X-Git-Url: https://scripts.mit.edu/gitweb/www/ikiwiki.git/blobdiff_plain/d1ebdcd0a23617a578e78e464e3b36f0390f3c4d..823ec815d4fc9625d6fa3553ad03e9f2ff737659:/debian/changelog

diff --git a/debian/changelog b/debian/changelog
index 2a0217dc4..e5347e2a1 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,9 +1,26 @@
-ikiwiki (3.20100303) UNRELEASED; urgency=low
+ikiwiki (3.20100313) UNRELEASED; urgency=low
+
+  * websetup: Add websetup_unsafe to allow marking other settings
+    as unsafe.
+  * openid: Use Openid Simple Registration or OpenID Attribute Exchange
+    to get the user's email address and username.
+  * Improve openid url munging; do not display anchors and cgi parameters,
+    as used by yahoo and google urls.
+  * Add complete German basewiki and directives translation done by
+    Sebastian Kuhnert.
+  * Add a include setting, which can be used to make ikiwiki process
+    wiki source files, such as .htaccess, that would normally be skipped
+    for security or other reasons. Closes: #447267
+    (Thanks to Aaron Wilson for the original patch.)
+
+ -- Joey Hess <joeyh@debian.org>  Sat, 13 Mar 2010 14:48:10 -0500
+
+ikiwiki (3.20100312) unstable; urgency=HIGH
 
   * Fix utf8 issues in calls to md5_hex.
   * moderatedcomments: Added moderate_pagespec that can be used
     to control which users or comment locations are moderated.
-    This can be used, just for example, to moderate http://myopenid.com/*
+    This can be used, just for example, to moderate "user(http://myopenid.com/*)"
     if you're getting a lot of spammers from one particular openid
     provider (who should perhaps answer your emails about them),
     while not moderating other users.
@@ -12,6 +29,8 @@ ikiwiki (3.20100303) UNRELEASED; urgency=low
   * Fix missing span on recentchanges page template.
   * search: Avoid '$' in the wikiname appearing unescaped on omega's
     query template, where it might crash omega.
+  * htmlscrubber: Security fix: In data:image/* uris, only allow a few
+    whitelisted image types. No svg.
 
  -- Joey Hess <joeyh@debian.org>  Tue, 09 Mar 2010 19:46:35 -0500