Server Error! (Internal Server Error) on Inbox Refresh

[ccs46]

I've just upgraded from 0.9.4 to 1.0.0 (fresh install, config merged) and am finding a strange issue when I try to refresh my Inbox.  After logging in all new messages are shown but when the Refresh button is clicked I get a "Server Error! (Internal Server Error)" popup.  This also happens on the auto refresh.  Here's what I know so far:

1.) This only affects the Inbox
2.) It doesn't happen when new mail arrives
3.) This doesn't happen in my existing 0.9.4 install

For reference this is an IMAP email account.  Has anyone seen this issue? 

[SKaero]

Whats in your error log?

[ccs46]

Nothing I'm afraid, the issue is repeatable but the only error reported is the pop up.

[alec]

Are you sure there are no errors in Roundcube logs nor web server logs? Could you try with this change https://github.com/roundcube/roundcubemail/commit/a5949991351c70eb462f779368ceb0efbeea14fb ?

[ccs46]

Alec: Looking at the web server logs I do get the following entries every time I get the popup:

ALERT - configured GET variable value length limit exceeded - dropped variable '_uids' (attacker '***.***.***.***', file '/*******************/roundcube/index.php')
ALERT - dropped 1 request variables - (1 in GET, 0 in POST, 0 in COOKIE) (attacker '***.***.***.***', file '/*******************/roundcube/index.php')
ALERT - dropped 1 request variables - (1 in GET, 0 in POST, 0 in COOKIE) (attacker '***.***.***.***', file '/*******************/roundcube/index.php', line 40)
ALERT - dropped 1 request variables - (1 in GET, 0 in POST, 0 in COOKIE) (attacker '***.***.***.***', file '/*******************/roundcube/program/include/iniset.php', line 58)

I suspect perhaps the variable value length limit needs to be increased?

[ccs46]

I've also tried using the latest copies of app.js and check_recent.inc to include the post fix but this doesn't solve my problem.  Any thoughts?

[alec]

Remove app.min.js file. The change I pointed you on should fix the issue, because indeed it gets rid of GET in favor of POST.

[ccs46]

That worked!  Do you know when this fix will be released?  Thanks for your help!