v2.24.0

.docker/release/files/usr/local/include/application.ini

@@ -69,10 +69,29 @@ allow_admin_panel = On
 hide_x_mailer_header = On
 admin_panel_host = ""
 admin_panel_key = "admin"
+
+; For example to allow all images use "img-src https:". More info at https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy#directives
 content_security_policy = ""
+
+; Report CSP errors to PHP and/or SnappyMail Log
 csp_report = Off
+
+; A valid cipher method from https://php.net/openssl_get_cipher_methods
 encrypt_cipher = "aes-256-cbc-hmac-sha1"
 
+; Strict, Lax or None
+cookie_samesite = "Strict"
+
+; Additional allowed Sec-Fetch combinations separated by ";".
+; For example:
+; * Allow iframe on same domain in any mode: dest=iframe,site=same-origin
+; * Allow navigate to iframe on same domain: mode=navigate,dest=iframe,site=same-origin
+; * Allow navigate to iframe on (sub)domain: mode=navigate,dest=iframe,site=same-site
+; * Allow navigate to iframe from any domain: mode=navigate,dest=iframe,site=cross-site
+;
+; Default is "site=same-origin;site=none"
+secfetch_allow = ""
+
 [admin_panel]
 allow_update = Off
 
@@ -93,7 +112,10 @@ cafile = ""
 capath = ""
 
 ; Location of client certificate file (pem format with private key) on local filesystem
-client_cert = ""
+local_cert = ""
+
+; This can help mitigate the CRIME attack vector.
+disable_compression = On
 
 [capa]
 quota = On
@@ -102,6 +124,11 @@ message_actions = On
 attachments_actions = On
 
 [login]
+; If someone logs in without "@domain.tld", this value will be used
+; When this value is HTTP_HOST, the $_SERVER["HTTP_HOST"] value is used.
+; When this value is SERVER_NAME, the $_SERVER["SERVER_NAME"] value is used.
+; When this value is gethostname, the gethostname() value is used.
+;
 default_domain = ""
 
 ; Allow language selection on webmail login screen
@@ -123,7 +150,7 @@ sign_me_auto = "DefaultOff"
 ; Enable plugin support
 enable = Off
 
-; List of enabled plugins
+; Comma-separated list of enabled plugins
 enabled_list = ""
 
 [defaults]
@@ -145,6 +172,9 @@ mail_reply_same_folder = Off
 ; Enable logging
 enable = Off
 
+; Path where log files will be stored
+path = ""
+
 ; Log messages of set RFC 5424 section 6.2.1 Severity level and higher (0 = highest, 7 = lowest).
 ; 0 = Emergency
 ; 1 = Alert
@@ -208,6 +238,9 @@ enable = Off
 ; Enables caching in the system
 enable = On
 
+; Path where cache files will be stored
+path = ""
+
 ; Additional caching key. If changed, cache is purged
 index = "v1"
 
@@ -227,28 +260,16 @@ http_expires = 3600
 server_uids = On
 
 [imap]
-use_sort = On
 use_force_selection = Off
-use_thread = On
-use_move = Off
 use_expunge_all_on_delete = Off
-body_text_limit = 555000
 message_list_fast_simple_search = On
-message_list_count_limit_trigger = 0
-message_list_date_filter = 0
 message_list_permanent_filter = ""
 message_all_headers = Off
-large_thread_limit = 50
-folder_list_limit = 200
 show_login_alert = On
-use_list_status = On
-timeout = 300
-disable_metadata = Off
 
 [labs]
 cache_system_data = On
 date_from_headers = On
-autocreate_system_folders = Off
 allow_message_append = Off
 login_fault_delay = 1
 log_ajax_response_write_limit = 300
@@ -258,13 +279,8 @@ try_to_detect_hidden_images = Off
 use_app_debug_js = Off
 use_app_debug_css = Off
 smtp_show_server_errors = Off
-smtp_timeout = 60
 sieve_auth_plain_initial = On
 sieve_allow_fileinto_inbox = Off
-sieve_timeout = 10
-sasl_allow_plain = On
-sasl_allow_scram_sha = Off
-sasl_allow_cram_md5 = Off
 mail_func_clear_headers = On
 mail_func_additional_parameters = Off
 folders_spec_limit = 50
@@ -289,5 +305,5 @@ dev_email = ""
 dev_password = ""
 
 [version]
-current = "2.23.1"
-saved = "Fri, 30 Sep 2022 12:34:56 +0000"
+current = "2.24.0"
+saved = "Sun, 18 Dec 2022 22:10:48 +0000"