This repository has been archived by the owner on Jul 6, 2020. It is now read-only.
Releases: owncloud-archive/news
Releases · owncloud-archive/news
owncloud-news (8.8.0)
- Enhancement: Remove current pull to refresh implementation since it is more annoying than helpful.
- Enhancement: Add API route for supported API levels
owncloud-news (8.7.5)
- Security (High): Fix security bug that would allow websites to access your DOM document when using keyboard shortcuts to open an article in a new tab, downloading audio files, opening links on the explore page or opening links to the ownCloud documentation or issue tracker (News app versions prior to 5.0.0 are also vulnerable when clicking on any link in the title or article body). This gives any attacker access to all data on the DOM and allows them to make arbitrary requests to the ownCloud server on the user's behalf, bypassing CSRF protection and gaining full access to their account by stealing their login cookies. For a more detailed explanation visit this website
owncloud-news (8.7.4)
- Bugfix: Fix expand in compact view mode, #988
owncloud-news (8.7.3)
- Bugfix: Rerun fingerprint and search index generation in case it was not run properly before
- Bugfix: Do not swallow errors when generating search indices and fingerprints
owncloud-news (8.7.1)
- Bugfix: Send Chrome's user agent string instead of our own since mod_security, which is used on some servers, thinks that only browsers are allowed to send user agents. This will fix feed updates for some websites, e.g. joomla.org, (because we all know that Joomla is big on security ;) ), #978
owncloud-news (8.7.0)
- Enhancement: Better lock down Composer versions to prevent shipping newer PHP libraries then intended when compiling the project
- Enhancement: Mark current article as active while scrolling
- Enhancement: Clicking on an article sets it as active, #791
- Enhancement: Keyboard shortcuts will target the currently active element, #791
owncloud-news (8.6.0)
- Enhancement: Also publish error count and last error message through API, #977
owncloud-news (8.5.0)
- Bugfix: Do not run feed updates when ajax or web cron mode was detected because it can lead to very long load times, timeouts, data corruption, update bugs where feeds are not updated anymore and database inconsistencies. If someone is interested in re-enabling webcron based feed updates, please create a PHP script which uses the updater API or simply use the ownCloud News Updater which is written in Python. Don't hesitate to ask for help on the issue tracker!
- Bugfix: Fix multiple error messages and outdated links for cron error messages
owncloud-news (8.4.1)
- Bugfix: Fix error messages in the logs which were caused by outdated template includes, #972