CHANGELOG.md

   1 # Change Log
   2 All notable changes to this project will be documented in this file.
   3
   4 The format is based on [Keep a Changelog](http://keepachangelog.com/)
   5 and this project adheres to [Semantic Versioning](http://semver.org/).
   6
   7
   8 ## [v0.8.5](https://github.com/shaarli/Shaarli/releases/tag/v0.8.5) - 2018-01-04
   9
  10  **XSS vulnerability fixed. Please update.**
  11
  12 ### Security
  13 - Fix an XSS (cross-site-scripting) vulnerability in `index.php`
  14
  15
  16 ## [v0.8.4](https://github.com/shaarli/Shaarli/releases/tag/v0.8.4) - 2017-03-04
  17 ### Security
  18 - Markdown plugin: escape HTML entities by default
  19
  20
  21 ## [v0.8.3](https://github.com/shaarli/Shaarli/releases/tag/v0.8.3) - 2017-01-20
  22
  23 ### Fixed
  24
  25 - PHP 7.1 compatibility: add ConfigManager parameter to anti-bruteforce function call in login template.
  26
  27 ## [v0.8.2](https://github.com/shaarli/Shaarli/releases/tag/v0.8.2) - 2016-12-15
  28
  29 ### Fixed
  30
  31 - Editing a link created before the new ID system would change its permalink.
  32
  33 ## [v0.8.1](https://github.com/shaarli/Shaarli/releases/tag/v0.8.1) - 2016-12-12
  34
  35 > Note: this version will create an automatic backup of your database if anything goes wrong.
  36
  37 ### Added
  38 - Add CHANGELOG.md to track the whole project's history
  39 - Enable Composer cache for Travis builds
  40 - Save the last edition date for shaares and use it in Atom/RSS feeds
  41 - Plugins:
  42     - Add an [Isso](https://posativ.org/isso/) plugin to enable user comments on permalinks
  43     - Allow defining init functions, e.g. for performing checks and error processing
  44     - Add a Piwik plugin for analytics.
  45     - Markdown: add warning notice regarding HTML rendering
  46 - Meta tag to *not* send the referrer to external resources.
  47
  48 ### Changed
  49 - Link ID complete refactoring:
  50     - Links now have a numeric ID instead of dates
  51     - Short URLs are now created once and can't change over time (previous URL are kept)
  52 - Templates:
  53     - Changed placeholder behaviour for: `buttons_toolbar`, `fields_toolbar` and `action_plugin`
  54     - Cleanup `{loop}` declarations in templates
  55     - Tools: hide Firefox Social button when not in HTTPS
  56     - Firefox Social: show Shaarli's title when shaaring using Firefox Social
  57 - Release archives now have the same structure as GitHub-generated archives:
  58     - archives contain a `Shaarli` directory, itself containing sources + dependencies
  59     - the tarball is now gzipped
  60 - Plugins:
  61     - Markdown: Parsedown library is now imported through Composer
  62 - Minor code cleanup: PHPDoc, spelling, unused variables, etc.
  63 - Docker: explicitly set the maximum file upload size to 10 MiB
  64
  65 ### Fixed
  66 - Fix the server `<self>` value in Atom/RSS feeds
  67 - Plugins:
  68     - Tools: only display parameter description when it exists
  69     - archive.org: do not propose archival of private notes
  70     - Markdown:
  71         - render links properly in code blocks
  72         - bug regarding the `nomarkdown` tag
  73     - W3C compliance
  74 - Use absolute URL for hashtags in RSS and ATOM feeds
  75 - Docker: specify the location of the favicon
  76 - ATOM feed: remove new line between content tag and data
  77
  78 ### Security
  79 - Allow whitelisting trusted IPs, else continue banning clients upon login failure
  80
  81
  82 ## [v0.8.0](https://github.com/shaarli/Shaarli/releases/tag/v0.8.0) - 2016-10-12
  83 Shaarli now uses [Composer](https://getcomposer.org/) to handle its dependencies.
  84 Please use our release archives, or follow the
  85 [installation documentation](https://github.com/shaarli/Shaarli/wiki/Download-and-Installation).
