ownCloud 8.1 Features

This collects all the new features of ownCloud 8.1. This will be used for the release announcement. Please add your features that are merged here. If they are not merged yet but you plan to before the feature freeze than add a (planned) comment to it.

Main Features

• SFTP external storage with SSH key (https://github.com/owncloud/core/pull/13190)
• SMB external storage now based on libsmbclient (https://github.com/owncloud/core/pull/10673)

Minor Features

• TODO

Incompatible Changes

Administrators

Security

• The .htaccess and index.html in the data directory is now updated after every update. Administrators are encouraged to verify that they don't have any manual modifications done in there.
• The SabreDAV browser at /remote.php/webdav has been removed. Only pure WebDAV access is permitted anylonger.
• Using ownCloud without a trusted_domain will not work anymore (except for whitelisted items such as local loopback addresses)
• The logging format for failed logins has changed and considers now the proxy configuration in the config file

Developers

Public API

• \OCP\Json is now deprecated (https://github.com/owncloud/core/pull/14129)

Non public API

• OC_Request is gone and replaced by public API (IRequest)
• \OC_Json is now deprecated (https://github.com/owncloud/core/pull/14129)
• \OC\Preferences and OC_Preferences have been removed

##### Security

• The default Content-Security-Policy of AppFramework apps is now stricter but can be adjusted by developers. See https://github.com/owncloud/core/pull/13989
• Parameters passed to OC.generateUrl are now automatically encoded, this behaviour can be adjusted by developers. See https://github.com/owncloud/core/pull/14266
• Views constructed by OC\Files\View do not allow directory traversals anymore in the constructor. See https://github.com/owncloud/core/pull/14342
• The CSRF token may now contain not URL compatible characters (for example the plus sign: +), developers have to ensure that the CSRF token is encoded properly before using it in URIs.
• The default RNG now returns all valid base64 characters
• OC.msg escapes the message now by default (see https://github.com/owncloud/core/pull/14208)

Schedule

• TODO