Shaarli

This release addresses an XSS security vulnerability in bookmark titles and improves build processes and release archives.

This release addresses several XSS security vulnerabilities, updates frontend tooling and dependencies, and adds new build and testing documentation.

This release fixes a bug preventing Docker containers from starting due to a missing s6-svscan directory.

This release focuses on infrastructure and CI improvements, Docker updates including PHP 8.4, and a fix for a stored XSS security vulnerability.

This release introduces new plugins and templates, refactors the video plugin, updates CI/CD base images, and fixes several security vulnerabilities including XSS and filename sanitization.

This release includes extensive documentation updates, security patches for npm dependencies, several bug fixes for metadata retrieval and PHP compatibility, and updates to the Docker base image.

This release fixes an XSS vulnerability in tag search, drops support for PHP 7.1-7.3, and adds ARM64 Docker platform support.

Adds bulk tag actions, ReadItLater plugin, enhanced search operators, and updates Docker images to ghcr.io with new tag naming conventions.

Introduces bulk bookmark creation, a server administration tool, PHP 8.0 support, asynchronous metadata retrieval, and updated web server configurations.

This update introduces a new Bookmark object and service layer, integrates Markdown rendering into the core, adds LDAP authentication, and adds support for PHP 8.0.

Fixed XSS vulnerabilities introduced in v0.12.0-beta.

This beta release introduces a new datastore format, integrated Markdown rendering, LDAP authentication, and a structural shift to a Service layer and Slim controller.

Fixed the Docker build, documentation links, and labels, while adding accessibility improvements.

This update introduces PHP namespaces for classes, drops support for PHP 5.6 and 7.0, and includes various accessibility and template improvements.

Fixed issues with thumbnail disabling when PHP GD is missing and a warning regarding link sticky status.

This release introduces OpenGraph metadata, CORS headers, and new UI buttons for link management, alongside various bug fixes and accessibility improvements.

Fixed an issue with the Docker build process.

This release includes accessibility improvements, several bug fixes for the daily page and authorization errors, and removes the Firefox Social API shaare.

Shaarli adds PHP 7.2 support, a public links filter, REST API tag endpoints, and updates its build system and Docker images.

Docker images are now built from local Git sources.

Updated Docker image build process to use local Git sources and removed support for PHP 5.3 in Travis CI.

Updated htaccess to restrict resource access to SCM-managed files and ensure Authorization headers are forwarded.

Updated version check tests to run against the stable branch.

Fixed warnings related to missing php-intl installation and legacy version updates.

This release introduces French translations, migrates Docker images to Alpine Linux, and includes various performance improvements, UI updates, and bug fixes.

Fixed a cross-site-scripting (XSS) vulnerability in index.php associated with CVE-2018-5249.

This update addresses a major security vulnerability and introduces tag search wildcards, new privacy and general settings, and various bug fixes.

This release introduces bulk link deletion, a new default theme, documentation migration to ReadTheDocs, and various security and functional improvements.

Introduces a REST API v1, a new theming system, and a history mechanism, while updating PHP requirements to 5.5+ and removing the ReadItYourself plugin.

The Markdown plugin now escapes HTML entities by default for improved security.

The Markdown plugin now escapes HTML entities by default for improved security.

Fixed PHP 7.1 compatibility by adding the ConfigManager parameter to the anti-bruteforce function call in the login template.

Fixed an issue where editing links created before the new ID system caused permalink changes.

This release introduces a link ID refactoring, new plugins for Isso and Piwik, improved RSS/Atom feeds, and security updates for IP whitelisting.

Shaarli now requires Composer for dependency management and introduces hashtag support, JSON-based configuration, and security improvements.

Added Markdown support for feeds, improved login prefilling, and refined tagcloud and bookmark export functionality alongside several bug fixes.

Fixes regressions related to HTTP request warnings, malformed URLs via reverse proxies, and empty Markdown description blocks.

Introduces an automated updater class, enhances search functionality, improves tag behavior, and updates the Markdown plugin and API configurations.

Introduces a plugins administration page, a Markdown plugin, and Docker improvements, alongside several fixes for tags and search functionality.

This update introduces a new footer hook, improves QR code generation, cleans up templates, and fixes security permissions.

This release adds OpenSearch support, introduces fine-grained permission checks, and removes the redundant json_encode() function.

Introduced a plugin system with several initial plugins, updated coding style, and fixed link anchor and file permission bugs.

Added support for HTTPS via SSL-enabled proxies, refactored server utilities, and fixed PHP session ID handling.

Fixed a bug that could prevent users from logging in.

Added PHP 7 support, expanded HTTPS metadata extraction, and fixed issues with LinkDB loading and full path disclosure.

This release updates local documentation, improves timezone detection, feed cache handling, and URL cleanup, and fixes a 404 error when editing links while logged out.

Introduces the Firefox Social API, implements significant code refactoring and unit testing, and fixes various bugs including locale handling and security vulnerabilities.

Fixed issues with Unicode character display and the font size of the 'Add link' input field.

This update introduces a Makefile, new libraries for autocompletion and lazy loading, a 'Add Note' bookmarklet, theme improvements, and the removal of jQuery.

This release introduces configurable paths and URLs, improves RSS and thumbnail handling, fixes various bugs, and enhances security by preventing sensitive data leaks.