CHANGELOG.md

   1 # Change Log
   2 All notable changes to this project will be documented in this file.
   3
   4 The format is based on [Keep a Changelog](http://keepachangelog.com/)
   5 and this project adheres to [Semantic Versioning](http://semver.org/).
   6
   7 ## [v0.9.3](https://github.com/shaarli/Shaarli/releases/tag/v0.9.3) - 2018-01-04
   8 **XSS vulnerability fixed. Please update.**
   9
  10 ## Security
  11 - Fix an XSS (cross-site-scripting) vulnerability in `index.php`
  12
  13
  14 ## [v0.9.2](https://github.com/shaarli/Shaarli/releases/tag/v0.9.2) - 2017-10-07
  15
  16 **Major security issue fixed. Please update.**
  17
  18 ### Added
  19 - Tag search now supports wildcards `*`
  20 - New setting `privacy.force_login` which can be used with `privacy.hide_public_links` to redirect anonymous users to the login page.
  21 - New setting `general.default_note_title` used to override default `Note:` title prefix for notes.
  22 - Add a version hash for asset loading to prevent browser's cache issue
  23
  24 ### Changed
  25 - The "Remember me" checkbox is unchecked by default
  26 - The default value of the "Remember me" checkbox can be configured under `data/config.json.php`
  27
  28 ### Removed
  29 - Remove obsolete PHP magic quote support
  30
  31 ### Fixed
  32 - Generates a permalink URL if the URL is set to blank
  33 - Replace links to the old GitHub wiki with ReadTheDocs URIs
  34 - Use single quotes in the note bookmarklet
  35 - Daily page if there is no link
  36 - Bulk link deletion with a single link
  37 - HTTPS detection behind a reverse proxy
  38 - Travis tests environment and localization
  39 - Improve template paths robustness (trailing slash)
  40 - Robustness: safer gzinflate/zlib usage
  41 - Description links parsing with parenthesis (without Markdown)
  42 - Templates:
  43     - Sort the tag cloud alphabetically
  44     - Firefox social title
  45     - Improved visited link color
  46     - Fix jumpy textarea with long content in post edit
  47
  48 ### Security
  49
  50 - Fixed reflected XSS vulnerability introduced in v0.9.1, discovered by @chb9 ([CVE-2017-15215](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15215)).
  51
  52
  53 ## [v0.9.1](https://github.com/shaarli/Shaarli/releases/tag/v0.9.1) - 2017-08-23
  54
  55 The documentation has been migrated to ReadTheDocs:
  56 - https://shaarli.readthedocs.io/
  57 - edits are submitted as pull requests
  58
  59 ### Added
  60 - Allow bulk link deletion
  61 - Display subtags in the tag cloud
  62 - Add an endpoint to refresh the token
  63 - Add a token on every page
  64 - Add a tag list view for management
  65 - Add Note bookmarklet
  66 - Add creation date when editing a link
  67
  68 ### Changed
  69 - Documentation:
  70     - Generate static HTML documentation with [mkdocs](http://www.mkdocs.org/)
  71     - Host documentation on [ReadTheDocs](http://www.mkdocs.org/)
  72     - Update documentation structure
  73     - Update Makefile targets to:
  74         - Build the docs locally
  75         - Include the generated docs in the release archives
  76 - Theme:
  77     - Use the new theme as the default
  78     - Rename the tag cloud template to `tag.cloud.html`
  79     - Display visited links in grey
  80     - Use only one search form in `linklist.html`
  81     - Hide the "search links with these tags" option when an empty `searchtags` is passed to `tag.list.html`
  82 - Improve HTTP header handling when hosting Shaarli with Docker behind a reverse proxy
  83 - Searching for tags with an empty value returns untagged links only
  84 - Set Travis environment to `precise` until the new `trusty` environment is ready
  85
  86 ### Removed
  87 - Remove dead Pubsubhubbub code
  88 - Disable the GitHub wiki (see changed/documentation)
  89 - Remove Docker `dev` image and resources
  90 - Theme:
  91     - Remove the bottom "Sort by" menu in `tag.list.html`
  92
  93 ### Fixed
  94 - Fix file existence check for `user.css`
  95 - Limit selection to 2k characters when using the bookmarklet
  96 - Fix JS error `uncaught type error`
  97 - Fix Firefox Social button
  98 - Use pinned PHP dependencies when generating release archives
  99 - Make sure that the tag exists before altering/removing it
 100
 101 ### Security
 102 - Add a whitelist for protocols for URLs
 103
 104
 105 ## [v0.9.0](https://github.com/shaarli/Shaarli/releases/tag/v0.9.0) - 2017-05-07
 106
 107 This release introduces the REST API, and requires updating HTTP server
 108 configuration to enable URL rewriting, see:
 109 - https://shaarli.github.io/api-documentation/
 110 - https://shaarli.readthedocs.io/en/master/Server-configuration/
 111
 112 **WARNING**: Shaarli now requires PHP 5.5+.
 113
 114 ### Added
 115 - REST API v1
 116     - [Slim](https://www.slimframework.com/) framework
 117     - [JSON Web Token](https://jwt.io/introduction/) (JWT) authentication
 118     - versioned API endpoints:
 119         - `/api/v1/info`: get general information on the Shaarli instance
 120         - `/api/v1/links`: get a list of shaared links
 121         - `/api/v1/history`: get a list of latest actions
 122 Theming:
 123     - Introduce a new theme
 124     - Allow selecting themes/templates from the configuration page
 125     - New/Edit link form can be submitted using CTRL+Enter in the textarea
 126     - Shaarli version is displayed in the footer when logged in
 127 - Add plugin placeholders to Atom/RSS feed templates
 128 - Add OpenSearch to feed templates
 129 - Add `campaign_` to the URL cleanup pattern list
 130 - Add an AUTHORS file and Makefile target to list authors from Git commit data
 131 - Link imports are now logged in `data/` folder, and can be debug using `dev.debug=true` setting.
