CHANGELOG.md

   1 # Change Log
   2 All notable changes to this project will be documented in this file.
   3
   4 The format is based on [Keep a Changelog](http://keepachangelog.com/)
   5 and this project adheres to [Semantic Versioning](http://semver.org/).
   6
   7 ## [v0.9.2](https://github.com/shaarli/Shaarli/releases/tag/v0.9.2) - 2017-10-07
   8
   9 **Major security issue fixed. Please update.**
  10
  11 ### Added
  12 - Tag search now supports wildcards `*`
  13 - New setting `privacy.force_login` which can be used with `privacy.hide_public_links` to redirect anonymous users to the login page.
  14 - New setting `general.default_note_title` used to override default `Note:` title prefix for notes.
  15 - Add a version hash for asset loading to prevent browser's cache issue
  16
  17 ### Changed
  18 - The "Remember me" checkbox is unchecked by default
  19 - The default value of the "Remember me" checkbox can be configured under `data/config.json.php`
  20
  21 ### Removed
  22 - Remove obsolete PHP magic quote support
  23
  24 ### Fixed
  25 - Generates a permalink URL if the URL is set to blank
  26 - Replace links to the old GitHub wiki with ReadTheDocs URIs
  27 - Use single quotes in the note bookmarklet
  28 - Daily page if there is no link
  29 - Bulk link deletion with a single link
  30 - HTTPS detection behind a reverse proxy
  31 - Travis tests environment and localization
  32 - Improve template paths robustness (trailing slash)
  33 - Robustness: safer gzinflate/zlib usage
  34 - Description links parsing with parenthesis (without Markdown)
  35 - Templates:
  36     - Sort the tag cloud alphabetically
  37     - Firefox social title
  38     - Improved visited link color
  39     - Fix jumpy textarea with long content in post edit
  40
  41 ### Security
  42
  43 - Vulnerability introduced in v0.9.1 fixed.
  44
  45 ## [v0.9.1](https://github.com/shaarli/Shaarli/releases/tag/v0.9.1) - 2017-08-23
  46
  47 The documentation has been migrated to ReadTheDocs:
  48 - https://shaarli.readthedocs.io/
  49 - edits are submitted as pull requests
  50
  51 ### Added
  52 - Allow bulk link deletion
  53 - Display subtags in the tag cloud
  54 - Add an endpoint to refresh the token
  55 - Add a token on every page
  56 - Add a tag list view for management
  57 - Add Note bookmarklet
  58 - Add creation date when editing a link
  59
  60 ### Changed
  61 - Documentation:
  62     - Generate static HTML documentation with [mkdocs](http://www.mkdocs.org/)
  63     - Host documentation on [ReadTheDocs](http://www.mkdocs.org/)
  64     - Update documentation structure
  65     - Update Makefile targets to:
  66         - Build the docs locally
  67         - Include the generated docs in the release archives
  68 - Theme:
  69     - Use the new theme as the default
  70     - Rename the tag cloud template to `tag.cloud.html`
  71     - Display visited links in grey
  72     - Use only one search form in `linklist.html`
  73     - Hide the "search links with these tags" option when an empty `searchtags` is passed to `tag.list.html`
  74 - Improve HTTP header handling when hosting Shaarli with Docker behind a reverse proxy
  75 - Searching for tags with an empty value returns untagged links only
  76 - Set Travis environment to `precise` until the new `trusty` environment is ready
  77
  78 ### Removed
  79 - Remove dead Pubsubhubbub code
  80 - Disable the GitHub wiki (see changed/documentation)
  81 - Remove Docker `dev` image and resources
  82 - Theme:
  83     - Remove the bottom "Sort by" menu in `tag.list.html`
  84
  85 ### Fixed
  86 - Fix file existence check for `user.css`
  87 - Limit selection to 2k characters when using the bookmarklet
  88 - Fix JS error `uncaught type error`
  89 - Fix Firefox Social button
  90 - Use pinned PHP dependencies when generating release archives
  91 - Make sure that the tag exists before altering/removing it
  92
  93 ### Security
  94 - Add a whitelist for protocols for URLs
  95
  96
  97 ## [v0.9.0](https://github.com/shaarli/Shaarli/releases/tag/v0.9.0) - 2017-05-07
  98
  99 This release introduces the REST API, and requires updating HTTP server
 100 configuration to enable URL rewriting, see:
 101 - https://shaarli.github.io/api-documentation/
 102 - https://shaarli.readthedocs.io/en/master/Server-configuration/
 103
 104 **WARNING**: Shaarli now requires PHP 5.5+.
 105
 106 ### Added
 107 - REST API v1
 108     - [Slim](https://www.slimframework.com/) framework
 109     - [JSON Web Token](https://jwt.io/introduction/) (JWT) authentication
 110     - versioned API endpoints:
 111         - `/api/v1/info`: get general information on the Shaarli instance
 112         - `/api/v1/links`: get a list of shaared links
 113         - `/api/v1/history`: get a list of latest actions
 114 Theming:
 115     - Introduce a new theme
 116     - Allow selecting themes/templates from the configuration page
 117     - New/Edit link form can be submitted using CTRL+Enter in the textarea
 118     - Shaarli version is displayed in the footer when logged in
 119 - Add plugin placeholders to Atom/RSS feed templates
 120 - Add OpenSearch to feed templates
 121 - Add `campaign_` to the URL cleanup pattern list
 122 - Add an AUTHORS file and Makefile target to list authors from Git commit data
 123 - Link imports are now logged in `data/` folder, and can be debug using `dev.debug=true` setting.
