]> git.immae.eu Git - github/shaarli/Shaarli.git/blame_incremental - CHANGELOG.md
Bunch of improvement for thumbnails integration:
[github/shaarli/Shaarli.git] / CHANGELOG.md
... / ...
CommitLineData
1# Change Log
2All notable changes to this project will be documented in this file.
3
4The format is based on [Keep a Changelog](http://keepachangelog.com/)
5and this project adheres to [Semantic Versioning](http://semver.org/).
6
7## [v0.10.0](https://github.com/shaarli/Shaarli/releases/tag/v0.10.0) - UNPUBLISHED
8**PHP 5.5 compatibility has been dropped.** Shaarli now requires at least PHP 5.6.
9
10### Added
11- Add a filter to display public links only
12- Add PHP 7.2 support
13- Add German translation
14- Resolve front-end dependencies from NPM
15- Build front-end bundles with Yarn and Webpack
16- Lint Javascript code with ESLint
17- Lint SASS code with SASSLint
18- Support redirection in cURL download callback
19- Introduce multi-stage builds for Docker images
20- Use Travis matrix and stages to run Javascript tests in a dedicated environment
21
22### Changed
23- Use a specific page title in all pages
24- Daily: run hooks before creating the columns
25- Load theme translations files automatically
26- Make max download size and timeout configurable
27- Make Nginx logs accessible as stdout/stderr for Docker images
28- Update buttons used to toggle link visibility filters
29- Rewrite Javascript code for ES6 compliance
30- Refactor IP ban management
31- Refactor user login management
32- Refactor server-side session management
33- Update Doxygen configuration
34- Update Parsedown
35
36### Removed
37- Drop support for PHP 5.5
38- Remove vendored front-end libraries
39- Remove environment specific .gitignore entries
40
41### Fixed
42- Ignore the case while checking DOCTYPE during the file import
43- Fix removal of on=... attributes from html generated from Markdown
44- httpd: always forward the 'Authorization' header
45- Ensure user-specific CSS file is loaded
46- Fix feed permalink rendering when Markdown escaping is enabled
47- Fix order of tags with the same number of occurrences
48
49### Security
50- Update `.htaccess` to prevent accessing Git metadata when using a Git-based installation
51
52
53## [v0.9.7](https://github.com/shaarli/Shaarli/releases/tag/v0.9.7) - 2018-06-20
54### Changed
55- Build the Docker images from the local Git sources
56
57
58## [v0.9.6](https://github.com/shaarli/Shaarli/releases/tag/v0.9.6) - 2018-03-25
59### Changed
60- htaccess: prevent accessing resources not managed by SCM
61- htaccess: always forward the 'Authorization' HTTP header
62
63
64## [v0.9.5](https://github.com/shaarli/Shaarli/releases/tag/v0.9.5) - 2018-02-02
65### Fixed
66- Fix a warning happening when `php-intl` is not installed on the system
67- Fix warnings happening when updating from legacy SebSauvage version
68
69## [v0.9.4](https://github.com/shaarli/Shaarli/releases/tag/v0.9.4) - 2018-01-30
70### Added
71- Enable translations: Shaarli is now also available in French. Other language translations are welcome!
72- Add EditorConfig configuration
73- Add favicons for mobile devices
74- Add Alpine Linux arm32v7 Dockerfiles (master, latest)
75
76### Changed
77- Do not write bookmark edition history during file imports (performance)
78- Migrate Docker images (master, latest) to Alpine Linux
79- Improve unitary tests and code coverage
80- Improve thumbnail display
81- Improve theme ergonomics
82- Improve messages if there is no plugin or parameter available in the admin page
83- Increase buffer size for cURL download
84- Force HTTPS if the original port is 443 behind a reverse proxy (workaround)
85- Improve page title retrieval performances
86
87### Removed
88- Remove redirector setting from Configure page
89
90### Fixed
91- Fix broken links in the documentation
92- Enable access to `data/user.css` (Apache 2.2 & 2.4)
93- Don't URL encode description links if parameter `redirector.encode_url` is set to false
94- Fix an issue preventing the Save button to appear for plugin parameters
95
96
97## [v0.9.3](https://github.com/shaarli/Shaarli/releases/tag/v0.9.3) - 2018-01-04
98**XSS vulnerability fixed. Please update.**
99
100## Security
101- Fix an XSS (cross-site-scripting) vulnerability in `index.php` -
102 [CVE-2018-5249](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5249)
103
104
105## [v0.9.2](https://github.com/shaarli/Shaarli/releases/tag/v0.9.2) - 2017-10-07
106
107**Major security issue fixed. Please update.**
108
109### Added
110- Tag search now supports wildcards `*`
111- New setting `privacy.force_login` which can be used with `privacy.hide_public_links` to redirect anonymous users to the login page.
112- New setting `general.default_note_title` used to override default `Note:` title prefix for notes.
113- Add a version hash for asset loading to prevent browser's cache issue
114
115### Changed
116- The "Remember me" checkbox is unchecked by default
117- The default value of the "Remember me" checkbox can be configured under `data/config.json.php`
118
119### Removed
120- Remove obsolete PHP magic quote support
121
122### Fixed
123- Generates a permalink URL if the URL is set to blank
124- Replace links to the old GitHub wiki with ReadTheDocs URIs
125- Use single quotes in the note bookmarklet
126- Daily page if there is no link
127- Bulk link deletion with a single link
128- HTTPS detection behind a reverse proxy
129- Travis tests environment and localization
130- Improve template paths robustness (trailing slash)
131- Robustness: safer gzinflate/zlib usage
132- Description links parsing with parenthesis (without Markdown)
133- Templates:
134 - Sort the tag cloud alphabetically
135 - Firefox social title
136 - Improved visited link color
137 - Fix jumpy textarea with long content in post edit
138
139### Security
140
141- Fixed reflected XSS vulnerability introduced in v0.9.1, discovered by @chb9 ([CVE-2017-15215](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15215)).
