Remove trailing whitespace

[ikiwiki.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index c608043f432eb3a6f3b26972c9ac52a55a443b99..5c57b8332c786560f30d501fc14e7f2fd8e55f8c 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,5 +1,64 @@
+ikiwiki (2.40) UNRELEASED; urgency=low
+
+  [ Josh Triplett ]
+  * Add new preprocessor directive syntax¸ using a '!' prefix.  Add a
+    prefix_directives option to the setup file to turn this syntax on;
+    currently defaults to false, for backward compatibility.  Support
+    optional '!' prefix even with prefix_directives off, and use that in
+    the underlay to support either setting of prefix_directives.  Add NEWS
+    entry with migration information.
+
+  [ Joey Hess ]
+  * Danish translation update from Jonas Smedegaard. Closes: #465152
+  * Generate XML RPC messages with the encoding set to utf-8 instead
+    of XML::RPC's default of us-ascii. Allows interoperation with
+    python's xmlrpc library, which threw invalid encoding exceptions and
+    caused the rst plugin to hang.
+
+ -- Josh Triplett <josh@freedesktop.org>  Sun, 10 Feb 2008 13:18:58 -0800
+
+ikiwiki (2.31.3) unstable; urgency=high
+
+  [ Josh Triplett ]
+  * Do not allow the about: URI scheme; some browsers interpret about:
+    URIs like a limited version of data: URIs.  In particular, some
+    versions of Internet Explorer interpret arbitrary HTML content in
+    about: URIs.
+  * Also filter the attributes cite, longdesc, and usemap, which can contain
+    URIs.
+
+  [ Joey Hess ]
+  * meta: Check that the urls provided for authorurl, permalink, and openid
+    are safe and can't contain javascript.
+
+  [ Josh Triplett ]
+  * Match literal '.' in URI schemas containing '.', rather than matching any
+    character.
+  * Do not allow the steam: URI scheme.
+  * Allow the snews: URI scheme.
+  * Allow the smb: URI scheme.
+
+ -- Josh Triplett <josh@freedesktop.org>  Sun, 10 Feb 2008 14:48:48 -0800
+
+ikiwiki (2.31.2) unstable; urgency=high
+
+  * The security fix in the last release had buggy handling of data:image,
+    now fixed.
+
+ -- Joey Hess <joeyh@debian.org>  Sun, 10 Feb 2008 15:31:17 -0500
+
+ikiwiki (2.31.1) unstable; urgency=low
+
+  * htmlscrubber security fix: Block javascript in uris.
+  * Add htmlscrubber test suite.
+  * Thanks to Josh Triplett for pointing out the holes and for his help
+    in implementing and checking fixes.
+
+ -- Joey Hess <joeyh@debian.org>  Sun, 10 Feb 2008 13:22:59 -0500
+
 ikiwiki (2.31) unstable; urgency=low
 
+  [ Joey Hess ]
   * Revert preservation of input file modification times in output files,
     since this leads to too many problems with web caching, especially with
     inlined pages. Properly solving this would involve tracking every page
@@ -39,8 +98,12 @@ ikiwiki (2.31) unstable; urgency=low
   * Don't die if running with --getctime and rcs_getctime throws an error.
     There are several cases (recentchanges files, aggregated files)
     where some source files are not in revision control.
+  * Page templates can now use CTIME to show when the page was created.
+
+  [ Josh Triplett ]
+  * README.Debian: Mention user wikilists.
 
- -- Joey Hess <joeyh@debian.org>  Wed, 06 Feb 2008 15:10:20 -0500
+ -- Joey Hess <joeyh@debian.org>  Sat, 09 Feb 2008 23:09:45 -0500
 
 ikiwiki (2.30) unstable; urgency=low