  86
  87 ### Added
  88 - Composer is required to resolve Shaarli's PHP dependencies
  89 - Shaarli now supports `#hashtags`
  90 - Firefox social share now uses selected text as a description
  91 - Plugin parameters can have a description in each plugin's `.meta` file
  92
  93 ### Changed
  94 - Configuration is now stored as a JSON file
  95 - Previous configuration format will be automatically updated (PHP -> JSON)
  96 - Shaarli now defaults to cURL to fetch shaare titles
  97 - URL cleanup: remove `PHPSESSID` parameter
  98 -  `nomarkdown` tag is no longer private, and now affects visitors
  99 - Cleanup template indentation
 100 - Rewrite bookmark import using a generic Netscape parser
 101
 102 ### Removed
 103 - Shaarli no longer references Delicious in its description
 104
 105 ### Deprecated
 106 - Shaarli configuration is not held as PHP globals anymore
 107
 108 ### Fixed
 109 - Ignore case for tags in autocompletion and cloud tag
 110 - Avoid generating empty tags
 111 - Fix a Dockerfile syntax error
 112
 113 ### Security
 114 - Fixed a bug preventing to change password
 115 - XSRF token now generated each time a page is rendered
 116
 117
 118 ## [v0.7.0](https://github.com/shaarli/Shaarli/releases/tag/v0.7.0) - 2016-05-14
 119 ### Added
 120 - Adds an option to encode redirector URL parameter
 121 - Atom/RSS feeds now support Markdown formatting, and plugins in general
 122 - Markdown: use the tag `.nomarkdown` to avoid markdown processing
 123 - Prefill the login field when the authentication has failed
 124 - Show a private links counter
 125
 126 ### Changed
 127 - Allow to use the bookmarklet in Firefox reader view (URL clean up)
 128 - Improve tagcloud font size
 129 - Improve title retrieving
 130 - Markdown: inline code background color
 131 - Refactor Netscape bookmark export
 132 - Refactor Atom/RSS feed generation
 133
 134 ### Removed
 135 - Remove delicious from Shaarli description
 136
 137 ### Fixed
 138 - Fix bad login redirections causing a 404 in a few cases
 139 - Fix tagcloud font-size with French locale
 140 - Don't display empty tags in tag search
 141 - Fix Awesomeplete conflicts with jQuery
 142 - Fix UTC timezone selection
 143 - Fix a bug preventing to import notes in browsers from bookmarks export
 144 - Don't redirect to ?post if ?addlink is reached while logged out
 145
 146
 147 ## [v0.6.5](https://github.com/shaarli/Shaarli/releases/tag/v0.6.5) - 2016-03-02
 148 ### Fixed
 149 - Fixes a regression generating an unnecessary warning (language in HTTP request)
 150 - Fixes a bug where going through multiple reverse proxy could generate malformed URL
 151 - Markdown: Fixes a bug where empty description blocks were displayed
 152
 153
 154 ## [v0.6.4](https://github.com/shaarli/Shaarli/releases/tag/v0.6.4) - 2016-02-28
 155 ### Added
 156 - Add an updater class to automate user data upgrades
 157 - Plugin admin page: adds a label for checkboxes and improve name display
 158 - Plugin Wallabag: API version can be specified in plugin admin page
 159
 160 ### Changed
 161 - Better tag cloud sorting, including special chars (`a > E > é > z`)
 162 - Autolocale now sets all locale categories, not just time
 163 - Use PHP's DateTime object instead of custom functions
 164 - Plugin hooks: process includes before header/footer
 165 - Markdown plugin: better styles for `<code>` and `<pre>` tags
 166 - Improve searching:
 167     - search terms are now considered separated and won't only return exact results anymore
 168     - exact search can be done with quotes `"this exact sentence"`
 169     - search supports excluded terms starting a dash `-exclude`
 170     - implement crossed search: terms + tags
 171     - all of them combined across all shaare fields
 172 - New tag behaviour:
 173     - tags starting with a dash will be renamed without it
 174     - tags starting with a dot `.` will be hidden unless the user is logged in
 175
 176 ### Fixed
 177 - Fix Markdown plugin escape issues (code/quote blocks, etc.)
 178 - Link description aren't trimmed anymore to allow markdown format at the beginning of a shaare
 179 - Fixes plugin admin redirection page on error
 180
 181 ### Security
 182 - Fix a bug where non initialized variables were causing a warning
 183 - Fix a bug where saving a link after edit could cause a 404 error
 184
 185
 186 ## [v0.6.3](https://github.com/shaarli/Shaarli/releases/tag/v0.6.3) - 2016-01-31
 187 ### Added
 188 - Plugins administration page
 189 - Markdown plugin added for shaares description
 190 - Docker: Dockerfile is now in the main git repository and improved
 191 - Add a `.gitattributes` to ease repository management
 192 - Travis: include file permission checks
 193
 194 ### Changed
 195 - Auto retrieve of title know works with websites (HTTPS, follow redirections, etc.)