142
143
144## [v0.9.1](https://github.com/shaarli/Shaarli/releases/tag/v0.9.1) - 2017-08-23
145
146The documentation has been migrated to ReadTheDocs:
147- https://shaarli.readthedocs.io/
148- edits are submitted as pull requests
149
150### Added
151- Allow bulk link deletion
152- Display subtags in the tag cloud
153- Add an endpoint to refresh the token
154- Add a token on every page
155- Add a tag list view for management
156- Add Note bookmarklet
157- Add creation date when editing a link
158
159### Changed
160- Documentation:
161 - Generate static HTML documentation with [mkdocs](http://www.mkdocs.org/)
162 - Host documentation on [ReadTheDocs](http://www.mkdocs.org/)
163 - Update documentation structure
164 - Update Makefile targets to:
165 - Build the docs locally
166 - Include the generated docs in the release archives
167- Theme:
168 - Use the new theme as the default
169 - Rename the tag cloud template to `tag.cloud.html`
170 - Display visited links in grey
171 - Use only one search form in `linklist.html`
172 - Hide the "search links with these tags" option when an empty `searchtags` is passed to `tag.list.html`
173- Improve HTTP header handling when hosting Shaarli with Docker behind a reverse proxy
174- Searching for tags with an empty value returns untagged links only
175- Set Travis environment to `precise` until the new `trusty` environment is ready
176
177### Removed
178- Remove dead Pubsubhubbub code
179- Disable the GitHub wiki (see changed/documentation)
180- Remove Docker `dev` image and resources
181- Theme:
182 - Remove the bottom "Sort by" menu in `tag.list.html`
183
184### Fixed
185- Fix file existence check for `user.css`
186- Limit selection to 2k characters when using the bookmarklet
187- Fix JS error `uncaught type error`
188- Fix Firefox Social button
189- Use pinned PHP dependencies when generating release archives
190- Make sure that the tag exists before altering/removing it
191
192### Security
193- Add a whitelist for protocols for URLs
194
195
196## [v0.9.0](https://github.com/shaarli/Shaarli/releases/tag/v0.9.0) - 2017-05-07
197
198This release introduces the REST API, and requires updating HTTP server
199configuration to enable URL rewriting, see:
200- https://shaarli.github.io/api-documentation/
201- https://shaarli.readthedocs.io/en/master/Server-configuration/
202
203**WARNING**: Shaarli now requires PHP 5.5+.
204
205### Added
206- REST API v1
207 - [Slim](https://www.slimframework.com/) framework
208 - [JSON Web Token](https://jwt.io/introduction/) (JWT) authentication
209 - versioned API endpoints:
210 - `/api/v1/info`: get general information on the Shaarli instance
211 - `/api/v1/links`: get a list of shaared links
212 - `/api/v1/history`: get a list of latest actions
213Theming:
214 - Introduce a new theme
215 - Allow selecting themes/templates from the configuration page
216 - New/Edit link form can be submitted using CTRL+Enter in the textarea
217 - Shaarli version is displayed in the footer when logged in
218- Add plugin placeholders to Atom/RSS feed templates
219- Add OpenSearch to feed templates
220- Add `campaign_` to the URL cleanup pattern list
221- Add an AUTHORS file and Makefile target to list authors from Git commit data
222- Link imports are now logged in `data/` folder, and can be debug using `dev.debug=true` setting.
223- `composer.lock` is now included in git file to allow proper `composer install`
224- History mechanism which logs link addition/modification/deletion
225
226### Changed
227- Docker: enable nginx URL rewriting for the REST API
228- Theming:
229 - Move `user.css` to the `data` folder
230 - Move default template files to a subfolder (`default`)
231 - Rename the legacy theme to `vintage`
232 - Private only filter is now displayed as a search parameter
233 - Autocomplete: pre-select the first element
234 - Display daily date in the page title (browser title)
235 - Timezone lists are now passed as an array instead of raw HTML
236- Move PubSubHub to a dedicated plugin
237- Coding style:
238 - explicit method visibility
239 - safe boolean comparisons
240 - remove unused variables
241- The updater now keeps custom theme preferences
242- Simplify the COPYING information
243- Improved client locale detection
244- Improved date time display depending on the locale
245- Partial namespace support for Shaarli classes
246- Shaarli version is now only present in `shaarli_version.php`
247- Human readable maximum file size upload
248
249
250### Removed
251- PHP < 5.5 compatibility
252- ReadItYourself plugin
253
254### Fixed
255- Ignore generated release tarballs
256- Hide default port when behind a reverse proxy
257- Fix a typo in the Markdown plugin description
258- Fix the presence of empty tags for private tags and in search results
259- Fix a fatal error during the install
260- Fix permalink image alignment in daily page
261- Fix the delete button in `editlink`
262- Fix redirection after link deletion
263- Do not access LinkDB links by ID before the Updater applies migrations
264- Remove extra spaces in the bookmarklet's name
265- Piwik plugin: Piwik URL protocol can now be set (http or https)
266- All inline JS has been moved to dedicated JS files
267- Keep tags after login redirection
268
269### Security
270- Markdown plugin: escape HTML entities by default
271
272
273## [v0.8.7](https://github.com/shaarli/Shaarli/releases/tag/v0.8.7) - 2018-06-20
274### Changed
275- Build the Docker image from the local Git sources
276
277### Removed
278- Disable PHP 5.3 Travis build (unsupported)
279
280
281## [v0.8.6](https://github.com/shaarli/Shaarli/releases/tag/v0.8.6) - 2018-02-19
282### Changed
283- Run version check tests against the 'stable' branch
284
285
286## [v0.8.5](https://github.com/shaarli/Shaarli/releases/tag/v0.8.5) - 2018-01-04
287**XSS vulnerability fixed. Please update.**
288
289## Security
290- Fix an XSS (cross-site-scripting) vulnerability in `index.php` -
291 [CVE-2018-5249](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5249)
292
293## [v0.8.4](https://github.com/shaarli/Shaarli/releases/tag/v0.8.4) - 2017-03-04
294### Security
295- Markdown plugin: escape HTML entities by default
296
297## [v0.8.3](https://github.com/shaarli/Shaarli/releases/tag/v0.8.3) - 2017-01-20
298### Fixed
299- PHP 7.1 compatibility: add ConfigManager parameter to anti-bruteforce function call in login template.
