CHANGELOG.md

   1 # Change Log
   2 All notable changes to this project will be documented in this file.
   3
   4 The format is based on [Keep a Changelog](http://keepachangelog.com/)
   5 and this project adheres to [Semantic Versioning](http://semver.org/).
   6
   7 ## [v0.9.3](https://github.com/shaarli/Shaarli/releases/tag/v0.9.3) - 2018-01-04
   8
   9 **XSS vulnerability fixed. Please update.**
  10
  11 ### Security
  12 - Fix an XSS (cross-site-scripting) vulnerability in `index.php`
  13
  14
  15 ## [v0.9.2](https://github.com/shaarli/Shaarli/releases/tag/v0.9.2) - 2017-10-07
  16
  17 **Major security issue fixed. Please update.**
  18
  19 ### Added
  20 - Tag search now supports wildcards `*`
  21 - New setting `privacy.force_login` which can be used with `privacy.hide_public_links` to redirect anonymous users to the login page.
  22 - New setting `general.default_note_title` used to override default `Note:` title prefix for notes.
  23 - Add a version hash for asset loading to prevent browser's cache issue
  24
  25 ### Changed
  26 - The "Remember me" checkbox is unchecked by default
  27 - The default value of the "Remember me" checkbox can be configured under `data/config.json.php`
  28
  29 ### Removed
  30 - Remove obsolete PHP magic quote support
  31
  32 ### Fixed
  33 - Generates a permalink URL if the URL is set to blank
  34 - Replace links to the old GitHub wiki with ReadTheDocs URIs
  35 - Use single quotes in the note bookmarklet
  36 - Daily page if there is no link
  37 - Bulk link deletion with a single link
  38 - HTTPS detection behind a reverse proxy
  39 - Travis tests environment and localization
  40 - Improve template paths robustness (trailing slash)
  41 - Robustness: safer gzinflate/zlib usage
  42 - Description links parsing with parenthesis (without Markdown)
  43 - Templates:
  44     - Sort the tag cloud alphabetically
  45     - Firefox social title
  46     - Improved visited link color
  47     - Fix jumpy textarea with long content in post edit
  48
  49 ### Security
  50
  51 - Vulnerability introduced in v0.9.1 fixed.
  52
  53 ## [v0.9.1](https://github.com/shaarli/Shaarli/releases/tag/v0.9.1) - 2017-08-23
  54
  55 The documentation has been migrated to ReadTheDocs:
  56 - https://shaarli.readthedocs.io/
  57 - edits are submitted as pull requests
  58
  59 ### Added
  60 - Allow bulk link deletion
  61 - Display subtags in the tag cloud
  62 - Add an endpoint to refresh the token
  63 - Add a token on every page
  64 - Add a tag list view for management
  65 - Add Note bookmarklet
  66 - Add creation date when editing a link
  67
  68 ### Changed
  69 - Documentation:
  70     - Generate static HTML documentation with [mkdocs](http://www.mkdocs.org/)
  71     - Host documentation on [ReadTheDocs](http://www.mkdocs.org/)
  72     - Update documentation structure
  73     - Update Makefile targets to:
  74         - Build the docs locally
  75         - Include the generated docs in the release archives
  76 - Theme:
  77     - Use the new theme as the default
  78     - Rename the tag cloud template to `tag.cloud.html`
  79     - Display visited links in grey
  80     - Use only one search form in `linklist.html`
  81     - Hide the "search links with these tags" option when an empty `searchtags` is passed to `tag.list.html`
  82 - Improve HTTP header handling when hosting Shaarli with Docker behind a reverse proxy
  83 - Searching for tags with an empty value returns untagged links only
  84 - Set Travis environment to `precise` until the new `trusty` environment is ready
  85
  86 ### Removed
  87 - Remove dead Pubsubhubbub code
  88 - Disable the GitHub wiki (see changed/documentation)
  89 - Remove Docker `dev` image and resources
  90 - Theme:
  91     - Remove the bottom "Sort by" menu in `tag.list.html`
  92
  93 ### Fixed
  94 - Fix file existence check for `user.css`
  95 - Limit selection to 2k characters when using the bookmarklet
  96 - Fix JS error `uncaught type error`
  97 - Fix Firefox Social button
  98 - Use pinned PHP dependencies when generating release archives
  99 - Make sure that the tag exists before altering/removing it
 100
 101 ### Security
 102 - Add a whitelist for protocols for URLs
 103
 104
 105 ## [v0.9.0](https://github.com/shaarli/Shaarli/releases/tag/v0.9.0) - 2017-05-07
 106
 107 This release introduces the REST API, and requires updating HTTP server
 108 configuration to enable URL rewriting, see:
 109 - https://shaarli.github.io/api-documentation/
 110 - https://shaarli.readthedocs.io/en/master/Server-configuration/
 111
 112 **WARNING**: Shaarli now requires PHP 5.5+.
 113
 114 ### Added
 115 - REST API v1
 116     - [Slim](https://www.slimframework.com/) framework
 117     - [JSON Web Token](https://jwt.io/introduction/) (JWT) authentication
 118     - versioned API endpoints:
 119         - `/api/v1/info`: get general information on the Shaarli instance
 120         - `/api/v1/links`: get a list of shaared links
 121         - `/api/v1/history`: get a list of latest actions
 122 Theming:
 123     - Introduce a new theme
 124     - Allow selecting themes/templates from the configuration page
 125     - New/Edit link form can be submitted using CTRL+Enter in the textarea
 126     - Shaarli version is displayed in the footer when logged in
 127 - Add plugin placeholders to Atom/RSS feed templates
 128 - Add OpenSearch to feed templates
 129 - Add `campaign_` to the URL cleanup pattern list
 130 - Add an AUTHORS file and Makefile target to list authors from Git commit data
 131 - Link imports are now logged in `data/` folder, and can be debug using `dev.debug=true` setting.