 196 - 404 page is now handled in a template
 197 - Date in log files updated to work with fail2ban
 198 - Wallabag: support of Wallabag v2 and minor fixes
 199 - Link search refactoring
 200 - Logging function refactoring
 201
 202 ### Fixed
 203 - Fix a bug where renaming a tag was causing a 404
 204 - Fix a bug allowing to search blank terms
 205 - Fix a bug preventing to remove a tag with special chars when searching
 206
 207
 208 ## [v0.6.2](https://github.com/shaarli/Shaarli/releases/tag/v0.6.2) - 2015-12-23
 209 ### Changed
 210 - Plugins: new footer hook
 211 - Plugins: improve QR code
 212 - Cleanup templates
 213
 214 ### Fixed
 215 - Plugins: use the actual link URL to generate QR codes
 216 - Templates: missing/erroneous page titles
 217 - Templates: missing variables resulting in PHP errors
 218
 219 ### Security
 220 - Fix invalid file permissions (remove executable bit)
 221
 222
 223 ## [v0.6.1](https://github.com/shaarli/Shaarli/releases/tag/v0.6.1) - 2015-12-01
 224 ### Added
 225 - Add OpenSearch support
 226 - Add a Doxygen makefile target
 227 - Tools: add fine-grained file/directory permission checks (installation)
 228
 229 ### Changed
 230 - Tools: check the 'stable' branch for new versions (updates)
 231 - Cleanup: introduce an `ApplicationUtils` class
 232
 233 ### Removed
 234  - Cleanup: remove `json_encode()` function (built-in since PHP 5.2)
 235
 236 ### Fixed
 237  - Auto-complete more than one tag
 238  - Bookmarklet: support titles containing quotes
 239  - URL encode links when setting a redirector
 240
 241
 242 ## [v0.6.0](https://github.com/shaarli/Shaarli/releases/tag/v0.6.0) - 2015-11-18
 243 ### Added
 244 - Introduce a plugin system
 245 - Add a demo_plugin
 246 - Add plugins:
 247     - addlink_toolbar
 248     - archiveorg
 249     - playvideos
 250     - qrcode
 251     - readityourself
 252     - wallabag
 253
 254 ### Changed
 255 - Coding style
 256
 257 ### Fixed
 258 - Adding a new link now returns the correct anchor in the URL
 259 - Set default file permissions
 260
 261
 262 ## [v0.5.4](https://github.com/shaarli/Shaarli/releases/tag/v0.5.4) - 2015-09-15
 263 ### Added
 264 - HTTPS: support being served behing an SSL-enabled proxy
 265
 266 ### Changed
 267 - HTTP/Server utilities: refactor & add test coverage
 268 - Project & documentation:
 269     - improve/rewrite `README.md`
 270     - update contributor list
 271     - update `index.php` header
 272
 273 ### Fixed
 274 - PHP session IDs: handle hash algorithms and bits per char representations
 275
 276
 277 ## [v0.5.3](https://github.com/shaarli/Shaarli/releases/tag/v0.5.3) - 2015-09-02
 278 ### Fixed
 279 - Fix a bug that could prevent user to login
 280
 281
 282 ## [0.5.3](https://github.com/shaarli/Shaarli/releases/tag/0.5.3) - 2015-09-02
 283 This release has been YANKED as it points to a tag that does not follow our naming convention. Please use `v0.5.3` instead
 284
 285 ### Fixed
 286 - Allow uppercase letters in PHP sessionid format
 287
 288
 289 ## [v0.5.2](https://github.com/shaarli/Shaarli/releases/tag/v0.5.2) - 2015-08-31
 290 ### Added
 291 - Add PHP 7 to Travis platforms
 292
 293 ### Changed
 294 - Also extract HTTPS page metadata (title)
 295
 296 ### Fixed
 297 - Fix regression preventing to load LinkDB info when adding an existing link
 298
 299 ### Security
 300 - Fix Full Path Disclosure upon cookie forgery
 301
 302
 303 ## [v0.5.1](https://github.com/shaarli/Shaarli/releases/tag/v0.5.1) - 2015-08-17
 304 ### Added
 305 - Add a link to the shaarli/shaarli DockerHub repository
 306
 307 ### Changed
 308 - Update local documentation
 309 - Improve timezone detection at installation
 310 - Improve feed cache handling
 311 - Improve URL cleanup for new links
 312
 313 ### Fixed
 314 - Fix 404 after editing a link while being logged out
 315
 316
 317 ## [v0.5.0](https://github.com/shaarli/Shaarli/releases/tag/v0.5.0) - 2015-07-31
 318 ### Added
 319 - Add Firefox Social API
 320 - Start code refactoring:
 321     - add unit test coverage
 322     - add Travis integration
 323
 324 ### Changed
 325 - Search/Filter by tag fieds can now be accessed quickly with the `Tab` key
 326 - Update documentation
 327 - Remove duplicate tags in links
 328 - Remove annoying URL patterns
 329 - Start code refactoring:
 330     - move all settings to `data/config.php`
 331     - refactor Config, LinkDB, TimeZone, Utils
 332
 333 ### Fixed
 334 - Fix locale handling
 335 - Fix note URLs
 336 - Fix page redirections
 337 - Fix daily RSS browsing
 338 - Fix title display
 339 - Restore compatibility with PHP 5.3
 340
 341 ### Security
 342 - Fix links not being hidden when `HIDE_PUBLIC_LINKS` is set
 343
 344
 345 ## [v0.0.45beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.45beta) - 2015-03-16
 346 ### Fixed
 347 - Fix improperly displayed Unicode character
 348 - Fix incorrect font size for "Add link" input field
 349
 350
 351 ## [v0.0.44beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.44beta) - 2015-03-15
 352 ### Added
 353 - Add a Makefile to run static code checkers
 354 - Add local documentation (help link in page footer)
 355 - Use awesomplete library for autocompletion
 356 - Use bLazy.js library for images lazy loading
 357 - New 'Add Note' bookmarklet to immediatly open a note (text post) compose window
 358
 359 ### Changed
 360 - Theme improvements and cleanup (menu, search fields, icons, linklist...)
