libretic
/
etherpad-lite
5
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update `CHANGELOG.md` with the changes so far (#4393)

This commit is contained in:
Richard Hansen 2020-10-06 03:16:21 -04:00 committed by GitHub
parent a8cf434d1d
commit 34b232d658
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 33 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
CHANGELOG.md
View File

@ -1,5 +1,37 @@
# Develop -- TODO Change to 1.8.x.
* ...
### Compatibility-breaking changes
* Authorization failures now return 403 by default instead of 401
* The `authorize` hook is now only called after successful
authentication. Use the new `preAuthorize` hook if you need to bypass
authentication
* The `authFailure` hook is deprecated; use the new
`authnFailure` and `authzFailure` hooks instead
* The format of `ENTER`, `CREATE`, and `LEAVE` log messages has changed
### Notable new features
* Users can now import without creating and editing the pad first
* Added a new `readOnly` user setting that makes it possible to create users in
`settings.json` that can read pads but not create or modify them
* Added a new `canCreate` user setting that makes it possible to create users in
`settings.json` that can modify pads but not create them
* The `authorize` hook now accepts `readOnly` to grant read-only access to a pad
* The `authorize` hook now accepts `modify` to grant modify-only (creation
prohibited) access to a pad
* All authentication successes and failures are now logged
* Added a new `cookie.sameSite` setting that makes it possible to enable
authentication when Etherpad is embedded in an iframe from another site
### Notable fixes
* Fixed rate limit accounting when Etherpad is behind a reverse proxy
* Fixed typos that prevented access to pads via an HTTP API session
* Fixed authorization failures for pad URLs containing a percent-encoded
character
* Fixed exporting of read-only pads
### Minor changes
* Temporary disconnections no longer force a full page refresh
* Toolbar layout for narrow screens is improved
* Fixed `SameSite` cookie attribute for the `language`,
`token`, and `pref` cookies
* Fixed superfluous database accesses when deleting a pad
* Expanded test coverage.
# 1.8.6
* IMPORTANT: This fixes a severe problem with postgresql in 1.8.5