 124 - `composer.lock` is now included in git file to allow proper `composer install`
 125 - History mechanism which logs link addition/modification/deletion
 126
 127 ### Changed
 128 - Docker: enable nginx URL rewriting for the REST API
 129 - Theming:
 130     - Move `user.css` to the `data` folder
 131     - Move default template files to a subfolder (`default`)
 132     - Rename the legacy theme to `vintage`
 133     - Private only filter is now displayed as a search parameter
 134     - Autocomplete: pre-select the first element
 135     - Display daily date in the page title (browser title)
 136     - Timezone lists are now passed as an array instead of raw HTML
 137 - Move PubSubHub to a dedicated plugin
 138 - Coding style:
 139     - explicit method visibility
 140     - safe boolean comparisons
 141     - remove unused variables
 142 - The updater now keeps custom theme preferences
 143 - Simplify the COPYING information
 144 - Improved client locale detection
 145 - Improved date time display depending on the locale
 146 - Partial namespace support for Shaarli classes
 147 - Shaarli version is now only present in `shaarli_version.php`
 148 - Human readable maximum file size upload
 149
 150
 151 ### Removed
 152 - PHP < 5.5 compatibility
 153 - ReadItYourself plugin
 154
 155 ### Fixed
 156 - Ignore generated release tarballs
 157 - Hide default port when behind a reverse proxy
 158 - Fix a typo in the Markdown plugin description
 159 - Fix the presence of empty tags for private tags and in search results
 160 - Fix a fatal error during the install
 161 - Fix permalink image alignment in daily page
 162 - Fix the delete button in `editlink`
 163 - Fix redirection after link deletion
 164 - Do not access LinkDB links by ID before the Updater applies migrations
 165 - Remove extra spaces in the bookmarklet's name
 166 - Piwik plugin: Piwik URL protocol can now be set (http or https)
 167 - All inline JS has been moved to dedicated JS files
 168 - Keep tags after login redirection
 169
 170 ### Security
 171 - Markdown plugin: escape HTML entities by default
 172
 173
 174 ## [v0.8.4](https://github.com/shaarli/Shaarli/releases/tag/v0.8.4) - 2017-03-04
 175 ### Security
 176 - Markdown plugin: escape HTML entities by default
 177
 178 ## [v0.8.3](https://github.com/shaarli/Shaarli/releases/tag/v0.8.3) - 2017-01-20
 179 ### Fixed
 180 - PHP 7.1 compatibility: add ConfigManager parameter to anti-bruteforce function call in login template.
 181
 182 ## [v0.8.2](https://github.com/shaarli/Shaarli/releases/tag/v0.8.2) - 2016-12-15
 183 ### Fixed
 184
 185 - Editing a link created before the new ID system would change its permalink.
 186
 187 ## [v0.8.1](https://github.com/shaarli/Shaarli/releases/tag/v0.8.1) - 2016-12-12
 188
 189 > Note: this version will create an automatic backup of your database if anything goes wrong.
 190
 191 ### Added
 192 - Add CHANGELOG.md to track the whole project's history
 193 - Enable Composer cache for Travis builds
 194 - Save the last edition date for shaares and use it in Atom/RSS feeds
 195 - Plugins:
 196     - Add an [Isso](https://posativ.org/isso/) plugin to enable user comments on permalinks
 197     - Allow defining init functions, e.g. for performing checks and error processing
 198     - Add a Piwik plugin for analytics.
 199     - Markdown: add warning notice regarding HTML rendering
 200 - Meta tag to *not* send the referrer to external resources.
 201
 202 ### Changed
 203 - Link ID complete refactoring:
 204     - Links now have a numeric ID instead of dates
 205     - Short URLs are now created once and can't change over time (previous URL are kept)
 206 - Templates:
 207     - Changed placeholder behaviour for: `buttons_toolbar`, `fields_toolbar` and `action_plugin`
 208     - Cleanup `{loop}` declarations in templates
 209     - Tools: hide Firefox Social button when not in HTTPS
 210     - Firefox Social: show Shaarli's title when shaaring using Firefox Social
 211 - Release archives now have the same structure as GitHub-generated archives:
 212     - archives contain a `Shaarli` directory, itself containing sources + dependencies
 213     - the tarball is now gzipped
 214 - Plugins:
 215     - Markdown: Parsedown library is now imported through Composer
 216 - Minor code cleanup: PHPDoc, spelling, unused variables, etc.
 217 - Docker: explicitly set the maximum file upload size to 10 MiB
 218
 219 ### Fixed
 220 - Fix the server `<self>` value in Atom/RSS feeds
 221 - Plugins:
 222     - Tools: only display parameter description when it exists
 223     - archive.org: do not propose archival of private notes
 224     - Markdown:
 225         - render links properly in code blocks
 226         - bug regarding the `nomarkdown` tag
 227     - W3C compliance
 228 - Use absolute URL for hashtags in RSS and ATOM feeds
 229 - Docker: specify the location of the favicon
 230 - ATOM feed: remove new line between content tag and data
 231
 232 ### Security
 233 - Allow whitelisting trusted IPs, else continue banning clients upon login failure
 234
 235
 236 ## [v0.8.0](https://github.com/shaarli/Shaarli/releases/tag/v0.8.0) - 2016-10-12
 237 Shaarli now uses [Composer](https://getcomposer.org/) to handle its dependencies.
 238 Please use our release archives, or follow the
 239 [installation documentation](https://github.com/shaarli/Shaarli/wiki/Download-and-Installation).
