2 All notable changes to this project will be documented in this file.
4 The format is based on [Keep a Changelog](http://keepachangelog.com/)
5 and this project adheres to [Semantic Versioning](http://semver.org/).
7 ## [v0.11.0](https://github.com/shaarli/Shaarli/releases/tag/v0.11.0) - 2019-07-27
9 **Shaarli no longer officially support PHP 5.6 and PHP 7.0 as they've reached end of life.**
11 **Shaarli classes now use namespace, third party plugins need to update.**
14 - Add optional PHP extension to composer suggestions.
15 - composer: enforce PHP security advisories
16 - phpDocumentor configuration and make target
17 - Run unit tests against PHP 7.3
18 - Bunch of accessibility improvements to the default template, thanks to @llune
19 - Bulk actions: set visibility
20 - Display sticky label in linklist
21 - Add print CSS rules to the default template
22 - New setting to automatically retrieve description for new bookmarks
23 - Plugin to override default template colors
26 - Shaarli now uses namespaces for its classes.
27 - Rewrite IP ban management
28 - Default template: slightly lighten visited link color
29 - Hide select all button on mobile view
30 - Switch from FontAwesome v4.x to ForkAwesome
31 - Daily - display the current day instead of the previous one
34 - Do not check the IP address with session protection disabled
35 - API: update test regexes to comply with PCRE2
36 - Optimize and cleanup imports
37 - ensure HTML tags are stripped from OpenGraph description
38 - Documentation invalid links
39 - Thumbnails disabling if PHP GD is not installed
40 - Warning if links sticky status isn't set
41 - Fix button overlapping on mobile in linklist
42 - Do not try to retrieve thumbnails for internal link
43 - Update node-sass to fix a vulnerability in node tar dependency
45 - Default template: Responsive issue with delete button fix
46 - Persist sticky status on bookmark update
49 - Doxygen configuration
51 - QRCode link to an external service
53 ## [v0.10.4](https://github.com/shaarli/Shaarli/releases/tag/v0.10.4) - 2019-04-16
55 - Fix thumbnails disabling if PHP GD is not installed
56 - Fix a warning if links sticky status isn't set
58 ## [v0.10.3](https://github.com/shaarli/Shaarli/releases/tag/v0.10.3) - 2019-02-23
60 - Add OpenGraph metadata tags on permalink page
61 - Add CORS headers to REST API reponses
62 - Add a button to toggle checkboxes of displayed links
63 - Add an icon to the link list when the Isso plugin is enabled
64 - Add noindex, nofollow to documentation pages
65 - Document usage of robots.txt
66 - Add a button to set links as sticky
69 - Update French translation
70 - Refactor the documentation homepage
71 - Bump netscape-bookmark-parser
72 - Update session_start condition
73 - Improve accessibility
74 - Cleanup and refactor lint tooling
77 - Fix input size for dropdown search form
78 - Fix history for bulk link deletion
79 - Fix thumbnail requests
80 - Fix hashtag rendering when markdown escaping is enabled
81 - Fix AJAX tag deletion
82 - Fix lint errors and improve PSR-1 and PSR-2 compliance
85 - Remove Firefox Share documentation
87 ## [v0.10.2](https://github.com/shaarli/Shaarli/releases/tag/v0.10.2) - 2018-08-11
93 ## [v0.10.1](https://github.com/shaarli/Shaarli/releases/tag/v0.10.1) - 2018-08-11
98 - Remove alt text on the logo
99 - Remove redundant title in tools page
103 - Fixed an error on the daily page and daily RSS
104 - Fixed an issue causing 'You are not authorized to add a link' error while logged out
105 - Fixed thumbnail path when Shaarli's path uses symbolic links
106 - Add a `mod_version` check in Shaarli's root `.htaccess` file for Apache 2.2 syntax
107 - Include assets in the release Makefile target
111 - Firefox Social API shaare has been removed
113 ## [v0.10.0](https://github.com/shaarli/Shaarli/releases/tag/v0.10.0) - 2018-07-28
114 **PHP 5.5 compatibility has been dropped.** Shaarli now requires at least PHP 5.6.
117 - Add a filter to display public links only
118 - Add PHP 7.2 support
119 - Add German translation
120 - Resolve front-end dependencies from NPM
121 - Build front-end bundles with Yarn and Webpack
122 - Lint Javascript code with ESLint
123 - Lint SASS code with SASSLint
124 - Support redirection in cURL download callback
125 - Introduce multi-stage builds for Docker images
126 - Use Travis matrix and stages to run Javascript tests in a dedicated environment
127 - Add tag endpoint in the REST API
128 - Build the documentation in Travis builds
129 - Provide a Docker Compose example
132 - Use web-thumbnailer to retrieve thumbnails (see #687)
133 - Use a specific page title in all pages
134 - Daily: run hooks before creating the columns
135 - Load theme translations files automatically
136 - Make max download size and timeout configurable
137 - Make Nginx logs accessible as stdout/stderr for Docker images
138 - Update buttons used to toggle link visibility filters
139 - Rewrite Javascript code for ES6 compliance
140 - Refactor IP ban management
141 - Refactor user login management
142 - Refactor server-side session management
143 - Update Doxygen configuration
145 - Improve documentation
146 - Docker: build the images from the local sources
147 - Docker: bump alpine version to 3.7
148 - Docker: expose a volume for the thumbnail cache
151 - Drop support for PHP 5.5
152 - Remove vendored front-end libraries
153 - Remove environment specific .gitignore entries
156 - Ignore the case while checking DOCTYPE during the file import
157 - Fix removal of on=... attributes from html generated from Markdown
158 - httpd: always forward the 'Authorization' header
159 - Ensure user-specific CSS file is loaded
160 - Fix feed permalink rendering when Markdown escaping is enabled
161 - Fix order of tags with the same number of occurrences
162 - Fixed the referrer meta tag in default template
163 - Disable MkDocs' strict mode for ReadTheDocs builds to pass
164 - fix and simplify Dockerfile for armhf
167 - Update `.htaccess` to prevent accessing Git metadata when using a Git-based installation
170 ## [v0.9.7](https://github.com/shaarli/Shaarli/releases/tag/v0.9.7) - 2018-06-20
172 - Build the Docker images from the local Git sources
175 ## [v0.9.6](https://github.com/shaarli/Shaarli/releases/tag/v0.9.6) - 2018-03-25
177 - htaccess: prevent accessing resources not managed by SCM
178 - htaccess: always forward the 'Authorization' HTTP header
181 ## [v0.9.5](https://github.com/shaarli/Shaarli/releases/tag/v0.9.5) - 2018-02-02
183 - Fix a warning happening when `php-intl` is not installed on the system
184 - Fix warnings happening when updating from legacy SebSauvage version
186 ## [v0.9.4](https://github.com/shaarli/Shaarli/releases/tag/v0.9.4) - 2018-01-30
188 - Enable translations: Shaarli is now also available in French. Other language translations are welcome!
