]> git.immae.eu Git - github/shaarli/Shaarli.git/blob - CHANGELOG.md
Merge pull request #1063 from ArthurHoaro/hotfix/legacy-warnings
[github/shaarli/Shaarli.git] / CHANGELOG.md
1 # Change Log
2 All notable changes to this project will be documented in this file.
3
4 The format is based on [Keep a Changelog](http://keepachangelog.com/)
5 and this project adheres to [Semantic Versioning](http://semver.org/).
6
7 ## [v0.10.0](https://github.com/shaarli/Shaarli/releases/tag/v0.10.0) - UNPUBLISHED
8
9 ## [v0.9.4](https://github.com/shaarli/Shaarli/releases/tag/v0.9.4) - 2018-01-30
10 ### Added
11 - Enable translations: Shaarli is now also available in French. Other language translations are welcome!
12 - Add EditorConfig configuration
13 - Add favicons for mobile devices
14 - Add Alpine Linux arm32v7 Dockerfiles (master, latest)
15
16 ### Changed
17 - Do not write bookmark edition history during file imports (performance)
18 - Migrate Docker images (master, latest) to Alpine Linux
19 - Improve unitary tests and code coverage
20 - Improve thumbnail display
21 - Improve theme ergonomics
22 - Improve messages if there is no plugin or parameter available in the admin page
23 - Increase buffer size for cURL download
24 - Force HTTPS if the original port is 443 behind a reverse proxy (workaround)
25 - Improve page title retrieval performances
26
27 ### Removed
28 - Remove redirector setting from Configure page
29
30 ### Fixed
31 - Fix broken links in the documentation
32 - Enable access to `data/user.css` (Apache 2.2 & 2.4)
33 - Don't URL encode description links if parameter `redirector.encode_url` is set to false
34 - Fix an issue preventing the Save button to appear for plugin parameters
35
36
37 ## [v0.9.3](https://github.com/shaarli/Shaarli/releases/tag/v0.9.3) - 2018-01-04
38 **XSS vulnerability fixed. Please update.**
39
40 ## Security
41 - Fix an XSS (cross-site-scripting) vulnerability in `index.php` -
42 [CVE-2018-5249](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5249)
43
44
45 ## [v0.9.2](https://github.com/shaarli/Shaarli/releases/tag/v0.9.2) - 2017-10-07
46
47 **Major security issue fixed. Please update.**
48
49 ### Added
50 - Tag search now supports wildcards `*`
51 - New setting `privacy.force_login` which can be used with `privacy.hide_public_links` to redirect anonymous users to the login page.
52 - New setting `general.default_note_title` used to override default `Note:` title prefix for notes.
53 - Add a version hash for asset loading to prevent browser's cache issue
54
55 ### Changed
56 - The "Remember me" checkbox is unchecked by default
57 - The default value of the "Remember me" checkbox can be configured under `data/config.json.php`
58
59 ### Removed
60 - Remove obsolete PHP magic quote support
61
62 ### Fixed
63 - Generates a permalink URL if the URL is set to blank
64 - Replace links to the old GitHub wiki with ReadTheDocs URIs
65 - Use single quotes in the note bookmarklet
66 - Daily page if there is no link
67 - Bulk link deletion with a single link
68 - HTTPS detection behind a reverse proxy
69 - Travis tests environment and localization
70 - Improve template paths robustness (trailing slash)
71 - Robustness: safer gzinflate/zlib usage
72 - Description links parsing with parenthesis (without Markdown)
73 - Templates:
74 - Sort the tag cloud alphabetically
75 - Firefox social title
76 - Improved visited link color
77 - Fix jumpy textarea with long content in post edit
78
79 ### Security
80
81 - Fixed reflected XSS vulnerability introduced in v0.9.1, discovered by @chb9 ([CVE-2017-15215](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15215)).
82
83
84 ## [v0.9.1](https://github.com/shaarli/Shaarli/releases/tag/v0.9.1) - 2017-08-23
85
86 The documentation has been migrated to ReadTheDocs:
87 - https://shaarli.readthedocs.io/
88 - edits are submitted as pull requests
89
90 ### Added
91 - Allow bulk link deletion
92 - Display subtags in the tag cloud
93 - Add an endpoint to refresh the token
94 - Add a token on every page
95 - Add a tag list view for management
96 - Add Note bookmarklet
97 - Add creation date when editing a link
98
99 ### Changed
100 - Documentation:
101 - Generate static HTML documentation with [mkdocs](http://www.mkdocs.org/)
102 - Host documentation on [ReadTheDocs](http://www.mkdocs.org/)
103 - Update documentation structure
104 - Update Makefile targets to:
105 - Build the docs locally
106 - Include the generated docs in the release archives
107 - Theme:
108 - Use the new theme as the default
109 - Rename the tag cloud template to `tag.cloud.html`
110 - Display visited links in grey
111 - Use only one search form in `linklist.html`
112 - Hide the "search links with these tags" option when an empty `searchtags` is passed to `tag.list.html`
113 - Improve HTTP header handling when hosting Shaarli with Docker behind a reverse proxy
114 - Searching for tags with an empty value returns untagged links only
115 - Set Travis environment to `precise` until the new `trusty` environment is ready
116
117 ### Removed
118 - Remove dead Pubsubhubbub code
119 - Disable the GitHub wiki (see changed/documentation)
120 - Remove Docker `dev` image and resources
121 - Theme:
122 - Remove the bottom "Sort by" menu in `tag.list.html`
123
124 ### Fixed
125 - Fix file existence check for `user.css`
126 - Limit selection to 2k characters when using the bookmarklet
127 - Fix JS error `uncaught type error`
128 - Fix Firefox Social button
129 - Use pinned PHP dependencies when generating release archives
130 - Make sure that the tag exists before altering/removing it
131
132 ### Security
133 - Add a whitelist for protocols for URLs
134
135
136 ## [v0.9.0](https://github.com/shaarli/Shaarli/releases/tag/v0.9.0) - 2017-05-07
137
138 This release introduces the REST API, and requires updating HTTP server
139 configuration to enable URL rewriting, see:
140 - https://shaarli.github.io/api-documentation/
141 - https://shaarli.readthedocs.io/en/master/Server-configuration/
142
143 **WARNING**: Shaarli now requires PHP 5.5+.
