Skip to content

Version 01.02.02

Choose a tag to compare

@Forro-54 Forro-54 released this 16 Aug 06:04
· 14 commits to main since this release
Immutable release. Only release title and notes can be modified.
8150b02

Add a secure five-minute correction window for guest comments and replies while they are still awaiting moderation.

Changes:

Allow guests to edit the text of their own pending comment or reply for up to five minutes after the original submission
Keep the five-minute window tied to the original posting time so editing does not restart the timer
End guest editing immediately when a submission is approved, deleted, guest posting is disabled, or all posting is disabled
Restrict guest editing to comment/reply text only; guest display name and private email remain unchanged
Generate a cryptographically random guest-edit credential and store only its SHA-256 hash with the comment
Keep the raw guest-edit credential out of the database, URLs, query strings, hidden fields, rendered HTML, and moderator emails
Do not use guest name, email, IP address, user-agent, rate-limit key, or Comment ID alone as proof of ownership
Revalidate PortalId, TabId, ModuleId, guest ownership, moderation status, deletion status, token hash, and five-minute expiry during the database update
Keep corrected guest submissions pending moderation
Re-run the private language filter after a guest correction
Preserve the existing 15-minute editing window for registered users
Preserve portal-wide moderation, emergency switches, CAPTCHA, rate limiting, language filtering, email notifications, approval, deletion, and security-token validation
Add GuestEditTokenHash to support secure guest correction
Add and register the 01.02.02 SqlDataProvider upgrade script
Update the manifest, release notes, documentation, resources, and package files

Existing guest comments are not made editable by this upgrade. Only new guest submissions created after 01.02.02 receive the secure correction capability.

This release is part of the Jacaranda Comments Advanced branch. The stable Simple edition remains separate on the main branch.