300
301## [v0.8.2](https://github.com/shaarli/Shaarli/releases/tag/v0.8.2) - 2016-12-15
302### Fixed
303
304- Editing a link created before the new ID system would change its permalink.
305
306## [v0.8.1](https://github.com/shaarli/Shaarli/releases/tag/v0.8.1) - 2016-12-12
307
308> Note: this version will create an automatic backup of your database if anything goes wrong.
309
310### Added
311- Add CHANGELOG.md to track the whole project's history
312- Enable Composer cache for Travis builds
313- Save the last edition date for shaares and use it in Atom/RSS feeds
314- Plugins:
315 - Add an [Isso](https://posativ.org/isso/) plugin to enable user comments on permalinks
316 - Allow defining init functions, e.g. for performing checks and error processing
317 - Add a Piwik plugin for analytics.
318 - Markdown: add warning notice regarding HTML rendering
319- Meta tag to *not* send the referrer to external resources.
320
321### Changed
322- Link ID complete refactoring:
323 - Links now have a numeric ID instead of dates
324 - Short URLs are now created once and can't change over time (previous URL are kept)
325- Templates:
326 - Changed placeholder behaviour for: `buttons_toolbar`, `fields_toolbar` and `action_plugin`
327 - Cleanup `{loop}` declarations in templates
328 - Tools: hide Firefox Social button when not in HTTPS
329 - Firefox Social: show Shaarli's title when shaaring using Firefox Social
330- Release archives now have the same structure as GitHub-generated archives:
331 - archives contain a `Shaarli` directory, itself containing sources + dependencies
332 - the tarball is now gzipped
333- Plugins:
334 - Markdown: Parsedown library is now imported through Composer
335- Minor code cleanup: PHPDoc, spelling, unused variables, etc.
336- Docker: explicitly set the maximum file upload size to 10 MiB
337
338### Fixed
339- Fix the server `<self>` value in Atom/RSS feeds
340- Plugins:
341 - Tools: only display parameter description when it exists
342 - archive.org: do not propose archival of private notes
343 - Markdown:
344 - render links properly in code blocks
345 - bug regarding the `nomarkdown` tag
346 - W3C compliance
347- Use absolute URL for hashtags in RSS and ATOM feeds
348- Docker: specify the location of the favicon
349- ATOM feed: remove new line between content tag and data
350
351### Security
352- Allow whitelisting trusted IPs, else continue banning clients upon login failure
353
354
355## [v0.8.0](https://github.com/shaarli/Shaarli/releases/tag/v0.8.0) - 2016-10-12
356Shaarli now uses [Composer](https://getcomposer.org/) to handle its dependencies.
357Please use our release archives, or follow the
358[installation documentation](https://github.com/shaarli/Shaarli/wiki/Download-and-Installation).
359
360### Added
361- Composer is required to resolve Shaarli's PHP dependencies
362- Shaarli now supports `#hashtags`
363- Firefox social share now uses selected text as a description
364- Plugin parameters can have a description in each plugin's `.meta` file
365
366### Changed
367- Configuration is now stored as a JSON file
368- Previous configuration format will be automatically updated (PHP -> JSON)
369- Shaarli now defaults to cURL to fetch shaare titles
370- URL cleanup: remove `PHPSESSID` parameter
371- `nomarkdown` tag is no longer private, and now affects visitors
372- Cleanup template indentation
373- Rewrite bookmark import using a generic Netscape parser
374
375### Removed
376- Shaarli no longer references Delicious in its description
377
378### Deprecated
379- Shaarli configuration is not held as PHP globals anymore
380
381### Fixed
382- Ignore case for tags in autocompletion and cloud tag
383- Avoid generating empty tags
384- Fix a Dockerfile syntax error
385
386### Security
387- Fixed a bug preventing to change password
388- XSRF token now generated each time a page is rendered
389
390
391## [v0.7.1](https://github.com/shaarli/Shaarli/releases/tag/v0.7.1) - 2017-03-08
392### Security
393- Markdown plugin: escape HTML entities by default
394
395## [v0.7.0](https://github.com/shaarli/Shaarli/releases/tag/v0.7.0) - 2016-05-14
396### Added
397- Adds an option to encode redirector URL parameter
398- Atom/RSS feeds now support Markdown formatting, and plugins in general
399- Markdown: use the tag `.nomarkdown` to avoid markdown processing
400- Prefill the login field when the authentication has failed
401- Show a private links counter
402
403### Changed
404- Allow to use the bookmarklet in Firefox reader view (URL clean up)
405- Improve tagcloud font size
406- Improve title retrieving
407- Markdown: inline code background color
408- Refactor Netscape bookmark export
409- Refactor Atom/RSS feed generation
410
411### Removed
412- Remove delicious from Shaarli description
413
414### Fixed
415- Fix bad login redirections causing a 404 in a few cases
416- Fix tagcloud font-size with French locale
417- Don't display empty tags in tag search
418- Fix Awesomeplete conflicts with jQuery
419- Fix UTC timezone selection
420- Fix a bug preventing to import notes in browsers from bookmarks export
421- Don't redirect to ?post if ?addlink is reached while logged out
422
423
424## [v0.6.5](https://github.com/shaarli/Shaarli/releases/tag/v0.6.5) - 2016-03-02
425### Fixed
426- Fixes a regression generating an unnecessary warning (language in HTTP request)
427- Fixes a bug where going through multiple reverse proxy could generate malformed URL
428- Markdown: Fixes a bug where empty description blocks were displayed
429
430
431## [v0.6.4](https://github.com/shaarli/Shaarli/releases/tag/v0.6.4) - 2016-02-28
432### Added
433- Add an updater class to automate user data upgrades
434- Plugin admin page: adds a label for checkboxes and improve name display
435- Plugin Wallabag: API version can be specified in plugin admin page
436
437### Changed
438- Better tag cloud sorting, including special chars (`a > E > é > z`)
439- Autolocale now sets all locale categories, not just time
440- Use PHP's DateTime object instead of custom functions
441- Plugin hooks: process includes before header/footer
442- Markdown plugin: better styles for `<code>` and `<pre>` tags
443- Improve searching:
444 - search terms are now considered separated and won't only return exact results anymore
445 - exact search can be done with quotes `"this exact sentence"`
446 - search supports excluded terms starting a dash `-exclude`
447 - implement crossed search: terms + tags
448 - all of them combined across all shaare fields
449- New tag behaviour:
450 - tags starting with a dash will be renamed without it
451 - tags starting with a dot `.` will be hidden unless the user is logged in
452
453### Fixed
454- Fix Markdown plugin escape issues (code/quote blocks, etc.)