189 - Add EditorConfig configuration
190 - Add favicons for mobile devices
191 - Add Alpine Linux arm32v7 Dockerfiles (master, latest)
194 - Do not write bookmark edition history during file imports (performance)
195 - Migrate Docker images (master, latest) to Alpine Linux
196 - Improve unitary tests and code coverage
197 - Improve thumbnail display
198 - Improve theme ergonomics
199 - Improve messages if there is no plugin or parameter available in the admin page
200 - Increase buffer size for cURL download
201 - Force HTTPS if the original port is 443 behind a reverse proxy (workaround)
202 - Improve page title retrieval performances
205 - Remove redirector setting from Configure page
208 - Fix broken links in the documentation
209 - Enable access to `data/user.css` (Apache 2.2 & 2.4)
210 - Don't URL encode description links if parameter `redirector.encode_url` is set to false
211 - Fix an issue preventing the Save button to appear for plugin parameters
214 ## [v0.9.3](https://github.com/shaarli/Shaarli/releases/tag/v0.9.3) - 2018-01-04
215 **XSS vulnerability fixed. Please update.**
218 - Fix an XSS (cross-site-scripting) vulnerability in `index.php` -
219 [CVE-2018-5249](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5249)
222 ## [v0.9.2](https://github.com/shaarli/Shaarli/releases/tag/v0.9.2) - 2017-10-07
224 **Major security issue fixed. Please update.**
227 - Tag search now supports wildcards `*`
228 - New setting `privacy.force_login` which can be used with `privacy.hide_public_links` to redirect anonymous users to the login page.
229 - New setting `general.default_note_title` used to override default `Note:` title prefix for notes.
230 - Add a version hash for asset loading to prevent browser's cache issue
233 - The "Remember me" checkbox is unchecked by default
234 - The default value of the "Remember me" checkbox can be configured under `data/config.json.php`
237 - Remove obsolete PHP magic quote support
240 - Generates a permalink URL if the URL is set to blank
241 - Replace links to the old GitHub wiki with ReadTheDocs URIs
242 - Use single quotes in the note bookmarklet
243 - Daily page if there is no link
244 - Bulk link deletion with a single link
245 - HTTPS detection behind a reverse proxy
246 - Travis tests environment and localization
247 - Improve template paths robustness (trailing slash)
248 - Robustness: safer gzinflate/zlib usage
249 - Description links parsing with parenthesis (without Markdown)
251 - Sort the tag cloud alphabetically
252 - Firefox social title
253 - Improved visited link color
254 - Fix jumpy textarea with long content in post edit
258 - Fixed reflected XSS vulnerability introduced in v0.9.1, discovered by @chb9 ([CVE-2017-15215](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15215)).
261 ## [v0.9.1](https://github.com/shaarli/Shaarli/releases/tag/v0.9.1) - 2017-08-23
263 The documentation has been migrated to ReadTheDocs:
264 - https://shaarli.readthedocs.io/
265 - edits are submitted as pull requests
268 - Allow bulk link deletion
269 - Display subtags in the tag cloud
270 - Add an endpoint to refresh the token
271 - Add a token on every page
272 - Add a tag list view for management
273 - Add Note bookmarklet
274 - Add creation date when editing a link
278 - Generate static HTML documentation with [mkdocs](http://www.mkdocs.org/)
279 - Host documentation on [ReadTheDocs](http://www.mkdocs.org/)
280 - Update documentation structure
281 - Update Makefile targets to:
282 - Build the docs locally
283 - Include the generated docs in the release archives
285 - Use the new theme as the default
286 - Rename the tag cloud template to `tag.cloud.html`
287 - Display visited links in grey
288 - Use only one search form in `linklist.html`
289 - Hide the "search links with these tags" option when an empty `searchtags` is passed to `tag.list.html`
290 - Improve HTTP header handling when hosting Shaarli with Docker behind a reverse proxy
291 - Searching for tags with an empty value returns untagged links only
292 - Set Travis environment to `precise` until the new `trusty` environment is ready
295 - Remove dead Pubsubhubbub code
296 - Disable the GitHub wiki (see changed/documentation)
297 - Remove Docker `dev` image and resources
299 - Remove the bottom "Sort by" menu in `tag.list.html`
302 - Fix file existence check for `user.css`
303 - Limit selection to 2k characters when using the bookmarklet
304 - Fix JS error `uncaught type error`
305 - Fix Firefox Social button
306 - Use pinned PHP dependencies when generating release archives
307 - Make sure that the tag exists before altering/removing it
310 - Add a whitelist for protocols for URLs
313 ## [v0.9.0](https://github.com/shaarli/Shaarli/releases/tag/v0.9.0) - 2017-05-07
315 This release introduces the REST API, and requires updating HTTP server
316 configuration to enable URL rewriting, see:
317 - https://shaarli.github.io/api-documentation/
318 - https://shaarli.readthedocs.io/en/master/Server-configuration/
320 **WARNING**: Shaarli now requires PHP 5.5+.
