Bludit v3.22.0

What's Changed

• Feat: API improvements to support MCP protocol by @dignajar in #1707
• Fix: Invalidate sessions for disabled users (GHSA-q42h-wpg8-5wwf) thanks for report it @N0tFix3d

Bludit v3.21.1

What's Changed

• Fix: guard preview token against non-string before hash_equals (#1692) by @dignajar in #1701
• Chore: bump version to 3.21.1 by @dignajar in #1704

Bludit v3.21.0

What's Changed

• Fix: improvements for Dutch by @ltguillaume in #1682
• Fix: thumbnails for webp images by @dignajar in #1683
• Fix typo by @Grandroot in #1684
• Fix: validate pageKey in API files endpoint to prevent path traversal (Reported by Sehwang Kim - AhnLab, Inc.) by @dignajar in #1687
• Fix: preview issue #1692 by @dignajar in #1693
• Fix: media manager wrong extensions and ghost thumbnails on delete (#1694) by @dignajar in #1695
• Chore: fix get user ip by @dignajar in #1686
• Chore: refactor dashboard ui and plugin simple stats by @dignajar in #1689
• Chore: Ensure that the search term and search URL are html escaped by @bramley in #1691
• Chore: improve dashboard ui by @dignajar in #1697
• Chore: notes to readme running behind proxy by @dignajar in #1698
• Chore: bump version to 3.21.0 by @dignajar in #1700
• Feat: move between page types quick menu by @dignajar in #1696

New Contributors

• @Grandroot made their first contribution in #1684

Bludit v3.20.0

What's Changed

• Fix image description loss in TinyMCE editor by @dignajar in #1673
• feat: Add editorToolbar hook for plugins to inject editor toolbar buttons by @dignajar in #1675
• Fix authenticated RCE via file upload and .htaccess bypass by @dignajar in #1674
• chores: multiples fixes and improvements in parsedown and images helper by @dignajar in #1677
• fix: security hardening and user profile field corrections by @dignajar in #1679
• chore: update languages dictionaries, update dashboard colors, fix an issue with plugin sorting by @dignajar in #1680

Bludit v3.19.0

What's Changed

• Add Flavor theme - minimal Tailwind CSS blog theme by @dignajar in #1665
• Add Blog nav link when homepage is set to a static page
• chore: remove debug error_log from Filesystem::listFiles
• fix: correct endsWith logic and use random_int in randomText
• fix: guard dbFields access in getField to avoid undefined property notice
• fix: add missing space in Location header per RFC 7231
• fix: respect verifySSL in stream fallback and prioritize REMOTE_ADDR in getIP

Bludit 3.18.4

What's Changed

• Security fixes: Authentication Bypass + Arbitrary File Upload. Thanks to Ki1ro for the analysis and the fixes provided.
• Minor changes in UI for Blog-X theme
• Add Missing dribbble and vk svg icon #1664
• TinyMCE remove unsupported plugins

Bludit v3.18.2

What's Changed

• Update Dutch by @ltguillaume in #1655
• Fix: UI Search plugin
• UI bug fixes and enhance on Dashboard, Alternative and Blog X themes.

Full Changelog: 3.18.1...3.18.2

Bludit v3.18.1

What's Changed

• Improvements on Blog-X theme
• Bug fixes for #1578 and #1652
• Localize + French translation + CSS adjustments for Search plugin by @jboisseur in #1653

Full Changelog: 3.18.0...3.18.1

Bludit v3.18.0

What's Changed

• Update Ukrainian localization by @ChernegaSergiy in #1628
• Refine Ukrainian localization for night-time context by @ChernegaSergiy in #1630
• feat: selectable default status when create new content by @dignajar in #1631
• fix: 1594 redirect to autosave by @dignajar in #1632
• fix: 1596 custom fields markdown no parse by @dignajar in #1633
• chore: #1581 check if session php plugin is installed by @dignajar in #1635
• fix: 1578 fix whereAmI on homepage by @dignajar in #1636
• fix: 1550 improve image class and rename function by @dignajar in #1634
• fix: #1637 #1638 fix Search plugin cache errors for tags and categories by @dignajar in #1640
• fix: #1639 use configured numberOfItems instead of hardcoded default in API by @dignajar in #1642
• Version plugin: correct information in French translation by @jboisseur in #1649
• Socials: + Youtube and Bluesky by @jboisseur in #1647
• Add a field to manage TinyMCE context menu options by @jboisseur in #1646
• TinyMCE plugin: fix typo in French language file by @jboisseur in #1645
• fix: #1643 add setting to enable or disable thumbnail generation by @dignajar in #1644
• Version plugin fix by @jboisseur in #1648
• fix: #1506 #1582 #1613 #1571 security and bug fixes by @dignajar in #1650

New Contributors

• @ChernegaSergiy made their first contribution in #1628
• @jboisseur made their first contribution in #1649

Full Changelog: 3.17.2...3.18.0

Bludit v3.17.2

• Security fix for session fixation
• Languages dictionaries updated