455- Link description aren't trimmed anymore to allow markdown format at the beginning of a shaare
456- Fixes plugin admin redirection page on error
457
458### Security
459- Fix a bug where non initialized variables were causing a warning
460- Fix a bug where saving a link after edit could cause a 404 error
461
462
463## [v0.6.3](https://github.com/shaarli/Shaarli/releases/tag/v0.6.3) - 2016-01-31
464### Added
465- Plugins administration page
466- Markdown plugin added for shaares description
467- Docker: Dockerfile is now in the main git repository and improved
468- Add a `.gitattributes` to ease repository management
469- Travis: include file permission checks
470
471### Changed
472- Auto retrieve of title know works with websites (HTTPS, follow redirections, etc.)
473- 404 page is now handled in a template
474- Date in log files updated to work with fail2ban
475- Wallabag: support of Wallabag v2 and minor fixes
476- Link search refactoring
477- Logging function refactoring
478
479### Fixed
480- Fix a bug where renaming a tag was causing a 404
481- Fix a bug allowing to search blank terms
482- Fix a bug preventing to remove a tag with special chars when searching
483
484
485## [v0.6.2](https://github.com/shaarli/Shaarli/releases/tag/v0.6.2) - 2015-12-23
486### Changed
487- Plugins: new footer hook
488- Plugins: improve QR code
489- Cleanup templates
490
491### Fixed
492- Plugins: use the actual link URL to generate QR codes
493- Templates: missing/erroneous page titles
494- Templates: missing variables resulting in PHP errors
495
496### Security
497- Fix invalid file permissions (remove executable bit)
498
499
500## [v0.6.1](https://github.com/shaarli/Shaarli/releases/tag/v0.6.1) - 2015-12-01
501### Added
502- Add OpenSearch support
503- Add a Doxygen makefile target
504- Tools: add fine-grained file/directory permission checks (installation)
505
506### Changed
507- Tools: check the 'stable' branch for new versions (updates)
508- Cleanup: introduce an `ApplicationUtils` class
509
510### Removed
511 - Cleanup: remove `json_encode()` function (built-in since PHP 5.2)
512
513### Fixed
514 - Auto-complete more than one tag
515 - Bookmarklet: support titles containing quotes
516 - URL encode links when setting a redirector
517
518
519## [v0.6.0](https://github.com/shaarli/Shaarli/releases/tag/v0.6.0) - 2015-11-18
520### Added
521- Introduce a plugin system
522- Add a demo_plugin
523- Add plugins:
524 - addlink_toolbar
525 - archiveorg
526 - playvideos
527 - qrcode
528 - readityourself
529 - wallabag
530
531### Changed
532- Coding style
533
534### Fixed
535- Adding a new link now returns the correct anchor in the URL
536- Set default file permissions
537
538
539## [v0.5.4](https://github.com/shaarli/Shaarli/releases/tag/v0.5.4) - 2015-09-15
540### Added
541- HTTPS: support being served behing an SSL-enabled proxy
542
543### Changed
544- HTTP/Server utilities: refactor & add test coverage
545- Project & documentation:
546 - improve/rewrite `README.md`
547 - update contributor list
548 - update `index.php` header
549
550### Fixed
551- PHP session IDs: handle hash algorithms and bits per char representations
552
553
554## [v0.5.3](https://github.com/shaarli/Shaarli/releases/tag/v0.5.3) - 2015-09-02
555### Fixed
556- Fix a bug that could prevent user to login
557
558
559## [0.5.3](https://github.com/shaarli/Shaarli/releases/tag/0.5.3) - 2015-09-02
560This release has been YANKED as it points to a tag that does not follow our naming convention. Please use `v0.5.3` instead
561
562### Fixed
563- Allow uppercase letters in PHP sessionid format
564
565
566## [v0.5.2](https://github.com/shaarli/Shaarli/releases/tag/v0.5.2) - 2015-08-31
567### Added
568- Add PHP 7 to Travis platforms
569
570### Changed
571- Also extract HTTPS page metadata (title)
572
573### Fixed
574- Fix regression preventing to load LinkDB info when adding an existing link
575
576### Security
577- Fix Full Path Disclosure upon cookie forgery
578
579
580## [v0.5.1](https://github.com/shaarli/Shaarli/releases/tag/v0.5.1) - 2015-08-17
581### Added
582- Add a link to the shaarli/shaarli DockerHub repository
583
584### Changed
585- Update local documentation
586- Improve timezone detection at installation
587- Improve feed cache handling
588- Improve URL cleanup for new links
589
590### Fixed
591- Fix 404 after editing a link while being logged out
592
593
594## [v0.5.0](https://github.com/shaarli/Shaarli/releases/tag/v0.5.0) - 2015-07-31
595### Added
596- Add Firefox Social API
597- Start code refactoring:
598 - add unit test coverage
599 - add Travis integration
600
601### Changed
602- Search/Filter by tag fieds can now be accessed quickly with the `Tab` key
603- Update documentation
604- Remove duplicate tags in links
605- Remove annoying URL patterns
606- Start code refactoring:
607 - move all settings to `data/config.php`
608 - refactor Config, LinkDB, TimeZone, Utils
609
610### Fixed
611- Fix locale handling
612- Fix note URLs
613- Fix page redirections
614- Fix daily RSS browsing
615- Fix title display
616- Restore compatibility with PHP 5.3
617
618### Security
619- Fix links not being hidden when `HIDE_PUBLIC_LINKS` is set
620
621
622## [v0.0.45beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.45beta) - 2015-03-16
623### Fixed
624- Fix improperly displayed Unicode character
625- Fix incorrect font size for "Add link" input field
626
627
628## [v0.0.44beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.44beta) - 2015-03-15
629### Added
630- Add a Makefile to run static code checkers
631- Add local documentation (help link in page footer)
632- Use awesomplete library for autocompletion
633- Use bLazy.js library for images lazy loading
634- New 'Add Note' bookmarklet to immediatly open a note (text post) compose window
635
636### Changed
637- Theme improvements and cleanup (menu, search fields, icons, linklist...)