324 - [Slim](https://www.slimframework.com/) framework
325 - [JSON Web Token](https://jwt.io/introduction/) (JWT) authentication
326 - versioned API endpoints:
327 - `/api/v1/info`: get general information on the Shaarli instance
328 - `/api/v1/links`: get a list of shaared links
329 - `/api/v1/history`: get a list of latest actions
331 - Introduce a new theme
332 - Allow selecting themes/templates from the configuration page
333 - New/Edit link form can be submitted using CTRL+Enter in the textarea
334 - Shaarli version is displayed in the footer when logged in
335 - Add plugin placeholders to Atom/RSS feed templates
336 - Add OpenSearch to feed templates
337 - Add `campaign_` to the URL cleanup pattern list
338 - Add an AUTHORS file and Makefile target to list authors from Git commit data
339 - Link imports are now logged in `data/` folder, and can be debug using `dev.debug=true` setting.
340 - `composer.lock` is now included in git file to allow proper `composer install`
341 - History mechanism which logs link addition/modification/deletion
344 - Docker: enable nginx URL rewriting for the REST API
346 - Move `user.css` to the `data` folder
347 - Move default template files to a subfolder (`default`)
348 - Rename the legacy theme to `vintage`
349 - Private only filter is now displayed as a search parameter
350 - Autocomplete: pre-select the first element
351 - Display daily date in the page title (browser title)
352 - Timezone lists are now passed as an array instead of raw HTML
353 - Move PubSubHub to a dedicated plugin
355 - explicit method visibility
356 - safe boolean comparisons
357 - remove unused variables
358 - The updater now keeps custom theme preferences
359 - Simplify the COPYING information
360 - Improved client locale detection
361 - Improved date time display depending on the locale
362 - Partial namespace support for Shaarli classes
363 - Shaarli version is now only present in `shaarli_version.php`
364 - Human readable maximum file size upload
368 - PHP < 5.5 compatibility
369 - ReadItYourself plugin
372 - Ignore generated release tarballs
373 - Hide default port when behind a reverse proxy
374 - Fix a typo in the Markdown plugin description
375 - Fix the presence of empty tags for private tags and in search results
376 - Fix a fatal error during the install
377 - Fix permalink image alignment in daily page
378 - Fix the delete button in `editlink`
379 - Fix redirection after link deletion
380 - Do not access LinkDB links by ID before the Updater applies migrations
381 - Remove extra spaces in the bookmarklet's name
382 - Piwik plugin: Piwik URL protocol can now be set (http or https)
383 - All inline JS has been moved to dedicated JS files
384 - Keep tags after login redirection
387 - Markdown plugin: escape HTML entities by default
390 ## [v0.8.7](https://github.com/shaarli/Shaarli/releases/tag/v0.8.7) - 2018-06-20
392 - Build the Docker image from the local Git sources
395 - Disable PHP 5.3 Travis build (unsupported)
398 ## [v0.8.6](https://github.com/shaarli/Shaarli/releases/tag/v0.8.6) - 2018-02-19
400 - Run version check tests against the 'stable' branch
403 ## [v0.8.5](https://github.com/shaarli/Shaarli/releases/tag/v0.8.5) - 2018-01-04
404 **XSS vulnerability fixed. Please update.**
407 - Fix an XSS (cross-site-scripting) vulnerability in `index.php` -
408 [CVE-2018-5249](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5249)
410 ## [v0.8.4](https://github.com/shaarli/Shaarli/releases/tag/v0.8.4) - 2017-03-04
412 - Markdown plugin: escape HTML entities by default
414 ## [v0.8.3](https://github.com/shaarli/Shaarli/releases/tag/v0.8.3) - 2017-01-20
416 - PHP 7.1 compatibility: add ConfigManager parameter to anti-bruteforce function call in login template.
418 ## [v0.8.2](https://github.com/shaarli/Shaarli/releases/tag/v0.8.2) - 2016-12-15
421 - Editing a link created before the new ID system would change its permalink.
423 ## [v0.8.1](https://github.com/shaarli/Shaarli/releases/tag/v0.8.1) - 2016-12-12
425 > Note: this version will create an automatic backup of your database if anything goes wrong.
428 - Add CHANGELOG.md to track the whole project's history
429 - Enable Composer cache for Travis builds
430 - Save the last edition date for shaares and use it in Atom/RSS feeds
432 - Add an [Isso](https://posativ.org/isso/) plugin to enable user comments on permalinks
433 - Allow defining init functions, e.g. for performing checks and error processing
434 - Add a Piwik plugin for analytics.
435 - Markdown: add warning notice regarding HTML rendering
436 - Meta tag to *not* send the referrer to external resources.
439 - Link ID complete refactoring:
440 - Links now have a numeric ID instead of dates
441 - Short URLs are now created once and can't change over time (previous URL are kept)
443 - Changed placeholder behaviour for: `buttons_toolbar`, `fields_toolbar` and `action_plugin`
444 - Cleanup `{loop}` declarations in templates
445 - Tools: hide Firefox Social button when not in HTTPS
446 - Firefox Social: show Shaarli's title when shaaring using Firefox Social
447 - Release archives now have the same structure as GitHub-generated archives:
448 - archives contain a `Shaarli` directory, itself containing sources + dependencies
449 - the tarball is now gzipped
451 - Markdown: Parsedown library is now imported through Composer
452 - Minor code cleanup: PHPDoc, spelling, unused variables, etc.
453 - Docker: explicitly set the maximum file upload size to 10 MiB
456 - Fix the server `<self>` value in Atom/RSS feeds
458 - Tools: only display parameter description when it exists
459 - archive.org: do not propose archival of private notes
461 - render links properly in code blocks
462 - bug regarding the `nomarkdown` tag
464 - Use absolute URL for hashtags in RSS and ATOM feeds
465 - Docker: specify the location of the favicon
466 - ATOM feed: remove new line between content tag and data
469 - Allow whitelisting trusted IPs, else continue banning clients upon login failure
472 ## [v0.8.0](https://github.com/shaarli/Shaarli/releases/tag/v0.8.0) - 2016-10-12
473 Shaarli now uses [Composer](https://getcomposer.org/) to handle its dependencies.
474 Please use our release archives, or follow the
475 [installation documentation](https://github.com/shaarli/Shaarli/wiki/Download-and-Installation).