 240
 241 ### Added
 242 - Composer is required to resolve Shaarli's PHP dependencies
 243 - Shaarli now supports `#hashtags`
 244 - Firefox social share now uses selected text as a description
 245 - Plugin parameters can have a description in each plugin's `.meta` file
 246
 247 ### Changed
 248 - Configuration is now stored as a JSON file
 249 - Previous configuration format will be automatically updated (PHP -> JSON)
 250 - Shaarli now defaults to cURL to fetch shaare titles
 251 - URL cleanup: remove `PHPSESSID` parameter
 252 -  `nomarkdown` tag is no longer private, and now affects visitors
 253 - Cleanup template indentation
 254 - Rewrite bookmark import using a generic Netscape parser
 255
 256 ### Removed
 257 - Shaarli no longer references Delicious in its description
 258
 259 ### Deprecated
 260 - Shaarli configuration is not held as PHP globals anymore
 261
 262 ### Fixed
 263 - Ignore case for tags in autocompletion and cloud tag
 264 - Avoid generating empty tags
 265 - Fix a Dockerfile syntax error
 266
 267 ### Security
 268 - Fixed a bug preventing to change password
 269 - XSRF token now generated each time a page is rendered
 270
 271
 272 ## [v0.7.1](https://github.com/shaarli/Shaarli/releases/tag/v0.7.1) - 2017-03-08
 273 ### Security
 274 - Markdown plugin: escape HTML entities by default
 275
 276 ## [v0.7.0](https://github.com/shaarli/Shaarli/releases/tag/v0.7.0) - 2016-05-14
 277 ### Added
 278 - Adds an option to encode redirector URL parameter
 279 - Atom/RSS feeds now support Markdown formatting, and plugins in general
 280 - Markdown: use the tag `.nomarkdown` to avoid markdown processing
 281 - Prefill the login field when the authentication has failed
 282 - Show a private links counter
 283
 284 ### Changed
 285 - Allow to use the bookmarklet in Firefox reader view (URL clean up)
 286 - Improve tagcloud font size
 287 - Improve title retrieving
 288 - Markdown: inline code background color
 289 - Refactor Netscape bookmark export
 290 - Refactor Atom/RSS feed generation
 291
 292 ### Removed
 293 - Remove delicious from Shaarli description
 294
 295 ### Fixed
 296 - Fix bad login redirections causing a 404 in a few cases
 297 - Fix tagcloud font-size with French locale
 298 - Don't display empty tags in tag search
 299 - Fix Awesomeplete conflicts with jQuery
 300 - Fix UTC timezone selection
 301 - Fix a bug preventing to import notes in browsers from bookmarks export
 302 - Don't redirect to ?post if ?addlink is reached while logged out
 303
 304
 305 ## [v0.6.5](https://github.com/shaarli/Shaarli/releases/tag/v0.6.5) - 2016-03-02
 306 ### Fixed
 307 - Fixes a regression generating an unnecessary warning (language in HTTP request)
 308 - Fixes a bug where going through multiple reverse proxy could generate malformed URL
 309 - Markdown: Fixes a bug where empty description blocks were displayed
 310
 311
 312 ## [v0.6.4](https://github.com/shaarli/Shaarli/releases/tag/v0.6.4) - 2016-02-28
 313 ### Added
 314 - Add an updater class to automate user data upgrades
 315 - Plugin admin page: adds a label for checkboxes and improve name display
 316 - Plugin Wallabag: API version can be specified in plugin admin page
 317
 318 ### Changed
 319 - Better tag cloud sorting, including special chars (`a > E > é > z`)
 320 - Autolocale now sets all locale categories, not just time
 321 - Use PHP's DateTime object instead of custom functions
 322 - Plugin hooks: process includes before header/footer
 323 - Markdown plugin: better styles for `<code>` and `<pre>` tags
 324 - Improve searching:
 325     - search terms are now considered separated and won't only return exact results anymore
 326     - exact search can be done with quotes `"this exact sentence"`
 327     - search supports excluded terms starting a dash `-exclude`
 328     - implement crossed search: terms + tags
 329     - all of them combined across all shaare fields
 330 - New tag behaviour:
 331     - tags starting with a dash will be renamed without it
 332     - tags starting with a dot `.` will be hidden unless the user is logged in
 333
 334 ### Fixed
 335 - Fix Markdown plugin escape issues (code/quote blocks, etc.)
 336 - Link description aren't trimmed anymore to allow markdown format at the beginning of a shaare
 337 - Fixes plugin admin redirection page on error
 338
 339 ### Security
 340 - Fix a bug where non initialized variables were causing a warning
 341 - Fix a bug where saving a link after edit could cause a 404 error
 342
 343
 344 ## [v0.6.3](https://github.com/shaarli/Shaarli/releases/tag/v0.6.3) - 2016-01-31
 345 ### Added
 346 - Plugins administration page
 347 - Markdown plugin added for shaares description
 348 - Docker: Dockerfile is now in the main git repository and improved
 349 - Add a `.gitattributes` to ease repository management
 350 - Travis: include file permission checks
 351
 352 ### Changed
 353 - Auto retrieve of title know works with websites (HTTPS, follow redirections, etc.)