638- Allow 'javascript:' links sharing (bookmarklets)
639- Make update check optional
640- Redirect to homepage after adding a link via "Add Link" dialog
641- Remove more annoying URL parameters for shared links
642- Code cleanup
643
644### Removed
645- Remove jQuery
646
647### Security
648- Don't disclose version to visitors (shaarli-version.txt)
649
650
651## [v0.0.43beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.43beta) - 2015-02-20
652### Added
653- Title button link URL is now configurable
654- RainTPL's TMP and TPL directories path are now configurable
655- Displayed URLs for each link are now clickable links
656- Show links timestamps in Daily view
657
658### Changed
659- Automatically prepend "Note:" to title of self-posts (posts not pointing to an URL)
660- Make ATOM toolbar button optional (`SHOW_ATOM` configuration variable)
661- Optional archive.org links for each Shaarli link (`ARCHIVE_ORG` option)
662- Thumbnails: force HTTPS when possible
663- Improve tag cloud font scaling
664- Allow pointing RSS items to the permalink instead of the direct URL (`ENABLE_RSS_PERMALINKS` option)
665- Update JS libraries and add version numbers in filenames
666- Updates to README and footer
667
668### Fixed
669- Fix problems when running Shaarli behind a reverse proxy (invalid RSS feed URL)
670- Update check now checks against the community fork version
671- Include `cache/`, `data/`, `pagecache/` and `tmp/` directories in the repository
672- Fix duplicate tag search returning no results
673- Fix unnecessary 404 error on "Add link" when the user is logged out
674- Fixes to copyright/licensing information and unlicensed media
675- Fixes for tag cloud invalid links
676- Coding style fixes/cleanup
677- Fix redirection after deleteing a link leading to a 404 error
678- Shaarli's HTML is now W3C-compliant
679- Search now works with Unicode characters
680
681### Security
682- Do not leak server's PHP version and Shaarli's full path on errors
683- Prevent Shaarli from sending a lot of duplicate cookies
684
685
686## [v0.0.42beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.42beta) - 2014-07-27
687### Added
688- Add QRCode Javascript library
689- Allow importing bookmarks with the same timestamp (hack)
690- Allow putting a description in the bookmarklet URL
691- Add `json_encode()` implementation for PHP<5.2
692- Highlight search results
693
694### Changed
695- Improve 'Stay signed in' behaviour
696- Improve `smallHash()`
697- Refactor QRCode generation
698- Update Javascript lazyloading
699- Update CSS
700
701### Removed
702- Remove jQuery from almost all pages
703
704### Fixed
705- Fix overlapping tags
706- Fix field foxus in the bookmarklet
707- Fix error message when `data/` is not writable
708- Fix HTML generation
709
710### Security
711- Fix XSS flaw
712
713
714## [v0.0.41beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.41beta) - 2013-03-08
715### Added
716- Add HTTPS to the allowed protocols
717- Add support for magnet links in link descriptions
718- Allow creating new links as private by default
719- Allow disabling jQuery
720- Check write permissions
721- Check session support before installation
722
723### Changed
724- Improve token security
725- RSS feed: allow inverting links/permalinks
726
727### Fixed
728- Fix display issues during installation
729- Fix popup redirection after login failure
730- Fix RSS formatting for Thunderbird
731- Fix thumbnail creation
732- Fix cache purge
733
734### Security
735- Fix login issue with WebKit browsers
736
737
738## [v0.0.40beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.40beta) - 2013-02-26
739Initial release on GitHub.
740
741
742## [v0.0.40beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-08-24
743### Added
744- Flickr thumbnail now also support albums, galleries and users
745- Add a configuration option to disable session cookie protection
746 Check this if your get disconnected often or your IP address changes often
747
748### Removed
749- Removed the xml comment in cached RSS/ATOM feed
750 (although W3C-compliant, this may cause problems in some feed readers)
751
752### Fixed
753- A bug in the RSS cache would present old items as new in some cases
754- A small bug (non-initialized variable) in page cache cleaning
755- Proper "Nothing found" message when search returns no results
756- No more 404 error when searching with empty input
757- Flickr thumbnails are back (Flickr has made some changes to their domains)
758
759## [v0.0.39beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-08-10
760### Added
761- A cache for RSS feed, ATOM feed and Daily RSS feed, because these URLs
762 are massively hammered. Cache is automatically purged whenever the database
763 is changed. This will reduce server load. I may add cache to other pages later.