 361 - Allow 'javascript:' links sharing (bookmarklets)
 362 - Make update check optional
 363 - Redirect to homepage after adding a link via "Add Link" dialog
 364 - Remove more annoying URL parameters for shared links
 365 - Code cleanup
 366
 367 ### Removed
 368 - Remove jQuery
 369
 370 ### Security
 371 - Don't disclose version to visitors (shaarli-version.txt)
 372
 373
 374 ## [v0.0.43beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.43beta) - 2015-02-20
 375 ### Added
 376 - Title button link URL is now configurable
 377 - RainTPL's TMP and TPL directories path are now configurable
 378 - Displayed URLs for each link are now clickable links
 379 - Show links timestamps in Daily view
 380
 381 ### Changed
 382 - Automatically prepend "Note:" to title of self-posts (posts not pointing to an URL)
 383 - Make ATOM toolbar button optional (`SHOW_ATOM` configuration variable)
 384 - Optional archive.org links for each Shaarli link (`ARCHIVE_ORG` option)
 385 - Thumbnails: force HTTPS when possible
 386 - Improve tag cloud font scaling
 387 - Allow pointing RSS items to the permalink instead of the direct URL (`ENABLE_RSS_PERMALINKS` option)
 388 - Update JS libraries and add version numbers in filenames
 389 - Updates to README and footer
 390
 391 ### Fixed
 392 - Fix problems when running Shaarli behind a reverse proxy (invalid RSS feed URL)
 393 - Update check now checks against the community fork version
 394 - Include `cache/`, `data/`, `pagecache/` and `tmp/` directories in the repository
 395 - Fix duplicate tag search returning no results
 396 - Fix unnecessary 404 error on "Add link" when the user is logged out
 397 - Fixes to copyright/licensing information and unlicensed media
 398 - Fixes for tag cloud invalid links
 399 - Coding style fixes/cleanup
 400 - Fix redirection after deleteing a link leading to a 404 error
 401 - Shaarli's HTML is now W3C-compliant
 402 - Search now works with Unicode characters
 403
 404 ### Security
 405 - Do not leak server's PHP version and Shaarli's full path on errors
 406 - Prevent Shaarli from sending a lot of duplicate cookies
 407
 408
 409 ## [v0.0.42beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.42beta) - 2014-07-27
 410 ### Added
 411 - Add QRCode Javascript library
 412 - Allow importing bookmarks with the same timestamp (hack)
 413 - Allow putting a description in the bookmarklet URL
 414 - Add `json_encode()` implementation for PHP<5.2
 415 - Highlight search results
 416
 417 ### Changed
 418 - Improve 'Stay signed in' behaviour
 419 - Improve `smallHash()`
 420 - Refactor QRCode generation
 421 - Update Javascript lazyloading
 422 - Update CSS
 423
 424 ### Removed
 425 - Remove jQuery from almost all pages
 426
 427 ### Fixed
 428 - Fix overlapping tags
 429 - Fix field foxus in the bookmarklet
 430 - Fix error message when `data/` is not writable
 431 - Fix HTML generation
 432
 433 ### Security
 434 - Fix XSS flaw
 435
 436
 437 ## [v0.0.41beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.41beta) - 2013-03-08
 438 ### Added
 439 - Add HTTPS to the allowed protocols
 440 - Add support for magnet links in link descriptions
 441 - Allow creating new links as private by default
 442 - Allow disabling jQuery
 443 - Check write permissions
 444 - Check session support before installation
 445
 446 ### Changed
 447 - Improve token security
 448 - RSS feed: allow inverting links/permalinks
 449
 450 ### Fixed
 451 - Fix display issues during installation
 452 - Fix popup redirection after login failure
 453 - Fix RSS formatting for Thunderbird
 454 - Fix thumbnail creation
 455 - Fix cache purge
 456
 457 ### Security
 458 - Fix login issue with WebKit browsers
 459
 460
 461 ## [v0.0.40beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.40beta) - 2013-02-26
 462 Initial release on GitHub.
 463
 464
 465 ## [v0.0.40beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-08-24
 466 ### Added
 467 - Flickr thumbnail now also support albums, galleries and users
 468 - Add a configuration option to disable session cookie protection
 469   Check this if your get disconnected often or your IP address changes often
 470
 471 ### Removed
 472 - Removed the xml comment in cached RSS/ATOM feed
 473   (although W3C-compliant, this may cause problems in some feed readers)
 474
 475 ### Fixed
 476 - A bug in the RSS cache would present old items as new in some cases
 477 - A small bug (non-initialized variable) in page cache cleaning
 478 - Proper "Nothing found" message when search returns no results
 479 - No more 404 error when searching with empty input
 480 - Flickr thumbnails are back (Flickr has made some changes to their domains)
 481
 482 ## [v0.0.39beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-08-10
 483 ### Added
 484 - A cache for RSS feed, ATOM feed and Daily RSS feed, because these URLs
 485   are massively hammered. Cache is automatically purged whenever the database
 486   is changed. This will reduce server load. I may add cache to other pages later.