 354 - 404 page is now handled in a template
 355 - Date in log files updated to work with fail2ban
 356 - Wallabag: support of Wallabag v2 and minor fixes
 357 - Link search refactoring
 358 - Logging function refactoring
 359
 360 ### Fixed
 361 - Fix a bug where renaming a tag was causing a 404
 362 - Fix a bug allowing to search blank terms
 363 - Fix a bug preventing to remove a tag with special chars when searching
 364
 365
 366 ## [v0.6.2](https://github.com/shaarli/Shaarli/releases/tag/v0.6.2) - 2015-12-23
 367 ### Changed
 368 - Plugins: new footer hook
 369 - Plugins: improve QR code
 370 - Cleanup templates
 371
 372 ### Fixed
 373 - Plugins: use the actual link URL to generate QR codes
 374 - Templates: missing/erroneous page titles
 375 - Templates: missing variables resulting in PHP errors
 376
 377 ### Security
 378 - Fix invalid file permissions (remove executable bit)
 379
 380
 381 ## [v0.6.1](https://github.com/shaarli/Shaarli/releases/tag/v0.6.1) - 2015-12-01
 382 ### Added
 383 - Add OpenSearch support
 384 - Add a Doxygen makefile target
 385 - Tools: add fine-grained file/directory permission checks (installation)
 386
 387 ### Changed
 388 - Tools: check the 'stable' branch for new versions (updates)
 389 - Cleanup: introduce an `ApplicationUtils` class
 390
 391 ### Removed
 392  - Cleanup: remove `json_encode()` function (built-in since PHP 5.2)
 393
 394 ### Fixed
 395  - Auto-complete more than one tag
 396  - Bookmarklet: support titles containing quotes
 397  - URL encode links when setting a redirector
 398
 399
 400 ## [v0.6.0](https://github.com/shaarli/Shaarli/releases/tag/v0.6.0) - 2015-11-18
 401 ### Added
 402 - Introduce a plugin system
 403 - Add a demo_plugin
 404 - Add plugins:
 405     - addlink_toolbar
 406     - archiveorg
 407     - playvideos
 408     - qrcode
 409     - readityourself
 410     - wallabag
 411
 412 ### Changed
 413 - Coding style
 414
 415 ### Fixed
 416 - Adding a new link now returns the correct anchor in the URL
 417 - Set default file permissions
 418
 419
 420 ## [v0.5.4](https://github.com/shaarli/Shaarli/releases/tag/v0.5.4) - 2015-09-15
 421 ### Added
 422 - HTTPS: support being served behing an SSL-enabled proxy
 423
 424 ### Changed
 425 - HTTP/Server utilities: refactor & add test coverage
 426 - Project & documentation:
 427     - improve/rewrite `README.md`
 428     - update contributor list
 429     - update `index.php` header
 430
 431 ### Fixed
 432 - PHP session IDs: handle hash algorithms and bits per char representations
 433
 434
 435 ## [v0.5.3](https://github.com/shaarli/Shaarli/releases/tag/v0.5.3) - 2015-09-02
 436 ### Fixed
 437 - Fix a bug that could prevent user to login
 438
 439
 440 ## [0.5.3](https://github.com/shaarli/Shaarli/releases/tag/0.5.3) - 2015-09-02
 441 This release has been YANKED as it points to a tag that does not follow our naming convention. Please use `v0.5.3` instead
 442
 443 ### Fixed
 444 - Allow uppercase letters in PHP sessionid format
 445
 446
 447 ## [v0.5.2](https://github.com/shaarli/Shaarli/releases/tag/v0.5.2) - 2015-08-31
 448 ### Added
 449 - Add PHP 7 to Travis platforms
 450
 451 ### Changed
 452 - Also extract HTTPS page metadata (title)
 453
 454 ### Fixed
 455 - Fix regression preventing to load LinkDB info when adding an existing link
 456
 457 ### Security
 458 - Fix Full Path Disclosure upon cookie forgery
 459
 460
 461 ## [v0.5.1](https://github.com/shaarli/Shaarli/releases/tag/v0.5.1) - 2015-08-17
 462 ### Added
 463 - Add a link to the shaarli/shaarli DockerHub repository
 464
 465 ### Changed
 466 - Update local documentation
 467 - Improve timezone detection at installation
 468 - Improve feed cache handling
 469 - Improve URL cleanup for new links
 470
 471 ### Fixed
 472 - Fix 404 after editing a link while being logged out
 473
 474
 475 ## [v0.5.0](https://github.com/shaarli/Shaarli/releases/tag/v0.5.0) - 2015-07-31
 476 ### Added
 477 - Add Firefox Social API
 478 - Start code refactoring:
 479     - add unit test coverage
 480     - add Travis integration
 481
 482 ### Changed
 483 - Search/Filter by tag fieds can now be accessed quickly with the `Tab` key
 484 - Update documentation
 485 - Remove duplicate tags in links
 486 - Remove annoying URL patterns
 487 - Start code refactoring:
 488     - move all settings to `data/config.php`
 489     - refactor Config, LinkDB, TimeZone, Utils
 490
 491 ### Fixed
 492 - Fix locale handling
 493 - Fix note URLs
 494 - Fix page redirections
 495 - Fix daily RSS browsing
 496 - Fix title display
 497 - Restore compatibility with PHP 5.3
 498
 499 ### Security
 500 - Fix links not being hidden when `HIDE_PUBLIC_LINKS` is set
 501
 502
 503 ## [v0.0.45beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.45beta) - 2015-03-16
 504 ### Fixed
 505 - Fix improperly displayed Unicode character
 506 - Fix incorrect font size for "Add link" input field
 507
 508
 509 ## [v0.0.44beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.44beta) - 2015-03-15
 510 ### Added
 511 - Add a Makefile to run static code checkers
 512 - Add local documentation (help link in page footer)
 513 - Use awesomplete library for autocompletion
 514 - Use bLazy.js library for images lazy loading
 515 - New 'Add Note' bookmarklet to immediatly open a note (text post) compose window
 516
 517 ### Changed
 518 - Theme improvements and cleanup (menu, search fields, icons, linklist...)