 132 - `composer.lock` is now included in git file to allow proper `composer install`
 133 - History mechanism which logs link addition/modification/deletion
 134
 135 ### Changed
 136 - Docker: enable nginx URL rewriting for the REST API
 137 - Theming:
 138     - Move `user.css` to the `data` folder
 139     - Move default template files to a subfolder (`default`)
 140     - Rename the legacy theme to `vintage`
 141     - Private only filter is now displayed as a search parameter
 142     - Autocomplete: pre-select the first element
 143     - Display daily date in the page title (browser title)
 144     - Timezone lists are now passed as an array instead of raw HTML
 145 - Move PubSubHub to a dedicated plugin
 146 - Coding style:
 147     - explicit method visibility
 148     - safe boolean comparisons
 149     - remove unused variables
 150 - The updater now keeps custom theme preferences
 151 - Simplify the COPYING information
 152 - Improved client locale detection
 153 - Improved date time display depending on the locale
 154 - Partial namespace support for Shaarli classes
 155 - Shaarli version is now only present in `shaarli_version.php`
 156 - Human readable maximum file size upload
 157
 158
 159 ### Removed
 160 - PHP < 5.5 compatibility
 161 - ReadItYourself plugin
 162
 163 ### Fixed
 164 - Ignore generated release tarballs
 165 - Hide default port when behind a reverse proxy
 166 - Fix a typo in the Markdown plugin description
 167 - Fix the presence of empty tags for private tags and in search results
 168 - Fix a fatal error during the install
 169 - Fix permalink image alignment in daily page
 170 - Fix the delete button in `editlink`
 171 - Fix redirection after link deletion
 172 - Do not access LinkDB links by ID before the Updater applies migrations
 173 - Remove extra spaces in the bookmarklet's name
 174 - Piwik plugin: Piwik URL protocol can now be set (http or https)
 175 - All inline JS has been moved to dedicated JS files
 176 - Keep tags after login redirection
 177
 178 ### Security
 179 - Markdown plugin: escape HTML entities by default
 180
 181
 182 ## [v0.8.4](https://github.com/shaarli/Shaarli/releases/tag/v0.8.4) - 2017-03-04
 183 ### Security
 184 - Markdown plugin: escape HTML entities by default
 185
 186 ## [v0.8.3](https://github.com/shaarli/Shaarli/releases/tag/v0.8.3) - 2017-01-20
 187 ### Fixed
 188 - PHP 7.1 compatibility: add ConfigManager parameter to anti-bruteforce function call in login template.
 189
 190 ## [v0.8.2](https://github.com/shaarli/Shaarli/releases/tag/v0.8.2) - 2016-12-15
 191 ### Fixed
 192
 193 - Editing a link created before the new ID system would change its permalink.
 194
 195 ## [v0.8.1](https://github.com/shaarli/Shaarli/releases/tag/v0.8.1) - 2016-12-12
 196
 197 > Note: this version will create an automatic backup of your database if anything goes wrong.
 198
 199 ### Added
 200 - Add CHANGELOG.md to track the whole project's history
 201 - Enable Composer cache for Travis builds
 202 - Save the last edition date for shaares and use it in Atom/RSS feeds
 203 - Plugins:
 204     - Add an [Isso](https://posativ.org/isso/) plugin to enable user comments on permalinks
 205     - Allow defining init functions, e.g. for performing checks and error processing
 206     - Add a Piwik plugin for analytics.
 207     - Markdown: add warning notice regarding HTML rendering
 208 - Meta tag to *not* send the referrer to external resources.
 209
 210 ### Changed
 211 - Link ID complete refactoring:
 212     - Links now have a numeric ID instead of dates
 213     - Short URLs are now created once and can't change over time (previous URL are kept)
 214 - Templates:
 215     - Changed placeholder behaviour for: `buttons_toolbar`, `fields_toolbar` and `action_plugin`
 216     - Cleanup `{loop}` declarations in templates
 217     - Tools: hide Firefox Social button when not in HTTPS
 218     - Firefox Social: show Shaarli's title when shaaring using Firefox Social
 219 - Release archives now have the same structure as GitHub-generated archives:
 220     - archives contain a `Shaarli` directory, itself containing sources + dependencies
 221     - the tarball is now gzipped
 222 - Plugins:
 223     - Markdown: Parsedown library is now imported through Composer
 224 - Minor code cleanup: PHPDoc, spelling, unused variables, etc.
 225 - Docker: explicitly set the maximum file upload size to 10 MiB
 226
 227 ### Fixed
 228 - Fix the server `<self>` value in Atom/RSS feeds
 229 - Plugins:
 230     - Tools: only display parameter description when it exists
 231     - archive.org: do not propose archival of private notes
 232     - Markdown:
 233         - render links properly in code blocks
 234         - bug regarding the `nomarkdown` tag
 235     - W3C compliance
 236 - Use absolute URL for hashtags in RSS and ATOM feeds
 237 - Docker: specify the location of the favicon
 238 - ATOM feed: remove new line between content tag and data
 239
 240 ### Security
 241 - Allow whitelisting trusted IPs, else continue banning clients upon login failure
 242
 243
 244 ## [v0.8.0](https://github.com/shaarli/Shaarli/releases/tag/v0.8.0) - 2016-10-12
 245 Shaarli now uses [Composer](https://getcomposer.org/) to handle its dependencies.
 246 Please use our release archives, or follow the
 247 [installation documentation](https://github.com/shaarli/Shaarli/wiki/Download-and-Installation).
