]> git.immae.eu Git - github/shaarli/Shaarli.git/blob - CHANGELOG.md
Update CHANGELOG for the next v0.9.x
[github/shaarli/Shaarli.git] / CHANGELOG.md
1 # Change Log
2 All notable changes to this project will be documented in this file.
3
4 The format is based on [Keep a Changelog](http://keepachangelog.com/)
5 and this project adheres to [Semantic Versioning](http://semver.org/).
6
7 ## [v0.9.4](https://github.com/shaarli/Shaarli/releases/tag/v0.9.4) - UNPUBLISHED
8 ### Added
9 - Enable translations: Shaarli is now also available in French. Other language translations are welcome!
10 - Add EditorConfig configuration
11 - Add favicons for mobile devices
12 - Add Alpine Linux arm32v7 Dockerfiles (master, latest)
13
14 ### Changed
15 - Do not write bookmark edition history during file imports (performance)
16 - Migrate Docker images (master, latest) to Alpine Linux
17 - Improve unitary tests and code coverage
18 - Improve thumbnail display
19 - Improve theme ergonomics
20 - Improve messages if there is no plugin or parameter available in the admin page
21 - Increase buffer size for cURL download
22 - Force HTTPS if the original port is 443 behind a reverse proxy (workaround)
23
24 ### Removed
25 - Remove redirector setting from Configure page
26
27 ### Fixed
28 - Fix broken links in the documentation
29 - Enable access to `data/user.css` (Apache 2.2 & 2.4)
30 - Don't URL encode description links if parameter `redirector.encode_url` is set to false
31 - Fix an issue preventing the Save button to appear for plugin parameters
32
33
34 ## [v0.9.3](https://github.com/shaarli/Shaarli/releases/tag/v0.9.3) - 2018-01-04
35 **XSS vulnerability fixed. Please update.**
36
37 ## Security
38 - Fix an XSS (cross-site-scripting) vulnerability in `index.php` -
39 [CVE-2018-5249](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5249)
40
41
42 ## [v0.9.2](https://github.com/shaarli/Shaarli/releases/tag/v0.9.2) - 2017-10-07
43
44 **Major security issue fixed. Please update.**
45
46 ### Added
47 - Tag search now supports wildcards `*`
48 - New setting `privacy.force_login` which can be used with `privacy.hide_public_links` to redirect anonymous users to the login page.
49 - New setting `general.default_note_title` used to override default `Note:` title prefix for notes.
50 - Add a version hash for asset loading to prevent browser's cache issue
51
52 ### Changed
53 - The "Remember me" checkbox is unchecked by default
54 - The default value of the "Remember me" checkbox can be configured under `data/config.json.php`
55
56 ### Removed
57 - Remove obsolete PHP magic quote support
58
59 ### Fixed
60 - Generates a permalink URL if the URL is set to blank
61 - Replace links to the old GitHub wiki with ReadTheDocs URIs
62 - Use single quotes in the note bookmarklet
63 - Daily page if there is no link
64 - Bulk link deletion with a single link
65 - HTTPS detection behind a reverse proxy
66 - Travis tests environment and localization
67 - Improve template paths robustness (trailing slash)
68 - Robustness: safer gzinflate/zlib usage
69 - Description links parsing with parenthesis (without Markdown)
70 - Templates:
71 - Sort the tag cloud alphabetically
72 - Firefox social title
73 - Improved visited link color
74 - Fix jumpy textarea with long content in post edit
75
76 ### Security
77
78 - Fixed reflected XSS vulnerability introduced in v0.9.1, discovered by @chb9 ([CVE-2017-15215](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15215)).
79
80
81 ## [v0.9.1](https://github.com/shaarli/Shaarli/releases/tag/v0.9.1) - 2017-08-23
82
83 The documentation has been migrated to ReadTheDocs:
84 - https://shaarli.readthedocs.io/
85 - edits are submitted as pull requests
86
87 ### Added
88 - Allow bulk link deletion
89 - Display subtags in the tag cloud
90 - Add an endpoint to refresh the token
91 - Add a token on every page
92 - Add a tag list view for management
93 - Add Note bookmarklet
94 - Add creation date when editing a link
95
96 ### Changed
97 - Documentation:
98 - Generate static HTML documentation with [mkdocs](http://www.mkdocs.org/)
99 - Host documentation on [ReadTheDocs](http://www.mkdocs.org/)
100 - Update documentation structure
101 - Update Makefile targets to:
102 - Build the docs locally
103 - Include the generated docs in the release archives
104 - Theme:
105 - Use the new theme as the default
106 - Rename the tag cloud template to `tag.cloud.html`
107 - Display visited links in grey
108 - Use only one search form in `linklist.html`
109 - Hide the "search links with these tags" option when an empty `searchtags` is passed to `tag.list.html`
110 - Improve HTTP header handling when hosting Shaarli with Docker behind a reverse proxy
111 - Searching for tags with an empty value returns untagged links only
112 - Set Travis environment to `precise` until the new `trusty` environment is ready
113
114 ### Removed
115 - Remove dead Pubsubhubbub code
116 - Disable the GitHub wiki (see changed/documentation)
117 - Remove Docker `dev` image and resources
118 - Theme:
119 - Remove the bottom "Sort by" menu in `tag.list.html`
120
121 ### Fixed
122 - Fix file existence check for `user.css`
123 - Limit selection to 2k characters when using the bookmarklet
124 - Fix JS error `uncaught type error`
125 - Fix Firefox Social button
126 - Use pinned PHP dependencies when generating release archives
127 - Make sure that the tag exists before altering/removing it
128
129 ### Security
130 - Add a whitelist for protocols for URLs
131
132
133 ## [v0.9.0](https://github.com/shaarli/Shaarli/releases/tag/v0.9.0) - 2017-05-07
134
135 This release introduces the REST API, and requires updating HTTP server
136 configuration to enable URL rewriting, see:
137 - https://shaarli.github.io/api-documentation/
138 - https://shaarli.readthedocs.io/en/master/Server-configuration/
139
140 **WARNING**: Shaarli now requires PHP 5.5+.