 132 - `composer.lock` is now included in git file to allow proper `composer install`
 133 - History mechanism which logs link addition/modification/deletion
 134
 135 ### Changed
 136 - Docker: enable nginx URL rewriting for the REST API
 137 - Theming:
 138     - Move `user.css` to the `data` folder
 139     - Move default template files to a subfolder (`default`)
 140     - Rename the legacy theme to `vintage`
 141     - Private only filter is now displayed as a search parameter
 142     - Autocomplete: pre-select the first element
 143     - Display daily date in the page title (browser title)
 144     - Timezone lists are now passed as an array instead of raw HTML
 145 - Move PubSubHub to a dedicated plugin
 146 - Coding style:
 147     - explicit method visibility
 148     - safe boolean comparisons
 149     - remove unused variables
 150 - The updater now keeps custom theme preferences
 151 - Simplify the COPYING information
 152 - Improved client locale detection
 153 - Improved date time display depending on the locale
 154 - Partial namespace support for Shaarli classes
 155 - Shaarli version is now only present in `shaarli_version.php`
 156 - Human readable maximum file size upload
 157
 158
 159 ### Removed
 160 - PHP < 5.5 compatibility
 161 - ReadItYourself plugin
 162
 163 ### Fixed
 164 - Ignore generated release tarballs
 165 - Hide default port when behind a reverse proxy
 166 - Fix a typo in the Markdown plugin description
 167 - Fix the presence of empty tags for private tags and in search results
 168 - Fix a fatal error during the install
 169 - Fix permalink image alignment in daily page
 170 - Fix the delete button in `editlink`
 171 - Fix redirection after link deletion
 172 - Do not access LinkDB links by ID before the Updater applies migrations
 173 - Remove extra spaces in the bookmarklet's name
 174 - Piwik plugin: Piwik URL protocol can now be set (http or https)
 175 - All inline JS has been moved to dedicated JS files
 176 - Keep tags after login redirection
 177
 178 ### Security
 179 - Markdown plugin: escape HTML entities by default
 180
 181
 182 ## [v0.8.5](https://github.com/shaarli/Shaarli/releases/tag/v0.8.5) - 2018-01-04
 183 **XSS vulnerability fixed. Please update.**
 184
 185 ## Security
 186 - Fix an XSS (cross-site-scripting) vulnerability in `index.php`
 187
 188 ## [v0.8.4](https://github.com/shaarli/Shaarli/releases/tag/v0.8.4) - 2017-03-04
 189 ### Security
 190 - Markdown plugin: escape HTML entities by default
 191
 192 ## [v0.8.3](https://github.com/shaarli/Shaarli/releases/tag/v0.8.3) - 2017-01-20
 193 ### Fixed
 194 - PHP 7.1 compatibility: add ConfigManager parameter to anti-bruteforce function call in login template.
 195
 196 ## [v0.8.2](https://github.com/shaarli/Shaarli/releases/tag/v0.8.2) - 2016-12-15
 197 ### Fixed
 198
 199 - Editing a link created before the new ID system would change its permalink.
 200
 201 ## [v0.8.1](https://github.com/shaarli/Shaarli/releases/tag/v0.8.1) - 2016-12-12
 202
 203 > Note: this version will create an automatic backup of your database if anything goes wrong.
 204
 205 ### Added
 206 - Add CHANGELOG.md to track the whole project's history
 207 - Enable Composer cache for Travis builds
 208 - Save the last edition date for shaares and use it in Atom/RSS feeds
 209 - Plugins:
 210     - Add an [Isso](https://posativ.org/isso/) plugin to enable user comments on permalinks
 211     - Allow defining init functions, e.g. for performing checks and error processing
 212     - Add a Piwik plugin for analytics.
 213     - Markdown: add warning notice regarding HTML rendering
 214 - Meta tag to *not* send the referrer to external resources.
 215
 216 ### Changed
 217 - Link ID complete refactoring:
 218     - Links now have a numeric ID instead of dates
 219     - Short URLs are now created once and can't change over time (previous URL are kept)
 220 - Templates:
 221     - Changed placeholder behaviour for: `buttons_toolbar`, `fields_toolbar` and `action_plugin`
 222     - Cleanup `{loop}` declarations in templates
 223     - Tools: hide Firefox Social button when not in HTTPS
 224     - Firefox Social: show Shaarli's title when shaaring using Firefox Social
 225 - Release archives now have the same structure as GitHub-generated archives:
 226     - archives contain a `Shaarli` directory, itself containing sources + dependencies
 227     - the tarball is now gzipped
 228 - Plugins:
 229     - Markdown: Parsedown library is now imported through Composer
 230 - Minor code cleanup: PHPDoc, spelling, unused variables, etc.
 231 - Docker: explicitly set the maximum file upload size to 10 MiB
 232
 233 ### Fixed
 234 - Fix the server `<self>` value in Atom/RSS feeds
 235 - Plugins:
 236     - Tools: only display parameter description when it exists
 237     - archive.org: do not propose archival of private notes
 238     - Markdown:
 239         - render links properly in code blocks
 240         - bug regarding the `nomarkdown` tag
 241     - W3C compliance
 242 - Use absolute URL for hashtags in RSS and ATOM feeds
 243 - Docker: specify the location of the favicon
 244 - ATOM feed: remove new line between content tag and data
 245
 246 ### Security
 247 - Allow whitelisting trusted IPs, else continue banning clients upon login failure
 248
 249
 250 ## [v0.8.0](https://github.com/shaarli/Shaarli/releases/tag/v0.8.0) - 2016-10-12
 251 Shaarli now uses [Composer](https://getcomposer.org/) to handle its dependencies.
 252 Please use our release archives, or follow the
 253 [installation documentation](https://github.com/shaarli/Shaarli/wiki/Download-and-Installation).
