMTP With STARTTLS 行为变更 && IMAP 搜索功能尝试实现

* 修复一些客户端玄学问题
2026-01-17 21:38:08 +08:00
Jinnrry
bb1da921c8
Feature/v2.8.9 (#315)
1、翻译优化 #291
2、IMAP协议翻页显示问题修复
3、邮件删除bug修复 #312
2025-11-23 17:56:07 +08:00
Your Name
14f0fbfa8a 移除tg插件 2025-11-04 16:32:34 +08:00
HanaHime
17acb40929
[Temporarily Fix] SSL Can NOT Renew (#310) 2025-11-04 16:09:02 +08:00
Your Name
e7bb01ae6d 移除tg插件,增加第三方tg插件地址 2025-10-12 08:57:36 +08:00
Jinnrry
778e279b4f
feature/v2.8.6 (#304)
imap协议完善
smtp信息泄露修复
2025-08-30 20:25:11 +08:00
jzh
788cd43c43
Fix xss feature (#290)
* fix: 修复解析邮件相关的xss漏洞

* fix: 修复email解析中的xss漏洞,添加一些生成的测试用例

* fix: 修复email解析中的xss漏洞,添加一些生成的测试用例

* fix: 修复email解析中的xss漏洞,添加一些生成的测试用例
2025-07-01 15:40:41 +08:00
nil
0fce027591
fix: 修复删除发件箱后还能看到的bug;修复前端页面打包失败的依赖问题 (#286) 2025-06-13 10:30:27 +08:00
Jinnrry
4504bdb490
Update README.md 2025-05-10 09:36:44 +08:00
Jinnrry
fcc863e8b8
feature/v2.8.4 (#277)
1、发件列表不展示bug修复
2、smtps支持587端口
3、发件代码优化
2025-05-10 09:31:23 +08:00
Jinnrry
e194d6ecfd
feature/v2.8.3 (#269)
1.优化垃圾邮件处理
2.升级所有依赖,go版本升级到1.24
2025-04-20 09:59:56 +08:00
Jinnrry
90d00db9e6
Update release.yml 2025-04-12 11:01:25 +08:00
Jinnrry
898579bdc8
feature/v2.8.2 (#267) 2025-04-12 10:54:37 +08:00
ZShab Niba
eebe4dcaaa
在md文档中使用jsonc解决注释报红的问题 (#252) 2025-02-11 16:38:51 +08:00
Jinnrry
fa93f29839
Update README.md 2025-01-07 20:23:27 +08:00
Haoclouds
a505b6ff1d
修复中文文档在docker中运行命令的imap端口设置问题 (#240) 2025-01-07 20:21:04 +08:00