 519 - Allow 'javascript:' links sharing (bookmarklets)
 520 - Make update check optional
 521 - Redirect to homepage after adding a link via "Add Link" dialog
 522 - Remove more annoying URL parameters for shared links
 523 - Code cleanup
 524
 525 ### Removed
 526 - Remove jQuery
 527
 528 ### Security
 529 - Don't disclose version to visitors (shaarli-version.txt)
 530
 531
 532 ## [v0.0.43beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.43beta) - 2015-02-20
 533 ### Added
 534 - Title button link URL is now configurable
 535 - RainTPL's TMP and TPL directories path are now configurable
 536 - Displayed URLs for each link are now clickable links
 537 - Show links timestamps in Daily view
 538
 539 ### Changed
 540 - Automatically prepend "Note:" to title of self-posts (posts not pointing to an URL)
 541 - Make ATOM toolbar button optional (`SHOW_ATOM` configuration variable)
 542 - Optional archive.org links for each Shaarli link (`ARCHIVE_ORG` option)
 543 - Thumbnails: force HTTPS when possible
 544 - Improve tag cloud font scaling
 545 - Allow pointing RSS items to the permalink instead of the direct URL (`ENABLE_RSS_PERMALINKS` option)
 546 - Update JS libraries and add version numbers in filenames
 547 - Updates to README and footer
 548
 549 ### Fixed
 550 - Fix problems when running Shaarli behind a reverse proxy (invalid RSS feed URL)
 551 - Update check now checks against the community fork version
 552 - Include `cache/`, `data/`, `pagecache/` and `tmp/` directories in the repository
 553 - Fix duplicate tag search returning no results
 554 - Fix unnecessary 404 error on "Add link" when the user is logged out
 555 - Fixes to copyright/licensing information and unlicensed media
 556 - Fixes for tag cloud invalid links
 557 - Coding style fixes/cleanup
 558 - Fix redirection after deleteing a link leading to a 404 error
 559 - Shaarli's HTML is now W3C-compliant
 560 - Search now works with Unicode characters
 561
 562 ### Security
 563 - Do not leak server's PHP version and Shaarli's full path on errors
 564 - Prevent Shaarli from sending a lot of duplicate cookies
 565
 566
 567 ## [v0.0.42beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.42beta) - 2014-07-27
 568 ### Added
 569 - Add QRCode Javascript library
 570 - Allow importing bookmarks with the same timestamp (hack)
 571 - Allow putting a description in the bookmarklet URL
 572 - Add `json_encode()` implementation for PHP<5.2
 573 - Highlight search results
 574
 575 ### Changed
 576 - Improve 'Stay signed in' behaviour
 577 - Improve `smallHash()`
 578 - Refactor QRCode generation
 579 - Update Javascript lazyloading
 580 - Update CSS
 581
 582 ### Removed
 583 - Remove jQuery from almost all pages
 584
 585 ### Fixed
 586 - Fix overlapping tags
 587 - Fix field foxus in the bookmarklet
 588 - Fix error message when `data/` is not writable
 589 - Fix HTML generation
 590
 591 ### Security
 592 - Fix XSS flaw
 593
 594
 595 ## [v0.0.41beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.41beta) - 2013-03-08
 596 ### Added
 597 - Add HTTPS to the allowed protocols
 598 - Add support for magnet links in link descriptions
 599 - Allow creating new links as private by default
 600 - Allow disabling jQuery
 601 - Check write permissions
 602 - Check session support before installation
 603
 604 ### Changed
 605 - Improve token security
 606 - RSS feed: allow inverting links/permalinks
 607
 608 ### Fixed
 609 - Fix display issues during installation
 610 - Fix popup redirection after login failure
 611 - Fix RSS formatting for Thunderbird
 612 - Fix thumbnail creation
 613 - Fix cache purge
 614
 615 ### Security
 616 - Fix login issue with WebKit browsers
 617
 618
 619 ## [v0.0.40beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.40beta) - 2013-02-26
 620 Initial release on GitHub.
 621
 622
 623 ## [v0.0.40beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-08-24
 624 ### Added
 625 - Flickr thumbnail now also support albums, galleries and users
 626 - Add a configuration option to disable session cookie protection
 627   Check this if your get disconnected often or your IP address changes often
 628
 629 ### Removed
 630 - Removed the xml comment in cached RSS/ATOM feed
 631   (although W3C-compliant, this may cause problems in some feed readers)
 632
 633 ### Fixed
 634 - A bug in the RSS cache would present old items as new in some cases
 635 - A small bug (non-initialized variable) in page cache cleaning
 636 - Proper "Nothing found" message when search returns no results
 637 - No more 404 error when searching with empty input
 638 - Flickr thumbnails are back (Flickr has made some changes to their domains)
 639
 640 ## [v0.0.39beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-08-10
 641 ### Added
 642 - A cache for RSS feed, ATOM feed and Daily RSS feed, because these URLs
 643   are massively hammered. Cache is automatically purged whenever the database
 644   is changed. This will reduce server load. I may add cache to other pages later.
 645
 646 ### Changed
 647 - No more global `$LINKSDB` (Yuk)
 648 - Background color was removed when hovering a link
 649
 650 ### Fixed
 651 - Small bug corrected in config screen on timezones
 652 - Calling a non-existing permalink now returns a crude 404 error instead of 200 (OK)
 653   This is done on purpose
 654 - The `shaarli` session cookie now has a proper path
 655   Thus you can now install several Shaarlis on the same server in different paths,
 656   and each will have its session
 657 - Now when you delete a link, you go back the same page/search parameters you were on
 658 - Restore previously removed `error_get_last()`, to ensure PHP 5.1 compatibility
 659   (Yes, now it works on free.fr hosting)
 660 - Added `dialog=1` in bookmarklet code for some browsers
 661
 662
 663 ## [v0.0.38beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-02-06
 664 ### Added
 665 - Automatic creation of the `tmp` directory with proper rights (for RainTPL)
 666 - When you click the key to see only private links, it turns yellow
 667
 668 ### Changed
 669 - The "Daily" page now automatically skips empty days.
 670
 671 ### Fixed
 672 - Corrected the tag encoding (there was a bug when selecting a second tag which contains accented characters)
 673
 674
 675 ## [v0.0.37beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-02-01
 676 ### Added
 677 - Basic CSS for mobiles, which makes Shaarli //much// more usable on mobile devices
 678 - Picture wall no more instantly kills your browser. Now it uses
 679   [lazy image loading](http://www.appelsiini.net/projects/lazyload);
 680   the pictures are loaded only as you scroll the page.