144
145 ### Added
146 - REST API v1
147 - [Slim](https://www.slimframework.com/) framework
148 - [JSON Web Token](https://jwt.io/introduction/) (JWT) authentication
149 - versioned API endpoints:
150 - `/api/v1/info`: get general information on the Shaarli instance
151 - `/api/v1/links`: get a list of shaared links
152 - `/api/v1/history`: get a list of latest actions
153 Theming:
154 - Introduce a new theme
155 - Allow selecting themes/templates from the configuration page
156 - New/Edit link form can be submitted using CTRL+Enter in the textarea
157 - Shaarli version is displayed in the footer when logged in
158 - Add plugin placeholders to Atom/RSS feed templates
159 - Add OpenSearch to feed templates
160 - Add `campaign_` to the URL cleanup pattern list
161 - Add an AUTHORS file and Makefile target to list authors from Git commit data
162 - Link imports are now logged in `data/` folder, and can be debug using `dev.debug=true` setting.
163 - `composer.lock` is now included in git file to allow proper `composer install`
164 - History mechanism which logs link addition/modification/deletion
165
166 ### Changed
167 - Docker: enable nginx URL rewriting for the REST API
168 - Theming:
169 - Move `user.css` to the `data` folder
170 - Move default template files to a subfolder (`default`)
171 - Rename the legacy theme to `vintage`
172 - Private only filter is now displayed as a search parameter
173 - Autocomplete: pre-select the first element
174 - Display daily date in the page title (browser title)
175 - Timezone lists are now passed as an array instead of raw HTML
176 - Move PubSubHub to a dedicated plugin
177 - Coding style:
178 - explicit method visibility
179 - safe boolean comparisons
180 - remove unused variables
181 - The updater now keeps custom theme preferences
182 - Simplify the COPYING information
183 - Improved client locale detection
184 - Improved date time display depending on the locale
185 - Partial namespace support for Shaarli classes
186 - Shaarli version is now only present in `shaarli_version.php`
187 - Human readable maximum file size upload
188
189
190 ### Removed
191 - PHP < 5.5 compatibility
192 - ReadItYourself plugin
193
194 ### Fixed
195 - Ignore generated release tarballs
196 - Hide default port when behind a reverse proxy
197 - Fix a typo in the Markdown plugin description
198 - Fix the presence of empty tags for private tags and in search results
199 - Fix a fatal error during the install
200 - Fix permalink image alignment in daily page
201 - Fix the delete button in `editlink`
202 - Fix redirection after link deletion
203 - Do not access LinkDB links by ID before the Updater applies migrations
204 - Remove extra spaces in the bookmarklet's name
205 - Piwik plugin: Piwik URL protocol can now be set (http or https)
206 - All inline JS has been moved to dedicated JS files
207 - Keep tags after login redirection
208
209 ### Security
210 - Markdown plugin: escape HTML entities by default
211
212
213 ## [v0.8.5](https://github.com/shaarli/Shaarli/releases/tag/v0.8.5) - 2018-01-04
214 **XSS vulnerability fixed. Please update.**
215
216 ## Security
217 - Fix an XSS (cross-site-scripting) vulnerability in `index.php` -
218 [CVE-2018-5249](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5249)
219
220 ## [v0.8.4](https://github.com/shaarli/Shaarli/releases/tag/v0.8.4) - 2017-03-04
221 ### Security
222 - Markdown plugin: escape HTML entities by default
223
224 ## [v0.8.3](https://github.com/shaarli/Shaarli/releases/tag/v0.8.3) - 2017-01-20
225 ### Fixed
226 - PHP 7.1 compatibility: add ConfigManager parameter to anti-bruteforce function call in login template.
227
228 ## [v0.8.2](https://github.com/shaarli/Shaarli/releases/tag/v0.8.2) - 2016-12-15
229 ### Fixed
230
231 - Editing a link created before the new ID system would change its permalink.
232
233 ## [v0.8.1](https://github.com/shaarli/Shaarli/releases/tag/v0.8.1) - 2016-12-12
234
235 > Note: this version will create an automatic backup of your database if anything goes wrong.
236
237 ### Added
238 - Add CHANGELOG.md to track the whole project's history
239 - Enable Composer cache for Travis builds
240 - Save the last edition date for shaares and use it in Atom/RSS feeds
241 - Plugins:
242 - Add an [Isso](https://posativ.org/isso/) plugin to enable user comments on permalinks
243 - Allow defining init functions, e.g. for performing checks and error processing
244 - Add a Piwik plugin for analytics.
245 - Markdown: add warning notice regarding HTML rendering
246 - Meta tag to *not* send the referrer to external resources.
247
248 ### Changed
249 - Link ID complete refactoring:
250 - Links now have a numeric ID instead of dates
251 - Short URLs are now created once and can't change over time (previous URL are kept)
252 - Templates:
253 - Changed placeholder behaviour for: `buttons_toolbar`, `fields_toolbar` and `action_plugin`
254 - Cleanup `{loop}` declarations in templates
255 - Tools: hide Firefox Social button when not in HTTPS
256 - Firefox Social: show Shaarli's title when shaaring using Firefox Social
257 - Release archives now have the same structure as GitHub-generated archives:
258 - archives contain a `Shaarli` directory, itself containing sources + dependencies
259 - the tarball is now gzipped
260 - Plugins:
261 - Markdown: Parsedown library is now imported through Composer
262 - Minor code cleanup: PHPDoc, spelling, unused variables, etc.