 487
 488 ### Changed
 489 - No more global `$LINKSDB` (Yuk)
 490 - Background color was removed when hovering a link
 491
 492 ### Fixed
 493 - Small bug corrected in config screen on timezones
 494 - Calling a non-existing permalink now returns a crude 404 error instead of 200 (OK)
 495   This is done on purpose
 496 - The `shaarli` session cookie now has a proper path
 497   Thus you can now install several Shaarlis on the same server in different paths,
 498   and each will have its session
 499 - Now when you delete a link, you go back the same page/search parameters you were on
 500 - Restore previously removed `error_get_last()`, to ensure PHP 5.1 compatibility
 501   (Yes, now it works on free.fr hosting)
 502 - Added `dialog=1` in bookmarklet code for some browsers
 503
 504
 505 ## [v0.0.38beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-02-06
 506 ### Added
 507 - Automatic creation of the `tmp` directory with proper rights (for RainTPL)
 508 - When you click the key to see only private links, it turns yellow
 509
 510 ### Changed
 511 - The "Daily" page now automatically skips empty days.
 512
 513 ### Fixed
 514 - Corrected the tag encoding (there was a bug when selecting a second tag which contains accented characters)
 515
 516
 517 ## [v0.0.37beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-02-01
 518 ### Added
 519 - Basic CSS for mobiles, which makes Shaarli //much// more usable on mobile devices
 520 - Picture wall no more instantly kills your browser. Now it uses
 521   [lazy image loading](http://www.appelsiini.net/projects/lazyload);
 522   the pictures are loaded only as you scroll the page.
 523   This will reduce browser memory usage (especially on mobile devices),
 524   as well as server load.
 525   If you have javascript disabled, the page will still work as before
 526   (all images loaded at once)
 527 - RSS feed for the "Daily" page. 1 RSS entry per day, with all links of that day.
 528   RSS feed provides the last 7 days (only non-empty days are returned).
 529 - In link list, added an icon to see only private links. Click to toggle (only private / all)
 530
 531
 532 ## [v0.0.36beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
 533 ### Added
 534 - Shaarli licence in COPYING
 535
 536 ### Changed
 537 - Display adjustments in "Daily" page
 538
 539 ### Fixed
 540 - Improper text color in install form
 541 - Error in QRCode url (missing '?')
 542
 543
 544 ## [v0.0.35beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
 545 ### Fixed
 546 - Corrected a bug introduced in 0.0.34 which would improperly preprend data to URLs
 547
 548
 549 ## [v0.0.34beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
 550 ### Added
 551 - There is now a QR-Code of each permalink to easily open a link on your smartphone
 552 - Protocols `file:` and `apt:` are now also converted to clickable links (patch by Francis Chavanon)
 553 - Thumbnail support for http://xkcd.com/ (patch by Emilien Klein)
 554 - Thumbnail support for http://pix.toile-libre.org/
 555 - Well I had _some_ mercy for users with antique browsers (IE) which do not have
 556   support for gradients: I added a few `background-color`
 557 - First version of the "Shaarli Daily", a page showing all links of a specific day.
 558   By default, you see the links of the previous day.
 559   There is still work to do on this page (error checking, better navigation (calendar?),
 560   RSS feed, CSS for mobile and printing...)
 561
 562 ### Changed
 563 - Upgraded bundled versions of jQuery (1.7.1) and jQuery UI (1.8.17)
 564 - Upgraded bundled version of RainTPL (2.7)
 565 - Changed HTTPS detection code
 566
 567 ### Fixed
 568 - In link edition, you can now click the word "Private" to check the box
 569 - Clicking a tag would not work properly if the tag contained special characters (like +)
 570 - Added proper jQuery licence (shame on me)
 571
 572
 573 ## [v0.0.33beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-17
 574 ### Added
 575 - Shaarli packaged to ease Linux distributions integration
 576   As a simple user, you do not need to cope with these versions
 577   Future releases of Shaarli will also be customized and published in these directories
 578   Differences with the standard Shaarli version:
 579     - deb:
 580         - .tar.gz instead of .zip
 581         - COPYING licence file added
 582         - jQuery/jQuery-UI libraries removed to cope with Debian rules
 583           This version links to the libs hosted at http://code.jquery.com
 584     - rpm:
 585         - sources located in a subdirectory with the same name as the zip file
 586         - COPYING licence file added
 587     - WARNING: When downloading the .tar.gz, always use wget (and not your browser),
 588       otherwise the .tar.gz will be corrupted
 589
 590 ### Fixed
 591 - ATOM feed validates again
 592
 593 ### Security
 594 - XSS vulnerability patched (thanks to Stanislas D.!)