 248
 249 ### Added
 250 - Composer is required to resolve Shaarli's PHP dependencies
 251 - Shaarli now supports `#hashtags`
 252 - Firefox social share now uses selected text as a description
 253 - Plugin parameters can have a description in each plugin's `.meta` file
 254
 255 ### Changed
 256 - Configuration is now stored as a JSON file
 257 - Previous configuration format will be automatically updated (PHP -> JSON)
 258 - Shaarli now defaults to cURL to fetch shaare titles
 259 - URL cleanup: remove `PHPSESSID` parameter
 260 -  `nomarkdown` tag is no longer private, and now affects visitors
 261 - Cleanup template indentation
 262 - Rewrite bookmark import using a generic Netscape parser
 263
 264 ### Removed
 265 - Shaarli no longer references Delicious in its description
 266
 267 ### Deprecated
 268 - Shaarli configuration is not held as PHP globals anymore
 269
 270 ### Fixed
 271 - Ignore case for tags in autocompletion and cloud tag
 272 - Avoid generating empty tags
 273 - Fix a Dockerfile syntax error
 274
 275 ### Security
 276 - Fixed a bug preventing to change password
 277 - XSRF token now generated each time a page is rendered
 278
 279
 280 ## [v0.7.1](https://github.com/shaarli/Shaarli/releases/tag/v0.7.1) - 2017-03-08
 281 ### Security
 282 - Markdown plugin: escape HTML entities by default
 283
 284 ## [v0.7.0](https://github.com/shaarli/Shaarli/releases/tag/v0.7.0) - 2016-05-14
 285 ### Added
 286 - Adds an option to encode redirector URL parameter
 287 - Atom/RSS feeds now support Markdown formatting, and plugins in general
 288 - Markdown: use the tag `.nomarkdown` to avoid markdown processing
 289 - Prefill the login field when the authentication has failed
 290 - Show a private links counter
 291
 292 ### Changed
 293 - Allow to use the bookmarklet in Firefox reader view (URL clean up)
 294 - Improve tagcloud font size
 295 - Improve title retrieving
 296 - Markdown: inline code background color
 297 - Refactor Netscape bookmark export
 298 - Refactor Atom/RSS feed generation
 299
 300 ### Removed
 301 - Remove delicious from Shaarli description
 302
 303 ### Fixed
 304 - Fix bad login redirections causing a 404 in a few cases
 305 - Fix tagcloud font-size with French locale
 306 - Don't display empty tags in tag search
 307 - Fix Awesomeplete conflicts with jQuery
 308 - Fix UTC timezone selection
 309 - Fix a bug preventing to import notes in browsers from bookmarks export
 310 - Don't redirect to ?post if ?addlink is reached while logged out
 311
 312
 313 ## [v0.6.5](https://github.com/shaarli/Shaarli/releases/tag/v0.6.5) - 2016-03-02
 314 ### Fixed
 315 - Fixes a regression generating an unnecessary warning (language in HTTP request)
 316 - Fixes a bug where going through multiple reverse proxy could generate malformed URL
 317 - Markdown: Fixes a bug where empty description blocks were displayed
 318
 319
 320 ## [v0.6.4](https://github.com/shaarli/Shaarli/releases/tag/v0.6.4) - 2016-02-28
 321 ### Added
 322 - Add an updater class to automate user data upgrades
 323 - Plugin admin page: adds a label for checkboxes and improve name display
 324 - Plugin Wallabag: API version can be specified in plugin admin page
 325
 326 ### Changed
 327 - Better tag cloud sorting, including special chars (`a > E > é > z`)
 328 - Autolocale now sets all locale categories, not just time
 329 - Use PHP's DateTime object instead of custom functions
 330 - Plugin hooks: process includes before header/footer
 331 - Markdown plugin: better styles for `<code>` and `<pre>` tags
 332 - Improve searching:
 333     - search terms are now considered separated and won't only return exact results anymore
 334     - exact search can be done with quotes `"this exact sentence"`
 335     - search supports excluded terms starting a dash `-exclude`
 336     - implement crossed search: terms + tags
 337     - all of them combined across all shaare fields
 338 - New tag behaviour:
 339     - tags starting with a dash will be renamed without it
 340     - tags starting with a dot `.` will be hidden unless the user is logged in
 341
 342 ### Fixed
 343 - Fix Markdown plugin escape issues (code/quote blocks, etc.)
 344 - Link description aren't trimmed anymore to allow markdown format at the beginning of a shaare
 345 - Fixes plugin admin redirection page on error
 346
 347 ### Security
 348 - Fix a bug where non initialized variables were causing a warning
 349 - Fix a bug where saving a link after edit could cause a 404 error
 350
 351
 352 ## [v0.6.3](https://github.com/shaarli/Shaarli/releases/tag/v0.6.3) - 2016-01-31
 353 ### Added
 354 - Plugins administration page
 355 - Markdown plugin added for shaares description
 356 - Docker: Dockerfile is now in the main git repository and improved
 357 - Add a `.gitattributes` to ease repository management
 358 - Travis: include file permission checks
 359
 360 ### Changed
 361 - Auto retrieve of title know works with websites (HTTPS, follow redirections, etc.)