 254
 255 ### Added
 256 - Composer is required to resolve Shaarli's PHP dependencies
 257 - Shaarli now supports `#hashtags`
 258 - Firefox social share now uses selected text as a description
 259 - Plugin parameters can have a description in each plugin's `.meta` file
 260
 261 ### Changed
 262 - Configuration is now stored as a JSON file
 263 - Previous configuration format will be automatically updated (PHP -> JSON)
 264 - Shaarli now defaults to cURL to fetch shaare titles
 265 - URL cleanup: remove `PHPSESSID` parameter
 266 -  `nomarkdown` tag is no longer private, and now affects visitors
 267 - Cleanup template indentation
 268 - Rewrite bookmark import using a generic Netscape parser
 269
 270 ### Removed
 271 - Shaarli no longer references Delicious in its description
 272
 273 ### Deprecated
 274 - Shaarli configuration is not held as PHP globals anymore
 275
 276 ### Fixed
 277 - Ignore case for tags in autocompletion and cloud tag
 278 - Avoid generating empty tags
 279 - Fix a Dockerfile syntax error
 280
 281 ### Security
 282 - Fixed a bug preventing to change password
 283 - XSRF token now generated each time a page is rendered
 284
 285
 286 ## [v0.7.1](https://github.com/shaarli/Shaarli/releases/tag/v0.7.1) - 2017-03-08
 287 ### Security
 288 - Markdown plugin: escape HTML entities by default
 289
 290 ## [v0.7.0](https://github.com/shaarli/Shaarli/releases/tag/v0.7.0) - 2016-05-14
 291 ### Added
 292 - Adds an option to encode redirector URL parameter
 293 - Atom/RSS feeds now support Markdown formatting, and plugins in general
 294 - Markdown: use the tag `.nomarkdown` to avoid markdown processing
 295 - Prefill the login field when the authentication has failed
 296 - Show a private links counter
 297
 298 ### Changed
 299 - Allow to use the bookmarklet in Firefox reader view (URL clean up)
 300 - Improve tagcloud font size
 301 - Improve title retrieving
 302 - Markdown: inline code background color
 303 - Refactor Netscape bookmark export
 304 - Refactor Atom/RSS feed generation
 305
 306 ### Removed
 307 - Remove delicious from Shaarli description
 308
 309 ### Fixed
 310 - Fix bad login redirections causing a 404 in a few cases
 311 - Fix tagcloud font-size with French locale
 312 - Don't display empty tags in tag search
 313 - Fix Awesomeplete conflicts with jQuery
 314 - Fix UTC timezone selection
 315 - Fix a bug preventing to import notes in browsers from bookmarks export
 316 - Don't redirect to ?post if ?addlink is reached while logged out
 317
 318
 319 ## [v0.6.5](https://github.com/shaarli/Shaarli/releases/tag/v0.6.5) - 2016-03-02
 320 ### Fixed
 321 - Fixes a regression generating an unnecessary warning (language in HTTP request)
 322 - Fixes a bug where going through multiple reverse proxy could generate malformed URL
 323 - Markdown: Fixes a bug where empty description blocks were displayed
 324
 325
 326 ## [v0.6.4](https://github.com/shaarli/Shaarli/releases/tag/v0.6.4) - 2016-02-28
 327 ### Added
 328 - Add an updater class to automate user data upgrades
 329 - Plugin admin page: adds a label for checkboxes and improve name display
 330 - Plugin Wallabag: API version can be specified in plugin admin page
 331
 332 ### Changed
 333 - Better tag cloud sorting, including special chars (`a > E > é > z`)
 334 - Autolocale now sets all locale categories, not just time
 335 - Use PHP's DateTime object instead of custom functions
 336 - Plugin hooks: process includes before header/footer
 337 - Markdown plugin: better styles for `<code>` and `<pre>` tags
 338 - Improve searching:
 339     - search terms are now considered separated and won't only return exact results anymore
 340     - exact search can be done with quotes `"this exact sentence"`
 341     - search supports excluded terms starting a dash `-exclude`
 342     - implement crossed search: terms + tags
 343     - all of them combined across all shaare fields
 344 - New tag behaviour:
 345     - tags starting with a dash will be renamed without it
 346     - tags starting with a dot `.` will be hidden unless the user is logged in
 347
 348 ### Fixed
 349 - Fix Markdown plugin escape issues (code/quote blocks, etc.)
 350 - Link description aren't trimmed anymore to allow markdown format at the beginning of a shaare
 351 - Fixes plugin admin redirection page on error
 352
 353 ### Security
 354 - Fix a bug where non initialized variables were causing a warning
 355 - Fix a bug where saving a link after edit could cause a 404 error
 356
 357
 358 ## [v0.6.3](https://github.com/shaarli/Shaarli/releases/tag/v0.6.3) - 2016-01-31
 359 ### Added
 360 - Plugins administration page
 361 - Markdown plugin added for shaares description
 362 - Docker: Dockerfile is now in the main git repository and improved
 363 - Add a `.gitattributes` to ease repository management
 364 - Travis: include file permission checks
 365
 366 ### Changed
 367 - Auto retrieve of title know works with websites (HTTPS, follow redirections, etc.)
