CHANGES
author Jonas Schäfer <jonas@wielicki.name>
Mon, 10 Jan 2022 18:23:54 +0100
branch0.11
changeset 12185 783056b4e448
parent 9642 83f3a05c1b1b
child 9981 90ac1b6c3f28
permissions -rw-r--r--
util.xml: Do not allow doctypes, comments or processing instructions Yes. This is as bad as it sounds. CVE pending. In Prosody itself, this only affects mod_websocket, which uses util.xml to parse the <open/> frame, thus allowing unauthenticated remote DoS using Billion Laughs. However, third-party modules using util.xml may also be affected by this. This commit installs handlers which disallow the use of doctype declarations and processing instructions without any escape hatch. It, by default, also introduces such a handler for comments, however, there is a way to enable comments nontheless. This is because util.xml is used to parse human-facing data, where comments are generally a desirable feature, and also because comments are generally harmless.
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
9586
4552ba1333ac CHANGES: Update with new branch
Kim Alvefur <zash@zash.se>
parents: 9522
diff changeset
     1
0.11.0
4552ba1333ac CHANGES: Update with new branch
Kim Alvefur <zash@zash.se>
parents: 9522
diff changeset
     2
======
7114
43328166dcf1 CHANGES: Add some things trunk has over 0.10 (probably lots missing)
Kim Alvefur <zash@zash.se>
parents: 7112
diff changeset
     3
9642
83f3a05c1b1b CHANGES: Update with release date
Matthew Wild <mwild1@gmail.com>
parents: 9592
diff changeset
     4
**2018-11-18**
7114
43328166dcf1 CHANGES: Add some things trunk has over 0.10 (probably lots missing)
Kim Alvefur <zash@zash.se>
parents: 7112
diff changeset
     5
43328166dcf1 CHANGES: Add some things trunk has over 0.10 (probably lots missing)
Kim Alvefur <zash@zash.se>
parents: 7112
diff changeset
     6
New features
43328166dcf1 CHANGES: Add some things trunk has over 0.10 (probably lots missing)
Kim Alvefur <zash@zash.se>
parents: 7112
diff changeset
     7
------------
43328166dcf1 CHANGES: Add some things trunk has over 0.10 (probably lots missing)
Kim Alvefur <zash@zash.se>
parents: 7112
diff changeset
     8
43328166dcf1 CHANGES: Add some things trunk has over 0.10 (probably lots missing)
Kim Alvefur <zash@zash.se>
parents: 7112
diff changeset
     9
-   Rewritten more extensible MUC module
7376
9b37aaea68e9 CHANGES: Update for MUC changes
Kim Alvefur <zash@zash.se>
parents: 7310
diff changeset
    10
    -   Store inactive rooms to disk
9b37aaea68e9 CHANGES: Update for MUC changes
Kim Alvefur <zash@zash.se>
parents: 7310
diff changeset
    11
    -   Store rooms to disk on shutdown
8858
dba528970aa5 CHANGES: Mention voice request
Kim Alvefur <zash@zash.se>
parents: 8725
diff changeset
    12
    -   Voice requests
9018
dc606dc89f44 MUC: Add support for storing a tombstone for destroyed rooms (#1182)
Kim Alvefur <zash@zash.se>
parents: 8962
diff changeset
    13
    -   Tombstones in place of destroyed rooms
8962
ab18a9a9fd48 CHANGES: Restructure Pubsub category
Kim Alvefur <zash@zash.se>
parents: 8858
diff changeset
    14
-   PubSub features
ab18a9a9fd48 CHANGES: Restructure Pubsub category
Kim Alvefur <zash@zash.se>
parents: 8858
diff changeset
    15
    -   Persistence
ab18a9a9fd48 CHANGES: Restructure Pubsub category
Kim Alvefur <zash@zash.se>
parents: 8858
diff changeset
    16
    -   Affiliations
9137
4aa786a180f5 CHANGES: Add new pubsub items and note about PEP
Matthew Wild <mwild1@gmail.com>
parents: 9018
diff changeset
    17
    -   Access models
4aa786a180f5 CHANGES: Add new pubsub items and note about PEP
Matthew Wild <mwild1@gmail.com>
parents: 9018
diff changeset
    18
    -   "publish-options"
4aa786a180f5 CHANGES: Add new pubsub items and note about PEP
Matthew Wild <mwild1@gmail.com>
parents: 9018
diff changeset
    19
-   PEP now uses our pubsub code and now shares the above features
7310
6bbe47e30af4 CHANGES: Move async to trunk, it was dropped from 0.10
Kim Alvefur <zash@zash.se>
parents: 7291
diff changeset
    20
-   Asynchronous operations
8501
85f60424a8b1 CHANGES: Mention move to Busted for tests
Kim Alvefur <zash@zash.se>
parents: 8293
diff changeset
    21
-   Busted for tests
8725
7ee93b3fa160 mod_muc_mam: Import mod_mam_muc from prosody-modules ba6466fa6823
Kim Alvefur <zash@zash.se>
parents: 8712
