Looks like I was wrong that rRPK4fe52716e3ad14 is safe. So, now when you access calendar feeds or iTip response handler you're required to login to Roundcube, but HTTP authentication should be used instead.
- Ticket Type
- Mentioned In
- rRPKa261f006277b: Fix regression where calendar feeds required normal Roundcube login instead…
rRPKf866ceb84c0f: Fix regression where calendar feeds required normal Roundcube login instead…
- Mentioned Here
- rRPK4fe52716e3ad: Performance: don't load calendar css/js files on logon page (#4033)