141
142 ### Added
143 - REST API v1
144 - [Slim](https://www.slimframework.com/) framework
145 - [JSON Web Token](https://jwt.io/introduction/) (JWT) authentication
146 - versioned API endpoints:
147 - `/api/v1/info`: get general information on the Shaarli instance
148 - `/api/v1/links`: get a list of shaared links
149 - `/api/v1/history`: get a list of latest actions
150 Theming:
151 - Introduce a new theme
152 - Allow selecting themes/templates from the configuration page
153 - New/Edit link form can be submitted using CTRL+Enter in the textarea
154 - Shaarli version is displayed in the footer when logged in
155 - Add plugin placeholders to Atom/RSS feed templates
156 - Add OpenSearch to feed templates
157 - Add `campaign_` to the URL cleanup pattern list
158 - Add an AUTHORS file and Makefile target to list authors from Git commit data
159 - Link imports are now logged in `data/` folder, and can be debug using `dev.debug=true` setting.
160 - `composer.lock` is now included in git file to allow proper `composer install`
161 - History mechanism which logs link addition/modification/deletion
162
163 ### Changed
164 - Docker: enable nginx URL rewriting for the REST API
165 - Theming:
166 - Move `user.css` to the `data` folder
167 - Move default template files to a subfolder (`default`)
168 - Rename the legacy theme to `vintage`
169 - Private only filter is now displayed as a search parameter
170 - Autocomplete: pre-select the first element
171 - Display daily date in the page title (browser title)
172 - Timezone lists are now passed as an array instead of raw HTML
173 - Move PubSubHub to a dedicated plugin
174 - Coding style:
175 - explicit method visibility
176 - safe boolean comparisons
177 - remove unused variables
178 - The updater now keeps custom theme preferences
179 - Simplify the COPYING information
180 - Improved client locale detection
181 - Improved date time display depending on the locale
182 - Partial namespace support for Shaarli classes
183 - Shaarli version is now only present in `shaarli_version.php`
184 - Human readable maximum file size upload
185
186
187 ### Removed
188 - PHP < 5.5 compatibility
189 - ReadItYourself plugin
190
191 ### Fixed
192 - Ignore generated release tarballs
193 - Hide default port when behind a reverse proxy
194 - Fix a typo in the Markdown plugin description
195 - Fix the presence of empty tags for private tags and in search results
196 - Fix a fatal error during the install
197 - Fix permalink image alignment in daily page
198 - Fix the delete button in `editlink`
199 - Fix redirection after link deletion
200 - Do not access LinkDB links by ID before the Updater applies migrations
201 - Remove extra spaces in the bookmarklet's name
202 - Piwik plugin: Piwik URL protocol can now be set (http or https)
203 - All inline JS has been moved to dedicated JS files
204 - Keep tags after login redirection
205
206 ### Security
207 - Markdown plugin: escape HTML entities by default
208
209
210 ## [v0.8.5](https://github.com/shaarli/Shaarli/releases/tag/v0.8.5) - 2018-01-04
211 **XSS vulnerability fixed. Please update.**
212
213 ## Security
214 - Fix an XSS (cross-site-scripting) vulnerability in `index.php` -
215 [CVE-2018-5249](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5249)
216
217 ## [v0.8.4](https://github.com/shaarli/Shaarli/releases/tag/v0.8.4) - 2017-03-04
218 ### Security
219 - Markdown plugin: escape HTML entities by default
220
221 ## [v0.8.3](https://github.com/shaarli/Shaarli/releases/tag/v0.8.3) - 2017-01-20
222 ### Fixed
223 - PHP 7.1 compatibility: add ConfigManager parameter to anti-bruteforce function call in login template.
224
225 ## [v0.8.2](https://github.com/shaarli/Shaarli/releases/tag/v0.8.2) - 2016-12-15
226 ### Fixed
227
228 - Editing a link created before the new ID system would change its permalink.
229
230 ## [v0.8.1](https://github.com/shaarli/Shaarli/releases/tag/v0.8.1) - 2016-12-12
231
232 > Note: this version will create an automatic backup of your database if anything goes wrong.
233
234 ### Added
235 - Add CHANGELOG.md to track the whole project's history
236 - Enable Composer cache for Travis builds
237 - Save the last edition date for shaares and use it in Atom/RSS feeds
238 - Plugins:
239 - Add an [Isso](https://posativ.org/isso/) plugin to enable user comments on permalinks
240 - Allow defining init functions, e.g. for performing checks and error processing
241 - Add a Piwik plugin for analytics.
242 - Markdown: add warning notice regarding HTML rendering
243 - Meta tag to *not* send the referrer to external resources.
244
245 ### Changed
246 - Link ID complete refactoring:
247 - Links now have a numeric ID instead of dates
248 - Short URLs are now created once and can't change over time (previous URL are kept)
249 - Templates:
250 - Changed placeholder behaviour for: `buttons_toolbar`, `fields_toolbar` and `action_plugin`
251 - Cleanup `{loop}` declarations in templates
252 - Tools: hide Firefox Social button when not in HTTPS
253 - Firefox Social: show Shaarli's title when shaaring using Firefox Social
254 - Release archives now have the same structure as GitHub-generated archives:
255 - archives contain a `Shaarli` directory, itself containing sources + dependencies
256 - the tarball is now gzipped
257 - Plugins:
258 - Markdown: Parsedown library is now imported through Composer
259 - Minor code cleanup: PHPDoc, spelling, unused variables, etc.