478 - Composer is required to resolve Shaarli's PHP dependencies
479 - Shaarli now supports `#hashtags`
480 - Firefox social share now uses selected text as a description
481 - Plugin parameters can have a description in each plugin's `.meta` file
484 - Configuration is now stored as a JSON file
485 - Previous configuration format will be automatically updated (PHP -> JSON)
486 - Shaarli now defaults to cURL to fetch shaare titles
487 - URL cleanup: remove `PHPSESSID` parameter
488 - `nomarkdown` tag is no longer private, and now affects visitors
489 - Cleanup template indentation
490 - Rewrite bookmark import using a generic Netscape parser
493 - Shaarli no longer references Delicious in its description
496 - Shaarli configuration is not held as PHP globals anymore
499 - Ignore case for tags in autocompletion and cloud tag
500 - Avoid generating empty tags
501 - Fix a Dockerfile syntax error
504 - Fixed a bug preventing to change password
505 - XSRF token now generated each time a page is rendered
508 ## [v0.7.1](https://github.com/shaarli/Shaarli/releases/tag/v0.7.1) - 2017-03-08
510 - Markdown plugin: escape HTML entities by default
512 ## [v0.7.0](https://github.com/shaarli/Shaarli/releases/tag/v0.7.0) - 2016-05-14
514 - Adds an option to encode redirector URL parameter
515 - Atom/RSS feeds now support Markdown formatting, and plugins in general
516 - Markdown: use the tag `.nomarkdown` to avoid markdown processing
517 - Prefill the login field when the authentication has failed
518 - Show a private links counter
521 - Allow to use the bookmarklet in Firefox reader view (URL clean up)
522 - Improve tagcloud font size
523 - Improve title retrieving
524 - Markdown: inline code background color
525 - Refactor Netscape bookmark export
526 - Refactor Atom/RSS feed generation
529 - Remove delicious from Shaarli description
532 - Fix bad login redirections causing a 404 in a few cases
533 - Fix tagcloud font-size with French locale
534 - Don't display empty tags in tag search
535 - Fix Awesomeplete conflicts with jQuery
536 - Fix UTC timezone selection
537 - Fix a bug preventing to import notes in browsers from bookmarks export
538 - Don't redirect to ?post if ?addlink is reached while logged out
541 ## [v0.6.5](https://github.com/shaarli/Shaarli/releases/tag/v0.6.5) - 2016-03-02
543 - Fixes a regression generating an unnecessary warning (language in HTTP request)
544 - Fixes a bug where going through multiple reverse proxy could generate malformed URL
545 - Markdown: Fixes a bug where empty description blocks were displayed
548 ## [v0.6.4](https://github.com/shaarli/Shaarli/releases/tag/v0.6.4) - 2016-02-28
550 - Add an updater class to automate user data upgrades
551 - Plugin admin page: adds a label for checkboxes and improve name display
552 - Plugin Wallabag: API version can be specified in plugin admin page
555 - Better tag cloud sorting, including special chars (`a > E > é > z`)
556 - Autolocale now sets all locale categories, not just time
557 - Use PHP's DateTime object instead of custom functions
558 - Plugin hooks: process includes before header/footer
559 - Markdown plugin: better styles for `<code>` and `<pre>` tags
561 - search terms are now considered separated and won't only return exact results anymore
562 - exact search can be done with quotes `"this exact sentence"`
563 - search supports excluded terms starting a dash `-exclude`
564 - implement crossed search: terms + tags
565 - all of them combined across all shaare fields
567 - tags starting with a dash will be renamed without it
568 - tags starting with a dot `.` will be hidden unless the user is logged in
571 - Fix Markdown plugin escape issues (code/quote blocks, etc.)
572 - Link description aren't trimmed anymore to allow markdown format at the beginning of a shaare
573 - Fixes plugin admin redirection page on error
576 - Fix a bug where non initialized variables were causing a warning
577 - Fix a bug where saving a link after edit could cause a 404 error
580 ## [v0.6.3](https://github.com/shaarli/Shaarli/releases/tag/v0.6.3) - 2016-01-31
582 - Plugins administration page
583 - Markdown plugin added for shaares description
584 - Docker: Dockerfile is now in the main git repository and improved
585 - Add a `.gitattributes` to ease repository management
586 - Travis: include file permission checks
589 - Auto retrieve of title know works with websites (HTTPS, follow redirections, etc.)