263 - Docker: explicitly set the maximum file upload size to 10 MiB
264
265 ### Fixed
266 - Fix the server `<self>` value in Atom/RSS feeds
267 - Plugins:
268 - Tools: only display parameter description when it exists
269 - archive.org: do not propose archival of private notes
270 - Markdown:
271 - render links properly in code blocks
272 - bug regarding the `nomarkdown` tag
273 - W3C compliance
274 - Use absolute URL for hashtags in RSS and ATOM feeds
275 - Docker: specify the location of the favicon
276 - ATOM feed: remove new line between content tag and data
277
278 ### Security
279 - Allow whitelisting trusted IPs, else continue banning clients upon login failure
280
281
282 ## [v0.8.0](https://github.com/shaarli/Shaarli/releases/tag/v0.8.0) - 2016-10-12
283 Shaarli now uses [Composer](https://getcomposer.org/) to handle its dependencies.
284 Please use our release archives, or follow the
285 [installation documentation](https://github.com/shaarli/Shaarli/wiki/Download-and-Installation).
286
287 ### Added
288 - Composer is required to resolve Shaarli's PHP dependencies
289 - Shaarli now supports `#hashtags`
290 - Firefox social share now uses selected text as a description
291 - Plugin parameters can have a description in each plugin's `.meta` file
292
293 ### Changed
294 - Configuration is now stored as a JSON file
295 - Previous configuration format will be automatically updated (PHP -> JSON)
296 - Shaarli now defaults to cURL to fetch shaare titles
297 - URL cleanup: remove `PHPSESSID` parameter
298 - `nomarkdown` tag is no longer private, and now affects visitors
299 - Cleanup template indentation
300 - Rewrite bookmark import using a generic Netscape parser
301
302 ### Removed
303 - Shaarli no longer references Delicious in its description
304
305 ### Deprecated
306 - Shaarli configuration is not held as PHP globals anymore
307
308 ### Fixed
309 - Ignore case for tags in autocompletion and cloud tag
310 - Avoid generating empty tags
311 - Fix a Dockerfile syntax error
312
313 ### Security
314 - Fixed a bug preventing to change password
315 - XSRF token now generated each time a page is rendered
316
317
318 ## [v0.7.1](https://github.com/shaarli/Shaarli/releases/tag/v0.7.1) - 2017-03-08
319 ### Security
320 - Markdown plugin: escape HTML entities by default
321
322 ## [v0.7.0](https://github.com/shaarli/Shaarli/releases/tag/v0.7.0) - 2016-05-14
323 ### Added
324 - Adds an option to encode redirector URL parameter
325 - Atom/RSS feeds now support Markdown formatting, and plugins in general
326 - Markdown: use the tag `.nomarkdown` to avoid markdown processing
327 - Prefill the login field when the authentication has failed
328 - Show a private links counter
329
330 ### Changed
331 - Allow to use the bookmarklet in Firefox reader view (URL clean up)
332 - Improve tagcloud font size
333 - Improve title retrieving
334 - Markdown: inline code background color
335 - Refactor Netscape bookmark export
336 - Refactor Atom/RSS feed generation
337
338 ### Removed
339 - Remove delicious from Shaarli description
340
341 ### Fixed
342 - Fix bad login redirections causing a 404 in a few cases
343 - Fix tagcloud font-size with French locale
344 - Don't display empty tags in tag search
345 - Fix Awesomeplete conflicts with jQuery
346 - Fix UTC timezone selection
347 - Fix a bug preventing to import notes in browsers from bookmarks export
348 - Don't redirect to ?post if ?addlink is reached while logged out
349
350
351 ## [v0.6.5](https://github.com/shaarli/Shaarli/releases/tag/v0.6.5) - 2016-03-02
352 ### Fixed
353 - Fixes a regression generating an unnecessary warning (language in HTTP request)
354 - Fixes a bug where going through multiple reverse proxy could generate malformed URL
355 - Markdown: Fixes a bug where empty description blocks were displayed
356
357
358 ## [v0.6.4](https://github.com/shaarli/Shaarli/releases/tag/v0.6.4) - 2016-02-28
359 ### Added
360 - Add an updater class to automate user data upgrades
361 - Plugin admin page: adds a label for checkboxes and improve name display
362 - Plugin Wallabag: API version can be specified in plugin admin page
363
364 ### Changed
365 - Better tag cloud sorting, including special chars (`a > E > é > z`)
366 - Autolocale now sets all locale categories, not just time
367 - Use PHP's DateTime object instead of custom functions
368 - Plugin hooks: process includes before header/footer
369 - Markdown plugin: better styles for `<code>` and `<pre>` tags
370 - Improve searching:
371 - search terms are now considered separated and won't only return exact results anymore
372 - exact search can be done with quotes `"this exact sentence"`
373 - search supports excluded terms starting a dash `-exclude`
374 - implement crossed search: terms + tags
375 - all of them combined across all shaare fields
376 - New tag behaviour:
377 - tags starting with a dash will be renamed without it
378 - tags starting with a dot `.` will be hidden unless the user is logged in
379
380 ### Fixed
381 - Fix Markdown plugin escape issues (code/quote blocks, etc.)
