X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/d20e24b636c512fb47b2ca42a0677a3bab4d3fcb..c5182314d5f2b5b39fb744226f3dc855b0dc4959:/debian/changelog?ds=inline diff --git a/debian/changelog b/debian/changelog index 1b4b70d8c..70935c1d7 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,5 +1,6 @@ ikiwiki (2.40) UNRELEASED; urgency=low + [ Josh Triplett ] * Add new preprocessor directive syntax¸ using a '!' prefix. Add a prefix_directives option to the setup file to turn this syntax on; currently defaults to false, for backward compatibility. Support @@ -7,10 +8,27 @@ ikiwiki (2.40) UNRELEASED; urgency=low the underlay to support either setting of prefix_directives. Add NEWS entry with migration information. + [ Joey Hess ] + * Danish translation update from Jonas Smedegaard. Closes: #465152 + * Generate XML RPC messages with the encoding set to utf-8 instead + of XML::RPC's default of us-ascii. Allows interoperation with + python's xmlrpc library, which threw invalid encoding exceptions and + caused the rst plugin to hang. + * Add the linkify and scan hooks. These hooks can be used to implement + custom, first-class types of wikilinks. + * Move standard wikilink implementation to a new link plugin, which + will of course be enabled by default. + * camelcase: Convert to use new linkify and scan hooks rather than the old + hack. + * Setting NOTAINT=1 had no effect when building ikiwiki itself, fix this. + * Depend on HTML::Scrubber, since the scrubber is enabled by default and + dies if its can't be loaded. + -- Josh Triplett Sun, 10 Feb 2008 13:18:58 -0800 ikiwiki (2.31.3) unstable; urgency=high + [ Josh Triplett ] * Do not allow the about: URI scheme; some browsers interpret about: URIs like a limited version of data: URIs. In particular, some versions of Internet Explorer interpret arbitrary HTML content in @@ -18,7 +36,18 @@ ikiwiki (2.31.3) unstable; urgency=high * Also filter the attributes cite, longdesc, and usemap, which can contain URIs. - -- Josh Triplett Sun, 10 Feb 2008 13:59:00 -0800 + [ Joey Hess ] + * meta: Check that the urls provided for authorurl, permalink, and openid + are safe and can't contain javascript. + + [ Josh Triplett ] + * Match literal '.' in URI schemas containing '.', rather than matching any + character. + * Do not allow the steam: URI scheme. + * Allow the snews: URI scheme. + * Allow the smb: URI scheme. + + -- Josh Triplett Sun, 10 Feb 2008 14:48:48 -0800 ikiwiki (2.31.2) unstable; urgency=high @@ -31,6 +60,8 @@ ikiwiki (2.31.1) unstable; urgency=low * htmlscrubber security fix: Block javascript in uris. * Add htmlscrubber test suite. + * Thanks to Josh Triplett for pointing out the holes and for his help + in implementing and checking fixes. -- Joey Hess Sun, 10 Feb 2008 13:22:59 -0500