 681   This will reduce browser memory usage (especially on mobile devices),
 682   as well as server load.
 683   If you have javascript disabled, the page will still work as before
 684   (all images loaded at once)
 685 - RSS feed for the "Daily" page. 1 RSS entry per day, with all links of that day.
 686   RSS feed provides the last 7 days (only non-empty days are returned).
 687 - In link list, added an icon to see only private links. Click to toggle (only private / all)
 688
 689
 690 ## [v0.0.36beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
 691 ### Added
 692 - Shaarli licence in COPYING
 693
 694 ### Changed
 695 - Display adjustments in "Daily" page
 696
 697 ### Fixed
 698 - Improper text color in install form
 699 - Error in QRCode url (missing '?')
 700
 701
 702 ## [v0.0.35beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
 703 ### Fixed
 704 - Corrected a bug introduced in 0.0.34 which would improperly preprend data to URLs
 705
 706
 707 ## [v0.0.34beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
 708 ### Added
 709 - There is now a QR-Code of each permalink to easily open a link on your smartphone
 710 - Protocols `file:` and `apt:` are now also converted to clickable links (patch by Francis Chavanon)
 711 - Thumbnail support for http://xkcd.com/ (patch by Emilien Klein)
 712 - Thumbnail support for http://pix.toile-libre.org/
 713 - Well I had _some_ mercy for users with antique browsers (IE) which do not have
 714   support for gradients: I added a few `background-color`
 715 - First version of the "Shaarli Daily", a page showing all links of a specific day.
 716   By default, you see the links of the previous day.
 717   There is still work to do on this page (error checking, better navigation (calendar?),
 718   RSS feed, CSS for mobile and printing...)
 719
 720 ### Changed
 721 - Upgraded bundled versions of jQuery (1.7.1) and jQuery UI (1.8.17)
 722 - Upgraded bundled version of RainTPL (2.7)
 723 - Changed HTTPS detection code
 724
 725 ### Fixed
 726 - In link edition, you can now click the word "Private" to check the box
 727 - Clicking a tag would not work properly if the tag contained special characters (like +)
 728 - Added proper jQuery licence (shame on me)
 729
 730
 731 ## [v0.0.33beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-17
 732 ### Added
 733 - Shaarli packaged to ease Linux distributions integration
 734   As a simple user, you do not need to cope with these versions
 735   Future releases of Shaarli will also be customized and published in these directories
 736   Differences with the standard Shaarli version:
 737     - deb:
 738         - .tar.gz instead of .zip
 739         - COPYING licence file added
 740         - jQuery/jQuery-UI libraries removed to cope with Debian rules
 741           This version links to the libs hosted at http://code.jquery.com
 742     - rpm:
 743         - sources located in a subdirectory with the same name as the zip file
 744         - COPYING licence file added
 745     - WARNING: When downloading the .tar.gz, always use wget (and not your browser),
 746       otherwise the .tar.gz will be corrupted
 747
 748 ### Fixed
 749 - ATOM feed validates again
 750
 751 ### Security
 752 - XSS vulnerability patched (thanks to Stanislas D.!)
 753
 754
 755 ## [v0.0.32beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-12-16
 756 ### Added
 757 - Better check on URL parameters (patch by gege2061)
 758 - Add `max-height` and `overflow:auto` attributes so that content can be scrolled if too large
 759
 760 ### Changed
 761 - HTML generation moved to RainTPL templates (in the `tpl/` directory)
 762 - Better detection of HTTPS (patch by gege2061)
 763 - In RSS/ATOM feeds, the GUID is now the permalink instead of the final URL (patch by gege2061)
 764 - Jerrywham CSS patch included
 765 - Multiple spaces are now respected in description.
 766   Thus you can use Shaarli as a personal pastebin (for posting source code, for example).
 767
 768 ### Removed
 769 - Page time generation was removed
 770
 771 ### Fixed
 772 - Tab order changed in login screen
 773 - Permalinks now work even if additional parameters have been added
 774   (e.g. `/?E8Yj2Q&utm_source=blablabla...`)
 775 - user.css is included only if the file is present
 776   (This prevents a useless CSS include which makes a harmless but useless 404 error.)
 777
 778
 779 ## [v0.0.31beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-29
 780 ### Added
 781 - Support for TED Talks (ted.com/talks) thumbnails (patch by Emilien K.)
 782 - partial [patch](http://www.idleman.fr/blog/?p=508) by Idleman: Better design consistency, icon on private links. In-page popup was not included because it causes problem on some websites
 783 - Support for bookmark files without ADD_DATE attributes
 784 - Logo is clickable
 785 - `user.css` can be added to overload Shaarli base CSS.(patch by Jerrywham).
 786   Just put `user.css` in the same directory as shaarli.css.
 787   Example: `<code css>#pageheader { background: blue; }</code>`
 788   Please note that Shaarli CSS are not stable and may completely change on each version
 789
 790 ### Changed
 791 - Edit and Delete buttons in link list were replaced with icons. (patch by Jerrywham)
 792
 793 ### Fixed
 794 - Better error handling in thumbnail generation (patch by Emilien K.)
 795 - The top menu is no longer displayed in bookmarklet popup
 796 - Bookmark which have the exact same date/time are now correctly imported.
 797   Most remaining import problems should be solved now
 798 - Comment in Shaarli export moved to beginning of file to prevent clash with last link description
 799
 800
 801 ## [v0.0.30beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-18
 802 ### Added
 803 - Add a small `delete` button in link list (after the `edit` button)
 804
 805 ### Fixed
 806 - Moved the call to PubSubHub
 807
 808
 809 ## [v0.0.29beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-18
 810 ### Fixed
 811 - Corrected a bug introduced in v0.0.28beta
 812   (there was an error if you use the bookmarklet and you're not logged in)
 813
 814
 815 ## [v0.0.28beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-17
 816 ### Added
 817 - Thumbnail support for youtu.be URLs (YouTube short url service)
 818 - PubSubHub protocol support (from http://aldarone.fr/les-flux-rss-shaarli-et-pubsubhubbub/).