 368 - 404 page is now handled in a template
 369 - Date in log files updated to work with fail2ban
 370 - Wallabag: support of Wallabag v2 and minor fixes
 371 - Link search refactoring
 372 - Logging function refactoring
 373
 374 ### Fixed
 375 - Fix a bug where renaming a tag was causing a 404
 376 - Fix a bug allowing to search blank terms
 377 - Fix a bug preventing to remove a tag with special chars when searching
 378
 379
 380 ## [v0.6.2](https://github.com/shaarli/Shaarli/releases/tag/v0.6.2) - 2015-12-23
 381 ### Changed
 382 - Plugins: new footer hook
 383 - Plugins: improve QR code
 384 - Cleanup templates
 385
 386 ### Fixed
 387 - Plugins: use the actual link URL to generate QR codes
 388 - Templates: missing/erroneous page titles
 389 - Templates: missing variables resulting in PHP errors
 390
 391 ### Security
 392 - Fix invalid file permissions (remove executable bit)
 393
 394
 395 ## [v0.6.1](https://github.com/shaarli/Shaarli/releases/tag/v0.6.1) - 2015-12-01
 396 ### Added
 397 - Add OpenSearch support
 398 - Add a Doxygen makefile target
 399 - Tools: add fine-grained file/directory permission checks (installation)
 400
 401 ### Changed
 402 - Tools: check the 'stable' branch for new versions (updates)
 403 - Cleanup: introduce an `ApplicationUtils` class
 404
 405 ### Removed
 406  - Cleanup: remove `json_encode()` function (built-in since PHP 5.2)
 407
 408 ### Fixed
 409  - Auto-complete more than one tag
 410  - Bookmarklet: support titles containing quotes
 411  - URL encode links when setting a redirector
 412
 413
 414 ## [v0.6.0](https://github.com/shaarli/Shaarli/releases/tag/v0.6.0) - 2015-11-18
 415 ### Added
 416 - Introduce a plugin system
 417 - Add a demo_plugin
 418 - Add plugins:
 419     - addlink_toolbar
 420     - archiveorg
 421     - playvideos
 422     - qrcode
 423     - readityourself
 424     - wallabag
 425
 426 ### Changed
 427 - Coding style
 428
 429 ### Fixed
 430 - Adding a new link now returns the correct anchor in the URL
 431 - Set default file permissions
 432
 433
 434 ## [v0.5.4](https://github.com/shaarli/Shaarli/releases/tag/v0.5.4) - 2015-09-15
 435 ### Added
 436 - HTTPS: support being served behing an SSL-enabled proxy
 437
 438 ### Changed
 439 - HTTP/Server utilities: refactor & add test coverage
 440 - Project & documentation:
 441     - improve/rewrite `README.md`
 442     - update contributor list
 443     - update `index.php` header
 444
 445 ### Fixed
 446 - PHP session IDs: handle hash algorithms and bits per char representations
 447
 448
 449 ## [v0.5.3](https://github.com/shaarli/Shaarli/releases/tag/v0.5.3) - 2015-09-02
 450 ### Fixed
 451 - Fix a bug that could prevent user to login
 452
 453
 454 ## [0.5.3](https://github.com/shaarli/Shaarli/releases/tag/0.5.3) - 2015-09-02
 455 This release has been YANKED as it points to a tag that does not follow our naming convention. Please use `v0.5.3` instead
 456
 457 ### Fixed
 458 - Allow uppercase letters in PHP sessionid format
 459
 460
 461 ## [v0.5.2](https://github.com/shaarli/Shaarli/releases/tag/v0.5.2) - 2015-08-31
 462 ### Added
 463 - Add PHP 7 to Travis platforms
 464
 465 ### Changed
 466 - Also extract HTTPS page metadata (title)
 467
 468 ### Fixed
 469 - Fix regression preventing to load LinkDB info when adding an existing link
 470
 471 ### Security
 472 - Fix Full Path Disclosure upon cookie forgery
 473
 474
 475 ## [v0.5.1](https://github.com/shaarli/Shaarli/releases/tag/v0.5.1) - 2015-08-17
 476 ### Added
 477 - Add a link to the shaarli/shaarli DockerHub repository
 478
 479 ### Changed
 480 - Update local documentation
 481 - Improve timezone detection at installation
 482 - Improve feed cache handling
 483 - Improve URL cleanup for new links
 484
 485 ### Fixed
 486 - Fix 404 after editing a link while being logged out
 487
 488
 489 ## [v0.5.0](https://github.com/shaarli/Shaarli/releases/tag/v0.5.0) - 2015-07-31
 490 ### Added
 491 - Add Firefox Social API
 492 - Start code refactoring:
 493     - add unit test coverage
 494     - add Travis integration
 495
 496 ### Changed
 497 - Search/Filter by tag fieds can now be accessed quickly with the `Tab` key
 498 - Update documentation
 499 - Remove duplicate tags in links
 500 - Remove annoying URL patterns
 501 - Start code refactoring:
 502     - move all settings to `data/config.php`
 503     - refactor Config, LinkDB, TimeZone, Utils
 504
 505 ### Fixed
 506 - Fix locale handling
 507 - Fix note URLs
 508 - Fix page redirections
 509 - Fix daily RSS browsing
 510 - Fix title display
 511 - Restore compatibility with PHP 5.3
 512
 513 ### Security
 514 - Fix links not being hidden when `HIDE_PUBLIC_LINKS` is set
 515
 516
 517 ## [v0.0.45beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.45beta) - 2015-03-16
 518 ### Fixed
 519 - Fix improperly displayed Unicode character
 520 - Fix incorrect font size for "Add link" input field
 521
 522
 523 ## [v0.0.44beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.44beta) - 2015-03-15
 524 ### Added
 525 - Add a Makefile to run static code checkers
 526 - Add local documentation (help link in page footer)
 527 - Use awesomplete library for autocompletion
 528 - Use bLazy.js library for images lazy loading
 529 - New 'Add Note' bookmarklet to immediatly open a note (text post) compose window
 530
 531 ### Changed
 532 - Theme improvements and cleanup (menu, search fields, icons, linklist...)
