automatic merge to finish v1.1.0

Author: cars10

.github/workflows/build.yml

@@ -8,21 +8,23 @@ on:
       - 'v*'
 
 jobs:
-  build:
+  build-linux:
     runs-on: ubuntu-latest
     permissions:
       contents: write
       packages: write
+    outputs:
+      version: ${{ steps.package-version.outputs.current-version }}
 
     steps:
       - uses: actions/checkout@v6
 
-      - uses: docker/login-action@v3
+      - uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
-      - uses: docker/login-action@v3
+      - uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -33,7 +35,7 @@ jobs:
         with:
           path: frontend
 
-      - uses: docker/build-push-action@v6
+      - uses: docker/build-push-action@v7
         id: build
         with:
           context: .
@@ -51,20 +53,110 @@ jobs:
           docker rm extract
           chmod +x ./mailfang-linux-amd64
 
-      - name: prepare release notes from changelog
+      - name: Upload Linux binary
+        uses: actions/upload-artifact@v6
+        with:
+          name: mailfang-linux-amd64
+          path: ./mailfang-linux-amd64
+          if-no-files-found: error
+
+  build-macos:
+    runs-on: macos-latest
+    strategy:
+      matrix:
+        include:
+          - target: x86_64-apple-darwin
+            asset: macos-x86_64
+          - target: aarch64-apple-darwin
+            asset: macos-arm64
+
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-node@v6
+        with:
+          node-version: 24
+          cache: npm
+          cache-dependency-path: frontend/package-lock.json
+
+      - name: Build frontend
+        working-directory: frontend
         run: |
-          # Extract first version block (newest) from CHANGELOG.md
-          awk 'found && /^## [0-9]/ { exit } /^## [0-9]/ { found=1 } found' CHANGELOG.md > release_notes.txt
+          npm ci
+          npm run build
 
-      - name: create and publish release
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Install Rust toolchain (rustup)
+        run: |
+          rustup toolchain install stable
+          rustup target add "${{ matrix.target }}"
+
+      - name: Build MailFang binary (macOS)
         run: |
-          VERSION="${{ steps.package-version.outputs.current-version }}"
-          gh release create "v${VERSION}" \
-            ./mailfang-linux-amd64 \
-            --title "v${VERSION}" \
-            --notes-file release_notes.txt
+          cd backend
+          cargo build --release --features embed-frontend --target "${{ matrix.target }}"
+          cp "target/${{ matrix.target }}/release/mailfang" "../mailfang-${{ matrix.asset }}"
+          chmod +x "../mailfang-${{ matrix.asset }}"
+
+      - name: Upload macOS binary
+        uses: actions/upload-artifact@v6
+        with:
+          name: mailfang-${{ matrix.asset }}
+          path: ./mailfang-${{ matrix.asset }}
+          if-no-files-found: error
+
+  create-release:
+    runs-on: ubuntu-latest
+    needs:
+      - build-linux
+      - build-macos
+    permissions:
+      contents: write
+    env:
+      TAG: v${{ needs.build-linux.outputs.version }}
+
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Download Linux binary
+        uses: actions/download-artifact@v8
+        with:
+          name: mailfang-linux-amd64
+          path: dist/mailfang-linux-amd64
+
+      - name: Download macOS Intel binary
+        uses: actions/download-artifact@v8
+        with:
+          name: mailfang-macos-x86_64
+          path: dist/mailfang-macos-x86_64
+
+      - name: Download macOS Apple Silicon binary
+        uses: actions/download-artifact@v8
+        with:
+          name: mailfang-macos-arm64
+          path: dist/mailfang-macos-arm64
+
+      - name: Extract changelog for release body
+        id: changelog
+        run: |
+          BODY="$(awk 'found && /^## [0-9]/ { exit } /^## [0-9]/ { found=1 } found' CHANGELOG.md | sed '/^[[:space:]]*$/d')"
+          echo "body<<EOF" >> "$GITHUB_OUTPUT"
+          echo "$BODY" >> "$GITHUB_OUTPUT"
+          echo "EOF" >> "$GITHUB_OUTPUT"
+
+      - name: Create or update GitHub Release
+        uses: ncipollo/release-action@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          tag: ${{ env.TAG }}
+          name: ${{ env.TAG }}
+          body: ${{ steps.changelog.outputs.body }}
+          artifacts: |
+            dist/mailfang-linux-amd64/mailfang-linux-amd64
+            dist/mailfang-macos-x86_64/mailfang-macos-x86_64
+            dist/mailfang-macos-arm64/mailfang-macos-arm64
+          allowUpdates: true
+          replacesArtifacts: true
 
       - name: deploy
         run: |

CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 1.1.0
+
+- adds favicon
+- improve heading font
+- fix keyboard navigation
+- adds build for mac
+- show package version
+- update dependencies
+- improve sqlite settings
+- cleanup dockerfile
+- fix some security issues
+
 ## 1.0.0
 
 Initial release of MailFang. Send emails to mailfang and text them locally. 