 362 - 404 page is now handled in a template
 363 - Date in log files updated to work with fail2ban
 364 - Wallabag: support of Wallabag v2 and minor fixes
 365 - Link search refactoring
 366 - Logging function refactoring
 367
 368 ### Fixed
 369 - Fix a bug where renaming a tag was causing a 404
 370 - Fix a bug allowing to search blank terms
 371 - Fix a bug preventing to remove a tag with special chars when searching
 372
 373
 374 ## [v0.6.2](https://github.com/shaarli/Shaarli/releases/tag/v0.6.2) - 2015-12-23
 375 ### Changed
 376 - Plugins: new footer hook
 377 - Plugins: improve QR code
 378 - Cleanup templates
 379
 380 ### Fixed
 381 - Plugins: use the actual link URL to generate QR codes
 382 - Templates: missing/erroneous page titles
 383 - Templates: missing variables resulting in PHP errors
 384
 385 ### Security
 386 - Fix invalid file permissions (remove executable bit)
 387
 388
 389 ## [v0.6.1](https://github.com/shaarli/Shaarli/releases/tag/v0.6.1) - 2015-12-01
 390 ### Added
 391 - Add OpenSearch support
 392 - Add a Doxygen makefile target
 393 - Tools: add fine-grained file/directory permission checks (installation)
 394
 395 ### Changed
 396 - Tools: check the 'stable' branch for new versions (updates)
 397 - Cleanup: introduce an `ApplicationUtils` class
 398
 399 ### Removed
 400  - Cleanup: remove `json_encode()` function (built-in since PHP 5.2)
 401
 402 ### Fixed
 403  - Auto-complete more than one tag
 404  - Bookmarklet: support titles containing quotes
 405  - URL encode links when setting a redirector
 406
 407
 408 ## [v0.6.0](https://github.com/shaarli/Shaarli/releases/tag/v0.6.0) - 2015-11-18
 409 ### Added
 410 - Introduce a plugin system
 411 - Add a demo_plugin
 412 - Add plugins:
 413     - addlink_toolbar
 414     - archiveorg
 415     - playvideos
 416     - qrcode
 417     - readityourself
 418     - wallabag
 419
 420 ### Changed
 421 - Coding style
 422
 423 ### Fixed
 424 - Adding a new link now returns the correct anchor in the URL
 425 - Set default file permissions
 426
 427
 428 ## [v0.5.4](https://github.com/shaarli/Shaarli/releases/tag/v0.5.4) - 2015-09-15
 429 ### Added
 430 - HTTPS: support being served behing an SSL-enabled proxy
 431
 432 ### Changed
 433 - HTTP/Server utilities: refactor & add test coverage
 434 - Project & documentation:
 435     - improve/rewrite `README.md`
 436     - update contributor list
 437     - update `index.php` header
 438
 439 ### Fixed
 440 - PHP session IDs: handle hash algorithms and bits per char representations
 441
 442
 443 ## [v0.5.3](https://github.com/shaarli/Shaarli/releases/tag/v0.5.3) - 2015-09-02
 444 ### Fixed
 445 - Fix a bug that could prevent user to login
 446
 447
 448 ## [0.5.3](https://github.com/shaarli/Shaarli/releases/tag/0.5.3) - 2015-09-02
 449 This release has been YANKED as it points to a tag that does not follow our naming convention. Please use `v0.5.3` instead
 450
 451 ### Fixed
 452 - Allow uppercase letters in PHP sessionid format
 453
 454
 455 ## [v0.5.2](https://github.com/shaarli/Shaarli/releases/tag/v0.5.2) - 2015-08-31
 456 ### Added
 457 - Add PHP 7 to Travis platforms
 458
 459 ### Changed
 460 - Also extract HTTPS page metadata (title)
 461
 462 ### Fixed
 463 - Fix regression preventing to load LinkDB info when adding an existing link
 464
 465 ### Security
 466 - Fix Full Path Disclosure upon cookie forgery
 467
 468
 469 ## [v0.5.1](https://github.com/shaarli/Shaarli/releases/tag/v0.5.1) - 2015-08-17
 470 ### Added
 471 - Add a link to the shaarli/shaarli DockerHub repository
 472
 473 ### Changed
 474 - Update local documentation
 475 - Improve timezone detection at installation
 476 - Improve feed cache handling
 477 - Improve URL cleanup for new links
 478
 479 ### Fixed
 480 - Fix 404 after editing a link while being logged out
 481
 482
 483 ## [v0.5.0](https://github.com/shaarli/Shaarli/releases/tag/v0.5.0) - 2015-07-31
 484 ### Added
 485 - Add Firefox Social API
 486 - Start code refactoring:
 487     - add unit test coverage
 488     - add Travis integration
 489
 490 ### Changed
 491 - Search/Filter by tag fieds can now be accessed quickly with the `Tab` key
 492 - Update documentation
 493 - Remove duplicate tags in links
 494 - Remove annoying URL patterns
 495 - Start code refactoring:
 496     - move all settings to `data/config.php`
 497     - refactor Config, LinkDB, TimeZone, Utils
 498
 499 ### Fixed
 500 - Fix locale handling
 501 - Fix note URLs
 502 - Fix page redirections
 503 - Fix daily RSS browsing
 504 - Fix title display
 505 - Restore compatibility with PHP 5.3
 506
 507 ### Security
 508 - Fix links not being hidden when `HIDE_PUBLIC_LINKS` is set
 509
 510
 511 ## [v0.0.45beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.45beta) - 2015-03-16
 512 ### Fixed
 513 - Fix improperly displayed Unicode character
 514 - Fix incorrect font size for "Add link" input field
 515
 516
 517 ## [v0.0.44beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.44beta) - 2015-03-15
 518 ### Added
 519 - Add a Makefile to run static code checkers
 520 - Add local documentation (help link in page footer)
 521 - Use awesomplete library for autocompletion
 522 - Use bLazy.js library for images lazy loading
 523 - New 'Add Note' bookmarklet to immediatly open a note (text post) compose window
 524
 525 ### Changed
 526 - Theme improvements and cleanup (menu, search fields, icons, linklist...)
