Instead of storing a single static salt, we now randomly generate a separate salt for each user, and store the salt with the hashed password. Note: gitit users who upgrade to this version will have to delete their gitit-users file and regenerate it by having users create their accounts again.
+ Modified Gitit.Git, so that arguments to shell commands are converted to UTF-8 and the output is converted back to unicode strigs. + In addition, gitLsTree now returns just a list of files, rather than the raw output of 'git ls-tree'. Since git outputs filenames with UTF-8 high characters with surrounding double-quotes and octal-escaped characters, gitLsTree parses these and converts them to regular haskell unicode strings. + Added a module Gitit.HAppS that exports some wrappers around HAppS functions for better handling of UTF-8. + Added a module Gitit.HStringTemplate that exports a new version of setAttribute that handles UTF-8 properly. + Made a few other changes to Gitit.hs for proper handling of UTF-8 in paths, forms, and elsewhere. Pages can now have UTF-8 names, provided the file system supports UTF-8 pathnames. + Version bump to 0.3.4.
The current uri and referring uri are now stored in parameters. The loginUserForm function sets a cookie "destination" with the referring URI. After login (and possibly registration), the user is redirected to this destination.
Previously, a session would timeout one hour after the user logged in. This could be in the middle of an editing session, and work would be lost. Now the session is reset when the user hits the edit page, so there will be no problem unless the user spends more than one hour editing a single page.