]> git.immae.eu Git - github/shaarli/Shaarli.git/blob - CHANGELOG.md
Merge pull request #1076 from ArthurHoaro/changelog-v0.9.5
[github/shaarli/Shaarli.git] / CHANGELOG.md
1 # Change Log
2 All notable changes to this project will be documented in this file.
3
4 The format is based on [Keep a Changelog](http://keepachangelog.com/)
5 and this project adheres to [Semantic Versioning](http://semver.org/).
6
7 ## [v0.10.0](https://github.com/shaarli/Shaarli/releases/tag/v0.10.0) - UNPUBLISHED
8
9 ## [v0.9.5](https://github.com/shaarli/Shaarli/releases/tag/v0.9.5) - 2018-02-02
10 ### Fixed
11 - Fix a warning happening when `php-intl` is not installed on the system
12 - Fix warnings happening when updating from legacy SebSauvage version
13
14 ## [v0.9.4](https://github.com/shaarli/Shaarli/releases/tag/v0.9.4) - 2018-01-30
15 ### Added
16 - Enable translations: Shaarli is now also available in French. Other language translations are welcome!
17 - Add EditorConfig configuration
18 - Add favicons for mobile devices
19 - Add Alpine Linux arm32v7 Dockerfiles (master, latest)
20
21 ### Changed
22 - Do not write bookmark edition history during file imports (performance)
23 - Migrate Docker images (master, latest) to Alpine Linux
24 - Improve unitary tests and code coverage
25 - Improve thumbnail display
26 - Improve theme ergonomics
27 - Improve messages if there is no plugin or parameter available in the admin page
28 - Increase buffer size for cURL download
29 - Force HTTPS if the original port is 443 behind a reverse proxy (workaround)
30 - Improve page title retrieval performances
31
32 ### Removed
33 - Remove redirector setting from Configure page
34
35 ### Fixed
36 - Fix broken links in the documentation
37 - Enable access to `data/user.css` (Apache 2.2 & 2.4)
38 - Don't URL encode description links if parameter `redirector.encode_url` is set to false
39 - Fix an issue preventing the Save button to appear for plugin parameters
40
41
42 ## [v0.9.3](https://github.com/shaarli/Shaarli/releases/tag/v0.9.3) - 2018-01-04
43 **XSS vulnerability fixed. Please update.**
44
45 ## Security
46 - Fix an XSS (cross-site-scripting) vulnerability in `index.php` -
47 [CVE-2018-5249](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5249)
48
49
50 ## [v0.9.2](https://github.com/shaarli/Shaarli/releases/tag/v0.9.2) - 2017-10-07
51
52 **Major security issue fixed. Please update.**
53
54 ### Added
55 - Tag search now supports wildcards `*`
56 - New setting `privacy.force_login` which can be used with `privacy.hide_public_links` to redirect anonymous users to the login page.
57 - New setting `general.default_note_title` used to override default `Note:` title prefix for notes.
58 - Add a version hash for asset loading to prevent browser's cache issue
59
60 ### Changed
61 - The "Remember me" checkbox is unchecked by default
62 - The default value of the "Remember me" checkbox can be configured under `data/config.json.php`
63
64 ### Removed
65 - Remove obsolete PHP magic quote support
66
67 ### Fixed
68 - Generates a permalink URL if the URL is set to blank
69 - Replace links to the old GitHub wiki with ReadTheDocs URIs
70 - Use single quotes in the note bookmarklet
71 - Daily page if there is no link
72 - Bulk link deletion with a single link
73 - HTTPS detection behind a reverse proxy
74 - Travis tests environment and localization
75 - Improve template paths robustness (trailing slash)
76 - Robustness: safer gzinflate/zlib usage
77 - Description links parsing with parenthesis (without Markdown)
78 - Templates:
79 - Sort the tag cloud alphabetically
80 - Firefox social title
81 - Improved visited link color
82 - Fix jumpy textarea with long content in post edit
83
84 ### Security
85
86 - Fixed reflected XSS vulnerability introduced in v0.9.1, discovered by @chb9 ([CVE-2017-15215](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15215)).
87
88
89 ## [v0.9.1](https://github.com/shaarli/Shaarli/releases/tag/v0.9.1) - 2017-08-23
90
91 The documentation has been migrated to ReadTheDocs:
92 - https://shaarli.readthedocs.io/
93 - edits are submitted as pull requests
94
95 ### Added
96 - Allow bulk link deletion
97 - Display subtags in the tag cloud
98 - Add an endpoint to refresh the token
99 - Add a token on every page
100 - Add a tag list view for management
101 - Add Note bookmarklet
102 - Add creation date when editing a link
103
104 ### Changed
105 - Documentation:
106 - Generate static HTML documentation with [mkdocs](http://www.mkdocs.org/)
107 - Host documentation on [ReadTheDocs](http://www.mkdocs.org/)
108 - Update documentation structure
109 - Update Makefile targets to:
110 - Build the docs locally
111 - Include the generated docs in the release archives
112 - Theme:
113 - Use the new theme as the default
114 - Rename the tag cloud template to `tag.cloud.html`
115 - Display visited links in grey
116 - Use only one search form in `linklist.html`
117 - Hide the "search links with these tags" option when an empty `searchtags` is passed to `tag.list.html`
118 - Improve HTTP header handling when hosting Shaarli with Docker behind a reverse proxy
119 - Searching for tags with an empty value returns untagged links only
120 - Set Travis environment to `precise` until the new `trusty` environment is ready
121
122 ### Removed
123 - Remove dead Pubsubhubbub code
124 - Disable the GitHub wiki (see changed/documentation)
125 - Remove Docker `dev` image and resources
126 - Theme:
127 - Remove the bottom "Sort by" menu in `tag.list.html`
128
129 ### Fixed
130 - Fix file existence check for `user.css`
131 - Limit selection to 2k characters when using the bookmarklet
132 - Fix JS error `uncaught type error`
133 - Fix Firefox Social button
134 - Use pinned PHP dependencies when generating release archives
135 - Make sure that the tag exists before altering/removing it
136
137 ### Security
138 - Add a whitelist for protocols for URLs
139
140
141 ## [v0.9.0](https://github.com/shaarli/Shaarli/releases/tag/v0.9.0) - 2017-05-07
142
143 This release introduces the REST API, and requires updating HTTP server
144 configuration to enable URL rewriting, see:
145 - https://shaarli.github.io/api-documentation/
146 - https://shaarli.readthedocs.io/en/master/Server-configuration/
147
148 **WARNING**: Shaarli now requires PHP 5.5+.