 527 - Allow 'javascript:' links sharing (bookmarklets)
 528 - Make update check optional
 529 - Redirect to homepage after adding a link via "Add Link" dialog
 530 - Remove more annoying URL parameters for shared links
 531 - Code cleanup
 532
 533 ### Removed
 534 - Remove jQuery
 535
 536 ### Security
 537 - Don't disclose version to visitors (shaarli-version.txt)
 538
 539
 540 ## [v0.0.43beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.43beta) - 2015-02-20
 541 ### Added
 542 - Title button link URL is now configurable
 543 - RainTPL's TMP and TPL directories path are now configurable
 544 - Displayed URLs for each link are now clickable links
 545 - Show links timestamps in Daily view
 546
 547 ### Changed
 548 - Automatically prepend "Note:" to title of self-posts (posts not pointing to an URL)
 549 - Make ATOM toolbar button optional (`SHOW_ATOM` configuration variable)
 550 - Optional archive.org links for each Shaarli link (`ARCHIVE_ORG` option)
 551 - Thumbnails: force HTTPS when possible
 552 - Improve tag cloud font scaling
 553 - Allow pointing RSS items to the permalink instead of the direct URL (`ENABLE_RSS_PERMALINKS` option)
 554 - Update JS libraries and add version numbers in filenames
 555 - Updates to README and footer
 556
 557 ### Fixed
 558 - Fix problems when running Shaarli behind a reverse proxy (invalid RSS feed URL)
 559 - Update check now checks against the community fork version
 560 - Include `cache/`, `data/`, `pagecache/` and `tmp/` directories in the repository
 561 - Fix duplicate tag search returning no results
 562 - Fix unnecessary 404 error on "Add link" when the user is logged out
 563 - Fixes to copyright/licensing information and unlicensed media
 564 - Fixes for tag cloud invalid links
 565 - Coding style fixes/cleanup
 566 - Fix redirection after deleteing a link leading to a 404 error
 567 - Shaarli's HTML is now W3C-compliant
 568 - Search now works with Unicode characters
 569
 570 ### Security
 571 - Do not leak server's PHP version and Shaarli's full path on errors
 572 - Prevent Shaarli from sending a lot of duplicate cookies
 573
 574
 575 ## [v0.0.42beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.42beta) - 2014-07-27
 576 ### Added
 577 - Add QRCode Javascript library
 578 - Allow importing bookmarks with the same timestamp (hack)
 579 - Allow putting a description in the bookmarklet URL
 580 - Add `json_encode()` implementation for PHP<5.2
 581 - Highlight search results
 582
 583 ### Changed
 584 - Improve 'Stay signed in' behaviour
 585 - Improve `smallHash()`
 586 - Refactor QRCode generation
 587 - Update Javascript lazyloading
 588 - Update CSS
 589
 590 ### Removed
 591 - Remove jQuery from almost all pages
 592
 593 ### Fixed
 594 - Fix overlapping tags
 595 - Fix field foxus in the bookmarklet
 596 - Fix error message when `data/` is not writable
 597 - Fix HTML generation
 598
 599 ### Security
 600 - Fix XSS flaw
 601
 602
 603 ## [v0.0.41beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.41beta) - 2013-03-08
 604 ### Added
 605 - Add HTTPS to the allowed protocols
 606 - Add support for magnet links in link descriptions
 607 - Allow creating new links as private by default
 608 - Allow disabling jQuery
 609 - Check write permissions
 610 - Check session support before installation
 611
 612 ### Changed
 613 - Improve token security
 614 - RSS feed: allow inverting links/permalinks
 615
 616 ### Fixed
 617 - Fix display issues during installation
 618 - Fix popup redirection after login failure
 619 - Fix RSS formatting for Thunderbird
 620 - Fix thumbnail creation
 621 - Fix cache purge
 622
 623 ### Security
 624 - Fix login issue with WebKit browsers
 625
 626
 627 ## [v0.0.40beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.40beta) - 2013-02-26
 628 Initial release on GitHub.
 629
 630
 631 ## [v0.0.40beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-08-24
 632 ### Added
 633 - Flickr thumbnail now also support albums, galleries and users
 634 - Add a configuration option to disable session cookie protection
 635   Check this if your get disconnected often or your IP address changes often
 636
 637 ### Removed
 638 - Removed the xml comment in cached RSS/ATOM feed
 639   (although W3C-compliant, this may cause problems in some feed readers)
 640
 641 ### Fixed
 642 - A bug in the RSS cache would present old items as new in some cases
 643 - A small bug (non-initialized variable) in page cache cleaning
 644 - Proper "Nothing found" message when search returns no results
 645 - No more 404 error when searching with empty input
 646 - Flickr thumbnails are back (Flickr has made some changes to their domains)
 647
 648 ## [v0.0.39beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-08-10
 649 ### Added
 650 - A cache for RSS feed, ATOM feed and Daily RSS feed, because these URLs
 651   are massively hammered. Cache is automatically purged whenever the database
 652   is changed. This will reduce server load. I may add cache to other pages later.
 653
 654 ### Changed
 655 - No more global `$LINKSDB` (Yuk)
 656 - Background color was removed when hovering a link
 657
 658 ### Fixed
 659 - Small bug corrected in config screen on timezones
 660 - Calling a non-existing permalink now returns a crude 404 error instead of 200 (OK)
 661   This is done on purpose
 662 - The `shaarli` session cookie now has a proper path
 663   Thus you can now install several Shaarlis on the same server in different paths,
 664   and each will have its session
 665 - Now when you delete a link, you go back the same page/search parameters you were on
 666 - Restore previously removed `error_get_last()`, to ensure PHP 5.1 compatibility
 667   (Yes, now it works on free.fr hosting)
 668 - Added `dialog=1` in bookmarklet code for some browsers
 669
 670
 671 ## [v0.0.38beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-02-06
 672 ### Added
 673 - Automatic creation of the `tmp` directory with proper rights (for RainTPL)
 674 - When you click the key to see only private links, it turns yellow
 675
 676 ### Changed
 677 - The "Daily" page now automatically skips empty days.
 678
 679 ### Fixed
 680 - Corrected the tag encoding (there was a bug when selecting a second tag which contains accented characters)
 681
 682
 683 ## [v0.0.37beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-02-01
 684 ### Added
 685 - Basic CSS for mobiles, which makes Shaarli //much// more usable on mobile devices
 686 - Picture wall no more instantly kills your browser. Now it uses
 687   [lazy image loading](http://www.appelsiini.net/projects/lazyload);
 688   the pictures are loaded only as you scroll the page.