 595
 596
 597 ## [v0.0.32beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-12-16
 598 ### Added
 599 - Better check on URL parameters (patch by gege2061)
 600 - Add `max-height` and `overflow:auto` attributes so that content can be scrolled if too large
 601
 602 ### Changed
 603 - HTML generation moved to RainTPL templates (in the `tpl/` directory)
 604 - Better detection of HTTPS (patch by gege2061)
 605 - In RSS/ATOM feeds, the GUID is now the permalink instead of the final URL (patch by gege2061)
 606 - Jerrywham CSS patch included
 607 - Multiple spaces are now respected in description.
 608   Thus you can use Shaarli as a personal pastebin (for posting source code, for example).
 609
 610 ### Removed
 611 - Page time generation was removed
 612
 613 ### Fixed
 614 - Tab order changed in login screen
 615 - Permalinks now work even if additional parameters have been added
 616   (e.g. `/?E8Yj2Q&utm_source=blablabla...`)
 617 - user.css is included only if the file is present
 618   (This prevents a useless CSS include which makes a harmless but useless 404 error.)
 619
 620
 621 ## [v0.0.31beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-29
 622 ### Added
 623 - Support for TED Talks (ted.com/talks) thumbnails (patch by Emilien K.)
 624 - partial [patch](http://www.idleman.fr/blog/?p=508) by Idleman: Better design consistency, icon on private links. In-page popup was not included because it causes problem on some websites
 625 - Support for bookmark files without ADD_DATE attributes
 626 - Logo is clickable
 627 - `user.css` can be added to overload Shaarli base CSS.(patch by Jerrywham).
 628   Just put `user.css` in the same directory as shaarli.css.
 629   Example: `<code css>#pageheader { background: blue; }</code>`
 630   Please note that Shaarli CSS are not stable and may completely change on each version
 631
 632 ### Changed
 633 - Edit and Delete buttons in link list were replaced with icons. (patch by Jerrywham)
 634
 635 ### Fixed
 636 - Better error handling in thumbnail generation (patch by Emilien K.)
 637 - The top menu is no longer displayed in bookmarklet popup
 638 - Bookmark which have the exact same date/time are now correctly imported.
 639   Most remaining import problems should be solved now
 640 - Comment in Shaarli export moved to beginning of file to prevent clash with last link description
 641
 642
 643 ## [v0.0.30beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-18
 644 ### Added
 645 - Add a small `delete` button in link list (after the `edit` button)
 646
 647 ### Fixed
 648 - Moved the call to PubSubHub
 649
 650
 651 ## [v0.0.29beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-18
 652 ### Fixed
 653 - Corrected a bug introduced in v0.0.28beta
 654   (there was an error if you use the bookmarklet and you're not logged in)
 655
 656
 657 ## [v0.0.28beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-17
 658 ### Added
 659 - Thumbnail support for youtu.be URLs (YouTube short url service)
 660 - PubSubHub protocol support (from http://aldarone.fr/les-flux-rss-shaarli-et-pubsubhubbub/).
 661   Warning: This was not tested. You need to set your hub url in
 662   `$GLOBALS['config']['PUBSUBHUB_URL']` and put the official client (`publisher.php`)
 663   in the same directory as Shaarli's `index.php`
 664 - RSS and ATOM feeds now also contain tags (in `category` tags, as per their
 665   respective specifications)
 666
 667 ### Changed
 668 - New Shaarli theme and logo by Idle (http://www.idleman.fr/blog/?p=469)
 669 - In picture wall, pictures point to Shaarli permalink instead of final URL.
 670   This way, users can read the description.
 671 - In RSS/ATOM feeds, guid and link URL of permalinks are now proper absolute URLs
 672 - In RSS/ATOM feeds, URLs are now clickable
 673 - Rename `http_parse_headers()` to `http_parse_headers_shaarli()` to prevent
 674   name collision with some PHP extensions
 675
 676 ### Fixed
 677 - Thumbnails removed for imgur.com/a/ URLs (Thumbnails are not available for albums on imgur)
 678 - Shaarli now correctly only tries to get thumbnails for vimeo video URLs
 679 - Fix a bug in imgur.com URLs handling that would cause some thumbnails not to appear
 680 - The search engine would not return a result if the word to search was the first in description
 681 - Extracted title is now correct if the page has two `title` html tags
 682
 683
 684 ## [v0.0.27beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-18
 685 ### Added
 686 - Add a picture wall, which can be filtered too: it will use the same filters
 687   (tags,text search) as current page when clicked.