260 - Docker: explicitly set the maximum file upload size to 10 MiB
261
262 ### Fixed
263 - Fix the server `<self>` value in Atom/RSS feeds
264 - Plugins:
265 - Tools: only display parameter description when it exists
266 - archive.org: do not propose archival of private notes
267 - Markdown:
268 - render links properly in code blocks
269 - bug regarding the `nomarkdown` tag
270 - W3C compliance
271 - Use absolute URL for hashtags in RSS and ATOM feeds
272 - Docker: specify the location of the favicon
273 - ATOM feed: remove new line between content tag and data
274
275 ### Security
276 - Allow whitelisting trusted IPs, else continue banning clients upon login failure
277
278
279 ## [v0.8.0](https://github.com/shaarli/Shaarli/releases/tag/v0.8.0) - 2016-10-12
280 Shaarli now uses [Composer](https://getcomposer.org/) to handle its dependencies.
281 Please use our release archives, or follow the
282 [installation documentation](https://github.com/shaarli/Shaarli/wiki/Download-and-Installation).
283
284 ### Added
285 - Composer is required to resolve Shaarli's PHP dependencies
286 - Shaarli now supports `#hashtags`
287 - Firefox social share now uses selected text as a description
288 - Plugin parameters can have a description in each plugin's `.meta` file
289
290 ### Changed
291 - Configuration is now stored as a JSON file
292 - Previous configuration format will be automatically updated (PHP -> JSON)
293 - Shaarli now defaults to cURL to fetch shaare titles
294 - URL cleanup: remove `PHPSESSID` parameter
295 - `nomarkdown` tag is no longer private, and now affects visitors
296 - Cleanup template indentation
297 - Rewrite bookmark import using a generic Netscape parser
298
299 ### Removed
300 - Shaarli no longer references Delicious in its description
301
302 ### Deprecated
303 - Shaarli configuration is not held as PHP globals anymore
304
305 ### Fixed
306 - Ignore case for tags in autocompletion and cloud tag
307 - Avoid generating empty tags
308 - Fix a Dockerfile syntax error
309
310 ### Security
311 - Fixed a bug preventing to change password
312 - XSRF token now generated each time a page is rendered
313
314
315 ## [v0.7.1](https://github.com/shaarli/Shaarli/releases/tag/v0.7.1) - 2017-03-08
316 ### Security
317 - Markdown plugin: escape HTML entities by default
318
319 ## [v0.7.0](https://github.com/shaarli/Shaarli/releases/tag/v0.7.0) - 2016-05-14
320 ### Added
321 - Adds an option to encode redirector URL parameter
322 - Atom/RSS feeds now support Markdown formatting, and plugins in general
323 - Markdown: use the tag `.nomarkdown` to avoid markdown processing
324 - Prefill the login field when the authentication has failed
325 - Show a private links counter
326
327 ### Changed
328 - Allow to use the bookmarklet in Firefox reader view (URL clean up)
329 - Improve tagcloud font size
330 - Improve title retrieving
331 - Markdown: inline code background color
332 - Refactor Netscape bookmark export
333 - Refactor Atom/RSS feed generation
334
335 ### Removed
336 - Remove delicious from Shaarli description
337
338 ### Fixed
339 - Fix bad login redirections causing a 404 in a few cases
340 - Fix tagcloud font-size with French locale
341 - Don't display empty tags in tag search
342 - Fix Awesomeplete conflicts with jQuery
343 - Fix UTC timezone selection
344 - Fix a bug preventing to import notes in browsers from bookmarks export
345 - Don't redirect to ?post if ?addlink is reached while logged out
346
347
348 ## [v0.6.5](https://github.com/shaarli/Shaarli/releases/tag/v0.6.5) - 2016-03-02
349 ### Fixed
350 - Fixes a regression generating an unnecessary warning (language in HTTP request)
351 - Fixes a bug where going through multiple reverse proxy could generate malformed URL
352 - Markdown: Fixes a bug where empty description blocks were displayed
353
354
355 ## [v0.6.4](https://github.com/shaarli/Shaarli/releases/tag/v0.6.4) - 2016-02-28
356 ### Added
357 - Add an updater class to automate user data upgrades
358 - Plugin admin page: adds a label for checkboxes and improve name display
359 - Plugin Wallabag: API version can be specified in plugin admin page
360
361 ### Changed
362 - Better tag cloud sorting, including special chars (`a > E > é > z`)
363 - Autolocale now sets all locale categories, not just time
364 - Use PHP's DateTime object instead of custom functions
365 - Plugin hooks: process includes before header/footer
366 - Markdown plugin: better styles for `<code>` and `<pre>` tags
367 - Improve searching:
368 - search terms are now considered separated and won't only return exact results anymore
369 - exact search can be done with quotes `"this exact sentence"`
370 - search supports excluded terms starting a dash `-exclude`
371 - implement crossed search: terms + tags
372 - all of them combined across all shaare fields
373 - New tag behaviour:
374 - tags starting with a dash will be renamed without it
375 - tags starting with a dot `.` will be hidden unless the user is logged in
376
377 ### Fixed
378 - Fix Markdown plugin escape issues (code/quote blocks, etc.)
379 - Link description aren't trimmed anymore to allow markdown format at the beginning of a shaare
380 - Fixes plugin admin redirection page on error
381
382 ### Security
383 - Fix a bug where non initialized variables were causing a warning
384 - Fix a bug where saving a link after edit could cause a 404 error
385
386
387 ## [v0.6.3](https://github.com/shaarli/Shaarli/releases/tag/v0.6.3) - 2016-01-31
388 ### Added
389 - Plugins administration page
390 - Markdown plugin added for shaares description
391 - Docker: Dockerfile is now in the main git repository and improved
392 - Add a `.gitattributes` to ease repository management
393 - Travis: include file permission checks
394
395 ### Changed
396 - Auto retrieve of title know works with websites (HTTPS, follow redirections, etc.)