382 - Link description aren't trimmed anymore to allow markdown format at the beginning of a shaare
383 - Fixes plugin admin redirection page on error
384
385 ### Security
386 - Fix a bug where non initialized variables were causing a warning
387 - Fix a bug where saving a link after edit could cause a 404 error
388
389
390 ## [v0.6.3](https://github.com/shaarli/Shaarli/releases/tag/v0.6.3) - 2016-01-31
391 ### Added
392 - Plugins administration page
393 - Markdown plugin added for shaares description
394 - Docker: Dockerfile is now in the main git repository and improved
395 - Add a `.gitattributes` to ease repository management
396 - Travis: include file permission checks
397
398 ### Changed
399 - Auto retrieve of title know works with websites (HTTPS, follow redirections, etc.)
400 - 404 page is now handled in a template
401 - Date in log files updated to work with fail2ban
402 - Wallabag: support of Wallabag v2 and minor fixes
403 - Link search refactoring
404 - Logging function refactoring
405
406 ### Fixed
407 - Fix a bug where renaming a tag was causing a 404
408 - Fix a bug allowing to search blank terms
409 - Fix a bug preventing to remove a tag with special chars when searching
410
411
412 ## [v0.6.2](https://github.com/shaarli/Shaarli/releases/tag/v0.6.2) - 2015-12-23
413 ### Changed
414 - Plugins: new footer hook
415 - Plugins: improve QR code
416 - Cleanup templates
417
418 ### Fixed
419 - Plugins: use the actual link URL to generate QR codes
420 - Templates: missing/erroneous page titles
421 - Templates: missing variables resulting in PHP errors
422
423 ### Security
424 - Fix invalid file permissions (remove executable bit)
425
426
427 ## [v0.6.1](https://github.com/shaarli/Shaarli/releases/tag/v0.6.1) - 2015-12-01
428 ### Added
429 - Add OpenSearch support
430 - Add a Doxygen makefile target
431 - Tools: add fine-grained file/directory permission checks (installation)
432
433 ### Changed
434 - Tools: check the 'stable' branch for new versions (updates)
435 - Cleanup: introduce an `ApplicationUtils` class
436
437 ### Removed
438 - Cleanup: remove `json_encode()` function (built-in since PHP 5.2)
439
440 ### Fixed
441 - Auto-complete more than one tag
442 - Bookmarklet: support titles containing quotes
443 - URL encode links when setting a redirector
444
445
446 ## [v0.6.0](https://github.com/shaarli/Shaarli/releases/tag/v0.6.0) - 2015-11-18
447 ### Added
448 - Introduce a plugin system
449 - Add a demo_plugin
450 - Add plugins:
451 - addlink_toolbar
452 - archiveorg
453 - playvideos
454 - qrcode
455 - readityourself
456 - wallabag
457
458 ### Changed
459 - Coding style
460
461 ### Fixed
462 - Adding a new link now returns the correct anchor in the URL
463 - Set default file permissions
464
465
466 ## [v0.5.4](https://github.com/shaarli/Shaarli/releases/tag/v0.5.4) - 2015-09-15
467 ### Added
468 - HTTPS: support being served behing an SSL-enabled proxy
469
470 ### Changed
471 - HTTP/Server utilities: refactor & add test coverage
472 - Project & documentation:
473 - improve/rewrite `README.md`
474 - update contributor list
475 - update `index.php` header
476
477 ### Fixed
478 - PHP session IDs: handle hash algorithms and bits per char representations
479
480
481 ## [v0.5.3](https://github.com/shaarli/Shaarli/releases/tag/v0.5.3) - 2015-09-02
482 ### Fixed
483 - Fix a bug that could prevent user to login
484
485
486 ## [0.5.3](https://github.com/shaarli/Shaarli/releases/tag/0.5.3) - 2015-09-02
487 This release has been YANKED as it points to a tag that does not follow our naming convention. Please use `v0.5.3` instead
488
489 ### Fixed
490 - Allow uppercase letters in PHP sessionid format
491
492
493 ## [v0.5.2](https://github.com/shaarli/Shaarli/releases/tag/v0.5.2) - 2015-08-31
494 ### Added
495 - Add PHP 7 to Travis platforms
496
497 ### Changed
498 - Also extract HTTPS page metadata (title)
499
500 ### Fixed
501 - Fix regression preventing to load LinkDB info when adding an existing link
502
503 ### Security
504 - Fix Full Path Disclosure upon cookie forgery
505
506
507 ## [v0.5.1](https://github.com/shaarli/Shaarli/releases/tag/v0.5.1) - 2015-08-17
508 ### Added
509 - Add a link to the shaarli/shaarli DockerHub repository
510
511 ### Changed
512 - Update local documentation
513 - Improve timezone detection at installation
514 - Improve feed cache handling
515 - Improve URL cleanup for new links
516
517 ### Fixed
518 - Fix 404 after editing a link while being logged out
519
520
521 ## [v0.5.0](https://github.com/shaarli/Shaarli/releases/tag/v0.5.0) - 2015-07-31
522 ### Added
523 - Add Firefox Social API
524 - Start code refactoring:
525 - add unit test coverage
526 - add Travis integration
527
528 ### Changed
529 - Search/Filter by tag fieds can now be accessed quickly with the `Tab` key
530 - Update documentation
531 - Remove duplicate tags in links
532 - Remove annoying URL patterns
533 - Start code refactoring:
534 - move all settings to `data/config.php`
535 - refactor Config, LinkDB, TimeZone, Utils
536
537 ### Fixed
538 - Fix locale handling
539 - Fix note URLs
540 - Fix page redirections
541 - Fix daily RSS browsing
542 - Fix title display
543 - Restore compatibility with PHP 5.3
544
545 ### Security
546 - Fix links not being hidden when `HIDE_PUBLIC_LINKS` is set
547
548
549 ## [v0.0.45beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.45beta) - 2015-03-16
550 ### Fixed
551 - Fix improperly displayed Unicode character
552 - Fix incorrect font size for "Add link" input field
553
554
555 ## [v0.0.44beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.44beta) - 2015-03-15
556 ### Added
557 - Add a Makefile to run static code checkers
558 - Add local documentation (help link in page footer)
559 - Use awesomplete library for autocompletion
560 - Use bLazy.js library for images lazy loading
561 - New 'Add Note' bookmarklet to immediatly open a note (text post) compose window
562
563 ### Changed
564 - Theme improvements and cleanup (menu, search fields, icons, linklist...)