590 - 404 page is now handled in a template
591 - Date in log files updated to work with fail2ban
592 - Wallabag: support of Wallabag v2 and minor fixes
593 - Link search refactoring
594 - Logging function refactoring
597 - Fix a bug where renaming a tag was causing a 404
598 - Fix a bug allowing to search blank terms
599 - Fix a bug preventing to remove a tag with special chars when searching
602 ## [v0.6.2](https://github.com/shaarli/Shaarli/releases/tag/v0.6.2) - 2015-12-23
604 - Plugins: new footer hook
605 - Plugins: improve QR code
609 - Plugins: use the actual link URL to generate QR codes
610 - Templates: missing/erroneous page titles
611 - Templates: missing variables resulting in PHP errors
614 - Fix invalid file permissions (remove executable bit)
617 ## [v0.6.1](https://github.com/shaarli/Shaarli/releases/tag/v0.6.1) - 2015-12-01
619 - Add OpenSearch support
620 - Add a Doxygen makefile target
621 - Tools: add fine-grained file/directory permission checks (installation)
624 - Tools: check the 'stable' branch for new versions (updates)
625 - Cleanup: introduce an `ApplicationUtils` class
628 - Cleanup: remove `json_encode()` function (built-in since PHP 5.2)
631 - Auto-complete more than one tag
632 - Bookmarklet: support titles containing quotes
633 - URL encode links when setting a redirector
636 ## [v0.6.0](https://github.com/shaarli/Shaarli/releases/tag/v0.6.0) - 2015-11-18
638 - Introduce a plugin system
652 - Adding a new link now returns the correct anchor in the URL
653 - Set default file permissions
656 ## [v0.5.4](https://github.com/shaarli/Shaarli/releases/tag/v0.5.4) - 2015-09-15
658 - HTTPS: support being served behing an SSL-enabled proxy
661 - HTTP/Server utilities: refactor & add test coverage
662 - Project & documentation:
663 - improve/rewrite `README.md`
664 - update contributor list
665 - update `index.php` header
668 - PHP session IDs: handle hash algorithms and bits per char representations
671 ## [v0.5.3](https://github.com/shaarli/Shaarli/releases/tag/v0.5.3) - 2015-09-02
673 - Fix a bug that could prevent user to login
676 ## [0.5.3](https://github.com/shaarli/Shaarli/releases/tag/0.5.3) - 2015-09-02
677 This release has been YANKED as it points to a tag that does not follow our naming convention. Please use `v0.5.3` instead
680 - Allow uppercase letters in PHP sessionid format
683 ## [v0.5.2](https://github.com/shaarli/Shaarli/releases/tag/v0.5.2) - 2015-08-31
685 - Add PHP 7 to Travis platforms
688 - Also extract HTTPS page metadata (title)
691 - Fix regression preventing to load LinkDB info when adding an existing link
694 - Fix Full Path Disclosure upon cookie forgery
697 ## [v0.5.1](https://github.com/shaarli/Shaarli/releases/tag/v0.5.1) - 2015-08-17
699 - Add a link to the shaarli/shaarli DockerHub repository
702 - Update local documentation
703 - Improve timezone detection at installation
704 - Improve feed cache handling
705 - Improve URL cleanup for new links
708 - Fix 404 after editing a link while being logged out
711 ## [v0.5.0](https://github.com/shaarli/Shaarli/releases/tag/v0.5.0) - 2015-07-31
713 - Add Firefox Social API
714 - Start code refactoring:
715 - add unit test coverage
716 - add Travis integration
719 - Search/Filter by tag fieds can now be accessed quickly with the `Tab` key
720 - Update documentation
721 - Remove duplicate tags in links
722 - Remove annoying URL patterns
723 - Start code refactoring:
724 - move all settings to `data/config.php`
725 - refactor Config, LinkDB, TimeZone, Utils
728 - Fix locale handling
730 - Fix page redirections
731 - Fix daily RSS browsing
733 - Restore compatibility with PHP 5.3
736 - Fix links not being hidden when `HIDE_PUBLIC_LINKS` is set
739 ## [v0.0.45beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.45beta) - 2015-03-16
741 - Fix improperly displayed Unicode character
742 - Fix incorrect font size for "Add link" input field
745 ## [v0.0.44beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.44beta) - 2015-03-15
747 - Add a Makefile to run static code checkers
748 - Add local documentation (help link in page footer)
749 - Use awesomplete library for autocompletion
750 - Use bLazy.js library for images lazy loading
751 - New 'Add Note' bookmarklet to immediatly open a note (text post) compose window
754 - Theme improvements and cleanup (menu, search fields, icons, linklist...)
755 - Allow 'javascript:' links sharing (bookmarklets)
756 - Make update check optional
757 - Redirect to homepage after adding a link via "Add Link" dialog
758 - Remove more annoying URL parameters for shared links
765 - Don't disclose version to visitors (shaarli-version.txt)
768 ## [v0.0.43beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.43beta) - 2015-02-20
770 - Title button link URL is now configurable
771 - RainTPL's TMP and TPL directories path are now configurable
772 - Displayed URLs for each link are now clickable links
773 - Show links timestamps in Daily view
776 - Automatically prepend "Note:" to title of self-posts (posts not pointing to an URL)
777 - Make ATOM toolbar button optional (`SHOW_ATOM` configuration variable)
778 - Optional archive.org links for each Shaarli link (`ARCHIVE_ORG` option)
779 - Thumbnails: force HTTPS when possible
780 - Improve tag cloud font scaling
781 - Allow pointing RSS items to the permalink instead of the direct URL (`ENABLE_RSS_PERMALINKS` option)
782 - Update JS libraries and add version numbers in filenames
783 - Updates to README and footer
786 - Fix problems when running Shaarli behind a reverse proxy (invalid RSS feed URL)
787 - Update check now checks against the community fork version
788 - Include `cache/`, `data/`, `pagecache/` and `tmp/` directories in the repository
789 - Fix duplicate tag search returning no results
790 - Fix unnecessary 404 error on "Add link" when the user is logged out
791 - Fixes to copyright/licensing information and unlicensed media
792 - Fixes for tag cloud invalid links
793 - Coding style fixes/cleanup
794 - Fix redirection after deleteing a link leading to a 404 error
795 - Shaarli's HTML is now W3C-compliant
796 - Search now works with Unicode characters
799 - Do not leak server's PHP version and Shaarli's full path on errors
800 - Prevent Shaarli from sending a lot of duplicate cookies
803 ## [v0.0.42beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.42beta) - 2014-07-27
805 - Add QRCode Javascript library
806 - Allow importing bookmarks with the same timestamp (hack)
807 - Allow putting a description in the bookmarklet URL
808 - Add `json_encode()` implementation for PHP<5.2
809 - Highlight search results
812 - Improve 'Stay signed in' behaviour
813 - Improve `smallHash()`
814 - Refactor QRCode generation
815 - Update Javascript lazyloading
819 - Remove jQuery from almost all pages
822 - Fix overlapping tags
823 - Fix field foxus in the bookmarklet
824 - Fix error message when `data/` is not writable
825 - Fix HTML generation
831 ## [v0.0.41beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.41beta) - 2013-03-08
833 - Add HTTPS to the allowed protocols
834 - Add support for magnet links in link descriptions
835 - Allow creating new links as private by default
836 - Allow disabling jQuery
837 - Check write permissions
838 - Check session support before installation
841 - Improve token security
842 - RSS feed: allow inverting links/permalinks
845 - Fix display issues during installation
846 - Fix popup redirection after login failure
847 - Fix RSS formatting for Thunderbird
848 - Fix thumbnail creation
852 - Fix login issue with WebKit browsers
855 ## [v0.0.40beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.40beta) - 2013-02-26