 689   This will reduce browser memory usage (especially on mobile devices),
 690   as well as server load.
 691   If you have javascript disabled, the page will still work as before
 692   (all images loaded at once)
 693 - RSS feed for the "Daily" page. 1 RSS entry per day, with all links of that day.
 694   RSS feed provides the last 7 days (only non-empty days are returned).
 695 - In link list, added an icon to see only private links. Click to toggle (only private / all)
 696
 697
 698 ## [v0.0.36beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
 699 ### Added
 700 - Shaarli licence in COPYING
 701
 702 ### Changed
 703 - Display adjustments in "Daily" page
 704
 705 ### Fixed
 706 - Improper text color in install form
 707 - Error in QRCode url (missing '?')
 708
 709
 710 ## [v0.0.35beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
 711 ### Fixed
 712 - Corrected a bug introduced in 0.0.34 which would improperly preprend data to URLs
 713
 714
 715 ## [v0.0.34beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
 716 ### Added
 717 - There is now a QR-Code of each permalink to easily open a link on your smartphone
 718 - Protocols `file:` and `apt:` are now also converted to clickable links (patch by Francis Chavanon)
 719 - Thumbnail support for http://xkcd.com/ (patch by Emilien Klein)
 720 - Thumbnail support for http://pix.toile-libre.org/
 721 - Well I had _some_ mercy for users with antique browsers (IE) which do not have
 722   support for gradients: I added a few `background-color`
 723 - First version of the "Shaarli Daily", a page showing all links of a specific day.
 724   By default, you see the links of the previous day.
 725   There is still work to do on this page (error checking, better navigation (calendar?),
 726   RSS feed, CSS for mobile and printing...)
 727
 728 ### Changed
 729 - Upgraded bundled versions of jQuery (1.7.1) and jQuery UI (1.8.17)
 730 - Upgraded bundled version of RainTPL (2.7)
 731 - Changed HTTPS detection code
 732
 733 ### Fixed
 734 - In link edition, you can now click the word "Private" to check the box
 735 - Clicking a tag would not work properly if the tag contained special characters (like +)
 736 - Added proper jQuery licence (shame on me)
 737
 738
 739 ## [v0.0.33beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-17
 740 ### Added
 741 - Shaarli packaged to ease Linux distributions integration
 742   As a simple user, you do not need to cope with these versions
 743   Future releases of Shaarli will also be customized and published in these directories
 744   Differences with the standard Shaarli version:
 745     - deb:
 746         - .tar.gz instead of .zip
 747         - COPYING licence file added
 748         - jQuery/jQuery-UI libraries removed to cope with Debian rules
 749           This version links to the libs hosted at http://code.jquery.com
 750     - rpm:
 751         - sources located in a subdirectory with the same name as the zip file
 752         - COPYING licence file added
 753     - WARNING: When downloading the .tar.gz, always use wget (and not your browser),
 754       otherwise the .tar.gz will be corrupted
 755
 756 ### Fixed
 757 - ATOM feed validates again
 758
 759 ### Security
 760 - XSS vulnerability patched (thanks to Stanislas D.!)
 761
 762
 763 ## [v0.0.32beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-12-16
 764 ### Added
 765 - Better check on URL parameters (patch by gege2061)
 766 - Add `max-height` and `overflow:auto` attributes so that content can be scrolled if too large
 767
 768 ### Changed
 769 - HTML generation moved to RainTPL templates (in the `tpl/` directory)
 770 - Better detection of HTTPS (patch by gege2061)
 771 - In RSS/ATOM feeds, the GUID is now the permalink instead of the final URL (patch by gege2061)
 772 - Jerrywham CSS patch included
 773 - Multiple spaces are now respected in description.
 774   Thus you can use Shaarli as a personal pastebin (for posting source code, for example).
 775
 776 ### Removed
 777 - Page time generation was removed
 778
 779 ### Fixed
 780 - Tab order changed in login screen
 781 - Permalinks now work even if additional parameters have been added
 782   (e.g. `/?E8Yj2Q&utm_source=blablabla...`)
 783 - user.css is included only if the file is present
 784   (This prevents a useless CSS include which makes a harmless but useless 404 error.)
 785
 786
 787 ## [v0.0.31beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-29
 788 ### Added
 789 - Support for TED Talks (ted.com/talks) thumbnails (patch by Emilien K.)
 790 - partial [patch](http://www.idleman.fr/blog/?p=508) by Idleman: Better design consistency, icon on private links. In-page popup was not included because it causes problem on some websites
 791 - Support for bookmark files without ADD_DATE attributes
 792 - Logo is clickable
 793 - `user.css` can be added to overload Shaarli base CSS.(patch by Jerrywham).
 794   Just put `user.css` in the same directory as shaarli.css.
 795   Example: `<code css>#pageheader { background: blue; }</code>`
 796   Please note that Shaarli CSS are not stable and may completely change on each version
 797
 798 ### Changed
 799 - Edit and Delete buttons in link list were replaced with icons. (patch by Jerrywham)
 800
 801 ### Fixed
 802 - Better error handling in thumbnail generation (patch by Emilien K.)
 803 - The top menu is no longer displayed in bookmarklet popup
 804 - Bookmark which have the exact same date/time are now correctly imported.