149
150 ### Added
151 - REST API v1
152 - [Slim](https://www.slimframework.com/) framework
153 - [JSON Web Token](https://jwt.io/introduction/) (JWT) authentication
154 - versioned API endpoints:
155 - `/api/v1/info`: get general information on the Shaarli instance
156 - `/api/v1/links`: get a list of shaared links
157 - `/api/v1/history`: get a list of latest actions
158 Theming:
159 - Introduce a new theme
160 - Allow selecting themes/templates from the configuration page
161 - New/Edit link form can be submitted using CTRL+Enter in the textarea
162 - Shaarli version is displayed in the footer when logged in
163 - Add plugin placeholders to Atom/RSS feed templates
164 - Add OpenSearch to feed templates
165 - Add `campaign_` to the URL cleanup pattern list
166 - Add an AUTHORS file and Makefile target to list authors from Git commit data
167 - Link imports are now logged in `data/` folder, and can be debug using `dev.debug=true` setting.
168 - `composer.lock` is now included in git file to allow proper `composer install`
169 - History mechanism which logs link addition/modification/deletion
170
171 ### Changed
172 - Docker: enable nginx URL rewriting for the REST API
173 - Theming:
174 - Move `user.css` to the `data` folder
175 - Move default template files to a subfolder (`default`)
176 - Rename the legacy theme to `vintage`
177 - Private only filter is now displayed as a search parameter
178 - Autocomplete: pre-select the first element
179 - Display daily date in the page title (browser title)
180 - Timezone lists are now passed as an array instead of raw HTML
181 - Move PubSubHub to a dedicated plugin
182 - Coding style:
183 - explicit method visibility
184 - safe boolean comparisons
185 - remove unused variables
186 - The updater now keeps custom theme preferences
187 - Simplify the COPYING information
188 - Improved client locale detection
189 - Improved date time display depending on the locale
190 - Partial namespace support for Shaarli classes
191 - Shaarli version is now only present in `shaarli_version.php`
192 - Human readable maximum file size upload
193
194
195 ### Removed
196 - PHP < 5.5 compatibility
197 - ReadItYourself plugin
198
199 ### Fixed
200 - Ignore generated release tarballs
201 - Hide default port when behind a reverse proxy
202 - Fix a typo in the Markdown plugin description
203 - Fix the presence of empty tags for private tags and in search results
204 - Fix a fatal error during the install
205 - Fix permalink image alignment in daily page
206 - Fix the delete button in `editlink`
207 - Fix redirection after link deletion
208 - Do not access LinkDB links by ID before the Updater applies migrations
209 - Remove extra spaces in the bookmarklet's name
210 - Piwik plugin: Piwik URL protocol can now be set (http or https)
211 - All inline JS has been moved to dedicated JS files
212 - Keep tags after login redirection
213
214 ### Security
215 - Markdown plugin: escape HTML entities by default
216
217
218 ## [v0.8.5](https://github.com/shaarli/Shaarli/releases/tag/v0.8.5) - 2018-01-04
219 **XSS vulnerability fixed. Please update.**
220
221 ## Security
222 - Fix an XSS (cross-site-scripting) vulnerability in `index.php` -
223 [CVE-2018-5249](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5249)
224
225 ## [v0.8.4](https://github.com/shaarli/Shaarli/releases/tag/v0.8.4) - 2017-03-04
226 ### Security
227 - Markdown plugin: escape HTML entities by default
228
229 ## [v0.8.3](https://github.com/shaarli/Shaarli/releases/tag/v0.8.3) - 2017-01-20
230 ### Fixed
231 - PHP 7.1 compatibility: add ConfigManager parameter to anti-bruteforce function call in login template.
232
233 ## [v0.8.2](https://github.com/shaarli/Shaarli/releases/tag/v0.8.2) - 2016-12-15
234 ### Fixed
235
236 - Editing a link created before the new ID system would change its permalink.
237
238 ## [v0.8.1](https://github.com/shaarli/Shaarli/releases/tag/v0.8.1) - 2016-12-12
239
240 > Note: this version will create an automatic backup of your database if anything goes wrong.
241
242 ### Added
243 - Add CHANGELOG.md to track the whole project's history
244 - Enable Composer cache for Travis builds
245 - Save the last edition date for shaares and use it in Atom/RSS feeds
246 - Plugins:
247 - Add an [Isso](https://posativ.org/isso/) plugin to enable user comments on permalinks
248 - Allow defining init functions, e.g. for performing checks and error processing
249 - Add a Piwik plugin for analytics.
250 - Markdown: add warning notice regarding HTML rendering
251 - Meta tag to *not* send the referrer to external resources.