Dockerfile

@@ -40,7 +40,6 @@ FROM alpine:latest AS runtime
 RUN apk add --no-cache \
     ca-certificates \
     sqlite \
-    curl \
     && rm -rf /var/cache/apk/*
 
 RUN addgroup -g 1000 appuser && \
@@ -59,7 +58,5 @@ USER appuser
 ENV DATABASE_URL=sqlite:///data/mailfang.db
 ENV SMTP_HOST=0.0.0.0:2525
 ENV WEB_HOST=0.0.0.0:3000
-ENV WEB_PORT=3000
-ENV SMTP_PORT=2525
 
 CMD ["mailfang"]

README.md

@@ -58,10 +58,10 @@ The services will be reachable via:
 ### Binary
 
 1. Download the latest binary from the [releases page](https://github.com/cars10/mailfang/releases)
-2. Set executable permissions: `chmod +x ./mailfang`
-3. Run MailFang: `./mailfang`
+2. Set executable permissions: `chmod +x ./mailfang-linux-amd64`
+3. Run MailFang: `./mailfang-linux-amd64`
 
-You can view all available configuration options by running `./mailfang --help`.
+You can view all available configuration options by running `./mailfang-linux-amd64 --help`.
 
 ## Sending emails to MailFang
 

backend/.gitignore

@@ -1,2 +1,2 @@
 target/
-mailfang.db
+mailfang.db*

backend/src/compression.rs

@@ -3,6 +3,8 @@ use flate2::read::GzDecoder;
 use flate2::write::GzEncoder;
 use std::io::{Read, Write};
 
+const MAX_DECOMPRESSED_SIZE: u64 = 100 * 1024 * 1024; // 100 MiB
+
 pub fn compress(data: &[u8]) -> Result<Vec<u8>, std::io::Error> {
     let mut encoder = GzEncoder::new(Vec::new(), Compression::default());
     encoder.write_all(data)?;
@@ -11,7 +13,20 @@ pub fn compress(data: &[u8]) -> Result<Vec<u8>, std::io::Error> {
 
 pub fn decompress(compressed_data: &[u8]) -> Result<Vec<u8>, std::io::Error> {
     let mut decoder = GzDecoder::new(compressed_data);
-    let mut decompressed = Vec::new();
-    decoder.read_to_end(&mut decompressed)?;
+    let mut decompressed = Vec::with_capacity(8192.min(MAX_DECOMPRESSED_SIZE as usize));
+    let mut buf = [0u8; 8192];
+    loop {
+        let n = decoder.read(&mut buf)?;
+        if n == 0 {
+            break;
+        }
+        if decompressed.len().saturating_add(n) > MAX_DECOMPRESSED_SIZE as usize {
+            return Err(std::io::Error::new(
+                std::io::ErrorKind::InvalidData,
+                "decompression exceeded size limit",
+            ));
+        }
+        decompressed.extend_from_slice(&buf[..n]);
+    }
     Ok(decompressed)
 }

backend/src/db/mod.rs

@@ -120,8 +120,8 @@ impl From<ListParams> for ListQuery {
     fn from(params: ListParams) -> Self {
         Self {
             search: params.search,
-            page: params.page.unwrap_or(1),
-            per_page: params.per_page.unwrap_or(20),
+            page: params.page.unwrap_or(1).max(1),
+            per_page: params.per_page.unwrap_or(20).clamp(1, 100),
         }
     }
 }

backend/src/db/save_email.rs

@@ -131,7 +131,7 @@ fn create_email_record(
         subject: message.subject.clone(),
         date: message.date.map(|d| d.naive_utc()),
         envelope_from: message.from.clone(),
-        size: message.size as i32,
+        size: (message.size.min(i32::MAX as u64)) as i32,
         compressed_data,
         body_text: Some(message.body_text.clone()),
         body_html: Some(message.body_html.clone()),
@@ -241,7 +241,7 @@ fn save_attachments(
             filename: attachment.filename.clone(),
             content_type: attachment.content_type.clone(),
             compressed_data,
-            size: attachment.data.len() as i32,
+            size: (attachment.data.len().min(i32::MAX as usize)) as i32,
             content_id: attachment.content_id.clone(),
             disposition: attachment.disposition.clone(),
             created_at: now,

backend/src/db/search_query.rs

@@ -51,9 +51,10 @@ pub fn parse_search_query(query: &str) -> ParsedSearchQuery {
     let mut matched_ranges = Vec::new();
 
     for cap in field_pattern.captures_iter(query) {
-        let field_name = cap.get(1).unwrap().as_str();
-        let value = cap.get(2).unwrap().as_str();
-        let full_match = cap.get(0).unwrap();
+        let (field_name, value, full_match) = match (cap.get(1), cap.get(2), cap.get(0)) {
+            (Some(m1), Some(m2), Some(m0)) => (m1.as_str(), m2.as_str(), m0.range()),
+            _ => continue,
+        };
 
         if let Some(field) = SearchField::from_str(field_name) {
             let normalized_field = match field {
@@ -64,7 +65,7 @@ pub fn parse_search_query(query: &str) -> ParsedSearchQuery {
                 field: normalized_field,
                 value: value.to_string(),
             });
-            matched_ranges.push(full_match.range());
+            matched_ranges.push(full_match);
         }
     }
 

backend/src/html.rs

@@ -1,8 +1,8 @@
 use regex::{Captures, Regex};
 
 pub fn insert_into_head(html: &str, content: &str) -> String {
-    let head_regex = Regex::new(r"(?i)<head[^>]*>").unwrap();
-    let html_regex = Regex::new(r"(?i)<html[^>]*>").unwrap();
+    let head_regex = Regex::new(r"(?i)<head[^>]*>").expect("valid head regex");
+    let html_regex = Regex::new(r"(?i)<html[^>]*>").expect("valid html regex");
 
     if head_regex.is_match(html) {
         head_regex