565 - Allow 'javascript:' links sharing (bookmarklets)
566 - Make update check optional
567 - Redirect to homepage after adding a link via "Add Link" dialog
568 - Remove more annoying URL parameters for shared links
569 - Code cleanup
570
571 ### Removed
572 - Remove jQuery
573
574 ### Security
575 - Don't disclose version to visitors (shaarli-version.txt)
576
577
578 ## [v0.0.43beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.43beta) - 2015-02-20
579 ### Added
580 - Title button link URL is now configurable
581 - RainTPL's TMP and TPL directories path are now configurable
582 - Displayed URLs for each link are now clickable links
583 - Show links timestamps in Daily view
584
585 ### Changed
586 - Automatically prepend "Note:" to title of self-posts (posts not pointing to an URL)
587 - Make ATOM toolbar button optional (`SHOW_ATOM` configuration variable)
588 - Optional archive.org links for each Shaarli link (`ARCHIVE_ORG` option)
589 - Thumbnails: force HTTPS when possible
590 - Improve tag cloud font scaling
591 - Allow pointing RSS items to the permalink instead of the direct URL (`ENABLE_RSS_PERMALINKS` option)
592 - Update JS libraries and add version numbers in filenames
593 - Updates to README and footer
594
595 ### Fixed
596 - Fix problems when running Shaarli behind a reverse proxy (invalid RSS feed URL)
597 - Update check now checks against the community fork version
598 - Include `cache/`, `data/`, `pagecache/` and `tmp/` directories in the repository
599 - Fix duplicate tag search returning no results
600 - Fix unnecessary 404 error on "Add link" when the user is logged out
601 - Fixes to copyright/licensing information and unlicensed media
602 - Fixes for tag cloud invalid links
603 - Coding style fixes/cleanup
604 - Fix redirection after deleteing a link leading to a 404 error
605 - Shaarli's HTML is now W3C-compliant
606 - Search now works with Unicode characters
607
608 ### Security
609 - Do not leak server's PHP version and Shaarli's full path on errors
610 - Prevent Shaarli from sending a lot of duplicate cookies
611
612
613 ## [v0.0.42beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.42beta) - 2014-07-27
614 ### Added
615 - Add QRCode Javascript library
616 - Allow importing bookmarks with the same timestamp (hack)
617 - Allow putting a description in the bookmarklet URL
618 - Add `json_encode()` implementation for PHP<5.2
619 - Highlight search results
620
621 ### Changed
622 - Improve 'Stay signed in' behaviour
623 - Improve `smallHash()`
624 - Refactor QRCode generation
625 - Update Javascript lazyloading
626 - Update CSS
627
628 ### Removed
629 - Remove jQuery from almost all pages
630
631 ### Fixed
632 - Fix overlapping tags
633 - Fix field foxus in the bookmarklet
634 - Fix error message when `data/` is not writable
635 - Fix HTML generation
636
637 ### Security
638 - Fix XSS flaw
639
640
641 ## [v0.0.41beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.41beta) - 2013-03-08
642 ### Added
643 - Add HTTPS to the allowed protocols
644 - Add support for magnet links in link descriptions
645 - Allow creating new links as private by default
646 - Allow disabling jQuery
647 - Check write permissions
648 - Check session support before installation
649
650 ### Changed
651 - Improve token security
652 - RSS feed: allow inverting links/permalinks
653
654 ### Fixed
655 - Fix display issues during installation
656 - Fix popup redirection after login failure
657 - Fix RSS formatting for Thunderbird
658 - Fix thumbnail creation
659 - Fix cache purge
660
661 ### Security
662 - Fix login issue with WebKit browsers
663
664
665 ## [v0.0.40beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.40beta) - 2013-02-26
666 Initial release on GitHub.
667
668
669 ## [v0.0.40beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-08-24
670 ### Added
671 - Flickr thumbnail now also support albums, galleries and users
672 - Add a configuration option to disable session cookie protection
673 Check this if your get disconnected often or your IP address changes often
674
675 ### Removed
676 - Removed the xml comment in cached RSS/ATOM feed
677 (although W3C-compliant, this may cause problems in some feed readers)
678
679 ### Fixed
680 - A bug in the RSS cache would present old items as new in some cases
681 - A small bug (non-initialized variable) in page cache cleaning
682 - Proper "Nothing found" message when search returns no results
683 - No more 404 error when searching with empty input
684 - Flickr thumbnails are back (Flickr has made some changes to their domains)
685
686 ## [v0.0.39beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-08-10
687 ### Added
688 - A cache for RSS feed, ATOM feed and Daily RSS feed, because these URLs
689 are massively hammered. Cache is automatically purged whenever the database
690 is changed. This will reduce server load. I may add cache to other pages later.
691
692 ### Changed
693 - No more global `$LINKSDB` (Yuk)
694 - Background color was removed when hovering a link
695
696 ### Fixed
697 - Small bug corrected in config screen on timezones
698 - Calling a non-existing permalink now returns a crude 404 error instead of 200 (OK)
699 This is done on purpose
700 - The `shaarli` session cookie now has a proper path
701 Thus you can now install several Shaarlis on the same server in different paths,
702 and each will have its session
703 - Now when you delete a link, you go back the same page/search parameters you were on
704 - Restore previously removed `error_get_last()`, to ensure PHP 5.1 compatibility
705 (Yes, now it works on free.fr hosting)
706 - Added `dialog=1` in bookmarklet code for some browsers
707
708
709 ## [v0.0.38beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-02-06
710 ### Added
711 - Automatic creation of the `tmp` directory with proper rights (for RainTPL)
712 - When you click the key to see only private links, it turns yellow
713
714 ### Changed
715 - The "Daily" page now automatically skips empty days.