252
253 ### Changed
254 - Link ID complete refactoring:
255 - Links now have a numeric ID instead of dates
256 - Short URLs are now created once and can't change over time (previous URL are kept)
257 - Templates:
258 - Changed placeholder behaviour for: `buttons_toolbar`, `fields_toolbar` and `action_plugin`
259 - Cleanup `{loop}` declarations in templates
260 - Tools: hide Firefox Social button when not in HTTPS
261 - Firefox Social: show Shaarli's title when shaaring using Firefox Social
262 - Release archives now have the same structure as GitHub-generated archives:
263 - archives contain a `Shaarli` directory, itself containing sources + dependencies
264 - the tarball is now gzipped
265 - Plugins:
266 - Markdown: Parsedown library is now imported through Composer
267 - Minor code cleanup: PHPDoc, spelling, unused variables, etc.
268 - Docker: explicitly set the maximum file upload size to 10 MiB
269
270 ### Fixed
271 - Fix the server `<self>` value in Atom/RSS feeds
272 - Plugins:
273 - Tools: only display parameter description when it exists
274 - archive.org: do not propose archival of private notes
275 - Markdown:
276 - render links properly in code blocks
277 - bug regarding the `nomarkdown` tag
278 - W3C compliance
279 - Use absolute URL for hashtags in RSS and ATOM feeds
280 - Docker: specify the location of the favicon
281 - ATOM feed: remove new line between content tag and data
282
283 ### Security
284 - Allow whitelisting trusted IPs, else continue banning clients upon login failure
285
286
287 ## [v0.8.0](https://github.com/shaarli/Shaarli/releases/tag/v0.8.0) - 2016-10-12
288 Shaarli now uses [Composer](https://getcomposer.org/) to handle its dependencies.
289 Please use our release archives, or follow the
290 [installation documentation](https://github.com/shaarli/Shaarli/wiki/Download-and-Installation).
291
292 ### Added
293 - Composer is required to resolve Shaarli's PHP dependencies
294 - Shaarli now supports `#hashtags`
295 - Firefox social share now uses selected text as a description
296 - Plugin parameters can have a description in each plugin's `.meta` file
297
298 ### Changed
299 - Configuration is now stored as a JSON file
300 - Previous configuration format will be automatically updated (PHP -> JSON)
301 - Shaarli now defaults to cURL to fetch shaare titles
302 - URL cleanup: remove `PHPSESSID` parameter
303 - `nomarkdown` tag is no longer private, and now affects visitors
304 - Cleanup template indentation
305 - Rewrite bookmark import using a generic Netscape parser
306
307 ### Removed
308 - Shaarli no longer references Delicious in its description
309
310 ### Deprecated
311 - Shaarli configuration is not held as PHP globals anymore
312
313 ### Fixed
314 - Ignore case for tags in autocompletion and cloud tag
315 - Avoid generating empty tags
316 - Fix a Dockerfile syntax error
317
318 ### Security
319 - Fixed a bug preventing to change password
320 - XSRF token now generated each time a page is rendered
321
322
323 ## [v0.7.1](https://github.com/shaarli/Shaarli/releases/tag/v0.7.1) - 2017-03-08
324 ### Security
325 - Markdown plugin: escape HTML entities by default
326
327 ## [v0.7.0](https://github.com/shaarli/Shaarli/releases/tag/v0.7.0) - 2016-05-14
328 ### Added
329 - Adds an option to encode redirector URL parameter
330 - Atom/RSS feeds now support Markdown formatting, and plugins in general
331 - Markdown: use the tag `.nomarkdown` to avoid markdown processing
332 - Prefill the login field when the authentication has failed
333 - Show a private links counter
334
335 ### Changed
336 - Allow to use the bookmarklet in Firefox reader view (URL clean up)
337 - Improve tagcloud font size
338 - Improve title retrieving
339 - Markdown: inline code background color
340 - Refactor Netscape bookmark export
341 - Refactor Atom/RSS feed generation
342
343 ### Removed
344 - Remove delicious from Shaarli description
345
346 ### Fixed
347 - Fix bad login redirections causing a 404 in a few cases
348 - Fix tagcloud font-size with French locale
349 - Don't display empty tags in tag search
350 - Fix Awesomeplete conflicts with jQuery
351 - Fix UTC timezone selection
352 - Fix a bug preventing to import notes in browsers from bookmarks export
353 - Don't redirect to ?post if ?addlink is reached while logged out
354
355
356 ## [v0.6.5](https://github.com/shaarli/Shaarli/releases/tag/v0.6.5) - 2016-03-02
357 ### Fixed
358 - Fixes a regression generating an unnecessary warning (language in HTTP request)
359 - Fixes a bug where going through multiple reverse proxy could generate malformed URL
360 - Markdown: Fixes a bug where empty description blocks were displayed
361
362
363 ## [v0.6.4](https://github.com/shaarli/Shaarli/releases/tag/v0.6.4) - 2016-02-28
364 ### Added
365 - Add an updater class to automate user data upgrades
366 - Plugin admin page: adds a label for checkboxes and improve name display
367 - Plugin Wallabag: API version can be specified in plugin admin page
368
369 ### Changed
370 - Better tag cloud sorting, including special chars (`a > E > é > z`)
371 - Autolocale now sets all locale categories, not just time
372 - Use PHP's DateTime object instead of custom functions
373 - Plugin hooks: process includes before header/footer
374 - Markdown plugin: better styles for `<code>` and `<pre>` tags
375 - Improve searching:
376 - search terms are now considered separated and won't only return exact results anymore
377 - exact search can be done with quotes `"this exact sentence"`
378 - search supports excluded terms starting a dash `-exclude`
379 - implement crossed search: terms + tags
380 - all of them combined across all shaare fields
381 - New tag behaviour:
382 - tags starting with a dash will be renamed without it
383 - tags starting with a dot `.` will be hidden unless the user is logged in
384
385 ### Fixed
386 - Fix Markdown plugin escape issues (code/quote blocks, etc.)
