Webmail Client Add-on for Larapen: Changelog

Webmail Client Add-on for Larapen
Latest: v1.0.4 6 November 2026 4 releases
Back to product

  1. 1.0.4

    Latest
    • Security: only images and PDF attachments are shown in the browser, never SVG
    • Security: the HTML of an email is cleaned by a real sanitizer before it goes into the editor (Reply, Forward)
    • Security: remote content (tracking pixels, images, fonts) is blocked until "Show images" is clicked
    • Security: attachment names and translations are written as text, never as HTML

  2. 1.0.3

    • Added extension points on the Accounts page and in the mailbox account settings window so companion add-ons (such as the OVH Mail integration) can add actions and modals without editing the webmail views

  3. 1.0.2

    • Added per-account filter rules engine with conditions (from/to/cc/subject/body/header/size/attachment) and actions (move/mark read/star/spam/delete/stop)
    • Added trusted senders allowlist with bulk import
    • Added blocked senders blocklist with bulk import and auto-delete option
    • Added keyword-based spam scoring (subject/body/any, literal or regex)
    • Added per-account spam policy: enabled toggle, threshold slider, action (move to Spam / delete / tag only)
    • Added automatic filter + spam evaluation on message sync for inbox-like folders
    • Added manual 'Apply to Inbox' backfill endpoint for existing rules
    • Added training hook: optionally add sender to blocked/trusted list when marking spam or moving out of spam
    • Added sidebar entries for Filters and Spam inside each mailbox
    • Added new permissions: webmail.filters.{view,create,edit,delete} and webmail.spam.{view,edit}

  4. 1.0.1

    • Converted accounts page to fully AJAX with XL modals (create/edit)
    • Added tabbed modal forms: General, Incoming Mail, SMTP Settings, Signature & Options
    • Added POP3 protocol support alongside IMAP for incoming mail
    • Added SMTP connection test button with live feedback
    • Added protocol-aware default port switching (IMAP/POP3)
    • Removed standalone create/edit account pages in favor of modal-based workflow