diff changeset
    22
-   mod\_muc\_mam (XEP-0313 in groupchats)
9263
0fc6ffc57dc0 mod_vcard_legacy: Announce feature on bare JID per XEP
Kim Alvefur <zash@zash.se>
parents: 9252
diff changeset
    23
-   mod\_vcard\_legacy (XEP-0398)
9264
9db9e37610b7 mod_vcard4: Allow access to the vcard4 PEP node via iq syntax
Kim Alvefur <zash@zash.se>
parents: 9263
diff changeset
    24
-   mod\_vcard4 (XEP-0292)
9592
aeb054ee88c5 mod_csi_simple: Import modified version of mod_csi_pump from prosody-modules
Kim Alvefur <zash@zash.se>
parents: 9591
diff changeset
    25
-   mod\_csi, mod\_csi\_simple (XEP-0352)
9522
e6e5ff64d1c2 CHANGES: Mention server_epoll
Kim Alvefur <zash@zash.se>
parents: 9264
diff changeset
    26
-   New experimental network backend "epoll"
7114
43328166dcf1 CHANGES: Add some things trunk has over 0.10 (probably lots missing)
Kim Alvefur <zash@zash.se>
parents: 7112
diff changeset
    27
8289
39966cbc29f4 CHANGES: Update for release
Matthew Wild <mwild1@gmail.com>
parents: 7856
diff changeset
    28
0.10.0
8711
c53e9e27acc6 CHANGES: Normalize syntax
Kim Alvefur <zash@zash.se>
parents: 8292
diff changeset
    29
======
7112
f3b172874922 Add a CHANGES file with new features in 0.10
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    30
8292
bd6b189b354c CHANGES: Correct date using the power hindsight
Kim Alvefur <zash@zash.se>
parents: 8289
diff changeset
    31
**2017-10-02**
7112
f3b172874922 Add a CHANGES file with new features in 0.10
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    32
f3b172874922 Add a CHANGES file with new features in 0.10
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    33
New features
f3b172874922 Add a CHANGES file with new features in 0.10
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    34
------------
f3b172874922 Add a CHANGES file with new features in 0.10
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    35
f3b172874922 Add a CHANGES file with new features in 0.10
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    36
-   Rewritten SQL storage module with Archive support
f3b172874922 Add a CHANGES file with new features in 0.10
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    37
-   SCRAM-SHA-1-PLUS
f3b172874922 Add a CHANGES file with new features in 0.10
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    38
-   `prosodyctl check`
f3b172874922 Add a CHANGES file with new features in 0.10
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    39
-   Statistics
f3b172874922 Add a CHANGES file with new features in 0.10
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    40
-   Improved TLS configuration
f3b172874922 Add a CHANGES file with new features in 0.10
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    41
-   Lua 5.2 support
f3b172874922 Add a CHANGES file with new features in 0.10
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    42
-   mod\_blocklist (XEP-0191)
f3b172874922 Add a CHANGES file with new features in 0.10
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    43
-   mod\_carbons (XEP-0280)
f3b172874922 Add a CHANGES file with new features in 0.10
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    44
-   Pluggable connection timeout handling
7115
bd29742fa1ba CHANGES: Add websockets too (thanks av6)
Kim Alvefur <zash@zash.se>
parents: 7112
diff changeset
    45
-   mod\_websocket (RFC 7395)
7856
8c3de36568dd CHANGES: Add mod_mam
Kim Alvefur <zash@zash.se>
parents: 7824
diff changeset
    46
-   mod\_mam (XEP-0313)
7112
f3b172874922 Add a CHANGES file with new features in 0.10
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    47
f3b172874922 Add a CHANGES file with new features in 0.10
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    48
Removed
f3b172874922 Add a CHANGES file with new features in 0.10
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    49
-------
f3b172874922 Add a CHANGES file with new features in 0.10
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    50
f3b172874922 Add a CHANGES file with new features in 0.10
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    51
-   mod\_privacy (XEP-0016)
7824
0dea440bdd46 CHANGES: Mention removal of mod_compression
Kim Alvefur <zash@zash.se>
parents: 7290
diff changeset
    52
-   mod\_compression (XEP-0138)