Skip to content

Release 1.7.4

Compare
Choose a tag to compare
@github-actions github-actions released this 02 Feb 16:06

This release makes breaking changes when updating from Git. See below for updating instructions.

CRITICAL SECURITY FIX

  1. fixes an exploit where it’s possible predetermine cache hashes in come cases.

Major Changes:

  1. We now use npm / webpack to build the tracker #693
  2. File cache is now it’s own module and disabled by default
  3. We’ve replaced a number of dependancies with composer packages. #587
  4. Search engine identification has moved to the server side #812

Refactoring:

  1. Modules can now have their own composer dependancies and composer.json files. #805

Bug Fixes:

#795
#809
#808
#700

Updating

This release requires an update package (base.011) be installed which can be done from the command line or via the admin interface.

To update grab the fully packaged tarball attached to the release below.

Alternatively, If you are updating from Git see the new updating instructions here: https://github.com/Open-Web-Analytics/Open-Web-Analytics/wiki/Updating . You now need to install and run npm in order to build the tracker... so do not just do a git pull and think you are done!