397 - 404 page is now handled in a template
398 - Date in log files updated to work with fail2ban
399 - Wallabag: support of Wallabag v2 and minor fixes
400 - Link search refactoring
401 - Logging function refactoring
402
403 ### Fixed
404 - Fix a bug where renaming a tag was causing a 404
405 - Fix a bug allowing to search blank terms
406 - Fix a bug preventing to remove a tag with special chars when searching
407
408
409 ## [v0.6.2](https://github.com/shaarli/Shaarli/releases/tag/v0.6.2) - 2015-12-23
410 ### Changed
411 - Plugins: new footer hook
412 - Plugins: improve QR code
413 - Cleanup templates
414
415 ### Fixed
416 - Plugins: use the actual link URL to generate QR codes
417 - Templates: missing/erroneous page titles
418 - Templates: missing variables resulting in PHP errors
419
420 ### Security
421 - Fix invalid file permissions (remove executable bit)
422
423
424 ## [v0.6.1](https://github.com/shaarli/Shaarli/releases/tag/v0.6.1) - 2015-12-01
425 ### Added
426 - Add OpenSearch support
427 - Add a Doxygen makefile target
428 - Tools: add fine-grained file/directory permission checks (installation)
429
430 ### Changed
431 - Tools: check the 'stable' branch for new versions (updates)
432 - Cleanup: introduce an `ApplicationUtils` class
433
434 ### Removed
435 - Cleanup: remove `json_encode()` function (built-in since PHP 5.2)
436
437 ### Fixed
438 - Auto-complete more than one tag
439 - Bookmarklet: support titles containing quotes
440 - URL encode links when setting a redirector
441
442
443 ## [v0.6.0](https://github.com/shaarli/Shaarli/releases/tag/v0.6.0) - 2015-11-18
444 ### Added
445 - Introduce a plugin system
446 - Add a demo_plugin
447 - Add plugins:
448 - addlink_toolbar
449 - archiveorg
450 - playvideos
451 - qrcode
452 - readityourself
453 - wallabag
454
455 ### Changed
456 - Coding style
457
458 ### Fixed
459 - Adding a new link now returns the correct anchor in the URL
460 - Set default file permissions
461
462
463 ## [v0.5.4](https://github.com/shaarli/Shaarli/releases/tag/v0.5.4) - 2015-09-15
464 ### Added
465 - HTTPS: support being served behing an SSL-enabled proxy
466
467 ### Changed
468 - HTTP/Server utilities: refactor & add test coverage
469 - Project & documentation:
470 - improve/rewrite `README.md`
471 - update contributor list
472 - update `index.php` header
473
474 ### Fixed
475 - PHP session IDs: handle hash algorithms and bits per char representations
476
477
478 ## [v0.5.3](https://github.com/shaarli/Shaarli/releases/tag/v0.5.3) - 2015-09-02
479 ### Fixed
480 - Fix a bug that could prevent user to login
481
482
483 ## [0.5.3](https://github.com/shaarli/Shaarli/releases/tag/0.5.3) - 2015-09-02
484 This release has been YANKED as it points to a tag that does not follow our naming convention. Please use `v0.5.3` instead
485
486 ### Fixed
487 - Allow uppercase letters in PHP sessionid format
488
489
490 ## [v0.5.2](https://github.com/shaarli/Shaarli/releases/tag/v0.5.2) - 2015-08-31
491 ### Added
492 - Add PHP 7 to Travis platforms
493
494 ### Changed
495 - Also extract HTTPS page metadata (title)
496
497 ### Fixed
498 - Fix regression preventing to load LinkDB info when adding an existing link
499
500 ### Security
501 - Fix Full Path Disclosure upon cookie forgery
502
503
504 ## [v0.5.1](https://github.com/shaarli/Shaarli/releases/tag/v0.5.1) - 2015-08-17
505 ### Added
506 - Add a link to the shaarli/shaarli DockerHub repository
507
508 ### Changed
509 - Update local documentation
510 - Improve timezone detection at installation
511 - Improve feed cache handling
512 - Improve URL cleanup for new links
513
514 ### Fixed
515 - Fix 404 after editing a link while being logged out
516
517
518 ## [v0.5.0](https://github.com/shaarli/Shaarli/releases/tag/v0.5.0) - 2015-07-31
519 ### Added
520 - Add Firefox Social API
521 - Start code refactoring:
522 - add unit test coverage
523 - add Travis integration
524
525 ### Changed
526 - Search/Filter by tag fieds can now be accessed quickly with the `Tab` key
527 - Update documentation
528 - Remove duplicate tags in links
529 - Remove annoying URL patterns
530 - Start code refactoring:
531 - move all settings to `data/config.php`
532 - refactor Config, LinkDB, TimeZone, Utils
533
534 ### Fixed
535 - Fix locale handling
536 - Fix note URLs
537 - Fix page redirections
538 - Fix daily RSS browsing
539 - Fix title display
540 - Restore compatibility with PHP 5.3
541
542 ### Security
543 - Fix links not being hidden when `HIDE_PUBLIC_LINKS` is set
544
545
546 ## [v0.0.45beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.45beta) - 2015-03-16
547 ### Fixed
548 - Fix improperly displayed Unicode character
549 - Fix incorrect font size for "Add link" input field
550
551
552 ## [v0.0.44beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.44beta) - 2015-03-15
553 ### Added
554 - Add a Makefile to run static code checkers
555 - Add local documentation (help link in page footer)
556 - Use awesomplete library for autocompletion
557 - Use bLazy.js library for images lazy loading
558 - New 'Add Note' bookmarklet to immediatly open a note (text post) compose window
559
560 ### Changed
561 - Theme improvements and cleanup (menu, search fields, icons, linklist...)