 533 - Allow 'javascript:' links sharing (bookmarklets)
 534 - Make update check optional
 535 - Redirect to homepage after adding a link via "Add Link" dialog
 536 - Remove more annoying URL parameters for shared links
 537 - Code cleanup
 538
 539 ### Removed
 540 - Remove jQuery
 541
 542 ### Security
 543 - Don't disclose version to visitors (shaarli-version.txt)
 544
 545
 546 ## [v0.0.43beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.43beta) - 2015-02-20
 547 ### Added
 548 - Title button link URL is now configurable
 549 - RainTPL's TMP and TPL directories path are now configurable
 550 - Displayed URLs for each link are now clickable links
 551 - Show links timestamps in Daily view
 552
 553 ### Changed
 554 - Automatically prepend "Note:" to title of self-posts (posts not pointing to an URL)
 555 - Make ATOM toolbar button optional (`SHOW_ATOM` configuration variable)
 556 - Optional archive.org links for each Shaarli link (`ARCHIVE_ORG` option)
 557 - Thumbnails: force HTTPS when possible
 558 - Improve tag cloud font scaling
 559 - Allow pointing RSS items to the permalink instead of the direct URL (`ENABLE_RSS_PERMALINKS` option)
 560 - Update JS libraries and add version numbers in filenames
 561 - Updates to README and footer
 562
 563 ### Fixed
 564 - Fix problems when running Shaarli behind a reverse proxy (invalid RSS feed URL)
 565 - Update check now checks against the community fork version
 566 - Include `cache/`, `data/`, `pagecache/` and `tmp/` directories in the repository
 567 - Fix duplicate tag search returning no results
 568 - Fix unnecessary 404 error on "Add link" when the user is logged out
 569 - Fixes to copyright/licensing information and unlicensed media
 570 - Fixes for tag cloud invalid links
 571 - Coding style fixes/cleanup
 572 - Fix redirection after deleteing a link leading to a 404 error
 573 - Shaarli's HTML is now W3C-compliant
 574 - Search now works with Unicode characters
 575
 576 ### Security
 577 - Do not leak server's PHP version and Shaarli's full path on errors
 578 - Prevent Shaarli from sending a lot of duplicate cookies
 579
 580
 581 ## [v0.0.42beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.42beta) - 2014-07-27
 582 ### Added
 583 - Add QRCode Javascript library
 584 - Allow importing bookmarks with the same timestamp (hack)
 585 - Allow putting a description in the bookmarklet URL
 586 - Add `json_encode()` implementation for PHP<5.2
 587 - Highlight search results
 588
 589 ### Changed
 590 - Improve 'Stay signed in' behaviour
 591 - Improve `smallHash()`
 592 - Refactor QRCode generation
 593 - Update Javascript lazyloading
 594 - Update CSS
 595
 596 ### Removed
 597 - Remove jQuery from almost all pages
 598
 599 ### Fixed
 600 - Fix overlapping tags
 601 - Fix field foxus in the bookmarklet
 602 - Fix error message when `data/` is not writable
 603 - Fix HTML generation
 604
 605 ### Security
 606 - Fix XSS flaw
 607
 608
 609 ## [v0.0.41beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.41beta) - 2013-03-08
 610 ### Added
 611 - Add HTTPS to the allowed protocols
 612 - Add support for magnet links in link descriptions
 613 - Allow creating new links as private by default
 614 - Allow disabling jQuery
 615 - Check write permissions
 616 - Check session support before installation
 617
 618 ### Changed
 619 - Improve token security
 620 - RSS feed: allow inverting links/permalinks
 621
 622 ### Fixed
 623 - Fix display issues during installation
 624 - Fix popup redirection after login failure
 625 - Fix RSS formatting for Thunderbird
 626 - Fix thumbnail creation
 627 - Fix cache purge
 628
 629 ### Security
 630 - Fix login issue with WebKit browsers
 631
 632
 633 ## [v0.0.40beta](https://github.com/shaarli/Shaarli/releases/tag/v0.0.40beta) - 2013-02-26
 634 Initial release on GitHub.
 635
 636
 637 ## [v0.0.40beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-08-24
 638 ### Added
 639 - Flickr thumbnail now also support albums, galleries and users
 640 - Add a configuration option to disable session cookie protection
 641   Check this if your get disconnected often or your IP address changes often
 642
 643 ### Removed
 644 - Removed the xml comment in cached RSS/ATOM feed
 645   (although W3C-compliant, this may cause problems in some feed readers)
 646
 647 ### Fixed
 648 - A bug in the RSS cache would present old items as new in some cases
 649 - A small bug (non-initialized variable) in page cache cleaning
 650 - Proper "Nothing found" message when search returns no results
 651 - No more 404 error when searching with empty input
 652 - Flickr thumbnails are back (Flickr has made some changes to their domains)
 653
 654 ## [v0.0.39beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-08-10
 655 ### Added
 656 - A cache for RSS feed, ATOM feed and Daily RSS feed, because these URLs
 657   are massively hammered. Cache is automatically purged whenever the database
 658   is changed. This will reduce server load. I may add cache to other pages later.
 659
 660 ### Changed
 661 - No more global `$LINKSDB` (Yuk)
 662 - Background color was removed when hovering a link
 663
 664 ### Fixed
 665 - Small bug corrected in config screen on timezones
 666 - Calling a non-existing permalink now returns a crude 404 error instead of 200 (OK)
 667   This is done on purpose
 668 - The `shaarli` session cookie now has a proper path
 669   Thus you can now install several Shaarlis on the same server in different paths,
 670   and each will have its session
 671 - Now when you delete a link, you go back the same page/search parameters you were on
 672 - Restore previously removed `error_get_last()`, to ensure PHP 5.1 compatibility
 673   (Yes, now it works on free.fr hosting)
 674 - Added `dialog=1` in bookmarklet code for some browsers
 675
 676
 677 ## [v0.0.38beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-02-06
 678 ### Added
 679 - Automatic creation of the `tmp` directory with proper rights (for RainTPL)
 680 - When you click the key to see only private links, it turns yellow
 681
 682 ### Changed
 683 - The "Daily" page now automatically skips empty days.
