Merge tag 'v0.9.4' into latest

Release v0.9.4

diff --combined CHANGELOG.md
index 0a7b120c7edd76f60c2fe5a5524cd91776811d5b,aef32fcfea48f51ac66c282fa95d2c728361fabc..29e1fd6ecbb5115170874ef7c639c841cff4e77d
--- 1/CHANGELOG.md
--- 2/CHANGELOG.md
+++ b/CHANGELOG.md
@@@ -4,12 -4,42 +4,42 @@@ All notable changes to this project wil
  The format is based on [Keep a Changelog](http://keepachangelog.com/)
  and this project adheres to [Semantic Versioning](http://semver.org/).
  
- ## [v0.9.3](https://github.com/shaarli/Shaarli/releases/tag/v0.9.3) - 2018-01-04
+ ## [v0.10.0](https://github.com/shaarli/Shaarli/releases/tag/v0.10.0) - UNPUBLISHED
+ 
+ ## [v0.9.4](https://github.com/shaarli/Shaarli/releases/tag/v0.9.4) - 2018-01-30
+ ### Added
+ - Enable translations: Shaarli is now also available in French. Other language translations are welcome!
+ - Add EditorConfig configuration
+ - Add favicons for mobile devices
+ - Add Alpine Linux arm32v7 Dockerfiles (master, latest)
+ 
+ ### Changed
+ - Do not write bookmark edition history during file imports (performance)
+ - Migrate Docker images (master, latest) to Alpine Linux
+ - Improve unitary tests and code coverage
+ - Improve thumbnail display
+ - Improve theme ergonomics
+ - Improve messages if there is no plugin or parameter available in the admin page
+ - Increase buffer size for cURL download
+ - Force HTTPS if the original port is 443 behind a reverse proxy (workaround)
+ - Improve page title retrieval performances
+ 
+ ### Removed
+ - Remove redirector setting from Configure page
+ 
+ ### Fixed
+ - Fix broken links in the documentation
+ - Enable access to `data/user.css` (Apache 2.2 & 2.4)
+ - Don't URL encode description links if parameter `redirector.encode_url` is set to false
+ - Fix an issue preventing the Save button to appear for plugin parameters
  
+ 
+ ## [v0.9.3](https://github.com/shaarli/Shaarli/releases/tag/v0.9.3) - 2018-01-04
  **XSS vulnerability fixed. Please update.**
  
- ### Security
- - Fix an XSS (cross-site-scripting) vulnerability in `index.php`
+ ## Security
+ - Fix an XSS (cross-site-scripting) vulnerability in `index.php` -
+   [CVE-2018-5249](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5249)
  
  
  ## [v0.9.2](https://github.com/shaarli/Shaarli/releases/tag/v0.9.2) - 2017-10-07
@@@ -48,7 -78,8 +78,8 @@@
  
  ### Security
  
- - Vulnerability introduced in v0.9.1 fixed.
+ - Fixed reflected XSS vulnerability introduced in v0.9.1, discovered by @chb9 ([CVE-2017-15215](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15215)).
+ 
  
  ## [v0.9.1](https://github.com/shaarli/Shaarli/releases/tag/v0.9.1) - 2017-08-23
  
@@@ -123,7 -154,7 +154,7 @@@ Theming
      - Introduce a new theme
      - Allow selecting themes/templates from the configuration page
      - New/Edit link form can be submitted using CTRL+Enter in the textarea
-     - Shaarli version is displayed in the footer when logged in 
+     - Shaarli version is displayed in the footer when logged in
  - Add plugin placeholders to Atom/RSS feed templates
  - Add OpenSearch to feed templates
  - Add `campaign_` to the URL cleanup pattern list
@@@ -153,7 -184,7 +184,7 @@@
  - Improved date time display depending on the locale
  - Partial namespace support for Shaarli classes
  - Shaarli version is now only present in `shaarli_version.php`
- - Human readable maximum file size upload 
+ - Human readable maximum file size upload
  
