Cahut 1.1.1

Cahut 1.1.1 closes the data of a reported Window with the frame of its moderator, and tidies the console of the server.

Upgrading

1.1.1 is a patch release: under the default CAHUT_UPDATES=patch, a server on 1.1.0 installs it by itself, with its daily update. A server on 1.0.0 or before installs it as 1.1.0 says, from the console of the server, under Updates, or:

sudo /usr/local/bin/cahut update

No migration, and no change to the API or to the tools of AIs.

Security

• The data of a reported Window closes with the frame of its moderator (#246). The pages of a reported Window, in the frame where a moderator opens it, read its data only while that frame opens the Window: while the session of the moderator lasts, of the Cahut or of the server, while they still moderate the Cahut, and while the report waits. Its files checked all three already; the data checked only the address of the frame, which lasts four hours. Since 1.0.0, a page could go on reading what anyone reads in that Window after its moderator signed out, or after the report was decided. Only the browser of the moderator knew that address.

Fixed

• The console of the server (#247): an address of a Cahut that does not decode, such as /server/cahuts/%E0, shows the page of what does not exist in place of a blank page; the tab says "Cahut · Server" in the language of the console; the sections of moderation on the page of a Cahut are headings of the right level; the links and buttons of the list of Cahuts name their Cahut for screen readers.
• The first start (#247): when it made the administrator of the server but could not sign them in, it ends at the sign-in of the console of the server, where the same handle and password work, in place of the console of the Cahut.

Changed

• What the console of a Cahut kept for the administrators of the server, which no session reaches since 1.1.0, is gone (#248). The first administrator that add_domain makes is refused in a Cahut that has people already.