562 - Allow 'javascript:' links sharing (bookmarklets)
563 - Make update check optional
564 - Redirect to homepage after adding a link via "Add Link" dialog
565 - Remove more annoying URL parameters for shared links
566 - Code cleanup
567
568 ### Removed
569 - Remove jQuery
570
571 ### Security
572 - Don't disclose version to visitors (shaarli-version.txt)
573
574
575 ## [v0.0.43beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.43beta) - 2015-02-20
576 ### Added
577 - Title button link URL is now configurable
578 - RainTPL's TMP and TPL directories path are now configurable
579 - Displayed URLs for each link are now clickable links
580 - Show links timestamps in Daily view
581
582 ### Changed
583 - Automatically prepend "Note:" to title of self-posts (posts not pointing to an URL)
584 - Make ATOM toolbar button optional (`SHOW_ATOM` configuration variable)
585 - Optional archive.org links for each Shaarli link (`ARCHIVE_ORG` option)
586 - Thumbnails: force HTTPS when possible
587 - Improve tag cloud font scaling
588 - Allow pointing RSS items to the permalink instead of the direct URL (`ENABLE_RSS_PERMALINKS` option)
589 - Update JS libraries and add version numbers in filenames
590 - Updates to README and footer
591
592 ### Fixed
593 - Fix problems when running Shaarli behind a reverse proxy (invalid RSS feed URL)
594 - Update check now checks against the community fork version
595 - Include `cache/`, `data/`, `pagecache/` and `tmp/` directories in the repository
596 - Fix duplicate tag search returning no results
597 - Fix unnecessary 404 error on "Add link" when the user is logged out
598 - Fixes to copyright/licensing information and unlicensed media
599 - Fixes for tag cloud invalid links
600 - Coding style fixes/cleanup
601 - Fix redirection after deleteing a link leading to a 404 error
602 - Shaarli's HTML is now W3C-compliant
603 - Search now works with Unicode characters
604
605 ### Security
606 - Do not leak server's PHP version and Shaarli's full path on errors
607 - Prevent Shaarli from sending a lot of duplicate cookies
608
609
610 ## [v0.0.42beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.42beta) - 2014-07-27
611 ### Added
612 - Add QRCode Javascript library
613 - Allow importing bookmarks with the same timestamp (hack)
614 - Allow putting a description in the bookmarklet URL
615 - Add `json_encode()` implementation for PHP<5.2
616 - Highlight search results
617
618 ### Changed
619 - Improve 'Stay signed in' behaviour
620 - Improve `smallHash()`
621 - Refactor QRCode generation
622 - Update Javascript lazyloading
623 - Update CSS
624
625 ### Removed
626 - Remove jQuery from almost all pages
627
628 ### Fixed
629 - Fix overlapping tags
630 - Fix field foxus in the bookmarklet
631 - Fix error message when `data/` is not writable
632 - Fix HTML generation
633
634 ### Security
635 - Fix XSS flaw
636
637
638 ## [v0.0.41beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.41beta) - 2013-03-08
639 ### Added
640 - Add HTTPS to the allowed protocols
641 - Add support for magnet links in link descriptions
642 - Allow creating new links as private by default
643 - Allow disabling jQuery
644 - Check write permissions
645 - Check session support before installation
646
647 ### Changed
648 - Improve token security
649 - RSS feed: allow inverting links/permalinks
650
651 ### Fixed
652 - Fix display issues during installation
653 - Fix popup redirection after login failure
654 - Fix RSS formatting for Thunderbird
655 - Fix thumbnail creation
656 - Fix cache purge
657
658 ### Security
659 - Fix login issue with WebKit browsers
660
661
662 ## [v0.0.40beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.40beta) - 2013-02-26
663 Initial release on GitHub.
664
665
666 ## [v0.0.40beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-08-24
667 ### Added
668 - Flickr thumbnail now also support albums, galleries and users
669 - Add a configuration option to disable session cookie protection
670 Check this if your get disconnected often or your IP address changes often
671
672 ### Removed
673 - Removed the xml comment in cached RSS/ATOM feed
674 (although W3C-compliant, this may cause problems in some feed readers)
675
676 ### Fixed
677 - A bug in the RSS cache would present old items as new in some cases
678 - A small bug (non-initialized variable) in page cache cleaning
679 - Proper "Nothing found" message when search returns no results
680 - No more 404 error when searching with empty input
681 - Flickr thumbnails are back (Flickr has made some changes to their domains)
682
683 ## [v0.0.39beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-08-10
684 ### Added
685 - A cache for RSS feed, ATOM feed and Daily RSS feed, because these URLs
686 are massively hammered. Cache is automatically purged whenever the database
687 is changed. This will reduce server load. I may add cache to other pages later.
688
689 ### Changed
690 - No more global `$LINKSDB` (Yuk)
691 - Background color was removed when hovering a link
692
693 ### Fixed
694 - Small bug corrected in config screen on timezones
695 - Calling a non-existing permalink now returns a crude 404 error instead of 200 (OK)
696 This is done on purpose
697 - The `shaarli` session cookie now has a proper path
698 Thus you can now install several Shaarlis on the same server in different paths,
699 and each will have its session
700 - Now when you delete a link, you go back the same page/search parameters you were on
701 - Restore previously removed `error_get_last()`, to ensure PHP 5.1 compatibility
702 (Yes, now it works on free.fr hosting)
703 - Added `dialog=1` in bookmarklet code for some browsers
704
705
706 ## [v0.0.38beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-02-06
707 ### Added
708 - Automatic creation of the `tmp` directory with proper rights (for RainTPL)
709 - When you click the key to see only private links, it turns yellow
710
711 ### Changed
712 - The "Daily" page now automatically skips empty days.