 805   Most remaining import problems should be solved now
 806 - Comment in Shaarli export moved to beginning of file to prevent clash with last link description
 807
 808
 809 ## [v0.0.30beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-18
 810 ### Added
 811 - Add a small `delete` button in link list (after the `edit` button)
 812
 813 ### Fixed
 814 - Moved the call to PubSubHub
 815
 816
 817 ## [v0.0.29beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-18
 818 ### Fixed
 819 - Corrected a bug introduced in v0.0.28beta
 820   (there was an error if you use the bookmarklet and you're not logged in)
 821
 822
 823 ## [v0.0.28beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-17
 824 ### Added
 825 - Thumbnail support for youtu.be URLs (YouTube short url service)
 826 - PubSubHub protocol support (from http://aldarone.fr/les-flux-rss-shaarli-et-pubsubhubbub/).
 827   Warning: This was not tested. You need to set your hub url in
 828   `$GLOBALS['config']['PUBSUBHUB_URL']` and put the official client (`publisher.php`)
 829   in the same directory as Shaarli's `index.php`
 830 - RSS and ATOM feeds now also contain tags (in `category` tags, as per their
 831   respective specifications)
 832
 833 ### Changed
 834 - New Shaarli theme and logo by Idle (http://www.idleman.fr/blog/?p=469)
 835 - In picture wall, pictures point to Shaarli permalink instead of final URL.
 836   This way, users can read the description.
 837 - In RSS/ATOM feeds, guid and link URL of permalinks are now proper absolute URLs
 838 - In RSS/ATOM feeds, URLs are now clickable
 839 - Rename `http_parse_headers()` to `http_parse_headers_shaarli()` to prevent
 840   name collision with some PHP extensions
 841
 842 ### Fixed
 843 - Thumbnails removed for imgur.com/a/ URLs (Thumbnails are not available for albums on imgur)
 844 - Shaarli now correctly only tries to get thumbnails for vimeo video URLs
 845 - Fix a bug in imgur.com URLs handling that would cause some thumbnails not to appear
 846 - The search engine would not return a result if the word to search was the first in description
 847 - Extracted title is now correct if the page has two `title` html tags
 848
 849
 850 ## [v0.0.27beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-18
 851 ### Added
 852 - Add a picture wall, which can be filtered too: it will use the same filters
 853   (tags,text search) as current page when clicked.
 854
 855
 856 ## [v0.0.26beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-17
 857 ### Changed
 858 - Made permalink more visible (smallHash)
 859
 860 ### Fixed
 861 - Removed extras space in description when URLs are converted to clickable links
 862 - Thumbnail for subreddit imgur urls (/r/...) were corrected (thanks to Accent Grave)
 863
 864
 865 ## [v0.0.25beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-13
 866 ### Added
 867 - Better CSS for printing (thanks to jerrywham suggestion)
 868 - Allow using a redirector or anonymizing proxy for links
 869   (such as `http://anonym.to/?` to mask you `HTTP_REFERER`).
 870   Just go to `Tools > Configure > Redirector`
 871   (thanks to Accent Grave for the suggestion).
 872 - The `ENABLE_LOCALCACHE` option can be set to `false` for those who have
 873   a limited quota on their host.
 874   This will disable the local thumbnail cache.
 875   Services which require the use of the cache will have no thumbnails
 876   (vimeo, flickr, direct link to image).
 877   Other services will still have a thumbnail (youtube,imgur.com,dailymotion,imageshack.us)
 878
 879 ### Changed
 880 - Now thumbnails generated by Shaarli are croped to a height of 120 pixels
 881 - YouTube thumbnails now use `default.jpg` instead of `2.jpg` (This is usually more pertinent)
 882 - Configuration options (such as `HIDE_TIMESTAMPS`, `ENABLE_THUMBNAILS`, etc.)
 883   can now be put in a an external file so that you do not have to tweak them again
 884   when you upgrade Shaarli.
 885   Just add the file `data/options.php`.
 886 - If a single link is displayed, the page title contains the title of the link
 887 - Shaarli page title is clickable (and has the same link as "Home")
 888 - A few CSS tweaks (thanks to maethor for suggestion)
 889
 890 ### Fixed
 891 - Shaarli now supports newlines in titles (thanks to dixy)
 892 - The link to the RSS feed in page header was not correct
 893
 894
 895 ## [v0.0.24beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 896 ### Added
 897 - Allow posting an entry without a link. (You can use Shaarli as a kind of "personal twitter")
 898 - Each Shaarli entry now has a short link (just click on the date of a link).
 899   Now you can send a link that points to a single entry in your Shaarli
 900 - In descriptions, URLs are now clickable
 901 - Thumbnails will be generated for all link pointing to .jpg/png/gif
 902   (as long as the images are less than 4 Mb and take less than 30 seconds to download)
 903
 904 ### Fixed
 905 - Now thumbnails also work for imgur gallery links (/gallery/...)
 906   (Thanks to Accent Grave for the correction)
 907 - Removed useless debugging information in log
 908 - The filter in RSS/ATOM feed now works again properly (it was broken in 0.0.17beta)
 909
 910
 911 ## [v0.0.23beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 912 ### Added
 913 - Added thumbnail support for imageshack.us
 914
 915 ### Changed
 916 - Now you can clic the sentence "Stay signed in" to tick the checkbox (patch by Emilien)
 917 - In tag editing, comma (,) are now automatically converted to spaces
 918 - In tag editing, autocomplete no longuer suggests a tag you have already entered in the same line
 919
 920
 921 ## [v0.0.22beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 922 ### Added
 923 - Support for thumbnails for flickr.com
 924 - Allow staying signed in:
 925   Your session will be kept open even if you close the browser.
 926   This is available through a checkbox in the login screen.
 927
 928 ### Changed
 929 - Some hosts (flickr, vimeo) are slow as hell for the thumbnails,
 930   or require an extra HTTP request.
 931   For these hosts the thumbnail generation has been deported outside the generation
 932   of the page to keep Shaarli snappy.
