Foswiki 1.1.9 released

On behalf of the entire Foswiki community, I'm pleased to announce that Foswiki release 1.1.9 is available for download. 5 years ago, November 19th, 2008, the Foswiki name was announced. Since then, the project has made approximately 20 releases of Foswiki. This release builds upon the collective effort of many developers and sponsors across the 5+ year project history. Foswiki Release 1.1.9 is a security, performance and bug-fix release. It comes with 44 bug fixes relative to 1.1.8. For those of you that can't wait to get their hands on it: head over to the download page http://foswiki.org/Download/FoswikiRelease01x01x09. Bugs can be reported on http://foswiki.org/Tasks/CreateNewTask Fos­wiki-1.1.9 will be the last re­lease on the 1.1.x branch hope­fully and work on the new 1.2.0 re­lease starts from now on. Fos­wiki-1.2.0 will have a cou­ple of im­por­tant fixes on board that didn't make it into 1.1.9 but that's an­other story. Stay tuned. And a special thanks to all the developers, testers, translators, bug reporters and everyone in the Foswiki community who made Foswiki 1.1.9 possible. On behalf of the Foswiki Association and the entire Foswiki Community: Please enjoy Foswiki 1.1.9 George Clark Release manager for 1.1.9

Highlights of Foswiki 1.1.9 release

 Security, Performance and Bug-fix Release

 For users:

• 44 bug fixes relative to 1.1.8
• Ships with jQuery 1.10.1, jQuery-2.0.2 and jQuery-ui-1.10.3.
• JQuery 2.x is the fastest, lightest JQuery, for an improved user experience.

For administrators:

• Fixes several code issues that would block migration to recent versions of perl and certain CPAN modules.
• Resolves two important performance issues, accumulation of CSS by TablePlugin, and a major memory leak for certain search strings.
• Security changes:
  • TOPICLIST macro no longer reveals names of view restricted topics
  • username and password URL params are restricted to POST to the login script
  • Additional sanitizing of the URL path is performed.

See the ReleaseNotes for details and other changes

Getting help & providing feedback

Don't forget to use the upgrade or installation guides. If you need help, there are several options:

• The IRC channel on freenode
• foswiki-discuss mailing list
• Support forum
• Paid support

We want to hear from you! Especially if you have noticed a bug, have some ideas we could use, or just want to contribute:

• File a new task for bug reports
• Create, review or comment on feature proposals to help influence the future of Foswiki
• Chat with other users, developers, translators, and testers on our friendly IRC channel
• If E-mail is more your thing, try our foswiki-discuss mailing list

Upgrade Instructions

Always remember to run configure and save the configuration after an upgrade to check for configuration changes.

Changes to login using URL parameters

All versions of foswiki previously allowed the username and password parameters to be provided on the URL. For ex: bin/view/Myweb/SomeTopic?username=JoeUser;password=SEcrET This has been changed to further restrict login.

• username and password will only be accepted on POST type operations. a simple GET url with username and password will not accept the supplied credentials.
  • The previous behaviour can be restored by enabling $Foswiki::cfg{Session}{AcceptUserPwParamOnGET} in the configuration
• username and password will only be accepted as login credentials on the view, viewauth and loginscripts.
  • Other scripts can be authorized by configuring $Foswiki::cfg{Session}{AcceptUserPwParam}

JQuery upgrade

This release ships with several upgraded versions of JQuery including:

• jQuery 1.10.1,
• jQuery-2.0.2
• jQuery-ui-1.10.3

The default jQuery release is changed to version 1.8.3. The deprecated jQuery Tooltip plugin is replaced with the new jQuery UI::Tooltip. Before upgrade, determine if any topics or plugins JQREQUIRE "tooltip".   Those topics or plugins need to be upgraded to use the new UI::Tooltip.  Upgraders should visit bin/configure and make the following changes to the JQuery configuration:

• Update {JQueryPlugin}{JQueryVersion} to version 1.8.3
• Disable {JQueryPlugin}{Plugins}{Tooltip}{Enabled} and
• Enable {JQueryPlugin}{Plugins}{'UI::Tooltip'}{Enabled}

The following optional plugins:ClassificationPlugin, HarvestPlugin, ImagePlugin, NatSkin, SolrPlugin  are known to use tooltip and if installed, will require an upgrade to the latest version. You might also start using jquery-2.0.2 to get the best performance and configure jQuery-1.10.1 to be served to old Internet Explorers automatically:

• Update {JQueryPlugin}{JQueryVersion} to version 2.0.2
• Set {JQueryPlugin}{JQueryVersionForOldIEs} to version 1.10.1

Upgrade package includes the Sandbox.WebHome topic

The topic creator script was improved in 1.1.7, and the Sandbox topic was included in the upgrade package. Normally WebHome topics are never shipped in an upgrade package.

Module version strings and new module dependency since 1.1.6

The Foswiki and default extension version strings have been changed from a developer oriented string Foswiki-1.1.5, Tue, 10 Apr 2012, build 14595, to a simple perl version string - "v1.1.6". The "RELEASE" string will continue to be more descriptive and can be displayed with a new macro 06 Aug 2023. This adds a new dependency on version 0.77 - the Perl module version class.

• Sites using Perl 5.10.1 or newer have the correct version of version.
• Sites on older versions of perl should install the latest version using CPAN or their system's package manager.

New setting needed for PatternSkin

If PatternSkin is installed on an older Foswiki, or the Foswiki-upgrade package is used to upgrade an existing Foswiki system, there is a new required setting that must be added to Main.SitePreferences.

   * Set PATTERNSKIN_JQUERY_THEME = PatternSkinTheme

The new System.DefaultPreferences topic shipped with the upgrade package does have this setting, but if you have customized you DefaultPreferences, then this needs to be added. Also, you'll need to go through one save cycle of configure to register the new JQuery pattern theme in the configuration. (If configure reports no changes, make a minor change and save again, and configure will merge in the changed settings). Or edit the LocalSite.cfg file by hand and add

$Foswiki::cfg{JQueryPlugin}{Themes}{PatternSkinTheme}{Url} = '$Foswiki::cfg{PubUrlPath}/$Foswiki::cfg{SystemWebName}/PatternSkinTheme/jquery-ui.css';
$Foswiki::cfg{JQueryPlugin}{Themes}{PatternSkinTheme}{Enabled} = 1;

Other important things to know.

Most extensions released since Foswiki 1.1.6 have converted to formal perl version strings. version→declare('v1.1.6'). The PatchFoswikiContrib must be installed on older versions of Foswiki before installing any of these extensions on older Foswiki versions. Note that they have not been tested on Foswiki 1.0

Installation

Please refer to the INSTALL.html which can be found the downloaded tgz/zip.

License

• This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.
• This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
• See the GNU General Public License for more details, published at http://www.gnu.org/copyleft/gpl.html

Release Details

• Build date 2013-11-18
• Publish date 2013-11-19
• Built from http://svn.foswiki.org/branches/Release01x01 svn revision 17101