 819   Warning: This was not tested. You need to set your hub url in
 820   `$GLOBALS['config']['PUBSUBHUB_URL']` and put the official client (`publisher.php`)
 821   in the same directory as Shaarli's `index.php`
 822 - RSS and ATOM feeds now also contain tags (in `category` tags, as per their
 823   respective specifications)
 824
 825 ### Changed
 826 - New Shaarli theme and logo by Idle (http://www.idleman.fr/blog/?p=469)
 827 - In picture wall, pictures point to Shaarli permalink instead of final URL.
 828   This way, users can read the description.
 829 - In RSS/ATOM feeds, guid and link URL of permalinks are now proper absolute URLs
 830 - In RSS/ATOM feeds, URLs are now clickable
 831 - Rename `http_parse_headers()` to `http_parse_headers_shaarli()` to prevent
 832   name collision with some PHP extensions
 833
 834 ### Fixed
 835 - Thumbnails removed for imgur.com/a/ URLs (Thumbnails are not available for albums on imgur)
 836 - Shaarli now correctly only tries to get thumbnails for vimeo video URLs
 837 - Fix a bug in imgur.com URLs handling that would cause some thumbnails not to appear
 838 - The search engine would not return a result if the word to search was the first in description
 839 - Extracted title is now correct if the page has two `title` html tags
 840
 841
 842 ## [v0.0.27beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-18
 843 ### Added
 844 - Add a picture wall, which can be filtered too: it will use the same filters
 845   (tags,text search) as current page when clicked.
 846
 847
 848 ## [v0.0.26beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-17
 849 ### Changed
 850 - Made permalink more visible (smallHash)
 851
 852 ### Fixed
 853 - Removed extras space in description when URLs are converted to clickable links
 854 - Thumbnail for subreddit imgur urls (/r/...) were corrected (thanks to Accent Grave)
 855
 856
 857 ## [v0.0.25beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-13
 858 ### Added
 859 - Better CSS for printing (thanks to jerrywham suggestion)
 860 - Allow using a redirector or anonymizing proxy for links
 861   (such as `http://anonym.to/?` to mask you `HTTP_REFERER`).
 862   Just go to `Tools > Configure > Redirector`
 863   (thanks to Accent Grave for the suggestion).
 864 - The `ENABLE_LOCALCACHE` option can be set to `false` for those who have
 865   a limited quota on their host.
 866   This will disable the local thumbnail cache.
 867   Services which require the use of the cache will have no thumbnails
 868   (vimeo, flickr, direct link to image).
 869   Other services will still have a thumbnail (youtube,imgur.com,dailymotion,imageshack.us)
 870
 871 ### Changed
 872 - Now thumbnails generated by Shaarli are croped to a height of 120 pixels
 873 - YouTube thumbnails now use `default.jpg` instead of `2.jpg` (This is usually more pertinent)
 874 - Configuration options (such as `HIDE_TIMESTAMPS`, `ENABLE_THUMBNAILS`, etc.)
 875   can now be put in a an external file so that you do not have to tweak them again
 876   when you upgrade Shaarli.
 877   Just add the file `data/options.php`.
 878 - If a single link is displayed, the page title contains the title of the link
 879 - Shaarli page title is clickable (and has the same link as "Home")
 880 - A few CSS tweaks (thanks to maethor for suggestion)
 881
 882 ### Fixed
 883 - Shaarli now supports newlines in titles (thanks to dixy)
 884 - The link to the RSS feed in page header was not correct
 885
 886
 887 ## [v0.0.24beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 888 ### Added
 889 - Allow posting an entry without a link. (You can use Shaarli as a kind of "personal twitter")
 890 - Each Shaarli entry now has a short link (just click on the date of a link).
 891   Now you can send a link that points to a single entry in your Shaarli
 892 - In descriptions, URLs are now clickable
 893 - Thumbnails will be generated for all link pointing to .jpg/png/gif
 894   (as long as the images are less than 4 Mb and take less than 30 seconds to download)
 895
 896 ### Fixed
 897 - Now thumbnails also work for imgur gallery links (/gallery/...)
 898   (Thanks to Accent Grave for the correction)
 899 - Removed useless debugging information in log
 900 - The filter in RSS/ATOM feed now works again properly (it was broken in 0.0.17beta)
 901
 902
 903 ## [v0.0.23beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 904 ### Added
 905 - Added thumbnail support for imageshack.us
 906
 907 ### Changed
 908 - Now you can clic the sentence "Stay signed in" to tick the checkbox (patch by Emilien)
 909 - In tag editing, comma (,) are now automatically converted to spaces
 910 - In tag editing, autocomplete no longuer suggests a tag you have already entered in the same line
 911
 912
 913 ## [v0.0.22beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 914 ### Added
 915 - Support for thumbnails for flickr.com
 916 - Allow staying signed in:
 917   Your session will be kept open even if you close the browser.
 918   This is available through a checkbox in the login screen.
 919
 920 ### Changed
 921 - Some hosts (flickr, vimeo) are slow as hell for the thumbnails,
 922   or require an extra HTTP request.
 923   For these hosts the thumbnail generation has been deported outside the generation
 924   of the page to keep Shaarli snappy.