 688
 689
 690 ## [v0.0.26beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-17
 691 ### Changed
 692 - Made permalink more visible (smallHash)
 693
 694 ### Fixed
 695 - Removed extras space in description when URLs are converted to clickable links
 696 - Thumbnail for subreddit imgur urls (/r/...) were corrected (thanks to Accent Grave)
 697
 698
 699 ## [v0.0.25beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-13
 700 ### Added
 701 - Better CSS for printing (thanks to jerrywham suggestion)
 702 - Allow using a redirector or anonymizing proxy for links
 703   (such as `http://anonym.to/?` to mask you `HTTP_REFERER`).
 704   Just go to `Tools > Configure > Redirector`
 705   (thanks to Accent Grave for the suggestion).
 706 - The `ENABLE_LOCALCACHE` option can be set to `false` for those who have
 707   a limited quota on their host.
 708   This will disable the local thumbnail cache.
 709   Services which require the use of the cache will have no thumbnails
 710   (vimeo, flickr, direct link to image).
 711   Other services will still have a thumbnail (youtube,imgur.com,dailymotion,imageshack.us)
 712
 713 ### Changed
 714 - Now thumbnails generated by Shaarli are croped to a height of 120 pixels
 715 - YouTube thumbnails now use `default.jpg` instead of `2.jpg` (This is usually more pertinent)
 716 - Configuration options (such as `HIDE_TIMESTAMPS`, `ENABLE_THUMBNAILS`, etc.)
 717   can now be put in a an external file so that you do not have to tweak them again
 718   when you upgrade Shaarli.
 719   Just add the file `data/options.php`.
 720 - If a single link is displayed, the page title contains the title of the link
 721 - Shaarli page title is clickable (and has the same link as "Home")
 722 - A few CSS tweaks (thanks to maethor for suggestion)
 723
 724 ### Fixed
 725 - Shaarli now supports newlines in titles (thanks to dixy)
 726 - The link to the RSS feed in page header was not correct
 727
 728
 729 ## [v0.0.24beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 730 ### Added
 731 - Allow posting an entry without a link. (You can use Shaarli as a kind of "personal twitter")
 732 - Each Shaarli entry now has a short link (just click on the date of a link).
 733   Now you can send a link that points to a single entry in your Shaarli
 734 - In descriptions, URLs are now clickable
 735 - Thumbnails will be generated for all link pointing to .jpg/png/gif
 736   (as long as the images are less than 4 Mb and take less than 30 seconds to download)
 737
 738 ### Fixed
 739 - Now thumbnails also work for imgur gallery links (/gallery/...)
 740   (Thanks to Accent Grave for the correction)
 741 - Removed useless debugging information in log
 742 - The filter in RSS/ATOM feed now works again properly (it was broken in 0.0.17beta)
 743
 744
 745 ## [v0.0.23beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 746 ### Added
 747 - Added thumbnail support for imageshack.us
 748
 749 ### Changed
 750 - Now you can clic the sentence "Stay signed in" to tick the checkbox (patch by Emilien)
 751 - In tag editing, comma (,) are now automatically converted to spaces
 752 - In tag editing, autocomplete no longuer suggests a tag you have already entered in the same line
 753
 754
 755 ## [v0.0.22beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 756 ### Added
 757 - Support for thumbnails for flickr.com
 758 - Allow staying signed in:
 759   Your session will be kept open even if you close the browser.
 760   This is available through a checkbox in the login screen.
 761
 762 ### Changed
 763 - Some hosts (flickr, vimeo) are slow as hell for the thumbnails,
 764   or require an extra HTTP request.
 765   For these hosts the thumbnail generation has been deported outside the generation
 766   of the page to keep Shaarli snappy.
 767   For these slow services, the thumbnails are also cached.
 768
 769 ### Fixed
 770 - Title was not properly passed if you had to login when using the bookmarklet (patch by shenshei)
 771
 772
 773 ## [v0.0.21beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 774 ### Added
 775 - Thumbnails for some services
 776   Currently supports: YouTube.com, dailymotion.com, vimeo.com (slow!) and imgur.com.
 777   Thumbnails are enabled by default, but you can turn them off
 778   (set `define('ENABLE_THUMBNAILS',true);` to `false`).
 779
 780 ### Changed
 781 - Removed the focus on the searchbox (this is cumbersome when you want to browse pages
 782   and scroll with the keyboard)
 783
 784
 785 ## [v0.0.20beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 786 ### Fixed
 787 - RSS feed is now served as `application/rss+xml` instead of `application/xhtml+xml`
 788   (which was causing problem in //RSS Lounge//)
 789 - ATOM feed is now served as `application/atom+xml` instead of `application/xhtml+xml`
 790
 791
 792 ## [v0.0.19beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 793 ### Added
 794 - ATOM feed
 795
 796 ### Fixed
 797 - Patch by Emilien to remove the update notification after the update
 798
 799
 800 ## [v0.0.18beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 801 ### Added
 802 - You can now configure the title of your page
 803 - New screen to configure title and timezone
 804
 805 ### Changed
 806 - Nicer timezone selection patch by killruana
 807
 808 ### Fixed
 809 - New lines now appear correctly in the RSS feed descriptions.
