release v1.0.2
The following are notable changes introduced since the release of Melody v1.0.1. You can view the all Melody v1.0.2 milestone tickets in Lighthouse.
-
This is a critical maintenance update as it includes all security-related changes released in Movable Type 4.361 (#944) and v4.37 (#973)
-
Added new configuration directives, DeniedAssetFileExtensions and AssetFileExtensions, which allow administrators precise control over the types of files users can upload (#946)
The following are the raw commits introduced in Melody v1.0.2, listed in the order in which they were introduced into the openmelody/melody master repo.
Case #945 - Added three new MT::Util functions (plus POD documentation and unit tests) which implement canonical versions of commonly needed (and re-implemented) functions: file_extension(), file_mime_type(), mime_type_extension().
These functions are used by subsequent commits necessary for Melody 1.0.2
Case #945 - Added another useful MT::Util function,
match_file_extension()which makes it extremely simple to see—in a cross-platform, multibyte-safe way—whether a file ends with a particular file extension or matches one of an array of patterns representing possible extensions or extensions of interest.Includes POD docs and ample usage examples in the unit tests.
Case #944 - Case #946 - Extracted check for HTML signature from
MT::Image::check_uploadinto its own class method.
Case #946 - New config directives,
DeniedAssetFileExtensionsandAssetFileExtensions, as well as a new MT::App method:validate_upload()which utilizes them.In the next release, all code which deals with uploaded files needs to be refactored to use this method (or whatever it becomes) as a gatekeeper for sanity checking potential uploads.
Case #944 - Integrated bug fixes contained in Movable Type 4.361.
Case #973 - Integrated bug fixes and other changes contained in Movable Type 4.37.
Case #974 - Miscellaneous unit test fixes and pruning of old unit tests results
Case #975 - Updating Theme Manager to v0.10.23 (from v0.10.15). See https://github.com/openmelody/mt-plugin-theme-manager/compare/0.10.14...0.10.23 for details
Case #976 - Updating Config Assistant to v2.1.34 (from v2.1.23). See https://github.com/openmelody/mt-plugin-configassistant/commits/2.1.34 for details
Case #977 - Update Theme Export plugin to v1.2.1 (from v1.0.2). See https://github.com/openmelody/mt-plugin-theme-export/commits/1.2.1 for details.
Case #916 - Added mt:EntryMore/ to depoclean.
Case #984 - Eliminated overly aggressive caching of config object data in persistent environments
Case #985 - Aliased deprecated config directives PerlLocalLibPath and LocalLib to PERL5LIB. Removed related but unneeded code from MT::init_config.
Case #986 - Refactored
MT::ConfigMgr(see full commit note for details)
- Eliminated nasty circular logic bug in handling of ARRAY directives
- Made return values more consistent and logical for all public accessor methods returning ARRAY and HASH directive values
- Added support for the special ARRAY and HASH directive value,
__DEFAULT__as well as POD and user manual documentation- Revamped the documentation and extensively augmented unit tests.
Perltidied
Fixed uninitialized variable warning on upload dialog screen
Case #987 - Added tabindex to login form fields
Fixed warning "uninitialized value in hash" in MT::CMS::Entry when viewing entry listing screen.
Case #951 - Fixed bug which prevented jquery from loading properly on non-english versions of Melody.
Perltidied
Case #975 - Updating Theme Manager to v0.10.24 (from v0.10.23). See https://github.com/openmelody/mt-plugin-theme-manager/compare/0.10.23...0.10.24 for details
Case #976 - Updating Config Assistant to v2.1.35 (from v2.1.34). See https://github.com/openmelody/mt-plugin-configassistant/compare/2.1.34...2.1.35 for details
Melody v1.0.2