 684
 685 ### Fixed
 686 - Corrected the tag encoding (there was a bug when selecting a second tag which contains accented characters)
 687
 688
 689 ## [v0.0.37beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-02-01
 690 ### Added
 691 - Basic CSS for mobiles, which makes Shaarli //much// more usable on mobile devices
 692 - Picture wall no more instantly kills your browser. Now it uses
 693   [lazy image loading](http://www.appelsiini.net/projects/lazyload);
 694   the pictures are loaded only as you scroll the page.
 695   This will reduce browser memory usage (especially on mobile devices),
 696   as well as server load.
 697   If you have javascript disabled, the page will still work as before
 698   (all images loaded at once)
 699 - RSS feed for the "Daily" page. 1 RSS entry per day, with all links of that day.
 700   RSS feed provides the last 7 days (only non-empty days are returned).
 701 - In link list, added an icon to see only private links. Click to toggle (only private / all)
 702
 703
 704 ## [v0.0.36beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
 705 ### Added
 706 - Shaarli licence in COPYING
 707
 708 ### Changed
 709 - Display adjustments in "Daily" page
 710
 711 ### Fixed
 712 - Improper text color in install form
 713 - Error in QRCode url (missing '?')
 714
 715
 716 ## [v0.0.35beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
 717 ### Fixed
 718 - Corrected a bug introduced in 0.0.34 which would improperly preprend data to URLs
 719
 720
 721 ## [v0.0.34beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-25
 722 ### Added
 723 - There is now a QR-Code of each permalink to easily open a link on your smartphone
 724 - Protocols `file:` and `apt:` are now also converted to clickable links (patch by Francis Chavanon)
 725 - Thumbnail support for http://xkcd.com/ (patch by Emilien Klein)
 726 - Thumbnail support for http://pix.toile-libre.org/
 727 - Well I had _some_ mercy for users with antique browsers (IE) which do not have
 728   support for gradients: I added a few `background-color`
 729 - First version of the "Shaarli Daily", a page showing all links of a specific day.
 730   By default, you see the links of the previous day.
 731   There is still work to do on this page (error checking, better navigation (calendar?),
 732   RSS feed, CSS for mobile and printing...)
 733
 734 ### Changed
 735 - Upgraded bundled versions of jQuery (1.7.1) and jQuery UI (1.8.17)
 736 - Upgraded bundled version of RainTPL (2.7)
 737 - Changed HTTPS detection code
 738
 739 ### Fixed
 740 - In link edition, you can now click the word "Private" to check the box
 741 - Clicking a tag would not work properly if the tag contained special characters (like +)
 742 - Added proper jQuery licence (shame on me)
 743
 744
 745 ## [v0.0.33beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2012-01-17
 746 ### Added
 747 - Shaarli packaged to ease Linux distributions integration
 748   As a simple user, you do not need to cope with these versions
 749   Future releases of Shaarli will also be customized and published in these directories
 750   Differences with the standard Shaarli version:
 751     - deb:
 752         - .tar.gz instead of .zip
 753         - COPYING licence file added
 754         - jQuery/jQuery-UI libraries removed to cope with Debian rules
 755           This version links to the libs hosted at http://code.jquery.com
 756     - rpm:
 757         - sources located in a subdirectory with the same name as the zip file
 758         - COPYING licence file added
 759     - WARNING: When downloading the .tar.gz, always use wget (and not your browser),
 760       otherwise the .tar.gz will be corrupted
 761
 762 ### Fixed
 763 - ATOM feed validates again
 764
 765 ### Security
 766 - XSS vulnerability patched (thanks to Stanislas D.!)
 767
 768
 769 ## [v0.0.32beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-12-16
 770 ### Added
 771 - Better check on URL parameters (patch by gege2061)
 772 - Add `max-height` and `overflow:auto` attributes so that content can be scrolled if too large
 773
 774 ### Changed
 775 - HTML generation moved to RainTPL templates (in the `tpl/` directory)
 776 - Better detection of HTTPS (patch by gege2061)
 777 - In RSS/ATOM feeds, the GUID is now the permalink instead of the final URL (patch by gege2061)
 778 - Jerrywham CSS patch included
 779 - Multiple spaces are now respected in description.
 780   Thus you can use Shaarli as a personal pastebin (for posting source code, for example).
 781
 782 ### Removed
 783 - Page time generation was removed
 784
 785 ### Fixed
 786 - Tab order changed in login screen
 787 - Permalinks now work even if additional parameters have been added
 788   (e.g. `/?E8Yj2Q&utm_source=blablabla...`)
 789 - user.css is included only if the file is present
 790   (This prevents a useless CSS include which makes a harmless but useless 404 error.)
 791
 792
 793 ## [v0.0.31beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-29
 794 ### Added
 795 - Support for TED Talks (ted.com/talks) thumbnails (patch by Emilien K.)
 796 - partial [patch](http://www.idleman.fr/blog/?p=508) by Idleman: Better design consistency, icon on private links. In-page popup was not included because it causes problem on some websites
 797 - Support for bookmark files without ADD_DATE attributes
 798 - Logo is clickable
 799 - `user.css` can be added to overload Shaarli base CSS.(patch by Jerrywham).
 800   Just put `user.css` in the same directory as shaarli.css.
 801   Example: `<code css>#pageheader { background: blue; }</code>`
 802   Please note that Shaarli CSS are not stable and may completely change on each version
 803
 804 ### Changed
 805 - Edit and Delete buttons in link list were replaced with icons. (patch by Jerrywham)
 806
 807 ### Fixed
 808 - Better error handling in thumbnail generation (patch by Emilien K.)
 809 - The top menu is no longer displayed in bookmarklet popup
 810 - Bookmark which have the exact same date/time are now correctly imported.