387 - Link description aren't trimmed anymore to allow markdown format at the beginning of a shaare
388 - Fixes plugin admin redirection page on error
389
390 ### Security
391 - Fix a bug where non initialized variables were causing a warning
392 - Fix a bug where saving a link after edit could cause a 404 error
393
394
395 ## [v0.6.3](https://github.com/shaarli/Shaarli/releases/tag/v0.6.3) - 2016-01-31
396 ### Added
397 - Plugins administration page
398 - Markdown plugin added for shaares description
399 - Docker: Dockerfile is now in the main git repository and improved
400 - Add a `.gitattributes` to ease repository management
401 - Travis: include file permission checks
402
403 ### Changed
404 - Auto retrieve of title know works with websites (HTTPS, follow redirections, etc.)
405 - 404 page is now handled in a template
406 - Date in log files updated to work with fail2ban
407 - Wallabag: support of Wallabag v2 and minor fixes
408 - Link search refactoring
409 - Logging function refactoring
410
411 ### Fixed
412 - Fix a bug where renaming a tag was causing a 404
413 - Fix a bug allowing to search blank terms
414 - Fix a bug preventing to remove a tag with special chars when searching
415
416
417 ## [v0.6.2](https://github.com/shaarli/Shaarli/releases/tag/v0.6.2) - 2015-12-23
418 ### Changed
419 - Plugins: new footer hook
420 - Plugins: improve QR code
421 - Cleanup templates
422
423 ### Fixed
424 - Plugins: use the actual link URL to generate QR codes
425 - Templates: missing/erroneous page titles
426 - Templates: missing variables resulting in PHP errors
427
428 ### Security
429 - Fix invalid file permissions (remove executable bit)
430
431
432 ## [v0.6.1](https://github.com/shaarli/Shaarli/releases/tag/v0.6.1) - 2015-12-01
433 ### Added
434 - Add OpenSearch support
435 - Add a Doxygen makefile target
436 - Tools: add fine-grained file/directory permission checks (installation)
437
438 ### Changed
439 - Tools: check the 'stable' branch for new versions (updates)
440 - Cleanup: introduce an `ApplicationUtils` class
441
442 ### Removed
443 - Cleanup: remove `json_encode()` function (built-in since PHP 5.2)
444
445 ### Fixed
446 - Auto-complete more than one tag
447 - Bookmarklet: support titles containing quotes
448 - URL encode links when setting a redirector
449
450
451 ## [v0.6.0](https://github.com/shaarli/Shaarli/releases/tag/v0.6.0) - 2015-11-18
452 ### Added
453 - Introduce a plugin system
454 - Add a demo_plugin
455 - Add plugins:
456 - addlink_toolbar
457 - archiveorg
458 - playvideos
459 - qrcode
460 - readityourself
461 - wallabag
462
463 ### Changed
464 - Coding style
465
466 ### Fixed
467 - Adding a new link now returns the correct anchor in the URL
468 - Set default file permissions
469
470
471 ## [v0.5.4](https://github.com/shaarli/Shaarli/releases/tag/v0.5.4) - 2015-09-15
472 ### Added
473 - HTTPS: support being served behing an SSL-enabled proxy
474
475 ### Changed
476 - HTTP/Server utilities: refactor & add test coverage
477 - Project & documentation:
478 - improve/rewrite `README.md`
479 - update contributor list
480 - update `index.php` header
481
482 ### Fixed
483 - PHP session IDs: handle hash algorithms and bits per char representations
484
485
486 ## [v0.5.3](https://github.com/shaarli/Shaarli/releases/tag/v0.5.3) - 2015-09-02
487 ### Fixed
488 - Fix a bug that could prevent user to login
489
490
491 ## [0.5.3](https://github.com/shaarli/Shaarli/releases/tag/0.5.3) - 2015-09-02
492 This release has been YANKED as it points to a tag that does not follow our naming convention. Please use `v0.5.3` instead
493
494 ### Fixed
495 - Allow uppercase letters in PHP sessionid format
496
497
498 ## [v0.5.2](https://github.com/shaarli/Shaarli/releases/tag/v0.5.2) - 2015-08-31
499 ### Added
500 - Add PHP 7 to Travis platforms
501
502 ### Changed
503 - Also extract HTTPS page metadata (title)
504
505 ### Fixed
506 - Fix regression preventing to load LinkDB info when adding an existing link
507
508 ### Security
509 - Fix Full Path Disclosure upon cookie forgery
510
511
512 ## [v0.5.1](https://github.com/shaarli/Shaarli/releases/tag/v0.5.1) - 2015-08-17
513 ### Added
514 - Add a link to the shaarli/shaarli DockerHub repository
515
516 ### Changed
517 - Update local documentation
518 - Improve timezone detection at installation
519 - Improve feed cache handling
520 - Improve URL cleanup for new links
521
522 ### Fixed
523 - Fix 404 after editing a link while being logged out
524
525
526 ## [v0.5.0](https://github.com/shaarli/Shaarli/releases/tag/v0.5.0) - 2015-07-31
527 ### Added
528 - Add Firefox Social API
529 - Start code refactoring:
530 - add unit test coverage
531 - add Travis integration
532
533 ### Changed
534 - Search/Filter by tag fieds can now be accessed quickly with the `Tab` key
535 - Update documentation
536 - Remove duplicate tags in links
537 - Remove annoying URL patterns
538 - Start code refactoring:
539 - move all settings to `data/config.php`
540 - refactor Config, LinkDB, TimeZone, Utils
541
542 ### Fixed
543 - Fix locale handling
544 - Fix note URLs
545 - Fix page redirections
546 - Fix daily RSS browsing
547 - Fix title display
548 - Restore compatibility with PHP 5.3
549
550 ### Security
551 - Fix links not being hidden when `HIDE_PUBLIC_LINKS` is set
552
553
554 ## [v0.0.45beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.45beta) - 2015-03-16
555 ### Fixed
556 - Fix improperly displayed Unicode character
557 - Fix incorrect font size for "Add link" input field
558
559
560 ## [v0.0.44beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.44beta) - 2015-03-15
561 ### Added
562 - Add a Makefile to run static code checkers
563 - Add local documentation (help link in page footer)
564 - Use awesomplete library for autocompletion
565 - Use bLazy.js library for images lazy loading
566 - New 'Add Note' bookmarklet to immediatly open a note (text post) compose window
567
568 ### Changed
569 - Theme improvements and cleanup (menu, search fields, icons, linklist...)