713
714 ### Fixed
715 - Corrected the tag encoding (there was a bug when selecting a second tag which contains accented characters)
716
717
718 ## [v0.0.37beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-02-01
719 ### Added
720 - Basic CSS for mobiles, which makes Shaarli //much// more usable on mobile devices
721 - Picture wall no more instantly kills your browser. Now it uses
722 [lazy image loading](http://www.appelsiini.net/projects/lazyload);
723 the pictures are loaded only as you scroll the page.
724 This will reduce browser memory usage (especially on mobile devices),
725 as well as server load.
726 If you have javascript disabled, the page will still work as before
727 (all images loaded at once)
728 - RSS feed for the "Daily" page. 1 RSS entry per day, with all links of that day.
729 RSS feed provides the last 7 days (only non-empty days are returned).
730 - In link list, added an icon to see only private links. Click to toggle (only private / all)
731
732
733 ## [v0.0.36beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
734 ### Added
735 - Shaarli licence in COPYING
736
737 ### Changed
738 - Display adjustments in "Daily" page
739
740 ### Fixed
741 - Improper text color in install form
742 - Error in QRCode url (missing '?')
743
744
745 ## [v0.0.35beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
746 ### Fixed
747 - Corrected a bug introduced in 0.0.34 which would improperly preprend data to URLs
748
749
750 ## [v0.0.34beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
751 ### Added
752 - There is now a QR-Code of each permalink to easily open a link on your smartphone
753 - Protocols `file:` and `apt:` are now also converted to clickable links (patch by Francis Chavanon)
754 - Thumbnail support for http://xkcd.com/ (patch by Emilien Klein)
755 - Thumbnail support for http://pix.toile-libre.org/
756 - Well I had _some_ mercy for users with antique browsers (IE) which do not have
757 support for gradients: I added a few `background-color`
758 - First version of the "Shaarli Daily", a page showing all links of a specific day.
759 By default, you see the links of the previous day.
760 There is still work to do on this page (error checking, better navigation (calendar?),
761 RSS feed, CSS for mobile and printing...)
762
763 ### Changed
764 - Upgraded bundled versions of jQuery (1.7.1) and jQuery UI (1.8.17)
765 - Upgraded bundled version of RainTPL (2.7)
766 - Changed HTTPS detection code
767
768 ### Fixed
769 - In link edition, you can now click the word "Private" to check the box
770 - Clicking a tag would not work properly if the tag contained special characters (like +)
771 - Added proper jQuery licence (shame on me)
772
773
774 ## [v0.0.33beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-17
775 ### Added
776 - Shaarli packaged to ease Linux distributions integration
777 As a simple user, you do not need to cope with these versions
778 Future releases of Shaarli will also be customized and published in these directories
779 Differences with the standard Shaarli version:
780 - deb:
781 - .tar.gz instead of .zip
782 - COPYING licence file added
783 - jQuery/jQuery-UI libraries removed to cope with Debian rules
784 This version links to the libs hosted at http://code.jquery.com
785 - rpm:
786 - sources located in a subdirectory with the same name as the zip file
787 - COPYING licence file added
788 - WARNING: When downloading the .tar.gz, always use wget (and not your browser),
789 otherwise the .tar.gz will be corrupted
790
791 ### Fixed
792 - ATOM feed validates again
793
794 ### Security
795 - XSS vulnerability patched (thanks to Stanislas D.!)
796
797
798 ## [v0.0.32beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-12-16
799 ### Added
800 - Better check on URL parameters (patch by gege2061)
801 - Add `max-height` and `overflow:auto` attributes so that content can be scrolled if too large
802
803 ### Changed
804 - HTML generation moved to RainTPL templates (in the `tpl/` directory)
805 - Better detection of HTTPS (patch by gege2061)
806 - In RSS/ATOM feeds, the GUID is now the permalink instead of the final URL (patch by gege2061)
807 - Jerrywham CSS patch included
808 - Multiple spaces are now respected in description.
809 Thus you can use Shaarli as a personal pastebin (for posting source code, for example).
810
811 ### Removed
812 - Page time generation was removed
813
814 ### Fixed
815 - Tab order changed in login screen
816 - Permalinks now work even if additional parameters have been added
817 (e.g. `/?E8Yj2Q&utm_source=blablabla...`)
818 - user.css is included only if the file is present
819 (This prevents a useless CSS include which makes a harmless but useless 404 error.)
820
821
822 ## [v0.0.31beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-29
823 ### Added
824 - Support for TED Talks (ted.com/talks) thumbnails (patch by Emilien K.)
825 - partial [patch](http://www.idleman.fr/blog/?p=508) by Idleman: Better design consistency, icon on private links. In-page popup was not included because it causes problem on some websites
826 - Support for bookmark files without ADD_DATE attributes
827 - Logo is clickable
828 - `user.css` can be added to overload Shaarli base CSS.(patch by Jerrywham).
829 Just put `user.css` in the same directory as shaarli.css.
830 Example: `<code css>#pageheader { background: blue; }</code>`
831 Please note that Shaarli CSS are not stable and may completely change on each version
832
833 ### Changed
834 - Edit and Delete buttons in link list were replaced with icons. (patch by Jerrywham)
835
836 ### Fixed
837 - Better error handling in thumbnail generation (patch by Emilien K.)
838 - The top menu is no longer displayed in bookmarklet popup
839 - Bookmark which have the exact same date/time are now correctly imported.