 810
 811
 812 ## [v0.0.17beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 813 ### Added
 814 - Change password screen added (based on a patch by killruana)
 815 - Autocomplete in the tag search form
 816 - You can rename or delete a tag in all links
 817   (very handy if you misspelled a tag or want to merge tags)
 818 - When you click the RSS feed, the feed will be filtered with the same filters
 819   as the page you were viewing
 820
 821 ### Changed
 822 - CSS adjustments by jerrywham
 823 - Minor corrections
 824
 825
 826 ## [v0.0.16beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 827 ### Added
 828 - Upgrade notification:
 829   If a new version of Shaarli is available, you will be notified by a discreet
 830   message in top-right corner.
 831   This message will only be visible if you are logged in, and the check will be
 832   performed at most once a day.
 833 - Preliminary tag cloud (ugly for the moment, I need to find something better)
 834
 835 ### Changed
 836 - Replaced `preg_match()` with `version_compare()` to check PHP version
 837 - Includes a patch by Emilien K. to mask dates if user is not logged in.
 838   The option can be activated by changing `define('HIDE_TIMESTAMPS',false);` to `true`
 839
 840
 841 ## [v0.0.15beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 842 ### Added
 843 - New in import: Option to overwrite existing links when importing
 844 - On free.fr, automatic creation of the `/sessions` directory
 845
 846 ### Changed
 847 - CSS Stylesheet is now an external file (shaarli.css).
 848   This reduces page size and eases customization.
 849
 850 ### Removed
 851 - Removed some parameters in URL added by some feed proxies (`#xtor=RSS-...`)
 852
 853 ### Fixed
 854 - Bug corrected: Prevented loop on login screen upon successful login after a failed login
 855 - Bug corrected in import: HTML entities were not properly decoded.
 856   If you imported your Delicious/Diigo bookmarks, your should import them again
 857   and use the 'overwrite' option of the import feature.
 858
 859
 860 ## [v0.0.14beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 861 ### Added
 862 - You no longer need to disable `magic_quotes` on your host.
 863   Shaarli will cope with this option beeing activated.
 864
 865
 866 ## [v0.0.13beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 867 ### Added
 868 - Import: New option to import html bookmark file as private links
 869 - Import: Importing a bookmark file will not overwrite existing links anymore
 870 - Export: New options to export only public or private links
 871
 872 ### Changed
 873 - In tag autocomplete, tags are presented in use order
 874   (most used tags first, instead of alphabetical order)
 875 - RSS Feed can now be filtered by tags or fulltext search. Just add to the feed url:
 876   - `&searchtags=minecraft+video` for tag filtering
 877   - `&searchterm=portal` for fulltext search to the feed url
 878
 879
 880 ## [v0.0.12beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 881 ### Added
 882 - Add a check that the config file was properly created
 883   (in case Shaarli does not have the write rights in its folder)
 884 - Open Shaarli: there is an option to open your Shaarli to anyone.
 885   Anybody will be able to add/edit/delete links without having to login.
 886   In code, change `define('OPEN_SHAARLI',false);` to `true`.
 887   Note: No anti-spam for the moment. You are warned!
 888 - Autocomplete for tags
 889
 890
 891 ## [v0.0.11beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 892 ### Added
 893 - Add a check and a warning for some hosts which still have `magic_quotes` activated
 894
 895
 896 ## [v0.0.10beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 897 ### Added
 898 - Get rid of `&quot;` in titles
 899
 900
 901 ## [v0.0.9beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 902 ### Added
 903 - Now works on hosts `free.fr` and `1and1`
 904 - Now works with PHP 5.1
 905 - PHP version is now checked and an error message is displayed if version is not correct
 906
 907 ### Fixed
 908 - No more error messages if the browser does not send `HTTP_REFERER`
 909 - No more error messages if the host has disabled http protocol in PHP config (eg. 1and1)
 910
 911
 912 ## [v0.0.8beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 913 ### Changed
 914 - In RSS feed, GUID content replaced with the URL of the link, because some
 915   stupid RSS reader (like Google Reader) use `<guid>` as a link instead of using `<link>`
 916
 917
 918 ## [v0.0.7beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-09-16
 919 First public release by Sebsauvage, see original article:
 920 [Adieu Delicious, Diigo et StumbleUpon. Salut Shaarli !](http://sebsauvage.net/rhaa/index.php?2011/09/16/09/29/58-adieu-delicious-diigo-et-stumbleupon-salut-shaarli-) (FR)