856 Initial release on GitHub.
859 ## [v0.0.40beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-08-24
861 - Flickr thumbnail now also support albums, galleries and users
862 - Add a configuration option to disable session cookie protection
863 Check this if your get disconnected often or your IP address changes often
866 - Removed the xml comment in cached RSS/ATOM feed
867 (although W3C-compliant, this may cause problems in some feed readers)
870 - A bug in the RSS cache would present old items as new in some cases
871 - A small bug (non-initialized variable) in page cache cleaning
872 - Proper "Nothing found" message when search returns no results
873 - No more 404 error when searching with empty input
874 - Flickr thumbnails are back (Flickr has made some changes to their domains)
876 ## [v0.0.39beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-08-10
878 - A cache for RSS feed, ATOM feed and Daily RSS feed, because these URLs
879 are massively hammered. Cache is automatically purged whenever the database
880 is changed. This will reduce server load. I may add cache to other pages later.
883 - No more global `$LINKSDB` (Yuk)
884 - Background color was removed when hovering a link
887 - Small bug corrected in config screen on timezones
888 - Calling a non-existing permalink now returns a crude 404 error instead of 200 (OK)
889 This is done on purpose
890 - The `shaarli` session cookie now has a proper path
891 Thus you can now install several Shaarlis on the same server in different paths,
892 and each will have its session
893 - Now when you delete a link, you go back the same page/search parameters you were on
894 - Restore previously removed `error_get_last()`, to ensure PHP 5.1 compatibility
895 (Yes, now it works on free.fr hosting)
896 - Added `dialog=1` in bookmarklet code for some browsers
899 ## [v0.0.38beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-02-06
901 - Automatic creation of the `tmp` directory with proper rights (for RainTPL)
902 - When you click the key to see only private links, it turns yellow
905 - The "Daily" page now automatically skips empty days.
908 - Corrected the tag encoding (there was a bug when selecting a second tag which contains accented characters)
911 ## [v0.0.37beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-02-01
913 - Basic CSS for mobiles, which makes Shaarli //much// more usable on mobile devices
914 - Picture wall no more instantly kills your browser. Now it uses
915 [lazy image loading](http://www.appelsiini.net/projects/lazyload);
916 the pictures are loaded only as you scroll the page.
917 This will reduce browser memory usage (especially on mobile devices),
918 as well as server load.
919 If you have javascript disabled, the page will still work as before
920 (all images loaded at once)
921 - RSS feed for the "Daily" page. 1 RSS entry per day, with all links of that day.
922 RSS feed provides the last 7 days (only non-empty days are returned).
923 - In link list, added an icon to see only private links. Click to toggle (only private / all)
926 ## [v0.0.36beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
928 - Shaarli licence in COPYING
931 - Display adjustments in "Daily" page
934 - Improper text color in install form
935 - Error in QRCode url (missing '?')
938 ## [v0.0.35beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
940 - Corrected a bug introduced in 0.0.34 which would improperly preprend data to URLs
943 ## [v0.0.34beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
945 - There is now a QR-Code of each permalink to easily open a link on your smartphone
946 - Protocols `file:` and `apt:` are now also converted to clickable links (patch by Francis Chavanon)
947 - Thumbnail support for http://xkcd.com/ (patch by Emilien Klein)
948 - Thumbnail support for http://pix.toile-libre.org/
949 - Well I had _some_ mercy for users with antique browsers (IE) which do not have
950 support for gradients: I added a few `background-color`
951 - First version of the "Shaarli Daily", a page showing all links of a specific day.
952 By default, you see the links of the previous day.
953 There is still work to do on this page (error checking, better navigation (calendar?),
954 RSS feed, CSS for mobile and printing...)
957 - Upgraded bundled versions of jQuery (1.7.1) and jQuery UI (1.8.17)
958 - Upgraded bundled version of RainTPL (2.7)
959 - Changed HTTPS detection code
962 - In link edition, you can now click the word "Private" to check the box
963 - Clicking a tag would not work properly if the tag contained special characters (like +)
964 - Added proper jQuery licence (shame on me)
967 ## [v0.0.33beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-17
969 - Shaarli packaged to ease Linux distributions integration
970 As a simple user, you do not need to cope with these versions
971 Future releases of Shaarli will also be customized and published in these directories
972 Differences with the standard Shaarli version:
974 - .tar.gz instead of .zip
975 - COPYING licence file added
976 - jQuery/jQuery-UI libraries removed to cope with Debian rules
977 This version links to the libs hosted at http://code.jquery.com
979 - sources located in a subdirectory with the same name as the zip file
980 - COPYING licence file added
981 - WARNING: When downloading the .tar.gz, always use wget (and not your browser),
982 otherwise the .tar.gz will be corrupted
985 - ATOM feed validates again
988 - XSS vulnerability patched (thanks to Stanislas D.!)
991 ## [v0.0.32beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-12-16
993 - Better check on URL parameters (patch by gege2061)
994 - Add `max-height` and `overflow:auto` attributes so that content can be scrolled if too large
997 - HTML generation moved to RainTPL templates (in the `tpl/` directory)
998 - Better detection of HTTPS (patch by gege2061)
999 - In RSS/ATOM feeds, the GUID is now the permalink instead of the final URL (patch by gege2061)
1000 - Jerrywham CSS patch included
1001 - Multiple spaces are now respected in description.