 933   For these slow services, the thumbnails are also cached.
 934
 935 ### Fixed
 936 - Title was not properly passed if you had to login when using the bookmarklet (patch by shenshei)
 937
 938
 939 ## [v0.0.21beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 940 ### Added
 941 - Thumbnails for some services
 942   Currently supports: YouTube.com, dailymotion.com, vimeo.com (slow!) and imgur.com.
 943   Thumbnails are enabled by default, but you can turn them off
 944   (set `define('ENABLE_THUMBNAILS',true);` to `false`).
 945
 946 ### Changed
 947 - Removed the focus on the searchbox (this is cumbersome when you want to browse pages
 948   and scroll with the keyboard)
 949
 950
 951 ## [v0.0.20beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 952 ### Fixed
 953 - RSS feed is now served as `application/rss+xml` instead of `application/xhtml+xml`
 954   (which was causing problem in //RSS Lounge//)
 955 - ATOM feed is now served as `application/atom+xml` instead of `application/xhtml+xml`
 956
 957
 958 ## [v0.0.19beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 959 ### Added
 960 - ATOM feed
 961
 962 ### Fixed
 963 - Patch by Emilien to remove the update notification after the update
 964
 965
 966 ## [v0.0.18beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 967 ### Added
 968 - You can now configure the title of your page
 969 - New screen to configure title and timezone
 970
 971 ### Changed
 972 - Nicer timezone selection patch by killruana
 973
 974 ### Fixed
 975 - New lines now appear correctly in the RSS feed descriptions.
 976
 977
 978 ## [v0.0.17beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 979 ### Added
 980 - Change password screen added (based on a patch by killruana)
 981 - Autocomplete in the tag search form
 982 - You can rename or delete a tag in all links
 983   (very handy if you misspelled a tag or want to merge tags)
 984 - When you click the RSS feed, the feed will be filtered with the same filters
 985   as the page you were viewing
 986
 987 ### Changed
 988 - CSS adjustments by jerrywham
 989 - Minor corrections
 990
 991
 992 ## [v0.0.16beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 993 ### Added
 994 - Upgrade notification:
 995   If a new version of Shaarli is available, you will be notified by a discreet
 996   message in top-right corner.
 997   This message will only be visible if you are logged in, and the check will be
 998   performed at most once a day.
 999 - Preliminary tag cloud (ugly for the moment, I need to find something better)
1000
1001 ### Changed
1002 - Replaced `preg_match()` with `version_compare()` to check PHP version
1003 - Includes a patch by Emilien K. to mask dates if user is not logged in.
1004   The option can be activated by changing `define('HIDE_TIMESTAMPS',false);` to `true`
1005
1006
1007 ## [v0.0.15beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1008 ### Added
1009 - New in import: Option to overwrite existing links when importing
1010 - On free.fr, automatic creation of the `/sessions` directory
1011
1012 ### Changed
1013 - CSS Stylesheet is now an external file (shaarli.css).
1014   This reduces page size and eases customization.
1015
1016 ### Removed
1017 - Removed some parameters in URL added by some feed proxies (`#xtor=RSS-...`)
1018
1019 ### Fixed
1020 - Bug corrected: Prevented loop on login screen upon successful login after a failed login
1021 - Bug corrected in import: HTML entities were not properly decoded.
1022   If you imported your Delicious/Diigo bookmarks, your should import them again
1023   and use the 'overwrite' option of the import feature.
1024
1025
1026 ## [v0.0.14beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1027 ### Added
1028 - You no longer need to disable `magic_quotes` on your host.
1029   Shaarli will cope with this option beeing activated.
1030
1031
1032 ## [v0.0.13beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1033 ### Added
1034 - Import: New option to import html bookmark file as private links
1035 - Import: Importing a bookmark file will not overwrite existing links anymore
1036 - Export: New options to export only public or private links
1037
1038 ### Changed
1039 - In tag autocomplete, tags are presented in use order
1040   (most used tags first, instead of alphabetical order)
1041 - RSS Feed can now be filtered by tags or fulltext search. Just add to the feed url:
1042   - `&searchtags=minecraft+video` for tag filtering
1043   - `&searchterm=portal` for fulltext search to the feed url
1044
1045
1046 ## [v0.0.12beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1047 ### Added
1048 - Add a check that the config file was properly created
1049   (in case Shaarli does not have the write rights in its folder)
1050 - Open Shaarli: there is an option to open your Shaarli to anyone.
1051   Anybody will be able to add/edit/delete links without having to login.
1052   In code, change `define('OPEN_SHAARLI',false);` to `true`.
1053   Note: No anti-spam for the moment. You are warned!
1054 - Autocomplete for tags
1055
1056
1057 ## [v0.0.11beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1058 ### Added
1059 - Add a check and a warning for some hosts which still have `magic_quotes` activated
1060
1061
1062 ## [v0.0.10beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1063 ### Added
1064 - Get rid of `&quot;` in titles
1065
1066
1067 ## [v0.0.9beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1068 ### Added
1069 - Now works on hosts `free.fr` and `1and1`
1070 - Now works with PHP 5.1
1071 - PHP version is now checked and an error message is displayed if version is not correct
1072
1073 ### Fixed
1074 - No more error messages if the browser does not send `HTTP_REFERER`
1075 - No more error messages if the host has disabled http protocol in PHP config (eg. 1and1)
1076
1077
1078 ## [v0.0.8beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1079 ### Changed
1080 - In RSS feed, GUID content replaced with the URL of the link, because some
1081   stupid RSS reader (like Google Reader) use `<guid>` as a link instead of using `<link>`
1082
1083
1084 ## [v0.0.7beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-09-16
1085 First public release by Sebsauvage, see original article:
1086 [Adieu Delicious, Diigo et StumbleUpon. Salut Shaarli !](http://sebsauvage.net/rhaa/index.php?2011/09/16/09/29/58-adieu-delicious-diigo-et-stumbleupon-salut-shaarli-) (FR)