D7net
Home
Console
Upload
information
Create file
Create Folder
About
Tools
Path :
/
var
/
softaculous
/
modx
/
..
/
lepton
/
..
/
wp61
/
..
/
myadmin
/
..
/
tiki24
/
..
/
bolt
/
Filename :
changelog.txt
back
Edit
Copy
Bolt 3.7.1 ---------- Released: 2020-05-07. Notable changes: - Security: Check CSRF on Preview page, and prevent renaming files to blacklisted filetypes [#7853](https://github.com/bolt/bolt/pull/#7853) - Change: Add hreflang to allowed_attributes [#7855](https://github.com/bolt/bolt/pull/#7855) - Chore: Updating dependencies [#7842](https://github.com/bolt/bolt/pull/#7842) - Fixed: Fix tag cloud, update NPM deps [#7856](https://github.com/bolt/bolt/pull/#7856) - Fixed: Select field with multiple contenttypes and display values results in a `ContextErrorException` [#7849](https://github.com/bolt/bolt/pull/#7849) - Fixed: Trying to access array offset on value of type `null` with PHP 7.4 [#7843](https://github.com/bolt/bolt/pull/#7843) Special thanks go out [Sivanesh Ashok](https://stazot.com/) for responsibly disclosing the two fixed security issues to us. Bolt 3.7.0 ----------- Released: 2019-11-12. Notable changes: - Change: Dropped support for PHP 5.5, 5.6 and 7.0. [#7826](https://github.com/bolt/bolt/pull/7826) This means the minimum requirement for Bolt 3.7 is now PHP 7.1. Because of this, the default distributions will now include more recent versions of libraries, providing better support for more recent versions of PHP 7.1 and higher out-of-the-box. This is most noticeable with Doctrine, our database library. If you're stuck on an older PHP version, you can keep using Bolt 3.6 for the foreseeable future. Bolt 3.6.11 ----------- Released: 2019-11-10. Notable changes: - Fixed: Fix tags in non-english languages and firefox caching selected options [#7822](https://github.com/bolt/bolt/pull/7822) - Fixed: Fix typo in `AccessControlListener.php` [#7809](https://github.com/bolt/bolt/pull/7809) - Security: Fix CRSF issues in file operations [#7823](https://github.com/bolt/bolt/pull/7823) - Updated: Add `download` to `allowed_attributes` in HTML cleaner [#7808](https://github.com/bolt/bolt/pull/7808) - Updated: Added comment about required IP in `trustProxies` [#7807](https://github.com/bolt/bolt/pull/7807) - Updated: Export improvements [#7812](https://github.com/bolt/bolt/pull/7812) - Updates: Update tests for Doctrine 2.10 compatibility [#7824](https://github.com/bolt/bolt/pull/7824) Special thanks go out f4h4dbt for responsibly disclosing the CSRF issue to us. Bolt 3.6.10 ---------- Released: 2019-08-15. Notable changes: Security: Prevent XSS in system log (for authenticated users) #7802 Security: Prevent XSS in image alt/title (for authenticated users) #7801 Security: Prevent XSS in "Create file" in file manager (for authenticated users) #7800 Fixes: Prevent update of guzzlehttp/psr7 to 1.6, fixes tests #7798 Fixed: Fix taxonomy name collision #7799 Fixed: Rebuilding assets, fixing tags cloud #7794 Bolt 3.6.9 ---------- Released: 2019-06-24. Notable changes: - Added: Add abbreviations to CKeditor, using `<abbr>`-tag. [#7783](https://github.com/bolt/bolt/pull/7783) - Fixed: Use isIterable over Traversable [#7778](https://github.com/bolt/bolt/pull/7778) - Updated: Select2 updated to 4.0.7, since it _finally_ works on IE 11 again. [#7783](https://github.com/bolt/bolt/pull/7783) ssss