840 Most remaining import problems should be solved now
841 - Comment in Shaarli export moved to beginning of file to prevent clash with last link description
842
843
844 ## [v0.0.30beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-18
845 ### Added
846 - Add a small `delete` button in link list (after the `edit` button)
847
848 ### Fixed
849 - Moved the call to PubSubHub
850
851
852 ## [v0.0.29beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-18
853 ### Fixed
854 - Corrected a bug introduced in v0.0.28beta
855 (there was an error if you use the bookmarklet and you're not logged in)
856
857
858 ## [v0.0.28beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-17
859 ### Added
860 - Thumbnail support for youtu.be URLs (YouTube short url service)
861 - PubSubHub protocol support (from http://aldarone.fr/les-flux-rss-shaarli-et-pubsubhubbub/).
862 Warning: This was not tested. You need to set your hub url in
863 `$GLOBALS['config']['PUBSUBHUB_URL']` and put the official client (`publisher.php`)
864 in the same directory as Shaarli's `index.php`
865 - RSS and ATOM feeds now also contain tags (in `category` tags, as per their
866 respective specifications)
867
868 ### Changed
869 - New Shaarli theme and logo by Idle (http://www.idleman.fr/blog/?p=469)
870 - In picture wall, pictures point to Shaarli permalink instead of final URL.
871 This way, users can read the description.
872 - In RSS/ATOM feeds, guid and link URL of permalinks are now proper absolute URLs
873 - In RSS/ATOM feeds, URLs are now clickable
874 - Rename `http_parse_headers()` to `http_parse_headers_shaarli()` to prevent
875 name collision with some PHP extensions
876
877 ### Fixed
878 - Thumbnails removed for imgur.com/a/ URLs (Thumbnails are not available for albums on imgur)
879 - Shaarli now correctly only tries to get thumbnails for vimeo video URLs
880 - Fix a bug in imgur.com URLs handling that would cause some thumbnails not to appear
881 - The search engine would not return a result if the word to search was the first in description
882 - Extracted title is now correct if the page has two `title` html tags
883
884
885 ## [v0.0.27beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-18
886 ### Added
887 - Add a picture wall, which can be filtered too: it will use the same filters
888 (tags,text search) as current page when clicked.
889
890
891 ## [v0.0.26beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-17
892 ### Changed
893 - Made permalink more visible (smallHash)
894
895 ### Fixed
896 - Removed extras space in description when URLs are converted to clickable links
897 - Thumbnail for subreddit imgur urls (/r/...) were corrected (thanks to Accent Grave)
898
899
900 ## [v0.0.25beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-13
901 ### Added
902 - Better CSS for printing (thanks to jerrywham suggestion)
903 - Allow using a redirector or anonymizing proxy for links
904 (such as `http://anonym.to/?` to mask you `HTTP_REFERER`).
905 Just go to `Tools > Configure > Redirector`
906 (thanks to Accent Grave for the suggestion).
907 - The `ENABLE_LOCALCACHE` option can be set to `false` for those who have
908 a limited quota on their host.
909 This will disable the local thumbnail cache.
910 Services which require the use of the cache will have no thumbnails
911 (vimeo, flickr, direct link to image).
912 Other services will still have a thumbnail (youtube,imgur.com,dailymotion,imageshack.us)
913
914 ### Changed
915 - Now thumbnails generated by Shaarli are croped to a height of 120 pixels
916 - YouTube thumbnails now use `default.jpg` instead of `2.jpg` (This is usually more pertinent)
917 - Configuration options (such as `HIDE_TIMESTAMPS`, `ENABLE_THUMBNAILS`, etc.)
918 can now be put in a an external file so that you do not have to tweak them again
919 when you upgrade Shaarli.
920 Just add the file `data/options.php`.
921 - If a single link is displayed, the page title contains the title of the link
922 - Shaarli page title is clickable (and has the same link as "Home")
923 - A few CSS tweaks (thanks to maethor for suggestion)
924
925 ### Fixed
926 - Shaarli now supports newlines in titles (thanks to dixy)
927 - The link to the RSS feed in page header was not correct
928
929
930 ## [v0.0.24beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
931 ### Added
932 - Allow posting an entry without a link. (You can use Shaarli as a kind of "personal twitter")
933 - Each Shaarli entry now has a short link (just click on the date of a link).
934 Now you can send a link that points to a single entry in your Shaarli
935 - In descriptions, URLs are now clickable
936 - Thumbnails will be generated for all link pointing to .jpg/png/gif
937 (as long as the images are less than 4 Mb and take less than 30 seconds to download)
938
939 ### Fixed
940 - Now thumbnails also work for imgur gallery links (/gallery/...)
941 (Thanks to Accent Grave for the correction)
942 - Removed useless debugging information in log
943 - The filter in RSS/ATOM feed now works again properly (it was broken in 0.0.17beta)
944
945
946 ## [v0.0.23beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
947 ### Added
948 - Added thumbnail support for imageshack.us
949
950 ### Changed
951 - Now you can clic the sentence "Stay signed in" to tick the checkbox (patch by Emilien)
952 - In tag editing, comma (,) are now automatically converted to spaces
953 - In tag editing, autocomplete no longuer suggests a tag you have already entered in the same line
954
955
956 ## [v0.0.22beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
957 ### Added
958 - Support for thumbnails for flickr.com
959 - Allow staying signed in:
960 Your session will be kept open even if you close the browser.
961 This is available through a checkbox in the login screen.
962
963 ### Changed
964 - Some hosts (flickr, vimeo) are slow as hell for the thumbnails,
965 or require an extra HTTP request.
966 For these hosts the thumbnail generation has been deported outside the generation
967 of the page to keep Shaarli snappy.
