Download: http://www.courier-mta.org/download.php#sqwebmail

# This release is also available via BitTorrent. This is mostly an # academical excersize, SourceForge's resources are as healthy as ever. The # .torrent is created only to test my BitTorrent publication script (see # http://eztorrent.courier-mta.com).

This release of SqWebMail is designed to be used in conjunction with version 2.0 of maildrop, when mail filtering is enabled.

The version of SqWebMail switches to using the PCRE library to validate the mail filtering patterns typed into the mail filtering screen.

The PCRE library must now be installed before compiling SqWebmail.

Version 2.0 of maildrop now uses the PCRE for pattern matching (PCRE is still required to compile SqWebMail even if maildrop is not used), and it's possible that some arkane existing pattern is no longer valid under maildrop 2.0. What will happen is that the first time SqWebMail's mail filtering screen is opened, the non-compatible filtering rules will be quietly deleted. This is a necessary even, and must be done, and the updated filtering rules must be saved, in order to enable mail delivery to this account.

Additionally, this version of SqWebMail includes fixes for several potential cross-site scripting vulnerabilities (they were all previously released as earlier development builds; there's nothing new here, move along).

Changes:

• Use PCRE to validate regular expressions.

• Filter out MSIE-specific executable HTML comment format.

• Remove attributes with imbalanced quotes, to prevent cross-side scripting vulnerabilities with some browsers.

• Show each attachment's MIME content type, explicitly.