716
717 ### Fixed
718 - Corrected the tag encoding (there was a bug when selecting a second tag which contains accented characters)
719
720
721 ## [v0.0.37beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-02-01
722 ### Added
723 - Basic CSS for mobiles, which makes Shaarli //much// more usable on mobile devices
724 - Picture wall no more instantly kills your browser. Now it uses
725 [lazy image loading](http://www.appelsiini.net/projects/lazyload);
726 the pictures are loaded only as you scroll the page.
727 This will reduce browser memory usage (especially on mobile devices),
728 as well as server load.
729 If you have javascript disabled, the page will still work as before
730 (all images loaded at once)
731 - RSS feed for the "Daily" page. 1 RSS entry per day, with all links of that day.
732 RSS feed provides the last 7 days (only non-empty days are returned).
733 - In link list, added an icon to see only private links. Click to toggle (only private / all)
734
735
736 ## [v0.0.36beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
737 ### Added
738 - Shaarli licence in COPYING
739
740 ### Changed
741 - Display adjustments in "Daily" page
742
743 ### Fixed
744 - Improper text color in install form
745 - Error in QRCode url (missing '?')
746
747
748 ## [v0.0.35beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
749 ### Fixed
750 - Corrected a bug introduced in 0.0.34 which would improperly preprend data to URLs
751
752
753 ## [v0.0.34beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
754 ### Added
755 - There is now a QR-Code of each permalink to easily open a link on your smartphone
756 - Protocols `file:` and `apt:` are now also converted to clickable links (patch by Francis Chavanon)
757 - Thumbnail support for http://xkcd.com/ (patch by Emilien Klein)
758 - Thumbnail support for http://pix.toile-libre.org/
759 - Well I had _some_ mercy for users with antique browsers (IE) which do not have
760 support for gradients: I added a few `background-color`
761 - First version of the "Shaarli Daily", a page showing all links of a specific day.
762 By default, you see the links of the previous day.
763 There is still work to do on this page (error checking, better navigation (calendar?),
764 RSS feed, CSS for mobile and printing...)
765
766 ### Changed
767 - Upgraded bundled versions of jQuery (1.7.1) and jQuery UI (1.8.17)
768 - Upgraded bundled version of RainTPL (2.7)
769 - Changed HTTPS detection code
770
771 ### Fixed
772 - In link edition, you can now click the word "Private" to check the box
773 - Clicking a tag would not work properly if the tag contained special characters (like +)
774 - Added proper jQuery licence (shame on me)
775
776
777 ## [v0.0.33beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-17
778 ### Added
779 - Shaarli packaged to ease Linux distributions integration
780 As a simple user, you do not need to cope with these versions
781 Future releases of Shaarli will also be customized and published in these directories
782 Differences with the standard Shaarli version:
783 - deb:
784 - .tar.gz instead of .zip
785 - COPYING licence file added
786 - jQuery/jQuery-UI libraries removed to cope with Debian rules
787 This version links to the libs hosted at http://code.jquery.com
788 - rpm:
789 - sources located in a subdirectory with the same name as the zip file
790 - COPYING licence file added
791 - WARNING: When downloading the .tar.gz, always use wget (and not your browser),
792 otherwise the .tar.gz will be corrupted
793
794 ### Fixed
795 - ATOM feed validates again
796
797 ### Security
798 - XSS vulnerability patched (thanks to Stanislas D.!)
799
800
801 ## [v0.0.32beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-12-16
802 ### Added
803 - Better check on URL parameters (patch by gege2061)
804 - Add `max-height` and `overflow:auto` attributes so that content can be scrolled if too large
805
806 ### Changed
807 - HTML generation moved to RainTPL templates (in the `tpl/` directory)
808 - Better detection of HTTPS (patch by gege2061)
809 - In RSS/ATOM feeds, the GUID is now the permalink instead of the final URL (patch by gege2061)
810 - Jerrywham CSS patch included
811 - Multiple spaces are now respected in description.
812 Thus you can use Shaarli as a personal pastebin (for posting source code, for example).
813
814 ### Removed
815 - Page time generation was removed
816
817 ### Fixed
818 - Tab order changed in login screen
819 - Permalinks now work even if additional parameters have been added
820 (e.g. `/?E8Yj2Q&utm_source=blablabla...`)
821 - user.css is included only if the file is present
822 (This prevents a useless CSS include which makes a harmless but useless 404 error.)
823
824
825 ## [v0.0.31beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-29
826 ### Added
827 - Support for TED Talks (ted.com/talks) thumbnails (patch by Emilien K.)
828 - partial [patch](http://www.idleman.fr/blog/?p=508) by Idleman: Better design consistency, icon on private links. In-page popup was not included because it causes problem on some websites
829 - Support for bookmark files without ADD_DATE attributes
830 - Logo is clickable
831 - `user.css` can be added to overload Shaarli base CSS.(patch by Jerrywham).
832 Just put `user.css` in the same directory as shaarli.css.
833 Example: `<code css>#pageheader { background: blue; }</code>`
834 Please note that Shaarli CSS are not stable and may completely change on each version
835
836 ### Changed
837 - Edit and Delete buttons in link list were replaced with icons. (patch by Jerrywham)
838
839 ### Fixed
840 - Better error handling in thumbnail generation (patch by Emilien K.)
841 - The top menu is no longer displayed in bookmarklet popup
842 - Bookmark which have the exact same date/time are now correctly imported.
