1.1 --- a/public_html/docs/english/changes.html Sun Nov 01 09:20:01 2009 +0100
1.2 +++ b/public_html/docs/english/changes.html Sat Nov 07 11:53:47 2009 +0100
1.3 @@ -28,16 +28,24 @@
1.4 only in Topic").</li>
1.5 <li>New autotags now allow you to embed polls in stories and everywhere else
1.6 where autotags are allowed.</li>
1.7 -<li>Minor security enhancement: "Important" cookies (like the session cookies)
1.8 - are now created with the HttpOnly flag set. This will help avoid some XSS
1.9 - attacks, provided your browser supports this flag.</li>
1.10 <li>The Migrate option in the install script can now also be applied to an
1.11 existing database (i.e. you don't need to import a database dump to update
1.12 your URLs and paths).</li>
1.13 <li>The Database Backup admin panel now includes options to optimize the
1.14 database and convert tables to InnoDB (MySQL only).</li>
1.15 +<li>Minor security enhancements:
1.16 + <ul>
1.17 + <li>"Important" cookies (like the session cookies) are now created with
1.18 + the HttpOnly flag set. This will help avoid some XSS attacks,
1.19 + provided your browser supports this flag.</li>
1.20 + <li>Template errors will now trigger the <a href="http://www.geeklog.net/faqman/index.php?op=view&t=65">standard error handler</a> instead of
1.21 + exposing the template path.</li>
1.22 + <li>Fixed inclusion protection for some of the Spam-X class files.</li>
1.23 + </ul>
1.24 </ul>
1.25
1.26 +<p>Please also see the list of <a href="theme.html#changes">theme changes</a>.</p>
1.27 +
1.28 <h3>Bugfixes</h3>
1.29
1.30 <ul>