What's Changed
- Fix PHP 8.1+ deprecations and remove now-unreachable PHP <8 code paths by @michael-o in #236
- Close remaining XSS gaps missed by d4de770 (#228) by @michael-o in #238
- Remove Parsedown-based README rendering feature by @michael-o in #239
- Don't toggle collapsible diff when clicking its file-name link by @michael-o in #247
- Show readable directories in tree view past a denied ancestor (#166) by @michael-o in #240
- Add setAuthzUsernameCase() to mirror mod_authz_svn's case folding (#56) by @michael-o in #241
- Rename useAccessFile() to setAccessFile(), deprecate old name by @michael-o in #242
- Escape blame popup log messages before embedding in inline JS by @michael-o in #243
- Fix RSS item titles to actually use only the commit message's first line by @michael-o in #244
- Fix double-escaped "<" in RSS item descriptions by @michael-o in #245
- Fix undefined $subs crash in showAllDirFiles() with flat view + load-… by @michael-o in #246
- Rewrite compare-table collapse toggle in vanilla JS by @michael-o in #248
- Remove "load all repos" feature (setLoadAllRepos) by @michael-o in #249
Full Changelog: 2.8.8...2.9.0
Contributors
michael-o