Daya Bay Reactor Neutrino Experiment
TWiki > TWikiReleaseNotes04x03 (1 vs. 6)
Daya Bay webs: Public | 中文 | Internal | Help   Log In or Register

Welcome | Register | Changes | Topics | Index | Search | Go
 <<O>>  Difference Topic TWikiReleaseNotes04x03 (6 - 2011-01-04 - TWikiContributor)
Line: 1 to 1
 

Release Notes of TWiki-4.3.2 (Georgetown), 2009-09-02

Note: This is the release note for the previous major release version 4.3.X. This note, TWikiReleaseNotes04x00, TWikiReleaseNotes04x01 and TWikiReleaseNotes04x02 are included with 5.0.X because they contain valuable information for people upgrading from earlier versions. Both for the admin and the users. See TWikiReleaseNotes05x00 for the 5.0.X release notes.

Line: 25 to 25
  Note: HeadlinesPlugin, TWikiNetSkin and TWikiNetSkinPlugin are new in TWiki-4.3.0.
Added:
>
>

Supported User Interface Languages

The user interface of this TWiki version is localized to 19 languages:

English (default), Bulgarian (bg), Chinese simplified (zh-cn), Chinese traditional (zh-tw), Czechoslovakian (cs), Danish (da), Dutch (nl), German (de), Finnish (fi), French (fr), Italian (it), Japanese (ja), Korean (ko), Polish (pl), Portuguese (pt), Russian (ru), Slovakian (sv), Spanish (es), Ukrainian (uk).

Note: TWiki needs to be configured properly to display user interface languages other than the default English language. Details in TWiki:TWiki.InstallationWithI18N and TWiki:TWiki.InternationalizationSupplement.

 

New Features Highlights

  • Security Enhancements

 <<O>>  Difference Topic TWikiReleaseNotes04x03 (5 - 2010-07-01 - TWikiContributor)
Line: 1 to 1
Changed:
<
<

TWiki Release 4.3.2 (Georgetown), 2009-09-02

>
>

Release Notes of TWiki-4.3.2 (Georgetown), 2009-09-02

  Note: This is the release note for the previous major release version 4.3.X. This note, TWikiReleaseNotes04x00, TWikiReleaseNotes04x01 and TWikiReleaseNotes04x02 are included with 5.0.X because they contain valuable information for people upgrading from earlier versions. Both for the admin and the users. See TWikiReleaseNotes05x00 for the 5.0.X release notes.
Line: 198 to 198
 
<-- Note: Do not use TWikibug: interwiki links because interwiki rule might not be defined  
-->
Changed:
<
<
Related Topic: TWikiHistory, TWikiInstallationGuide, TWikiUpgradeGuide
>
>
Related Topics: TWikiHistory, TWikiInstallationGuide, TWikiUpgradeGuide, TWikiReleaseNotes04x00, TWikiReleaseNotes04x01, TWikiReleaseNotes04x02, TWikiReleaseNotes05x00, TWikiReleaseNotes05x01, TWikiReleaseNotes06x00

 <<O>>  Difference Topic TWikiReleaseNotes04x03 (4 - 2010-05-15 - TWikiContributor)
Line: 1 to 1
 

TWiki Release 4.3.2 (Georgetown), 2009-09-02

Added:
>
>
Note: This is the release note for the previous major release version 4.3.X. This note, TWikiReleaseNotes04x00, TWikiReleaseNotes04x01 and TWikiReleaseNotes04x02 are included with 5.0.X because they contain valuable information for people upgrading from earlier versions. Both for the admin and the users. See TWikiReleaseNotes05x00 for the 5.0.X release notes.
 

Introduction

Line: 9 to 11
  TWiki-4.3.1 released on 2009-04-29 introduces security enhancements. This release also introduces use of ISO date format by default.
Changed:
<
<
TWiki-4.3.2 released on 2009-09-02 introduces security enhancements (CSRF fix). WYSIWYG editing is enhanced as well, the TinyMCEPlugin is upgraded with latest tinyMCE Javascript library.
>
>
TWiki-4.3.2 released on 2009-09-02 introduces security enhancements.
  It is highly recommended to upgrade to TWiki-4.3.2. Users will find this release much more stable and secure in daily use.
Line: 48 to 50
  See the full list of bug fixes at the bottom of this topic.
Deleted:
<
<

Important Changes

1. Added protection against CSRF (cross-site request forgery) in TWiki 4.3.2 patch release

TWiki protects content updates with a one-time-use crypt token to guard against CSRF exploits. This means that it is no longer possible to hit the browser back button to fix a typo; you get an "invalid crypt token" error message if you try to save again. Workaround: Instead of browser back button, hit the "Edit" button to fix a typo.

There is a balance between security and user convenience. A TWiki administrator can enable and disable the crypt token based CSRF protection with the {CryptToken}{Enable} configure setting. For mission critical public TWiki sites it is recommended to enable the crypt token; for firewalled TWiki sites it is usually OK to disable it.

 

Deprecation Notices

The %MAINWEB% and %TWIKIWEB% variables have been deprecated. For compatibility reasons they are unlikely to ever be removed completely, but you should use the %USERSWEB% and %SYSTEMWEB% variables instead.

Line: 95 to 89
 

Enhancements

Deleted:
<
<
Item2927 Topic moved message too visible
Item6283 upgrade tinyMCE to latest version in TinyMCEPlugin
 
Item3647 Usability: Control over variable expansion in topic templates
Item5025 InterwikiPlugin: Allow special characters in "Page" of Site:Page
Item6148 HeadlinesPlugin: Support for {PROXY}{HOST} and {PROXY}{PORT} configure settings
Line: 115 to 107
 

Fixes

Deleted:
<
<
Item6253 $WORKINGDAYS is returning invalid results
Item6259 Prevent GUI-based rename of TWiki web and Main web
Item6267 FORMFIELD expands $title to field name if $title exists in field value
Item6295 Preferences For Raw Edit or Wysiwyg Edit
 
Item1607 %TOC% does not distinguish two headlines that have the same text
Item2525 TablePlugin produces bad links for sorting when using "short" URLs
Item4835 SpreadSheetPlugin: SUBSTITUTE error when text=old and replace is empty
Line: 191 to 179
 

Highlights

  • Security:
Changed:
<
<
>
>
 

Enhancements

Changed:
<
<
Item2927 Topic moved message too visible
Item6283 upgrade TinyMCEPlugin with latest tinyMCE WYSIWYG editor
Item6315 HeadlinesPlugin: New touch parameter for HEADLINES variable
>
>
TODO
 

Fixes

Changed:
<
<
Item6253 SpreadSheetPlugin: $WORKINGDAYS is returning invalid results
Item6259 Prevent GUI-based rename of TWiki web and Main web
Item6267 FORMFIELD expands $title to field name if $title exists in field value
Item6295 Preferences for raw edit or WYSIWYG edit
Item6296 Crypt token based CSRF fix for TWiki
Item6308 viewfile adds trailing newline to attachments
>
>
TODO