 925   For these slow services, the thumbnails are also cached.
 926
 927 ### Fixed
 928 - Title was not properly passed if you had to login when using the bookmarklet (patch by shenshei)
 929
 930
 931 ## [v0.0.21beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 932 ### Added
 933 - Thumbnails for some services
 934   Currently supports: YouTube.com, dailymotion.com, vimeo.com (slow!) and imgur.com.
 935   Thumbnails are enabled by default, but you can turn them off
 936   (set `define('ENABLE_THUMBNAILS',true);` to `false`).
 937
 938 ### Changed
 939 - Removed the focus on the searchbox (this is cumbersome when you want to browse pages
 940   and scroll with the keyboard)
 941
 942
 943 ## [v0.0.20beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 944 ### Fixed
 945 - RSS feed is now served as `application/rss+xml` instead of `application/xhtml+xml`
 946   (which was causing problem in //RSS Lounge//)
 947 - ATOM feed is now served as `application/atom+xml` instead of `application/xhtml+xml`
 948
 949
 950 ## [v0.0.19beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 951 ### Added
 952 - ATOM feed
 953
 954 ### Fixed
 955 - Patch by Emilien to remove the update notification after the update
 956
 957
 958 ## [v0.0.18beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 959 ### Added
 960 - You can now configure the title of your page
 961 - New screen to configure title and timezone
 962
 963 ### Changed
 964 - Nicer timezone selection patch by killruana
 965
 966 ### Fixed
 967 - New lines now appear correctly in the RSS feed descriptions.
 968
 969
 970 ## [v0.0.17beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 971 ### Added
 972 - Change password screen added (based on a patch by killruana)
 973 - Autocomplete in the tag search form
 974 - You can rename or delete a tag in all links
 975   (very handy if you misspelled a tag or want to merge tags)
 976 - When you click the RSS feed, the feed will be filtered with the same filters
 977   as the page you were viewing
 978
 979 ### Changed
 980 - CSS adjustments by jerrywham
 981 - Minor corrections
 982
 983
 984 ## [v0.0.16beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 985 ### Added
 986 - Upgrade notification:
 987   If a new version of Shaarli is available, you will be notified by a discreet
 988   message in top-right corner.
 989   This message will only be visible if you are logged in, and the check will be
 990   performed at most once a day.
 991 - Preliminary tag cloud (ugly for the moment, I need to find something better)
 992
 993 ### Changed
 994 - Replaced `preg_match()` with `version_compare()` to check PHP version
 995 - Includes a patch by Emilien K. to mask dates if user is not logged in.
 996   The option can be activated by changing `define('HIDE_TIMESTAMPS',false);` to `true`
 997
 998
 999 ## [v0.0.15beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1000 ### Added
1001 - New in import: Option to overwrite existing links when importing
1002 - On free.fr, automatic creation of the `/sessions` directory
1003
1004 ### Changed
1005 - CSS Stylesheet is now an external file (shaarli.css).
1006   This reduces page size and eases customization.
1007
1008 ### Removed
1009 - Removed some parameters in URL added by some feed proxies (`#xtor=RSS-...`)
1010
1011 ### Fixed
1012 - Bug corrected: Prevented loop on login screen upon successful login after a failed login
1013 - Bug corrected in import: HTML entities were not properly decoded.
1014   If you imported your Delicious/Diigo bookmarks, your should import them again
1015   and use the 'overwrite' option of the import feature.
1016
1017
1018 ## [v0.0.14beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1019 ### Added
1020 - You no longer need to disable `magic_quotes` on your host.
1021   Shaarli will cope with this option beeing activated.
1022
1023
1024 ## [v0.0.13beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1025 ### Added
1026 - Import: New option to import html bookmark file as private links
1027 - Import: Importing a bookmark file will not overwrite existing links anymore
1028 - Export: New options to export only public or private links
1029
1030 ### Changed
1031 - In tag autocomplete, tags are presented in use order
1032   (most used tags first, instead of alphabetical order)
1033 - RSS Feed can now be filtered by tags or fulltext search. Just add to the feed url:
1034   - `&searchtags=minecraft+video` for tag filtering
1035   - `&searchterm=portal` for fulltext search to the feed url
1036
1037
1038 ## [v0.0.12beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1039 ### Added
1040 - Add a check that the config file was properly created
1041   (in case Shaarli does not have the write rights in its folder)
1042 - Open Shaarli: there is an option to open your Shaarli to anyone.
1043   Anybody will be able to add/edit/delete links without having to login.
1044   In code, change `define('OPEN_SHAARLI',false);` to `true`.
1045   Note: No anti-spam for the moment. You are warned!
1046 - Autocomplete for tags
1047
1048
1049 ## [v0.0.11beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1050 ### Added
1051 - Add a check and a warning for some hosts which still have `magic_quotes` activated
1052
1053
1054 ## [v0.0.10beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1055 ### Added
1056 - Get rid of `&quot;` in titles
1057
1058
1059 ## [v0.0.9beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1060 ### Added
1061 - Now works on hosts `free.fr` and `1and1`
1062 - Now works with PHP 5.1
1063 - PHP version is now checked and an error message is displayed if version is not correct
1064
1065 ### Fixed
1066 - No more error messages if the browser does not send `HTTP_REFERER`
1067 - No more error messages if the host has disabled http protocol in PHP config (eg. 1and1)
1068
1069
1070 ## [v0.0.8beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1071 ### Changed
1072 - In RSS feed, GUID content replaced with the URL of the link, because some
1073   stupid RSS reader (like Google Reader) use `<guid>` as a link instead of using `<link>`
1074
1075
1076 ## [v0.0.7beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-09-16
1077 First public release by Sebsauvage, see original article:
1078 [Adieu Delicious, Diigo et StumbleUpon. Salut Shaarli !](http://sebsauvage.net/rhaa/index.php?2011/09/16/09/29/58-adieu-delicious-diigo-et-stumbleupon-salut-shaarli-) (FR)