* htmlscrubber security fix: Block javascript in uris.

[ikiwiki.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index c608043f432eb3a6f3b26972c9ac52a55a443b99..fb8d6bc5b01d2c5429c10c7213d7b375546c5770 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,5 +1,22 @@
+ikiwiki (2.40) UNRELEASED; urgency=low
+
+  [ Josh Triplett ]
+  * Add new preprocessor directive syntax¸ using a '!' prefix.  Add a
+    prefix_directives option to the setup file to turn this syntax on;
+    currently defaults to false, for backward compatibility.  Support
+    optional '!' prefix even with prefix_directives off, and use that in
+    the underlay to support either setting of prefix_directives.  Add NEWS
+    entry with migration information.
+
+  [ Joey Hess ]
+  * htmlscrubber security fix: Block javascript in uris.
+  * Add htmlscrubber test suite.
+
+ -- Josh Triplett <josh@freedesktop.org>  Sat, 09 Feb 2008 23:01:19 -0800
+
 ikiwiki (2.31) unstable; urgency=low
 
+  [ Joey Hess ]
   * Revert preservation of input file modification times in output files,
     since this leads to too many problems with web caching, especially with
     inlined pages. Properly solving this would involve tracking every page
@@ -39,8 +56,12 @@ ikiwiki (2.31) unstable; urgency=low
   * Don't die if running with --getctime and rcs_getctime throws an error.
     There are several cases (recentchanges files, aggregated files)
     where some source files are not in revision control.
+  * Page templates can now use CTIME to show when the page was created.
+
+  [ Josh Triplett ]
+  * README.Debian: Mention user wikilists.
 
- -- Joey Hess <joeyh@debian.org>  Wed, 06 Feb 2008 15:10:20 -0500
+ -- Joey Hess <joeyh@debian.org>  Sat, 09 Feb 2008 23:09:45 -0500
 
 ikiwiki (2.30) unstable; urgency=low