1002 Thus you can use Shaarli as a personal pastebin (for posting source code, for example).
1005 - Page time generation was removed
1008 - Tab order changed in login screen
1009 - Permalinks now work even if additional parameters have been added
1010 (e.g. `/?E8Yj2Q&utm_source=blablabla...`)
1011 - user.css is included only if the file is present
1012 (This prevents a useless CSS include which makes a harmless but useless 404 error.)
1015 ## [v0.0.31beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-29
1017 - Support for TED Talks (ted.com/talks) thumbnails (patch by Emilien K.)
1018 - partial [patch](http://www.idleman.fr/blog/?p=508) by Idleman: Better design consistency, icon on private links. In-page popup was not included because it causes problem on some websites
1019 - Support for bookmark files without ADD_DATE attributes
1021 - `user.css` can be added to overload Shaarli base CSS.(patch by Jerrywham).
1022 Just put `user.css` in the same directory as shaarli.css.
1023 Example: `<code css>#pageheader { background: blue; }</code>`
1024 Please note that Shaarli CSS are not stable and may completely change on each version
1027 - Edit and Delete buttons in link list were replaced with icons. (patch by Jerrywham)
1030 - Better error handling in thumbnail generation (patch by Emilien K.)
1031 - The top menu is no longer displayed in bookmarklet popup
1032 - Bookmark which have the exact same date/time are now correctly imported.
1033 Most remaining import problems should be solved now
1034 - Comment in Shaarli export moved to beginning of file to prevent clash with last link description
1037 ## [v0.0.30beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-18
1039 - Add a small `delete` button in link list (after the `edit` button)
1042 - Moved the call to PubSubHub
1045 ## [v0.0.29beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-18
1047 - Corrected a bug introduced in v0.0.28beta
1048 (there was an error if you use the bookmarklet and you're not logged in)
1051 ## [v0.0.28beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-17
1053 - Thumbnail support for youtu.be URLs (YouTube short url service)
1054 - PubSubHub protocol support (from http://aldarone.fr/les-flux-rss-shaarli-et-pubsubhubbub/).
1055 Warning: This was not tested. You need to set your hub url in
1056 `$GLOBALS['config']['PUBSUBHUB_URL']` and put the official client (`publisher.php`)
1057 in the same directory as Shaarli's `index.php`
1058 - RSS and ATOM feeds now also contain tags (in `category` tags, as per their
1059 respective specifications)
1062 - New Shaarli theme and logo by Idle (http://www.idleman.fr/blog/?p=469)
1063 - In picture wall, pictures point to Shaarli permalink instead of final URL.
1064 This way, users can read the description.
1065 - In RSS/ATOM feeds, guid and link URL of permalinks are now proper absolute URLs
1066 - In RSS/ATOM feeds, URLs are now clickable
1067 - Rename `http_parse_headers()` to `http_parse_headers_shaarli()` to prevent
1068 name collision with some PHP extensions
1071 - Thumbnails removed for imgur.com/a/ URLs (Thumbnails are not available for albums on imgur)
1072 - Shaarli now correctly only tries to get thumbnails for vimeo video URLs
1073 - Fix a bug in imgur.com URLs handling that would cause some thumbnails not to appear
1074 - The search engine would not return a result if the word to search was the first in description
1075 - Extracted title is now correct if the page has two `title` html tags
1078 ## [v0.0.27beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-18
1080 - Add a picture wall, which can be filtered too: it will use the same filters
1081 (tags,text search) as current page when clicked.
1084 ## [v0.0.26beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-17
1086 - Made permalink more visible (smallHash)
1089 - Removed extras space in description when URLs are converted to clickable links
1090 - Thumbnail for subreddit imgur urls (/r/...) were corrected (thanks to Accent Grave)
1093 ## [v0.0.25beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-13
1095 - Better CSS for printing (thanks to jerrywham suggestion)
1096 - Allow using a redirector or anonymizing proxy for links
1097 (such as `http://anonym.to/?` to mask you `HTTP_REFERER`).
1098 Just go to `Tools > Configure > Redirector`
1099 (thanks to Accent Grave for the suggestion).
1100 - The `ENABLE_LOCALCACHE` option can be set to `false` for those who have
1101 a limited quota on their host.
1102 This will disable the local thumbnail cache.
1103 Services which require the use of the cache will have no thumbnails
1104 (vimeo, flickr, direct link to image).
1105 Other services will still have a thumbnail (youtube,imgur.com,dailymotion,imageshack.us)
1108 - Now thumbnails generated by Shaarli are croped to a height of 120 pixels
1109 - YouTube thumbnails now use `default.jpg` instead of `2.jpg` (This is usually more pertinent)
1110 - Configuration options (such as `HIDE_TIMESTAMPS`, `ENABLE_THUMBNAILS`, etc.)
1111 can now be put in a an external file so that you do not have to tweak them again
1112 when you upgrade Shaarli.
1113 Just add the file `data/options.php`.
1114 - If a single link is displayed, the page title contains the title of the link
1115 - Shaarli page title is clickable (and has the same link as "Home")
1116 - A few CSS tweaks (thanks to maethor for suggestion)
1119 - Shaarli now supports newlines in titles (thanks to dixy)
1120 - The link to the RSS feed in page header was not correct
1123 ## [v0.0.24beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1125 - Allow posting an entry without a link. (You can use Shaarli as a kind of "personal twitter")
1126 - Each Shaarli entry now has a short link (just click on the date of a link).
1127 Now you can send a link that points to a single entry in your Shaarli
1128 - In descriptions, URLs are now clickable
1129 - Thumbnails will be generated for all link pointing to .jpg/png/gif
1130 (as long as the images are less than 4 Mb and take less than 30 seconds to download)
1133 - Now thumbnails also work for imgur gallery links (/gallery/...)