570 - Allow 'javascript:' links sharing (bookmarklets)
571 - Make update check optional
572 - Redirect to homepage after adding a link via "Add Link" dialog
573 - Remove more annoying URL parameters for shared links
574 - Code cleanup
575
576 ### Removed
577 - Remove jQuery
578
579 ### Security
580 - Don't disclose version to visitors (shaarli-version.txt)
581
582
583 ## [v0.0.43beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.43beta) - 2015-02-20
584 ### Added
585 - Title button link URL is now configurable
586 - RainTPL's TMP and TPL directories path are now configurable
587 - Displayed URLs for each link are now clickable links
588 - Show links timestamps in Daily view
589
590 ### Changed
591 - Automatically prepend "Note:" to title of self-posts (posts not pointing to an URL)
592 - Make ATOM toolbar button optional (`SHOW_ATOM` configuration variable)
593 - Optional archive.org links for each Shaarli link (`ARCHIVE_ORG` option)
594 - Thumbnails: force HTTPS when possible
595 - Improve tag cloud font scaling
596 - Allow pointing RSS items to the permalink instead of the direct URL (`ENABLE_RSS_PERMALINKS` option)
597 - Update JS libraries and add version numbers in filenames
598 - Updates to README and footer
599
600 ### Fixed
601 - Fix problems when running Shaarli behind a reverse proxy (invalid RSS feed URL)
602 - Update check now checks against the community fork version
603 - Include `cache/`, `data/`, `pagecache/` and `tmp/` directories in the repository
604 - Fix duplicate tag search returning no results
605 - Fix unnecessary 404 error on "Add link" when the user is logged out
606 - Fixes to copyright/licensing information and unlicensed media
607 - Fixes for tag cloud invalid links
608 - Coding style fixes/cleanup
609 - Fix redirection after deleteing a link leading to a 404 error
610 - Shaarli's HTML is now W3C-compliant
611 - Search now works with Unicode characters
612
613 ### Security
614 - Do not leak server's PHP version and Shaarli's full path on errors
615 - Prevent Shaarli from sending a lot of duplicate cookies
616
617
618 ## [v0.0.42beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.42beta) - 2014-07-27
619 ### Added
620 - Add QRCode Javascript library
621 - Allow importing bookmarks with the same timestamp (hack)
622 - Allow putting a description in the bookmarklet URL
623 - Add `json_encode()` implementation for PHP<5.2
624 - Highlight search results
625
626 ### Changed
627 - Improve 'Stay signed in' behaviour
628 - Improve `smallHash()`
629 - Refactor QRCode generation
630 - Update Javascript lazyloading
631 - Update CSS
632
633 ### Removed
634 - Remove jQuery from almost all pages
635
636 ### Fixed
637 - Fix overlapping tags
638 - Fix field foxus in the bookmarklet
639 - Fix error message when `data/` is not writable
640 - Fix HTML generation
641
642 ### Security
643 - Fix XSS flaw
644
645
646 ## [v0.0.41beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.41beta) - 2013-03-08
647 ### Added
648 - Add HTTPS to the allowed protocols
649 - Add support for magnet links in link descriptions
650 - Allow creating new links as private by default
651 - Allow disabling jQuery
652 - Check write permissions
653 - Check session support before installation
654
655 ### Changed
656 - Improve token security
657 - RSS feed: allow inverting links/permalinks
658
659 ### Fixed
660 - Fix display issues during installation
661 - Fix popup redirection after login failure
662 - Fix RSS formatting for Thunderbird
663 - Fix thumbnail creation
664 - Fix cache purge
665
666 ### Security
667 - Fix login issue with WebKit browsers
668
669
670 ## [v0.0.40beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.40beta) - 2013-02-26
671 Initial release on GitHub.
672
673
674 ## [v0.0.40beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-08-24
675 ### Added
676 - Flickr thumbnail now also support albums, galleries and users
677 - Add a configuration option to disable session cookie protection
678 Check this if your get disconnected often or your IP address changes often
679
680 ### Removed
681 - Removed the xml comment in cached RSS/ATOM feed
682 (although W3C-compliant, this may cause problems in some feed readers)
683
684 ### Fixed
685 - A bug in the RSS cache would present old items as new in some cases
686 - A small bug (non-initialized variable) in page cache cleaning
687 - Proper "Nothing found" message when search returns no results
688 - No more 404 error when searching with empty input
689 - Flickr thumbnails are back (Flickr has made some changes to their domains)
690
691 ## [v0.0.39beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-08-10
692 ### Added
693 - A cache for RSS feed, ATOM feed and Daily RSS feed, because these URLs
694 are massively hammered. Cache is automatically purged whenever the database
695 is changed. This will reduce server load. I may add cache to other pages later.
696
697 ### Changed
698 - No more global `$LINKSDB` (Yuk)
699 - Background color was removed when hovering a link
700
701 ### Fixed
702 - Small bug corrected in config screen on timezones
703 - Calling a non-existing permalink now returns a crude 404 error instead of 200 (OK)
704 This is done on purpose
705 - The `shaarli` session cookie now has a proper path
706 Thus you can now install several Shaarlis on the same server in different paths,
707 and each will have its session
708 - Now when you delete a link, you go back the same page/search parameters you were on
709 - Restore previously removed `error_get_last()`, to ensure PHP 5.1 compatibility
710 (Yes, now it works on free.fr hosting)
711 - Added `dialog=1` in bookmarklet code for some browsers
712
713
714 ## [v0.0.38beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-02-06
715 ### Added
716 - Automatic creation of the `tmp` directory with proper rights (for RainTPL)
717 - When you click the key to see only private links, it turns yellow
718
719 ### Changed
720 - The "Daily" page now automatically skips empty days.
