diff --git a/CHANGELOG b/CHANGELOG index 8ddd619a..36216dc0 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,3 +1,34 @@ +* 0.17.2 + +Security: Updated to Rails 2.3.4 +* Fixes Timing Weakness in Rails MessageVerifier and the Cookie Store + http://weblog.rubyonrails.org/2009/9/4/timing-weakness-in-ruby-on-rails +* Fixes XSS Vulnerability in Rails + http://weblog.rubyonrails.org/2009/9/4/xss-vulnerability-in-ruby-on-rails + +New Features: +* Syntax colouring (`ruby` and `html`) for code blocks. +* Updated for itex2MML 1.3.10 (supports \rlap{} and \underline{}). You should upgrade that, too. +* Add a "Create New Page" Link to the Search Page. (Based on an idea by nowa) +* Updated to Rails 2.3.4 + +Bugs Fixed: +* Wikilinks to published webs should be to the published action. This didn't work + right for inter-web links. (Reported by Mike Shulman) +* Use .size, rather than .length for ActiveRecord associations. A huge memory saving + in building the recently_revised page. +* Refactor the upgrade_instiki rake task, to make it database-agnostic. (Many thanks to James Herdman) +* Web#files_path and Web#blatex_pngs_path now return Pathname objects. (Thanks, again, to James Herdman) +* Workaround for Mozilla Bug 449396. (Reported by Andrew Stacey) +* Correctly Set noindex,nofollow On /diff Pages. +* Page-renaming javascript deals correctly with page names containing ampersands, slashes, and other garbage. +* List of Wanted Pages should not include redirected pages. +* The Regexp, used in Maruku to detect "email" headers (used, e.g., for S5 slideshow metadata) could, for some inputs, interact badly with Instiki's Chunk Handler. Fixed. +* Ensure "rollback" locks page for editing. +* Generate relative URLs, when possible. (Patch by Dennis Knauf) +* Expire revisions of an edited page. Use a `before_save` hook to deal with the situation where a page's name has been changed. + +------------------------------------------------------------------------------ * 0.17 New features: diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb index c464969e..d8bab69b 100644 --- a/app/controllers/application_controller.rb +++ b/app/controllers/application_controller.rb @@ -258,7 +258,7 @@ module Instiki module VERSION #:nodoc: MAJOR = 0 MINOR = 17 - TINY = 0 + TINY = 2 SUFFIX = '(MML+)' PRERELEASE = false if PRERELEASE diff --git a/app/controllers/cache_sweeping_helper.rb b/app/controllers/cache_sweeping_helper.rb index f91ec909..20e68b2f 100644 --- a/app/controllers/cache_sweeping_helper.rb +++ b/app/controllers/cache_sweeping_helper.rb @@ -26,7 +26,7 @@ module CacheSweepingHelper end def expire_cached_revisions(page) - page.revisions.length.times do |i| + page.revisions.count.times do |i| revno = i+1 expire_action :controller => 'wiki', :web => page.web.address, :action => 'revision', :id => page.name, :rev => revno diff --git a/app/controllers/wiki_controller.rb b/app/controllers/wiki_controller.rb index a1110e4b..1490c810 100644 --- a/app/controllers/wiki_controller.rb +++ b/app/controllers/wiki_controller.rb @@ -19,7 +19,7 @@ class WikiController < ApplicationController redirect_home elsif not @wiki.setup? redirect_to :controller => 'admin', :action => 'create_system' - elsif @wiki.webs.length == 1 + elsif @wiki.webs.size == 1 redirect_home @wiki.webs.values.first.address else redirect_to :action => 'web_list' @@ -98,7 +98,7 @@ class WikiController < ApplicationController