843 Most remaining import problems should be solved now
844 - Comment in Shaarli export moved to beginning of file to prevent clash with last link description
845
846
847 ## [v0.0.30beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-18
848 ### Added
849 - Add a small `delete` button in link list (after the `edit` button)
850
851 ### Fixed
852 - Moved the call to PubSubHub
853
854
855 ## [v0.0.29beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-18
856 ### Fixed
857 - Corrected a bug introduced in v0.0.28beta
858 (there was an error if you use the bookmarklet and you're not logged in)
859
860
861 ## [v0.0.28beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-17
862 ### Added
863 - Thumbnail support for youtu.be URLs (YouTube short url service)
864 - PubSubHub protocol support (from http://aldarone.fr/les-flux-rss-shaarli-et-pubsubhubbub/).
865 Warning: This was not tested. You need to set your hub url in
866 `$GLOBALS['config']['PUBSUBHUB_URL']` and put the official client (`publisher.php`)
867 in the same directory as Shaarli's `index.php`
868 - RSS and ATOM feeds now also contain tags (in `category` tags, as per their
869 respective specifications)
870
871 ### Changed
872 - New Shaarli theme and logo by Idle (http://www.idleman.fr/blog/?p=469)
873 - In picture wall, pictures point to Shaarli permalink instead of final URL.
874 This way, users can read the description.
875 - In RSS/ATOM feeds, guid and link URL of permalinks are now proper absolute URLs
876 - In RSS/ATOM feeds, URLs are now clickable
877 - Rename `http_parse_headers()` to `http_parse_headers_shaarli()` to prevent
878 name collision with some PHP extensions
879
880 ### Fixed
881 - Thumbnails removed for imgur.com/a/ URLs (Thumbnails are not available for albums on imgur)
882 - Shaarli now correctly only tries to get thumbnails for vimeo video URLs
883 - Fix a bug in imgur.com URLs handling that would cause some thumbnails not to appear
884 - The search engine would not return a result if the word to search was the first in description
885 - Extracted title is now correct if the page has two `title` html tags
886
887
888 ## [v0.0.27beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-18
889 ### Added
890 - Add a picture wall, which can be filtered too: it will use the same filters
891 (tags,text search) as current page when clicked.
892
893
894 ## [v0.0.26beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-17
895 ### Changed
896 - Made permalink more visible (smallHash)
897
898 ### Fixed
899 - Removed extras space in description when URLs are converted to clickable links
900 - Thumbnail for subreddit imgur urls (/r/...) were corrected (thanks to Accent Grave)
901
902
903 ## [v0.0.25beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-13
904 ### Added
905 - Better CSS for printing (thanks to jerrywham suggestion)
906 - Allow using a redirector or anonymizing proxy for links
907 (such as `http://anonym.to/?` to mask you `HTTP_REFERER`).
908 Just go to `Tools > Configure > Redirector`
909 (thanks to Accent Grave for the suggestion).
910 - The `ENABLE_LOCALCACHE` option can be set to `false` for those who have
911 a limited quota on their host.
912 This will disable the local thumbnail cache.
913 Services which require the use of the cache will have no thumbnails
914 (vimeo, flickr, direct link to image).
915 Other services will still have a thumbnail (youtube,imgur.com,dailymotion,imageshack.us)
916
917 ### Changed
918 - Now thumbnails generated by Shaarli are croped to a height of 120 pixels
919 - YouTube thumbnails now use `default.jpg` instead of `2.jpg` (This is usually more pertinent)
920 - Configuration options (such as `HIDE_TIMESTAMPS`, `ENABLE_THUMBNAILS`, etc.)
921 can now be put in a an external file so that you do not have to tweak them again
922 when you upgrade Shaarli.
923 Just add the file `data/options.php`.
924 - If a single link is displayed, the page title contains the title of the link
925 - Shaarli page title is clickable (and has the same link as "Home")
926 - A few CSS tweaks (thanks to maethor for suggestion)
927
928 ### Fixed
929 - Shaarli now supports newlines in titles (thanks to dixy)
930 - The link to the RSS feed in page header was not correct
931
932
933 ## [v0.0.24beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
934 ### Added
935 - Allow posting an entry without a link. (You can use Shaarli as a kind of "personal twitter")
936 - Each Shaarli entry now has a short link (just click on the date of a link).
937 Now you can send a link that points to a single entry in your Shaarli
938 - In descriptions, URLs are now clickable
939 - Thumbnails will be generated for all link pointing to .jpg/png/gif
940 (as long as the images are less than 4 Mb and take less than 30 seconds to download)
941
942 ### Fixed
943 - Now thumbnails also work for imgur gallery links (/gallery/...)
944 (Thanks to Accent Grave for the correction)
945 - Removed useless debugging information in log
946 - The filter in RSS/ATOM feed now works again properly (it was broken in 0.0.17beta)
947
948
949 ## [v0.0.23beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
950 ### Added
951 - Added thumbnail support for imageshack.us
952
953 ### Changed
954 - Now you can clic the sentence "Stay signed in" to tick the checkbox (patch by Emilien)
955 - In tag editing, comma (,) are now automatically converted to spaces
956 - In tag editing, autocomplete no longuer suggests a tag you have already entered in the same line
957
958
959 ## [v0.0.22beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
960 ### Added
961 - Support for thumbnails for flickr.com
962 - Allow staying signed in:
963 Your session will be kept open even if you close the browser.
964 This is available through a checkbox in the login screen.
965
966 ### Changed
967 - Some hosts (flickr, vimeo) are slow as hell for the thumbnails,
968 or require an extra HTTP request.
969 For these hosts the thumbnail generation has been deported outside the generation
970 of the page to keep Shaarli snappy.