721
722 ### Fixed
723 - Corrected the tag encoding (there was a bug when selecting a second tag which contains accented characters)
724
725
726 ## [v0.0.37beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-02-01
727 ### Added
728 - Basic CSS for mobiles, which makes Shaarli //much// more usable on mobile devices
729 - Picture wall no more instantly kills your browser. Now it uses
730 [lazy image loading](http://www.appelsiini.net/projects/lazyload);
731 the pictures are loaded only as you scroll the page.
732 This will reduce browser memory usage (especially on mobile devices),
733 as well as server load.
734 If you have javascript disabled, the page will still work as before
735 (all images loaded at once)
736 - RSS feed for the "Daily" page. 1 RSS entry per day, with all links of that day.
737 RSS feed provides the last 7 days (only non-empty days are returned).
738 - In link list, added an icon to see only private links. Click to toggle (only private / all)
739
740
741 ## [v0.0.36beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
742 ### Added
743 - Shaarli licence in COPYING
744
745 ### Changed
746 - Display adjustments in "Daily" page
747
748 ### Fixed
749 - Improper text color in install form
750 - Error in QRCode url (missing '?')
751
752
753 ## [v0.0.35beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
754 ### Fixed
755 - Corrected a bug introduced in 0.0.34 which would improperly preprend data to URLs
756
757
758 ## [v0.0.34beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
759 ### Added
760 - There is now a QR-Code of each permalink to easily open a link on your smartphone
761 - Protocols `file:` and `apt:` are now also converted to clickable links (patch by Francis Chavanon)
762 - Thumbnail support for http://xkcd.com/ (patch by Emilien Klein)
763 - Thumbnail support for http://pix.toile-libre.org/
764 - Well I had _some_ mercy for users with antique browsers (IE) which do not have
765 support for gradients: I added a few `background-color`
766 - First version of the "Shaarli Daily", a page showing all links of a specific day.
767 By default, you see the links of the previous day.
768 There is still work to do on this page (error checking, better navigation (calendar?),
769 RSS feed, CSS for mobile and printing...)
770
771 ### Changed
772 - Upgraded bundled versions of jQuery (1.7.1) and jQuery UI (1.8.17)
773 - Upgraded bundled version of RainTPL (2.7)
774 - Changed HTTPS detection code
775
776 ### Fixed
777 - In link edition, you can now click the word "Private" to check the box
778 - Clicking a tag would not work properly if the tag contained special characters (like +)
779 - Added proper jQuery licence (shame on me)
780
781
782 ## [v0.0.33beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-17
783 ### Added
784 - Shaarli packaged to ease Linux distributions integration
785 As a simple user, you do not need to cope with these versions
786 Future releases of Shaarli will also be customized and published in these directories
787 Differences with the standard Shaarli version:
788 - deb:
789 - .tar.gz instead of .zip
790 - COPYING licence file added
791 - jQuery/jQuery-UI libraries removed to cope with Debian rules
792 This version links to the libs hosted at http://code.jquery.com
793 - rpm:
794 - sources located in a subdirectory with the same name as the zip file
795 - COPYING licence file added
796 - WARNING: When downloading the .tar.gz, always use wget (and not your browser),
797 otherwise the .tar.gz will be corrupted
798
799 ### Fixed
800 - ATOM feed validates again
801
802 ### Security
803 - XSS vulnerability patched (thanks to Stanislas D.!)
804
805
806 ## [v0.0.32beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-12-16
807 ### Added
808 - Better check on URL parameters (patch by gege2061)
809 - Add `max-height` and `overflow:auto` attributes so that content can be scrolled if too large
810
811 ### Changed
812 - HTML generation moved to RainTPL templates (in the `tpl/` directory)
813 - Better detection of HTTPS (patch by gege2061)
814 - In RSS/ATOM feeds, the GUID is now the permalink instead of the final URL (patch by gege2061)
815 - Jerrywham CSS patch included
816 - Multiple spaces are now respected in description.
817 Thus you can use Shaarli as a personal pastebin (for posting source code, for example).
818
819 ### Removed
820 - Page time generation was removed
821
822 ### Fixed
823 - Tab order changed in login screen
824 - Permalinks now work even if additional parameters have been added
825 (e.g. `/?E8Yj2Q&utm_source=blablabla...`)
826 - user.css is included only if the file is present
827 (This prevents a useless CSS include which makes a harmless but useless 404 error.)
828
829
830 ## [v0.0.31beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-29
831 ### Added
832 - Support for TED Talks (ted.com/talks) thumbnails (patch by Emilien K.)
833 - partial [patch](http://www.idleman.fr/blog/?p=508) by Idleman: Better design consistency, icon on private links. In-page popup was not included because it causes problem on some websites
834 - Support for bookmark files without ADD_DATE attributes
835 - Logo is clickable
836 - `user.css` can be added to overload Shaarli base CSS.(patch by Jerrywham).
837 Just put `user.css` in the same directory as shaarli.css.
838 Example: `<code css>#pageheader { background: blue; }</code>`
839 Please note that Shaarli CSS are not stable and may completely change on each version
840
841 ### Changed
842 - Edit and Delete buttons in link list were replaced with icons. (patch by Jerrywham)
843
844 ### Fixed
845 - Better error handling in thumbnail generation (patch by Emilien K.)
846 - The top menu is no longer displayed in bookmarklet popup
847 - Bookmark which have the exact same date/time are now correctly imported.