1134 (Thanks to Accent Grave for the correction)
1135 - Removed useless debugging information in log
1136 - The filter in RSS/ATOM feed now works again properly (it was broken in 0.0.17beta)
1139 ## [v0.0.23beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1141 - Added thumbnail support for imageshack.us
1144 - Now you can clic the sentence "Stay signed in" to tick the checkbox (patch by Emilien)
1145 - In tag editing, comma (,) are now automatically converted to spaces
1146 - In tag editing, autocomplete no longuer suggests a tag you have already entered in the same line
1149 ## [v0.0.22beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1151 - Support for thumbnails for flickr.com
1152 - Allow staying signed in:
1153 Your session will be kept open even if you close the browser.
1154 This is available through a checkbox in the login screen.
1157 - Some hosts (flickr, vimeo) are slow as hell for the thumbnails,
1158 or require an extra HTTP request.
1159 For these hosts the thumbnail generation has been deported outside the generation
1160 of the page to keep Shaarli snappy.
1161 For these slow services, the thumbnails are also cached.
1164 - Title was not properly passed if you had to login when using the bookmarklet (patch by shenshei)
1167 ## [v0.0.21beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1169 - Thumbnails for some services
1170 Currently supports: YouTube.com, dailymotion.com, vimeo.com (slow!) and imgur.com.
1171 Thumbnails are enabled by default, but you can turn them off
1172 (set `define('ENABLE_THUMBNAILS',true);` to `false`).
1175 - Removed the focus on the searchbox (this is cumbersome when you want to browse pages
1176 and scroll with the keyboard)
1179 ## [v0.0.20beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1181 - RSS feed is now served as `application/rss+xml` instead of `application/xhtml+xml`
1182 (which was causing problem in //RSS Lounge//)
1183 - ATOM feed is now served as `application/atom+xml` instead of `application/xhtml+xml`
1186 ## [v0.0.19beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1191 - Patch by Emilien to remove the update notification after the update
1194 ## [v0.0.18beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1196 - You can now configure the title of your page
1197 - New screen to configure title and timezone
1200 - Nicer timezone selection patch by killruana
1203 - New lines now appear correctly in the RSS feed descriptions.
1206 ## [v0.0.17beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1208 - Change password screen added (based on a patch by killruana)
1209 - Autocomplete in the tag search form
1210 - You can rename or delete a tag in all links
1211 (very handy if you misspelled a tag or want to merge tags)
1212 - When you click the RSS feed, the feed will be filtered with the same filters
1213 as the page you were viewing
1216 - CSS adjustments by jerrywham
1220 ## [v0.0.16beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1222 - Upgrade notification:
1223 If a new version of Shaarli is available, you will be notified by a discreet
1224 message in top-right corner.
1225 This message will only be visible if you are logged in, and the check will be
1226 performed at most once a day.
1227 - Preliminary tag cloud (ugly for the moment, I need to find something better)
1230 - Replaced `preg_match()` with `version_compare()` to check PHP version
1231 - Includes a patch by Emilien K. to mask dates if user is not logged in.
1232 The option can be activated by changing `define('HIDE_TIMESTAMPS',false);` to `true`
1235 ## [v0.0.15beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1237 - New in import: Option to overwrite existing links when importing
1238 - On free.fr, automatic creation of the `/sessions` directory
1241 - CSS Stylesheet is now an external file (shaarli.css).
1242 This reduces page size and eases customization.
1245 - Removed some parameters in URL added by some feed proxies (`#xtor=RSS-...`)
1248 - Bug corrected: Prevented loop on login screen upon successful login after a failed login
1249 - Bug corrected in import: HTML entities were not properly decoded.
1250 If you imported your Delicious/Diigo bookmarks, your should import them again
1251 and use the 'overwrite' option of the import feature.
1254 ## [v0.0.14beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1256 - You no longer need to disable `magic_quotes` on your host.
1257 Shaarli will cope with this option beeing activated.
1260 ## [v0.0.13beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1262 - Import: New option to import html bookmark file as private links
1263 - Import: Importing a bookmark file will not overwrite existing links anymore
1264 - Export: New options to export only public or private links
1267 - In tag autocomplete, tags are presented in use order
1268 (most used tags first, instead of alphabetical order)
1269 - RSS Feed can now be filtered by tags or fulltext search. Just add to the feed url:
1270 - `&searchtags=minecraft+video` for tag filtering
1271 - `&searchterm=portal` for fulltext search to the feed url
1274 ## [v0.0.12beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1276 - Add a check that the config file was properly created
1277 (in case Shaarli does not have the write rights in its folder)
1278 - Open Shaarli: there is an option to open your Shaarli to anyone.
1279 Anybody will be able to add/edit/delete links without having to login.
1280 In code, change `define('OPEN_SHAARLI',false);` to `true`.
1281 Note: No anti-spam for the moment. You are warned!
1282 - Autocomplete for tags
1285 ## [v0.0.11beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1287 - Add a check and a warning for some hosts which still have `magic_quotes` activated
1290 ## [v0.0.10beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1292 - Get rid of `"` in titles
1295 ## [v0.0.9beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1297 - Now works on hosts `free.fr` and `1and1`
1298 - Now works with PHP 5.1
1299 - PHP version is now checked and an error message is displayed if version is not correct
1302 - No more error messages if the browser does not send `HTTP_REFERER`
1303 - No more error messages if the host has disabled http protocol in PHP config (eg. 1and1)
1306 ## [v0.0.8beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1308 - In RSS feed, GUID content replaced with the URL of the link, because some
1309 stupid RSS reader (like Google Reader) use `<guid>` as a link instead of using `<link>`
1312 ## [v0.0.7beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-09-16
1313 First public release by Sebsauvage, see original article:
1314 [Adieu Delicious, Diigo et StumbleUpon. Salut Shaarli !](http://sebsauvage.net/rhaa/index.php?2011/09/16/09/29/58-adieu-delicious-diigo-et-stumbleupon-salut-shaarli-) (FR)