971 For these slow services, the thumbnails are also cached.
972
973 ### Fixed
974 - Title was not properly passed if you had to login when using the bookmarklet (patch by shenshei)
975
976
977 ## [v0.0.21beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
978 ### Added
979 - Thumbnails for some services
980 Currently supports: YouTube.com, dailymotion.com, vimeo.com (slow!) and imgur.com.
981 Thumbnails are enabled by default, but you can turn them off
982 (set `define('ENABLE_THUMBNAILS',true);` to `false`).
983
984 ### Changed
985 - Removed the focus on the searchbox (this is cumbersome when you want to browse pages
986 and scroll with the keyboard)
987
988
989 ## [v0.0.20beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
990 ### Fixed
991 - RSS feed is now served as `application/rss+xml` instead of `application/xhtml+xml`
992 (which was causing problem in //RSS Lounge//)
993 - ATOM feed is now served as `application/atom+xml` instead of `application/xhtml+xml`
994
995
996 ## [v0.0.19beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
997 ### Added
998 - ATOM feed
999
1000 ### Fixed
1001 - Patch by Emilien to remove the update notification after the update
1002
1003
1004 ## [v0.0.18beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1005 ### Added
1006 - You can now configure the title of your page
1007 - New screen to configure title and timezone
1008
1009 ### Changed
1010 - Nicer timezone selection patch by killruana
1011
1012 ### Fixed
1013 - New lines now appear correctly in the RSS feed descriptions.
1014
1015
1016 ## [v0.0.17beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1017 ### Added
1018 - Change password screen added (based on a patch by killruana)
1019 - Autocomplete in the tag search form
1020 - You can rename or delete a tag in all links
1021 (very handy if you misspelled a tag or want to merge tags)
1022 - When you click the RSS feed, the feed will be filtered with the same filters
1023 as the page you were viewing
1024
1025 ### Changed
1026 - CSS adjustments by jerrywham
1027 - Minor corrections
1028
1029
1030 ## [v0.0.16beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1031 ### Added
1032 - Upgrade notification:
1033 If a new version of Shaarli is available, you will be notified by a discreet
1034 message in top-right corner.
1035 This message will only be visible if you are logged in, and the check will be
1036 performed at most once a day.
1037 - Preliminary tag cloud (ugly for the moment, I need to find something better)
1038
1039 ### Changed
1040 - Replaced `preg_match()` with `version_compare()` to check PHP version
1041 - Includes a patch by Emilien K. to mask dates if user is not logged in.
1042 The option can be activated by changing `define('HIDE_TIMESTAMPS',false);` to `true`
1043
1044
1045 ## [v0.0.15beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1046 ### Added
1047 - New in import: Option to overwrite existing links when importing
1048 - On free.fr, automatic creation of the `/sessions` directory
1049
1050 ### Changed
1051 - CSS Stylesheet is now an external file (shaarli.css).
1052 This reduces page size and eases customization.
1053
1054 ### Removed
1055 - Removed some parameters in URL added by some feed proxies (`#xtor=RSS-...`)
1056
1057 ### Fixed
1058 - Bug corrected: Prevented loop on login screen upon successful login after a failed login
1059 - Bug corrected in import: HTML entities were not properly decoded.
1060 If you imported your Delicious/Diigo bookmarks, your should import them again
1061 and use the 'overwrite' option of the import feature.
1062
1063
1064 ## [v0.0.14beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1065 ### Added
1066 - You no longer need to disable `magic_quotes` on your host.
1067 Shaarli will cope with this option beeing activated.
1068
1069
1070 ## [v0.0.13beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1071 ### Added
1072 - Import: New option to import html bookmark file as private links
1073 - Import: Importing a bookmark file will not overwrite existing links anymore
1074 - Export: New options to export only public or private links
1075
1076 ### Changed
1077 - In tag autocomplete, tags are presented in use order
1078 (most used tags first, instead of alphabetical order)
1079 - RSS Feed can now be filtered by tags or fulltext search. Just add to the feed url:
1080 - `&searchtags=minecraft+video` for tag filtering
1081 - `&searchterm=portal` for fulltext search to the feed url
1082
1083
1084 ## [v0.0.12beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1085 ### Added
1086 - Add a check that the config file was properly created
1087 (in case Shaarli does not have the write rights in its folder)
1088 - Open Shaarli: there is an option to open your Shaarli to anyone.
1089 Anybody will be able to add/edit/delete links without having to login.
1090 In code, change `define('OPEN_SHAARLI',false);` to `true`.
1091 Note: No anti-spam for the moment. You are warned!
1092 - Autocomplete for tags
1093
1094
1095 ## [v0.0.11beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1096 ### Added
1097 - Add a check and a warning for some hosts which still have `magic_quotes` activated
1098
1099
1100 ## [v0.0.10beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1101 ### Added
1102 - Get rid of `&quot;` in titles
1103
1104
1105 ## [v0.0.9beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1106 ### Added
1107 - Now works on hosts `free.fr` and `1and1`
1108 - Now works with PHP 5.1
1109 - PHP version is now checked and an error message is displayed if version is not correct
1110
1111 ### Fixed
1112 - No more error messages if the browser does not send `HTTP_REFERER`
1113 - No more error messages if the host has disabled http protocol in PHP config (eg. 1and1)
1114
1115
1116 ## [v0.0.8beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1117 ### Changed
1118 - In RSS feed, GUID content replaced with the URL of the link, because some
1119 stupid RSS reader (like Google Reader) use `<guid>` as a link instead of using `<link>`
1120
1121
1122 ## [v0.0.7beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-09-16
1123 First public release by Sebsauvage, see original article:
1124 [Adieu Delicious, Diigo et StumbleUpon. Salut Shaarli !](http://sebsauvage.net/rhaa/index.php?2011/09/16/09/29/58-adieu-delicious-diigo-et-stumbleupon-salut-shaarli-) (FR)