  
  ### Removed
@@@ -178,23 -209,14 +209,30 @@@
  ### Security
  - Markdown plugin: escape HTML entities by default
  
 +## [v0.8.4](https://github.com/shaarli/Shaarli/releases/tag/v0.8.4) - 2017-03-04
 +### Security
 +- Markdown plugin: escape HTML entities by default
 +
 +
 +## [v0.8.3](https://github.com/shaarli/Shaarli/releases/tag/v0.8.3) - 2017-01-20
 +
 +### Fixed
 +
 +- PHP 7.1 compatibility: add ConfigManager parameter to anti-bruteforce function call in login template.
 +
 +## [v0.8.2](https://github.com/shaarli/Shaarli/releases/tag/v0.8.2) - 2016-12-15
 +
 +### Fixed
 +
 +- Editing a link created before the new ID system would change its permalink.
  
+ ## [v0.8.5](https://github.com/shaarli/Shaarli/releases/tag/v0.8.5) - 2018-01-04
+ **XSS vulnerability fixed. Please update.**
+ 
+ ## Security
+ - Fix an XSS (cross-site-scripting) vulnerability in `index.php` -
+   [CVE-2018-5249](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5249)
+ 
  ## [v0.8.4](https://github.com/shaarli/Shaarli/releases/tag/v0.8.4) - 2017-03-04
  ### Security
  - Markdown plugin: escape HTML entities by default
@@@ -210,7 -232,7 +248,7 @@@
  
  ## [v0.8.1](https://github.com/shaarli/Shaarli/releases/tag/v0.8.1) - 2016-12-12
  
- > Note: this version will create an automatic backup of your database if anything goes wrong. 
+ > Note: this version will create an automatic backup of your database if anything goes wrong.
  
  ### Added
  - Add CHANGELOG.md to track the whole project's history
@@@ -227,7 -249,7 +265,7 @@@
  - Link ID complete refactoring:
      - Links now have a numeric ID instead of dates
      - Short URLs are now created once and can't change over time (previous URL are kept)
- - Templates: 
+ - Templates:
      - Changed placeholder behaviour for: `buttons_toolbar`, `fields_toolbar` and `action_plugin`
      - Cleanup `{loop}` declarations in templates
      - Tools: hide Firefox Social button when not in HTTPS
@@@ -245,7 -267,7 +283,7 @@@
  - Plugins:
      - Tools: only display parameter description when it exists
      - archive.org: do not propose archival of private notes
-     - Markdown: 
+     - Markdown:
          - render links properly in code blocks
          - bug regarding the `nomarkdown` tag
      - W3C compliance
@@@ -384,7 -406,7 +422,7 @@@ Please use our release archives, or fol
  ### Fixed
  - Fix a bug where renaming a tag was causing a 404
  - Fix a bug allowing to search blank terms
- - Fix a bug preventing to remove a tag with special chars when searching 
+ - Fix a bug preventing to remove a tag with special chars when searching
  
  
  ## [v0.6.2](https://github.com/shaarli/Shaarli/releases/tag/v0.6.2) - 2015-12-23
@@@ -690,7 -712,7 +728,7 @@@ Initial release on GitHub
  - When you click the key to see only private links, it turns yellow
  
  ### Changed
- - The "Daily" page now automatically skips empty days. 
+ - The "Daily" page now automatically skips empty days.
  
  ### Fixed
  - Corrected the tag encoding (there was a bug when selecting a second tag which contains accented characters)
@@@ -988,7 -1010,7 +1026,7 @@@
  - Nicer timezone selection patch by killruana
  
  ### Fixed
- - New lines now appear correctly in the RSS feed descriptions. 
+ - New lines now appear correctly in the RSS feed descriptions.
  
  
  ## [v0.0.17beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
@@@ -1042,7 -1064,7 +1080,7 @@@
  ## [v0.0.14beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
  ### Added
  - You no longer need to disable `magic_quotes` on your host.
-   Shaarli will cope with this option beeing activated. 
+   Shaarli will cope with this option beeing activated.
  
  
  ## [v0.0.13beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)