848 Most remaining import problems should be solved now
849 - Comment in Shaarli export moved to beginning of file to prevent clash with last link description
850
851
852 ## [v0.0.30beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-18
853 ### Added
854 - Add a small `delete` button in link list (after the `edit` button)
855
856 ### Fixed
857 - Moved the call to PubSubHub
858
859
860 ## [v0.0.29beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-18
861 ### Fixed
862 - Corrected a bug introduced in v0.0.28beta
863 (there was an error if you use the bookmarklet and you're not logged in)
864
865
866 ## [v0.0.28beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-17
867 ### Added
868 - Thumbnail support for youtu.be URLs (YouTube short url service)
869 - PubSubHub protocol support (from http://aldarone.fr/les-flux-rss-shaarli-et-pubsubhubbub/).
870 Warning: This was not tested. You need to set your hub url in
871 `$GLOBALS['config']['PUBSUBHUB_URL']` and put the official client (`publisher.php`)
872 in the same directory as Shaarli's `index.php`
873 - RSS and ATOM feeds now also contain tags (in `category` tags, as per their
874 respective specifications)
875
876 ### Changed
877 - New Shaarli theme and logo by Idle (http://www.idleman.fr/blog/?p=469)
878 - In picture wall, pictures point to Shaarli permalink instead of final URL.
879 This way, users can read the description.
880 - In RSS/ATOM feeds, guid and link URL of permalinks are now proper absolute URLs
881 - In RSS/ATOM feeds, URLs are now clickable
882 - Rename `http_parse_headers()` to `http_parse_headers_shaarli()` to prevent
883 name collision with some PHP extensions
884
885 ### Fixed
886 - Thumbnails removed for imgur.com/a/ URLs (Thumbnails are not available for albums on imgur)
887 - Shaarli now correctly only tries to get thumbnails for vimeo video URLs
888 - Fix a bug in imgur.com URLs handling that would cause some thumbnails not to appear
889 - The search engine would not return a result if the word to search was the first in description
890 - Extracted title is now correct if the page has two `title` html tags
891
892
893 ## [v0.0.27beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-18
894 ### Added
895 - Add a picture wall, which can be filtered too: it will use the same filters
896 (tags,text search) as current page when clicked.
897
898
899 ## [v0.0.26beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-17
900 ### Changed
901 - Made permalink more visible (smallHash)
902
903 ### Fixed
904 - Removed extras space in description when URLs are converted to clickable links
905 - Thumbnail for subreddit imgur urls (/r/...) were corrected (thanks to Accent Grave)
906
907
908 ## [v0.0.25beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-13
909 ### Added
910 - Better CSS for printing (thanks to jerrywham suggestion)
911 - Allow using a redirector or anonymizing proxy for links
912 (such as `http://anonym.to/?` to mask you `HTTP_REFERER`).
913 Just go to `Tools > Configure > Redirector`
914 (thanks to Accent Grave for the suggestion).
915 - The `ENABLE_LOCALCACHE` option can be set to `false` for those who have
916 a limited quota on their host.
917 This will disable the local thumbnail cache.
918 Services which require the use of the cache will have no thumbnails
919 (vimeo, flickr, direct link to image).
920 Other services will still have a thumbnail (youtube,imgur.com,dailymotion,imageshack.us)
921
922 ### Changed
923 - Now thumbnails generated by Shaarli are croped to a height of 120 pixels
924 - YouTube thumbnails now use `default.jpg` instead of `2.jpg` (This is usually more pertinent)
925 - Configuration options (such as `HIDE_TIMESTAMPS`, `ENABLE_THUMBNAILS`, etc.)
926 can now be put in a an external file so that you do not have to tweak them again
927 when you upgrade Shaarli.
928 Just add the file `data/options.php`.
929 - If a single link is displayed, the page title contains the title of the link
930 - Shaarli page title is clickable (and has the same link as "Home")
931 - A few CSS tweaks (thanks to maethor for suggestion)
932
933 ### Fixed
934 - Shaarli now supports newlines in titles (thanks to dixy)
935 - The link to the RSS feed in page header was not correct
936
937
938 ## [v0.0.24beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
939 ### Added
940 - Allow posting an entry without a link. (You can use Shaarli as a kind of "personal twitter")
941 - Each Shaarli entry now has a short link (just click on the date of a link).
942 Now you can send a link that points to a single entry in your Shaarli
943 - In descriptions, URLs are now clickable
944 - Thumbnails will be generated for all link pointing to .jpg/png/gif
945 (as long as the images are less than 4 Mb and take less than 30 seconds to download)
946
947 ### Fixed
948 - Now thumbnails also work for imgur gallery links (/gallery/...)
949 (Thanks to Accent Grave for the correction)
950 - Removed useless debugging information in log
951 - The filter in RSS/ATOM feed now works again properly (it was broken in 0.0.17beta)
952
953
954 ## [v0.0.23beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
955 ### Added
956 - Added thumbnail support for imageshack.us
957
958 ### Changed
959 - Now you can clic the sentence "Stay signed in" to tick the checkbox (patch by Emilien)
960 - In tag editing, comma (,) are now automatically converted to spaces
961 - In tag editing, autocomplete no longuer suggests a tag you have already entered in the same line
962
963
964 ## [v0.0.22beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
965 ### Added
966 - Support for thumbnails for flickr.com
967 - Allow staying signed in:
968 Your session will be kept open even if you close the browser.
969 This is available through a checkbox in the login screen.
970
971 ### Changed
972 - Some hosts (flickr, vimeo) are slow as hell for the thumbnails,
973 or require an extra HTTP request.
974 For these hosts the thumbnail generation has been deported outside the generation
975 of the page to keep Shaarli snappy.