764
765### Changed
766- No more global `$LINKSDB` (Yuk)
767- Background color was removed when hovering a link
768
769### Fixed
770- Small bug corrected in config screen on timezones
771- Calling a non-existing permalink now returns a crude 404 error instead of 200 (OK)
772 This is done on purpose
773- The `shaarli` session cookie now has a proper path
774 Thus you can now install several Shaarlis on the same server in different paths,
775 and each will have its session
776- Now when you delete a link, you go back the same page/search parameters you were on
777- Restore previously removed `error_get_last()`, to ensure PHP 5.1 compatibility
778 (Yes, now it works on free.fr hosting)
779- Added `dialog=1` in bookmarklet code for some browsers
780
781
782## [v0.0.38beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-02-06
783### Added
784- Automatic creation of the `tmp` directory with proper rights (for RainTPL)
785- When you click the key to see only private links, it turns yellow
786
787### Changed
788- The "Daily" page now automatically skips empty days.
789
790### Fixed
791- Corrected the tag encoding (there was a bug when selecting a second tag which contains accented characters)
792
793
794## [v0.0.37beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-02-01
795### Added
796- Basic CSS for mobiles, which makes Shaarli //much// more usable on mobile devices
797- Picture wall no more instantly kills your browser. Now it uses
798 [lazy image loading](http://www.appelsiini.net/projects/lazyload);
799 the pictures are loaded only as you scroll the page.
800 This will reduce browser memory usage (especially on mobile devices),
801 as well as server load.
802 If you have javascript disabled, the page will still work as before
803 (all images loaded at once)
804- RSS feed for the "Daily" page. 1 RSS entry per day, with all links of that day.
805 RSS feed provides the last 7 days (only non-empty days are returned).
806- In link list, added an icon to see only private links. Click to toggle (only private / all)
807
808
809## [v0.0.36beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
810### Added
811- Shaarli licence in COPYING
812
813### Changed
814- Display adjustments in "Daily" page
815
816### Fixed
817- Improper text color in install form
818- Error in QRCode url (missing '?')
819
820
821## [v0.0.35beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
822### Fixed
823- Corrected a bug introduced in 0.0.34 which would improperly preprend data to URLs
824
825
826## [v0.0.34beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
827### Added
828- There is now a QR-Code of each permalink to easily open a link on your smartphone
829- Protocols `file:` and `apt:` are now also converted to clickable links (patch by Francis Chavanon)
830- Thumbnail support for http://xkcd.com/ (patch by Emilien Klein)
831- Thumbnail support for http://pix.toile-libre.org/
832- Well I had _some_ mercy for users with antique browsers (IE) which do not have
833 support for gradients: I added a few `background-color`
834- First version of the "Shaarli Daily", a page showing all links of a specific day.
835 By default, you see the links of the previous day.
836 There is still work to do on this page (error checking, better navigation (calendar?),
837 RSS feed, CSS for mobile and printing...)
838
839### Changed
840- Upgraded bundled versions of jQuery (1.7.1) and jQuery UI (1.8.17)
841- Upgraded bundled version of RainTPL (2.7)
842- Changed HTTPS detection code
843
844### Fixed
845- In link edition, you can now click the word "Private" to check the box
846- Clicking a tag would not work properly if the tag contained special characters (like +)
847- Added proper jQuery licence (shame on me)
848
849
850## [v0.0.33beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-17
851### Added
852- Shaarli packaged to ease Linux distributions integration
853 As a simple user, you do not need to cope with these versions
854 Future releases of Shaarli will also be customized and published in these directories
855 Differences with the standard Shaarli version:
856 - deb:
857 - .tar.gz instead of .zip
858 - COPYING licence file added
859 - jQuery/jQuery-UI libraries removed to cope with Debian rules
860 This version links to the libs hosted at http://code.jquery.com
861 - rpm:
862 - sources located in a subdirectory with the same name as the zip file
863 - COPYING licence file added
864 - WARNING: When downloading the .tar.gz, always use wget (and not your browser),
865 otherwise the .tar.gz will be corrupted
866
867### Fixed
868- ATOM feed validates again
869
870### Security
871- XSS vulnerability patched (thanks to Stanislas D.!)
872
873
874## [v0.0.32beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-12-16
875### Added
876- Better check on URL parameters (patch by gege2061)
877- Add `max-height` and `overflow:auto` attributes so that content can be scrolled if too large
878
879### Changed
880- HTML generation moved to RainTPL templates (in the `tpl/` directory)
881- Better detection of HTTPS (patch by gege2061)
882- In RSS/ATOM feeds, the GUID is now the permalink instead of the final URL (patch by gege2061)
883- Jerrywham CSS patch included
884- Multiple spaces are now respected in description.
885 Thus you can use Shaarli as a personal pastebin (for posting source code, for example).
886
887### Removed
888- Page time generation was removed
889
890### Fixed
891- Tab order changed in login screen
892- Permalinks now work even if additional parameters have been added
893 (e.g. `/?E8Yj2Q&utm_source=blablabla...`)
894- user.css is included only if the file is present
895 (This prevents a useless CSS include which makes a harmless but useless 404 error.)
896
897
898## [v0.0.31beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-29
899### Added
900- Support for TED Talks (ted.com/talks) thumbnails (patch by Emilien K.)
901- partial [patch](http://www.idleman.fr/blog/?p=508) by Idleman: Better design consistency, icon on private links. In-page popup was not included because it causes problem on some websites
902- Support for bookmark files without ADD_DATE attributes
903- Logo is clickable
904- `user.css` can be added to overload Shaarli base CSS.(patch by Jerrywham).
