* meta: Allow adding javascript to pages. Only when htmlscrubber is
disabled, naturally. (Thanks, Giuseppe Bilotta)
+ * comments: Add avatar picture of comment author, using Libravatar::URL
+ when available. The avatar is looked up based on (Thanks, Francois Marier)
+ * Recommend libgravatar-url-perl, which contains Libravatar::URL.
-- Joey Hess <joeyh@debian.org> Mon, 28 Mar 2011 13:08:23 -0400
* comment: Better fix to avoid showing comments of subpages, while
not breaking manual inlining of comments.
* meta: Security fix; don't allow alternative stylesheets to be added
- on pages where the htmlscrubber is enabled.
+ on pages where the htmlscrubber is enabled. CVE-2011-1401
-- Joey Hess <joeyh@debian.org> Mon, 28 Mar 2011 12:23:26 -0400