* Wed Feb 12 2025 Jean-Philippe Pialasse <jpp@koozali.org> 1.6-6.sme

- fix typo in roundcubemail.action [SME: 12917]

root/etc/dnf/plugins/post-transaction-actions.d/roundcubemail.action

@@ -1 +1 @@
-roundcubemail:any:/sbin/e-smith/signal-event smeserver-roundcube
+roundcubemail:any:/sbin/e-smith/signal-event smeserver-roundcube-update

root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/VirtualHosts/30RoundcubeWebmailAliases

@@ -23,6 +23,12 @@
         } else {
             $OUT .= "    Alias       /$place   $dirs{$place}\n";
         }
+
+        $OUT .= "    <Location '/$place'>\n";
+        # strict CSP not yet supported see https://github.com/roundcube/roundcubemail/issues/6202 and few others
+        $OUT .= "       Header set Content-Security-Policy \"default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self'; frame-src 'self'; connect-src 'self'; frame-ancestors 'self'; base-uri 'self'; form-action 'self';\"\n";
+        $OUT .= "    </Location>\n";
+
     }
 }
 

smeserver-roundcube.spec

@@ -1,6 +1,6 @@
 %define name smeserver-roundcube
 %define version 1.6
-%define release 4
+%define release 6
 
 Summary: smserver rpm to setup roundcube, an IMAP mail client
 Name: %{name}
@@ -85,6 +85,12 @@ fi
 %attr(755,root,root) /usr/bin/rcplugin_update.sh
 
 %changelog
+* Wed Feb 12 2025 Jean-Philippe Pialasse <jpp@koozali.org> 1.6-6.sme
+- fix typo in roundcubemail.action [SME: 12917]
+
+* Fri Jan 03 2025 Jean-Philippe Pialasse <jpp@koozali.org> 1.6-5.sme
+- set more relaxed CSP for roundcube [SME: 12861]
+
 * Sat Dec 14 2024 Jean-Philippe Pialasse <jpp@koozali.org> 1.6-4.sme
 - fix roundcube not working on initial install [SME: 12812]