 811   Most remaining import problems should be solved now
 812 - Comment in Shaarli export moved to beginning of file to prevent clash with last link description
 813
 814
 815 ## [v0.0.30beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-18
 816 ### Added
 817 - Add a small `delete` button in link list (after the `edit` button)
 818
 819 ### Fixed
 820 - Moved the call to PubSubHub
 821
 822
 823 ## [v0.0.29beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-18
 824 ### Fixed
 825 - Corrected a bug introduced in v0.0.28beta
 826   (there was an error if you use the bookmarklet and you're not logged in)
 827
 828
 829 ## [v0.0.28beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-11-17
 830 ### Added
 831 - Thumbnail support for youtu.be URLs (YouTube short url service)
 832 - PubSubHub protocol support (from http://aldarone.fr/les-flux-rss-shaarli-et-pubsubhubbub/).
 833   Warning: This was not tested. You need to set your hub url in
 834   `$GLOBALS['config']['PUBSUBHUB_URL']` and put the official client (`publisher.php`)
 835   in the same directory as Shaarli's `index.php`
 836 - RSS and ATOM feeds now also contain tags (in `category` tags, as per their
 837   respective specifications)
 838
 839 ### Changed
 840 - New Shaarli theme and logo by Idle (http://www.idleman.fr/blog/?p=469)
 841 - In picture wall, pictures point to Shaarli permalink instead of final URL.
 842   This way, users can read the description.
 843 - In RSS/ATOM feeds, guid and link URL of permalinks are now proper absolute URLs
 844 - In RSS/ATOM feeds, URLs are now clickable
 845 - Rename `http_parse_headers()` to `http_parse_headers_shaarli()` to prevent
 846   name collision with some PHP extensions
 847
 848 ### Fixed
 849 - Thumbnails removed for imgur.com/a/ URLs (Thumbnails are not available for albums on imgur)
 850 - Shaarli now correctly only tries to get thumbnails for vimeo video URLs
 851 - Fix a bug in imgur.com URLs handling that would cause some thumbnails not to appear
 852 - The search engine would not return a result if the word to search was the first in description
 853 - Extracted title is now correct if the page has two `title` html tags
 854
 855
 856 ## [v0.0.27beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-18
 857 ### Added
 858 - Add a picture wall, which can be filtered too: it will use the same filters
 859   (tags,text search) as current page when clicked.
 860
 861
 862 ## [v0.0.26beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-17
 863 ### Changed
 864 - Made permalink more visible (smallHash)
 865
 866 ### Fixed
 867 - Removed extras space in description when URLs are converted to clickable links
 868 - Thumbnail for subreddit imgur urls (/r/...) were corrected (thanks to Accent Grave)
 869
 870
 871 ## [v0.0.25beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-10-13
 872 ### Added
 873 - Better CSS for printing (thanks to jerrywham suggestion)
 874 - Allow using a redirector or anonymizing proxy for links
 875   (such as `http://anonym.to/?` to mask you `HTTP_REFERER`).
 876   Just go to `Tools > Configure > Redirector`
 877   (thanks to Accent Grave for the suggestion).
 878 - The `ENABLE_LOCALCACHE` option can be set to `false` for those who have
 879   a limited quota on their host.
 880   This will disable the local thumbnail cache.
 881   Services which require the use of the cache will have no thumbnails
 882   (vimeo, flickr, direct link to image).
 883   Other services will still have a thumbnail (youtube,imgur.com,dailymotion,imageshack.us)
 884
 885 ### Changed
 886 - Now thumbnails generated by Shaarli are croped to a height of 120 pixels
 887 - YouTube thumbnails now use `default.jpg` instead of `2.jpg` (This is usually more pertinent)
 888 - Configuration options (such as `HIDE_TIMESTAMPS`, `ENABLE_THUMBNAILS`, etc.)
 889   can now be put in a an external file so that you do not have to tweak them again
 890   when you upgrade Shaarli.
 891   Just add the file `data/options.php`.
 892 - If a single link is displayed, the page title contains the title of the link
 893 - Shaarli page title is clickable (and has the same link as "Home")
 894 - A few CSS tweaks (thanks to maethor for suggestion)
 895
 896 ### Fixed
 897 - Shaarli now supports newlines in titles (thanks to dixy)
 898 - The link to the RSS feed in page header was not correct
 899
 900
 901 ## [v0.0.24beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 902 ### Added
 903 - Allow posting an entry without a link. (You can use Shaarli as a kind of "personal twitter")
 904 - Each Shaarli entry now has a short link (just click on the date of a link).
 905   Now you can send a link that points to a single entry in your Shaarli
 906 - In descriptions, URLs are now clickable
 907 - Thumbnails will be generated for all link pointing to .jpg/png/gif
 908   (as long as the images are less than 4 Mb and take less than 30 seconds to download)
 909
 910 ### Fixed
 911 - Now thumbnails also work for imgur gallery links (/gallery/...)
 912   (Thanks to Accent Grave for the correction)
 913 - Removed useless debugging information in log
 914 - The filter in RSS/ATOM feed now works again properly (it was broken in 0.0.17beta)
 915
 916
 917 ## [v0.0.23beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 918 ### Added
 919 - Added thumbnail support for imageshack.us
 920
 921 ### Changed
 922 - Now you can clic the sentence "Stay signed in" to tick the checkbox (patch by Emilien)
 923 - In tag editing, comma (,) are now automatically converted to spaces
 924 - In tag editing, autocomplete no longuer suggests a tag you have already entered in the same line
 925
 926
 927 ## [v0.0.22beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 928 ### Added
 929 - Support for thumbnails for flickr.com
 930 - Allow staying signed in:
 931   Your session will be kept open even if you close the browser.
 932   This is available through a checkbox in the login screen.
 933
 934 ### Changed
 935 - Some hosts (flickr, vimeo) are slow as hell for the thumbnails,
 936   or require an extra HTTP request.
 937   For these hosts the thumbnail generation has been deported outside the generation
 938   of the page to keep Shaarli snappy.