968 For these slow services, the thumbnails are also cached.
969
970 ### Fixed
971 - Title was not properly passed if you had to login when using the bookmarklet (patch by shenshei)
972
973
974 ## [v0.0.21beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
975 ### Added
976 - Thumbnails for some services
977 Currently supports: YouTube.com, dailymotion.com, vimeo.com (slow!) and imgur.com.
978 Thumbnails are enabled by default, but you can turn them off
979 (set `define('ENABLE_THUMBNAILS',true);` to `false`).
980
981 ### Changed
982 - Removed the focus on the searchbox (this is cumbersome when you want to browse pages
983 and scroll with the keyboard)
984
985
986 ## [v0.0.20beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
987 ### Fixed
988 - RSS feed is now served as `application/rss+xml` instead of `application/xhtml+xml`
989 (which was causing problem in //RSS Lounge//)
990 - ATOM feed is now served as `application/atom+xml` instead of `application/xhtml+xml`
991
992
993 ## [v0.0.19beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
994 ### Added
995 - ATOM feed
996
997 ### Fixed
998 - Patch by Emilien to remove the update notification after the update
999
1000
1001 ## [v0.0.18beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1002 ### Added
1003 - You can now configure the title of your page
1004 - New screen to configure title and timezone
1005
1006 ### Changed
1007 - Nicer timezone selection patch by killruana
1008
1009 ### Fixed
1010 - New lines now appear correctly in the RSS feed descriptions.
1011
1012
1013 ## [v0.0.17beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1014 ### Added
1015 - Change password screen added (based on a patch by killruana)
1016 - Autocomplete in the tag search form
1017 - You can rename or delete a tag in all links
1018 (very handy if you misspelled a tag or want to merge tags)
1019 - When you click the RSS feed, the feed will be filtered with the same filters
1020 as the page you were viewing
1021
1022 ### Changed
1023 - CSS adjustments by jerrywham
1024 - Minor corrections
1025
1026
1027 ## [v0.0.16beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1028 ### Added
1029 - Upgrade notification:
1030 If a new version of Shaarli is available, you will be notified by a discreet
1031 message in top-right corner.
1032 This message will only be visible if you are logged in, and the check will be
1033 performed at most once a day.
1034 - Preliminary tag cloud (ugly for the moment, I need to find something better)
1035
1036 ### Changed
1037 - Replaced `preg_match()` with `version_compare()` to check PHP version
1038 - Includes a patch by Emilien K. to mask dates if user is not logged in.
1039 The option can be activated by changing `define('HIDE_TIMESTAMPS',false);` to `true`
1040
1041
1042 ## [v0.0.15beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1043 ### Added
1044 - New in import: Option to overwrite existing links when importing
1045 - On free.fr, automatic creation of the `/sessions` directory
1046
1047 ### Changed
1048 - CSS Stylesheet is now an external file (shaarli.css).
1049 This reduces page size and eases customization.
1050
1051 ### Removed
1052 - Removed some parameters in URL added by some feed proxies (`#xtor=RSS-...`)
1053
1054 ### Fixed
1055 - Bug corrected: Prevented loop on login screen upon successful login after a failed login
1056 - Bug corrected in import: HTML entities were not properly decoded.
1057 If you imported your Delicious/Diigo bookmarks, your should import them again
1058 and use the 'overwrite' option of the import feature.
1059
1060
1061 ## [v0.0.14beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1062 ### Added
1063 - You no longer need to disable `magic_quotes` on your host.
1064 Shaarli will cope with this option beeing activated.
1065
1066
1067 ## [v0.0.13beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1068 ### Added
1069 - Import: New option to import html bookmark file as private links
1070 - Import: Importing a bookmark file will not overwrite existing links anymore
1071 - Export: New options to export only public or private links
1072
1073 ### Changed
1074 - In tag autocomplete, tags are presented in use order
1075 (most used tags first, instead of alphabetical order)
1076 - RSS Feed can now be filtered by tags or fulltext search. Just add to the feed url:
1077 - `&searchtags=minecraft+video` for tag filtering
1078 - `&searchterm=portal` for fulltext search to the feed url
1079
1080
1081 ## [v0.0.12beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1082 ### Added
1083 - Add a check that the config file was properly created
1084 (in case Shaarli does not have the write rights in its folder)
1085 - Open Shaarli: there is an option to open your Shaarli to anyone.
1086 Anybody will be able to add/edit/delete links without having to login.
1087 In code, change `define('OPEN_SHAARLI',false);` to `true`.
1088 Note: No anti-spam for the moment. You are warned!
1089 - Autocomplete for tags
1090
1091
1092 ## [v0.0.11beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1093 ### Added
1094 - Add a check and a warning for some hosts which still have `magic_quotes` activated
1095
1096
1097 ## [v0.0.10beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1098 ### Added
1099 - Get rid of `&quot;` in titles
1100
1101
1102 ## [v0.0.9beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1103 ### Added
1104 - Now works on hosts `free.fr` and `1and1`
1105 - Now works with PHP 5.1
1106 - PHP version is now checked and an error message is displayed if version is not correct
1107
1108 ### Fixed
1109 - No more error messages if the browser does not send `HTTP_REFERER`
1110 - No more error messages if the host has disabled http protocol in PHP config (eg. 1and1)
1111
1112
1113 ## [v0.0.8beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1114 ### Changed
1115 - In RSS feed, GUID content replaced with the URL of the link, because some
1116 stupid RSS reader (like Google Reader) use `<guid>` as a link instead of using `<link>`
1117
1118
1119 ## [v0.0.7beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-09-16
1120 First public release by Sebsauvage, see original article:
1121 [Adieu Delicious, Diigo et StumbleUpon. Salut Shaarli !](http://sebsauvage.net/rhaa/index.php?2011/09/16/09/29/58-adieu-delicious-diigo-et-stumbleupon-salut-shaarli-) (FR)