976 For these slow services, the thumbnails are also cached.
977
978 ### Fixed
979 - Title was not properly passed if you had to login when using the bookmarklet (patch by shenshei)
980
981
982 ## [v0.0.21beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
983 ### Added
984 - Thumbnails for some services
985 Currently supports: YouTube.com, dailymotion.com, vimeo.com (slow!) and imgur.com.
986 Thumbnails are enabled by default, but you can turn them off
987 (set `define('ENABLE_THUMBNAILS',true);` to `false`).
988
989 ### Changed
990 - Removed the focus on the searchbox (this is cumbersome when you want to browse pages
991 and scroll with the keyboard)
992
993
994 ## [v0.0.20beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
995 ### Fixed
996 - RSS feed is now served as `application/rss+xml` instead of `application/xhtml+xml`
997 (which was causing problem in //RSS Lounge//)
998 - ATOM feed is now served as `application/atom+xml` instead of `application/xhtml+xml`
999
1000
1001 ## [v0.0.19beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1002 ### Added
1003 - ATOM feed
1004
1005 ### Fixed
1006 - Patch by Emilien to remove the update notification after the update
1007
1008
1009 ## [v0.0.18beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1010 ### Added
1011 - You can now configure the title of your page
1012 - New screen to configure title and timezone
1013
1014 ### Changed
1015 - Nicer timezone selection patch by killruana
1016
1017 ### Fixed
1018 - New lines now appear correctly in the RSS feed descriptions.
1019
1020
1021 ## [v0.0.17beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1022 ### Added
1023 - Change password screen added (based on a patch by killruana)
1024 - Autocomplete in the tag search form
1025 - You can rename or delete a tag in all links
1026 (very handy if you misspelled a tag or want to merge tags)
1027 - When you click the RSS feed, the feed will be filtered with the same filters
1028 as the page you were viewing
1029
1030 ### Changed
1031 - CSS adjustments by jerrywham
1032 - Minor corrections
1033
1034
1035 ## [v0.0.16beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1036 ### Added
1037 - Upgrade notification:
1038 If a new version of Shaarli is available, you will be notified by a discreet
1039 message in top-right corner.
1040 This message will only be visible if you are logged in, and the check will be
1041 performed at most once a day.
1042 - Preliminary tag cloud (ugly for the moment, I need to find something better)
1043
1044 ### Changed
1045 - Replaced `preg_match()` with `version_compare()` to check PHP version
1046 - Includes a patch by Emilien K. to mask dates if user is not logged in.
1047 The option can be activated by changing `define('HIDE_TIMESTAMPS',false);` to `true`
1048
1049
1050 ## [v0.0.15beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1051 ### Added
1052 - New in import: Option to overwrite existing links when importing
1053 - On free.fr, automatic creation of the `/sessions` directory
1054
1055 ### Changed
1056 - CSS Stylesheet is now an external file (shaarli.css).
1057 This reduces page size and eases customization.
1058
1059 ### Removed
1060 - Removed some parameters in URL added by some feed proxies (`#xtor=RSS-...`)
1061
1062 ### Fixed
1063 - Bug corrected: Prevented loop on login screen upon successful login after a failed login
1064 - Bug corrected in import: HTML entities were not properly decoded.
1065 If you imported your Delicious/Diigo bookmarks, your should import them again
1066 and use the 'overwrite' option of the import feature.
1067
1068
1069 ## [v0.0.14beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1070 ### Added
1071 - You no longer need to disable `magic_quotes` on your host.
1072 Shaarli will cope with this option beeing activated.
1073
1074
1075 ## [v0.0.13beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1076 ### Added
1077 - Import: New option to import html bookmark file as private links
1078 - Import: Importing a bookmark file will not overwrite existing links anymore
1079 - Export: New options to export only public or private links
1080
1081 ### Changed
1082 - In tag autocomplete, tags are presented in use order
1083 (most used tags first, instead of alphabetical order)
1084 - RSS Feed can now be filtered by tags or fulltext search. Just add to the feed url:
1085 - `&searchtags=minecraft+video` for tag filtering
1086 - `&searchterm=portal` for fulltext search to the feed url
1087
1088
1089 ## [v0.0.12beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1090 ### Added
1091 - Add a check that the config file was properly created
1092 (in case Shaarli does not have the write rights in its folder)
1093 - Open Shaarli: there is an option to open your Shaarli to anyone.
1094 Anybody will be able to add/edit/delete links without having to login.
1095 In code, change `define('OPEN_SHAARLI',false);` to `true`.
1096 Note: No anti-spam for the moment. You are warned!
1097 - Autocomplete for tags
1098
1099
1100 ## [v0.0.11beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1101 ### Added
1102 - Add a check and a warning for some hosts which still have `magic_quotes` activated
1103
1104
1105 ## [v0.0.10beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1106 ### Added
1107 - Get rid of `&quot;` in titles
1108
1109
1110 ## [v0.0.9beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1111 ### Added
1112 - Now works on hosts `free.fr` and `1and1`
1113 - Now works with PHP 5.1
1114 - PHP version is now checked and an error message is displayed if version is not correct
1115
1116 ### Fixed
1117 - No more error messages if the browser does not send `HTTP_REFERER`
1118 - No more error messages if the host has disabled http protocol in PHP config (eg. 1and1)
1119
1120
1121 ## [v0.0.8beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1122 ### Changed
1123 - In RSS feed, GUID content replaced with the URL of the link, because some
1124 stupid RSS reader (like Google Reader) use `<guid>` as a link instead of using `<link>`
1125
1126
1127 ## [v0.0.7beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-09-16
1128 First public release by Sebsauvage, see original article:
1129 [Adieu Delicious, Diigo et StumbleUpon. Salut Shaarli !](http://sebsauvage.net/rhaa/index.php?2011/09/16/09/29/58-adieu-delicious-diigo-et-stumbleupon-salut-shaarli-) (FR)