905 Just put `user.css` in the same directory as shaarli.css.
906 Example: `<code css>#pageheader { background: blue; }</code>`
907 Please note that Shaarli CSS are not stable and may completely change on each version
908
909### Changed
910- Edit and Delete buttons in link list were replaced with icons. (patch by Jerrywham)
911
912### Fixed
913- Better error handling in thumbnail generation (patch by Emilien K.)
914- The top menu is no longer displayed in bookmarklet popup
915- Bookmark which have the exact same date/time are now correctly imported.
916 Most remaining import problems should be solved now
917- Comment in Shaarli export moved to beginning of file to prevent clash with last link description
918
919
920## [v0.0.30beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-18
921### Added
922- Add a small `delete` button in link list (after the `edit` button)
923
924### Fixed
925- Moved the call to PubSubHub
926
927
928## [v0.0.29beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-18
929### Fixed
930- Corrected a bug introduced in v0.0.28beta
931 (there was an error if you use the bookmarklet and you're not logged in)
932
933
934## [v0.0.28beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-17
935### Added
936- Thumbnail support for youtu.be URLs (YouTube short url service)
937- PubSubHub protocol support (from http://aldarone.fr/les-flux-rss-shaarli-et-pubsubhubbub/).
938 Warning: This was not tested. You need to set your hub url in
939 `$GLOBALS['config']['PUBSUBHUB_URL']` and put the official client (`publisher.php`)
940 in the same directory as Shaarli's `index.php`
941- RSS and ATOM feeds now also contain tags (in `category` tags, as per their
942 respective specifications)
943
944### Changed
945- New Shaarli theme and logo by Idle (http://www.idleman.fr/blog/?p=469)
946- In picture wall, pictures point to Shaarli permalink instead of final URL.
947 This way, users can read the description.
948- In RSS/ATOM feeds, guid and link URL of permalinks are now proper absolute URLs
949- In RSS/ATOM feeds, URLs are now clickable
950- Rename `http_parse_headers()` to `http_parse_headers_shaarli()` to prevent
951 name collision with some PHP extensions
952
953### Fixed
954- Thumbnails removed for imgur.com/a/ URLs (Thumbnails are not available for albums on imgur)
955- Shaarli now correctly only tries to get thumbnails for vimeo video URLs
956- Fix a bug in imgur.com URLs handling that would cause some thumbnails not to appear
957- The search engine would not return a result if the word to search was the first in description
958- Extracted title is now correct if the page has two `title` html tags
959
960
961## [v0.0.27beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-18
962### Added
963- Add a picture wall, which can be filtered too: it will use the same filters
964 (tags,text search) as current page when clicked.
965
966
967## [v0.0.26beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-17
968### Changed
969- Made permalink more visible (smallHash)
970
971### Fixed
972- Removed extras space in description when URLs are converted to clickable links
973- Thumbnail for subreddit imgur urls (/r/...) were corrected (thanks to Accent Grave)
974
975
976## [v0.0.25beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-13
977### Added
978- Better CSS for printing (thanks to jerrywham suggestion)
979- Allow using a redirector or anonymizing proxy for links
980 (such as `http://anonym.to/?` to mask you `HTTP_REFERER`).
981 Just go to `Tools > Configure > Redirector`
982 (thanks to Accent Grave for the suggestion).
983- The `ENABLE_LOCALCACHE` option can be set to `false` for those who have
984 a limited quota on their host.
985 This will disable the local thumbnail cache.
986 Services which require the use of the cache will have no thumbnails
987 (vimeo, flickr, direct link to image).
988 Other services will still have a thumbnail (youtube,imgur.com,dailymotion,imageshack.us)
989
990### Changed
991- Now thumbnails generated by Shaarli are croped to a height of 120 pixels
992- YouTube thumbnails now use `default.jpg` instead of `2.jpg` (This is usually more pertinent)
993- Configuration options (such as `HIDE_TIMESTAMPS`, `ENABLE_THUMBNAILS`, etc.)
994 can now be put in a an external file so that you do not have to tweak them again
995 when you upgrade Shaarli.
996 Just add the file `data/options.php`.
997- If a single link is displayed, the page title contains the title of the link
998- Shaarli page title is clickable (and has the same link as "Home")
999- A few CSS tweaks (thanks to maethor for suggestion)
1000
1001### Fixed
1002- Shaarli now supports newlines in titles (thanks to dixy)
1003- The link to the RSS feed in page header was not correct
1004
1005
1006## [v0.0.24beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1007### Added
1008- Allow posting an entry without a link. (You can use Shaarli as a kind of "personal twitter")
1009- Each Shaarli entry now has a short link (just click on the date of a link).
1010 Now you can send a link that points to a single entry in your Shaarli
1011- In descriptions, URLs are now clickable
1012- Thumbnails will be generated for all link pointing to .jpg/png/gif
1013 (as long as the images are less than 4 Mb and take less than 30 seconds to download)
1014
1015### Fixed
1016- Now thumbnails also work for imgur gallery links (/gallery/...)
1017 (Thanks to Accent Grave for the correction)
1018- Removed useless debugging information in log
1019- The filter in RSS/ATOM feed now works again properly (it was broken in 0.0.17beta)
1020
1021
1022## [v0.0.23beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1023### Added
1024- Added thumbnail support for imageshack.us
1025
1026### Changed
1027- Now you can clic the sentence "Stay signed in" to tick the checkbox (patch by Emilien)
1028- In tag editing, comma (,) are now automatically converted to spaces
1029- In tag editing, autocomplete no longuer suggests a tag you have already entered in the same line
1030
1031
1032## [v0.0.22beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1033### Added
1034- Support for thumbnails for flickr.com
1035- Allow staying signed in:
1036 Your session will be kept open even if you close the browser.
1037 This is available through a checkbox in the login screen.
1038
1039### Changed
1040- Some hosts (flickr, vimeo) are slow as hell for the thumbnails,
1041 or require an extra HTTP request.