 939   For these slow services, the thumbnails are also cached.
 940
 941 ### Fixed
 942 - Title was not properly passed if you had to login when using the bookmarklet (patch by shenshei)
 943
 944
 945 ## [v0.0.21beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 946 ### Added
 947 - Thumbnails for some services
 948   Currently supports: YouTube.com, dailymotion.com, vimeo.com (slow!) and imgur.com.
 949   Thumbnails are enabled by default, but you can turn them off
 950   (set `define('ENABLE_THUMBNAILS',true);` to `false`).
 951
 952 ### Changed
 953 - Removed the focus on the searchbox (this is cumbersome when you want to browse pages
 954   and scroll with the keyboard)
 955
 956
 957 ## [v0.0.20beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 958 ### Fixed
 959 - RSS feed is now served as `application/rss+xml` instead of `application/xhtml+xml`
 960   (which was causing problem in //RSS Lounge//)
 961 - ATOM feed is now served as `application/atom+xml` instead of `application/xhtml+xml`
 962
 963
 964 ## [v0.0.19beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 965 ### Added
 966 - ATOM feed
 967
 968 ### Fixed
 969 - Patch by Emilien to remove the update notification after the update
 970
 971
 972 ## [v0.0.18beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 973 ### Added
 974 - You can now configure the title of your page
 975 - New screen to configure title and timezone
 976
 977 ### Changed
 978 - Nicer timezone selection patch by killruana
 979
 980 ### Fixed
 981 - New lines now appear correctly in the RSS feed descriptions.
 982
 983
 984 ## [v0.0.17beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 985 ### Added
 986 - Change password screen added (based on a patch by killruana)
 987 - Autocomplete in the tag search form
 988 - You can rename or delete a tag in all links
 989   (very handy if you misspelled a tag or want to merge tags)
 990 - When you click the RSS feed, the feed will be filtered with the same filters
 991   as the page you were viewing
 992
 993 ### Changed
 994 - CSS adjustments by jerrywham
 995 - Minor corrections
 996
 997
 998 ## [v0.0.16beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 999 ### Added
1000 - Upgrade notification:
1001   If a new version of Shaarli is available, you will be notified by a discreet
1002   message in top-right corner.
1003   This message will only be visible if you are logged in, and the check will be
1004   performed at most once a day.
1005 - Preliminary tag cloud (ugly for the moment, I need to find something better)
1006
1007 ### Changed
1008 - Replaced `preg_match()` with `version_compare()` to check PHP version
1009 - Includes a patch by Emilien K. to mask dates if user is not logged in.
1010   The option can be activated by changing `define('HIDE_TIMESTAMPS',false);` to `true`
1011
1012
1013 ## [v0.0.15beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1014 ### Added
1015 - New in import: Option to overwrite existing links when importing
1016 - On free.fr, automatic creation of the `/sessions` directory
1017
1018 ### Changed
1019 - CSS Stylesheet is now an external file (shaarli.css).
1020   This reduces page size and eases customization.
1021
1022 ### Removed
1023 - Removed some parameters in URL added by some feed proxies (`#xtor=RSS-...`)
1024
1025 ### Fixed
1026 - Bug corrected: Prevented loop on login screen upon successful login after a failed login
1027 - Bug corrected in import: HTML entities were not properly decoded.
1028   If you imported your Delicious/Diigo bookmarks, your should import them again
1029   and use the 'overwrite' option of the import feature.
1030
1031
1032 ## [v0.0.14beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1033 ### Added
1034 - You no longer need to disable `magic_quotes` on your host.
1035   Shaarli will cope with this option beeing activated.
1036
1037
1038 ## [v0.0.13beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1039 ### Added
1040 - Import: New option to import html bookmark file as private links
1041 - Import: Importing a bookmark file will not overwrite existing links anymore
1042 - Export: New options to export only public or private links
1043
1044 ### Changed
1045 - In tag autocomplete, tags are presented in use order
1046   (most used tags first, instead of alphabetical order)
1047 - RSS Feed can now be filtered by tags or fulltext search. Just add to the feed url:
1048   - `&searchtags=minecraft+video` for tag filtering
1049   - `&searchterm=portal` for fulltext search to the feed url
1050
1051
1052 ## [v0.0.12beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1053 ### Added
1054 - Add a check that the config file was properly created
1055   (in case Shaarli does not have the write rights in its folder)
1056 - Open Shaarli: there is an option to open your Shaarli to anyone.
1057   Anybody will be able to add/edit/delete links without having to login.
1058   In code, change `define('OPEN_SHAARLI',false);` to `true`.
1059   Note: No anti-spam for the moment. You are warned!
1060 - Autocomplete for tags
1061
1062
1063 ## [v0.0.11beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1064 ### Added
1065 - Add a check and a warning for some hosts which still have `magic_quotes` activated
1066
1067
1068 ## [v0.0.10beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1069 ### Added
1070 - Get rid of `&quot;` in titles
1071
1072
1073 ## [v0.0.9beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1074 ### Added
1075 - Now works on hosts `free.fr` and `1and1`
1076 - Now works with PHP 5.1
1077 - PHP version is now checked and an error message is displayed if version is not correct
1078
1079 ### Fixed
1080 - No more error messages if the browser does not send `HTTP_REFERER`
1081 - No more error messages if the host has disabled http protocol in PHP config (eg. 1and1)
1082
1083
1084 ## [v0.0.8beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
1085 ### Changed
1086 - In RSS feed, GUID content replaced with the URL of the link, because some
1087   stupid RSS reader (like Google Reader) use `<guid>` as a link instead of using `<link>`
1088
1089
1090 ## [v0.0.7beta](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history) - 2011-09-16
1091 First public release by Sebsauvage, see original article:
1092 [Adieu Delicious, Diigo et StumbleUpon. Salut Shaarli !](http://sebsauvage.net/rhaa/index.php?2011/09/16/09/29/58-adieu-delicious-diigo-et-stumbleupon-salut-shaarli-) (FR)