stanley2058 commented 6 months ago

CodiMD 2.5.0

Security Fixes

1691 [Security Issue] Strip HTML tags for gist id to avoid stored XSS on showing error [Security Issue]
1690 [Security Issue] Upgrade mermaid to version 8.10.2 to avoid prototype pollution
1792 [Security Issue] potential XSS in vimeo embed
1790 [Security Issue] FIX: pandoc security issue
1832 [Security Issue] fix: sanitize pdf url to prevent XSS on inline PDFs

Fixes

1680 Avoid append zero suffix on exporting user data
1679 Handle when request url has no valid referer
1683 Fix S3 client config passing for image upload
1481 Set a proper "lang" attribute on
1605 Fix matchInContainer false positives
1580 Convert "include" directives to functions
1587 Move HTML-related code from JS to EJS to enable more i18n
1706 fix: may referernce out of bound index in clearDuplicatedHistory
1695 Feat/csrf export user data
1724 sequelize.import deprecation
1723 chore: remove unused uglifyjs-webpack-plugin dep
1697 fix: should not clear guest history when guest pin note
1762 Fix: s3 api supported multiple cloud providers. fixes: https://github.com/hackmdio/codimd/issues/1761
1739 Fix: Code Fence parameter parsing
1729 Update README.md to remove IE from supporting list
1789 FIX: server crash when filename too long
1804 fix: use encoded note id to update history
1750 🐛 [fix] modify replacement rule for disqus short-name
1808 Fix history page nav
1814 Fix the uploadimage form
1836 bugfix/uploadimage form
1813 Add the logout callback to prevent exception.
1837 Add the logout callback to prevent exception

Enhancements

1684 Add TeX mhchem extensions for MathJax
1685 Upgrade flowchart.js to version 1.15.0
1716 Upgrade codemirror to 5.63.2
1741 Update de.json
1715 Documentation - add Music section and move abc abd fretboard to this section
1722 chore: bump meta-marked to 0.5.0
1793 Typos + Better translation for "Externals"
1798 feat: Migrate to gtag and support GA4
1802 【fix】reword japanese
1784 upgrading pg to 8.8.0 to support new scram-sha-256 authentication
1710 feat: add organizations whitelist to GitHub OAuth
1626 Add oauth2 authorization
1815 Update both Traditional and Simplified Chinese locales

DX

1694 Run CI with GitHub Actions
1688 Add dev container for GitHub Codespaces and VSCode remote container
1701 Add arm64 docker image build.
1797 fix(buildpacks): replace custom buildpack with APT buildpack
1799 Update minimum required node.js version to v12 with npm package dependencies
1767 Upgrade Node.js version
1816 Update node.js version in .nvmrc
1817 Update npm dependencies

Thank you

Thank you guys for being here and making CodiMD awesome ❤️

jackycute commented 6 months ago

Thanks @stanley2058 @Yukaii

Neustradamus commented 6 months ago

@stanley2058: Nice version with SCRAM-SHA-256 support!

Linked to:

https://github.com/scram-sasl/info/issues/1

hackmdio / codimd

Release 2.5.0 #1835

CodiMD 2.5.0

Security Fixes

1691 [Security Issue] Strip HTML tags for gist id to avoid stored XSS on showing error [Security Issue]

1690 [Security Issue] Upgrade mermaid to version 8.10.2 to avoid prototype pollution

1792 [Security Issue] potential XSS in vimeo embed

1790 [Security Issue] FIX: pandoc security issue

1832 [Security Issue] fix: sanitize pdf url to prevent XSS on inline PDFs

Fixes

1680 Avoid append zero suffix on exporting user data

1679 Handle when request url has no valid referer

1683 Fix S3 client config passing for image upload

1481 Set a proper "lang" attribute on

1605 Fix matchInContainer false positives

1580 Convert "include" directives to functions

1587 Move HTML-related code from JS to EJS to enable more i18n

1706 fix: may referernce out of bound index in clearDuplicatedHistory

1695 Feat/csrf export user data

1724 sequelize.import deprecation

1723 chore: remove unused uglifyjs-webpack-plugin dep

1697 fix: should not clear guest history when guest pin note

1762 Fix: s3 api supported multiple cloud providers. fixes: https://github.com/hackmdio/codimd/issues/1761

1739 Fix: Code Fence parameter parsing

1729 Update README.md to remove IE from supporting list

1789 FIX: server crash when filename too long

1804 fix: use encoded note id to update history

1750 🐛 [fix] modify replacement rule for disqus short-name

1808 Fix history page nav

1814 Fix the uploadimage form

1836 bugfix/uploadimage form

1813 Add the logout callback to prevent exception.

1837 Add the logout callback to prevent exception

Enhancements

1684 Add TeX mhchem extensions for MathJax

1685 Upgrade flowchart.js to version 1.15.0

1716 Upgrade codemirror to 5.63.2

1741 Update de.json

1715 Documentation - add Music section and move abc abd fretboard to this section

1722 chore: bump meta-marked to 0.5.0

1793 Typos + Better translation for "Externals"

1798 feat: Migrate to gtag and support GA4

1802 【fix】reword japanese

1784 upgrading pg to 8.8.0 to support new scram-sha-256 authentication

1710 feat: add organizations whitelist to GitHub OAuth

1626 Add oauth2 authorization

1815 Update both Traditional and Simplified Chinese locales

DX

1694 Run CI with GitHub Actions

1688 Add dev container for GitHub Codespaces and VSCode remote container

1701 Add arm64 docker image build.

1797 fix(buildpacks): replace custom buildpack with APT buildpack

1799 Update minimum required node.js version to v12 with npm package dependencies

1767 Upgrade Node.js version

1816 Update node.js version in .nvmrc

1817 Update npm dependencies

Thank you