1042 For these hosts the thumbnail generation has been deported outside the generation
1043 of the page to keep Shaarli snappy.
1044 For these slow services, the thumbnails are also cached.
1045
1046### Fixed
1047- Title was not properly passed if you had to login when using the bookmarklet (patch by shenshei)
1048
1049
1050## [v0.0.21beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1051### Added
1052- Thumbnails for some services
1053 Currently supports: YouTube.com, dailymotion.com, vimeo.com (slow!) and imgur.com.
1054 Thumbnails are enabled by default, but you can turn them off
1055 (set `define('ENABLE_THUMBNAILS',true);` to `false`).
1056
1057### Changed
1058- Removed the focus on the searchbox (this is cumbersome when you want to browse pages
1059 and scroll with the keyboard)
1060
1061
1062## [v0.0.20beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1063### Fixed
1064- RSS feed is now served as `application/rss+xml` instead of `application/xhtml+xml`
1065 (which was causing problem in //RSS Lounge//)
1066- ATOM feed is now served as `application/atom+xml` instead of `application/xhtml+xml`
1067
1068
1069## [v0.0.19beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1070### Added
1071- ATOM feed
1072
1073### Fixed
1074- Patch by Emilien to remove the update notification after the update
1075
1076
1077## [v0.0.18beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1078### Added
1079- You can now configure the title of your page
1080- New screen to configure title and timezone
1081
1082### Changed
1083- Nicer timezone selection patch by killruana
1084
1085### Fixed
1086- New lines now appear correctly in the RSS feed descriptions.
1087
1088
1089## [v0.0.17beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1090### Added
1091- Change password screen added (based on a patch by killruana)
1092- Autocomplete in the tag search form
1093- You can rename or delete a tag in all links
1094 (very handy if you misspelled a tag or want to merge tags)
1095- When you click the RSS feed, the feed will be filtered with the same filters
1096 as the page you were viewing
1097
1098### Changed
1099- CSS adjustments by jerrywham
1100- Minor corrections
1101
1102
1103## [v0.0.16beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1104### Added
1105- Upgrade notification:
1106 If a new version of Shaarli is available, you will be notified by a discreet
1107 message in top-right corner.
1108 This message will only be visible if you are logged in, and the check will be
1109 performed at most once a day.
1110- Preliminary tag cloud (ugly for the moment, I need to find something better)
1111
1112### Changed
1113- Replaced `preg_match()` with `version_compare()` to check PHP version
1114- Includes a patch by Emilien K. to mask dates if user is not logged in.
1115 The option can be activated by changing `define('HIDE_TIMESTAMPS',false);` to `true`
1116
1117
1118## [v0.0.15beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1119### Added
1120- New in import: Option to overwrite existing links when importing
1121- On free.fr, automatic creation of the `/sessions` directory
1122
1123### Changed
1124- CSS Stylesheet is now an external file (shaarli.css).
1125 This reduces page size and eases customization.
1126
1127### Removed
1128- Removed some parameters in URL added by some feed proxies (`#xtor=RSS-...`)
1129
1130### Fixed
1131- Bug corrected: Prevented loop on login screen upon successful login after a failed login
1132- Bug corrected in import: HTML entities were not properly decoded.
1133 If you imported your Delicious/Diigo bookmarks, your should import them again
1134 and use the 'overwrite' option of the import feature.
1135
1136
1137## [v0.0.14beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1138### Added
1139- You no longer need to disable `magic_quotes` on your host.
1140 Shaarli will cope with this option beeing activated.
1141
1142
1143## [v0.0.13beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1144### Added
1145- Import: New option to import html bookmark file as private links
1146- Import: Importing a bookmark file will not overwrite existing links anymore
1147- Export: New options to export only public or private links
1148
1149### Changed
1150- In tag autocomplete, tags are presented in use order
1151 (most used tags first, instead of alphabetical order)
1152- RSS Feed can now be filtered by tags or fulltext search. Just add to the feed url:
1153 - `&searchtags=minecraft+video` for tag filtering
1154 - `&searchterm=portal` for fulltext search to the feed url
1155
1156
1157## [v0.0.12beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1158### Added
1159- Add a check that the config file was properly created
1160 (in case Shaarli does not have the write rights in its folder)
1161- Open Shaarli: there is an option to open your Shaarli to anyone.
1162 Anybody will be able to add/edit/delete links without having to login.
1163 In code, change `define('OPEN_SHAARLI',false);` to `true`.
1164 Note: No anti-spam for the moment. You are warned!
1165- Autocomplete for tags
1166
1167
1168## [v0.0.11beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1169### Added
1170- Add a check and a warning for some hosts which still have `magic_quotes` activated
1171
1172
1173## [v0.0.10beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1174### Added
1175- Get rid of `&quot;` in titles
1176
1177
1178## [v0.0.9beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1179### Added
1180- Now works on hosts `free.fr` and `1and1`
1181- Now works with PHP 5.1
1182- PHP version is now checked and an error message is displayed if version is not correct
1183
1184### Fixed
1185- No more error messages if the browser does not send `HTTP_REFERER`
1186- No more error messages if the host has disabled http protocol in PHP config (eg. 1and1)
1187
1188
1189## [v0.0.8beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1190### Changed
1191- In RSS feed, GUID content replaced with the URL of the link, because some
1192 stupid RSS reader (like Google Reader) use `<guid>` as a link instead of using `<link>`
1193
1194
1195## [v0.0.7beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-09-16
1196First public release by Sebsauvage, see original article:
1197[Adieu Delicious, Diigo et StumbleUpon. Salut Shaarli !](http://sebsauvage.net/rhaa/index.php?2011/09/16/09/29/58-adieu-delicious-diigo-et-stumbleupon-salut-shaarli-) (FR)