-ikiwiki (3.20170111) UNRELEASED; urgency=medium
+ikiwiki (3.20170623) UNRELEASED; urgency=medium
+
+ [ Joey Hess ]
+ * htmlscrubber: Add support for the video tag's loop and muted
+ attributes. Those were not in the original html5 spec, but have been
+ added in the whatwg html living standard and have wide browser support.
+ * emailauth, passwordauth: Avoid leaving cgisess_* files in the
+ system temp directory.
+
+ [ Simon McVittie ]
+ * core: Don't decode the result of strftime if it is already tagged as
+ UTF-8, as it might be since Perl >= 5.21.1. (Closes: #869240)
+ * Strip metadata from resized images when the deterministic config
+ option is set. Thanks, intrigeri
+
+ [ Amitai Schleier ]
+ * Fix the build with po4a 0.52
+
+ -- Joey Hess <id@joeyh.name> Tue, 11 Jul 2017 15:48:39 -0400
+
+ikiwiki (3.20170622) unstable; urgency=medium
+
+ * t/git-cgi.t: Wait 1 second before doing a revert that should work.
+ This hopefully fixes a race condition in which the test failed
+ around 6% of the time. (Closes: 862494)
+ * Guard against set-but-empty REMOTE_USER CGI variable on
+ misconfigured nginx servers, and in general treat sessions with
+ a set-but-empty name as if they were not signed in.
+ * When the CGI fails, print the error to stderr, not "Died"
+ * mdwn: Don't mangle <style> into <elyts> under some circumstances
+ * mdwn: Enable footnotes by default when using the default Discount
+ implementation. A new mdwn_footnotes option can be used to disable
+ footnotes in MultiMarkdown and Discount.
+ * mdwn: Don't enable alphabetically labelled ordered lists by
+ default when using the default Discount implementation. A new
+ mdwn_alpha_list option can be used to restore the old
+ interpretation.
+ * osm: Convert savestate hook into a changes hook. savestate is not
+ the right place to write wiki content, and in particular this
+ breaks websetup if osm's dependencies are not installed, even
+ if the osm plugin is not actually enabled. (Closes: #719913)
+ * toc: if the heading is of the form <h1 id="...">, use that for
+ the link in the table of contents (but continue to generate
+ <a name="index42"></a> in case someone was relying on it).
+ Thanks, Antoine Beaupré
+ * color: Do not leak markup into contexts that take only the plain
+ text, such as toc
+ * meta: Document [[!meta name="foo" content="bar"]]
+ * debian: Use preferred https URL for Format of debian/copyright
+ * debian: Declare compliance with Debian Policy 4.0.0
+
+ -- Simon McVittie <smcv@debian.org> Thu, 22 Jun 2017 09:24:57 +0100
+
+ikiwiki (3.20170111) unstable; urgency=high
* passwordauth: prevent authentication bypass via multiple name
parameters (CVE-2017-0356, OVE-20170111-0001)
* remove: make it clearer that repeated page parameter is OK here
* t/passwordauth.t: new automated test for passwordauth
- -- Simon McVittie <smcv@debian.org> Wed, 11 Jan 2017 18:12:05 +0000
+ -- Simon McVittie <smcv@debian.org> Wed, 11 Jan 2017 18:16:53 +0000
ikiwiki (3.20170110) unstable; urgency=medium