Dada Mail 11.20.1

29 June 2023

Dada Mail version 11.20.1 is now available (major release).

Upgrading to Dada Mail 11.20.1

What's New in Dada Mail 11.20.1

• One-click unsubscription can't be enabled #1139
  
• Mis-speling in, "Subscribed" Message #1140
  
• bridge - irrecoverable error processing message #1135
  
• Rate Limits should be ignored for logged in administrators when handling unsubscribe requests #1130
  
• Searching a list's message archive in the public view may return 500 error #1141
  

• KCFinder Dropped
  

• “Bounces” tab in the membership screen
  
• Better Link Pre-fetching Protection
  
• Rich Filemanager upgraded to v2.7.6
  
• DADA::App::HTMLtoMIMEMessage added to Debug Trace Options
  
• Better error reporting for problems with database connections
  

• Data::Google::Visualization::DataTable defaults to using JSON::XS which may not be available
  

• Enable/Disable mailing list specific email headers
  
• Enhanced HTML editing via "Grab content from a URL"
  
• Installer: Ability to Switch the path to the Perl interpreter
  
• Upgraded Included Perl Library! (perllib)
  
• Cross-Site Request Forgery (CSRF) Prevention can now be disabled
  

• Grab content from a URL: Auto-generated PlainText version not cropped
  
• Resend Subscription Confirmation via the list control panel broken
  
• CPAN modules shipped with Dada Mail are outdated and impossible to maintain
  
• List Control Panel Archive Screen: message_blurb() call memory leak?
  
• Previews of message drafts always show in modal menu and not in new window in Drafts Index
  

• Plugins: Bridge, append_message_to_file sometimes called with wrong arguments
  
• Deleting Stationery/Schedule will create a new Stationery/Schedule and not delete the Stationery/Schedule
  
• Plugin: Change List Shortname doesn't work: csrf issues and logout issues
  
• Amazon SES: Remove requirement for, Crypt::SSLeay, add requirement for LWP::Protocol::https
  
• Consider Implementing AutoInactiveDestroy
  
• Consider implementing DROP TABLE and RENAME TABLE in SQLite backend
  

• Core 5 File Manager Perl connector/upload script fails to work correctly if you set additional Perl libaries
  
• Changing Delivery Preferences (individual, digest, vacation) in Membership: View causes csrf issue
  
• "Transform to Pro" feature doesn't work
  
• Search Results (including Partial Mailing List Sending) are incorrect if subscriber doesn't have a profile
  
• Template sanity check for Send a Webpage
  
• suspicious_activity_by_ip_check not working correctly
  

• Support for libcurl via LWP::Protocol::Net::Curl as the WWW Engine
  
• Support to set User Agent
  
• Support to enable/disable hostname verification
  

• "mailbox not found" bounce not parsed correctly #1087
  
• Ambiguous Date in Version #1084
  

• Image Drag and Drop into the message editor window will invalidate the session
  
• Core5FileManager does not work with current CSRF enhancements
  

• Only one mailing list? The default screen is now that list screen
  
• Multiple mailing lists? Subscription buttons for each mailing list
  
• Schedule Mass Mailings now have an option to send right away
  
• Periodic Login/Session Status Check
  
• New option to show/hide a subscription form in the default, list, and archive screens
  
• Custom email themes are now automatically kept during upgrading
  
• Disable List Password Reset
  
• plugin: password_protect_directories - option to always use the default password
  

• plugin: password_protect_directories works (again)
  

• Public archives only viewed when logged in with a profile password fails to work
  
• Custom templates aren't used if used in a, <!-- tmpl_include --> tag
  
• Clicking, "Manually Run All Scheduled Mass Mailings" in a schedule without first saving this schedule will save it as a draft
  
• Scheduled Mailings: Looking at Recurring Schedules Calendar for an unsaved schedule will save the schedule as a draft
  
• Potential hidden profile field data lost from subscription form if submitted from captcha-protected form that doesn't have a captcha
  
• Bridge: Errors with auto image resizing causes message not to be delivered
  

• Small bug fixes
  

• Small bug fixes
  

• Tracker reports in mailing monitor causes logout from list control panel
  

• Enhanced Cross-Site Request Forgery (CSRF) Prevention
  
• More Details
  
• Additional Suggestions to Help Harden Security
  
• RESTFUL API supports Global Public/Private Keys, Creating New Mailing Lists
  

• Default Membership: View address order is now Date Added/Subscription Date/Descending
  

• Switching between lists accepts "GET" requests
  
• "logout" accepts "GET" requests
  
• You can send a mass mailing to no one
  

• Creating a new list can be done via a GET request
  
• reCAPTCHA v3 check has strangely derefrenced variable in code, likely to cause issues.
  
• Logging into the List Control Panel accepts a GET request
  
• Dada Mail accepts GET requests to, "Forward to a Friend" form
  
• Dada Mail accepts "subscribe" requests via GET
  
• Attempting to send to a blank email address during a mass mailing will stall out the mass mailing (SMTP)
  
• Google Recaptcha v2 check will return valid if problem with API call happens
  

• Link Prefetching Protection
  

• jQuery upgraded from v2.2.4 to v3.6.0
  

• Trying to view the public archive without knowing the list will lead to blank page/error #1047
  

• Delete email address from Bounce Scorecard when email address is unsubscribed #1035
  
• Plugins: Tracker - Add a date/timestamp to options for updating profile fields in the preferences #1032
  
• Ping POP3 and IMAP connections before attempting to connect #1029
  

• Plugins: Tracker - Sending Speed (messages/hour) aren't rounded to the nearest message, or commified #1039
  
• Amazon SES mass mailing batch sending speed estimates are too optimistic #1038
  
• When manually running schedules (cronjobs) in list control panel, the admin menu items should be updated #1037
  
• Cannot create a new draft message w/MySQL v8.0.2x #1034
  
• Mass Mailing: SMTP sending doesn't return back any errors #1028