From 91780e2e17a8020872c8da2d8941114e098ef2a4 Mon Sep 17 00:00:00 2001 From: James Moger <james.moger@gitblit.com> Date: Thu, 16 Feb 2012 07:39:48 -0500 Subject: [PATCH] Merge pull request #7 from plm/protect_refs_hook --- docs/04_releases.mkd | 30 ++++++++++++++++++++++++++++++ 1 files changed, 30 insertions(+), 0 deletions(-) diff --git a/docs/04_releases.mkd b/docs/04_releases.mkd index c51c2d7..e82c274 100644 --- a/docs/04_releases.mkd +++ b/docs/04_releases.mkd @@ -4,6 +4,36 @@ **%VERSION%** ([go](http://code.google.com/p/gitblit/downloads/detail?name=%GO%) | [war](http://code.google.com/p/gitblit/downloads/detail?name=%WAR%) | [express](http://code.google.com/p/gitblit/downloads/detail?name=%EXPRESS%) | [fedclient](http://code.google.com/p/gitblit/downloads/detail?name=%FEDCLIENT%) | [manager](http://code.google.com/p/gitblit/downloads/detail?name=%MANAGER%) | [api](http://code.google.com/p/gitblit/downloads/detail?name=%API%)) based on [%JGIT%][jgit] *released %BUILDDATE%* +#### security + +- Fixed session fixation vulnerability where the session identifier was not reset during the login process (issue 62) + +#### changes + +- block pushes to a repository with a working copy (i.e. non-bare repository) (issue-49) +- web.datetimestampLongFormat from *EEEE, MMMM d, yyyy h:mm a z* to *EEEE, MMMM d, yyyy HH:mm Z* (issue 50) + +#### additions + +- Added a built-in AJP connector for integrating Gitblit GO into an Apache mod_proxy setup (issue 59) + **New:** *server.ajpPort = 0* + **New:** *server.ajpBindInterface = localhost* +- On the Repositories page show a bang *!* character in the color swatch of a repository with a working copy (issue 49) +Push requests to these repositories will be rejected. +- On all non-bare Repository pages show *WORKING COPY* in the upper right corner (issue 49) +- New setting to prevent display/serving non-bare repositories + **New:** *git.onlyAccessBareRepositories = false* +- Allow relinking HEAD to a branch or a tag (Github/plm) + +#### fixes + +- Prevent add/edit team with no selected repositories (issue 56) +- Disallow browser autocomplete on add/edit user/team/repository pages +- Fixed username case-sensitivity issues (issue 43) +- Disregard searching a subfolder if Gitblit does not have filesystem permissions (Github/lemval issue 51) + +**0.8.2** ([go](http://code.google.com/p/gitblit/downloads/detail?name=gitblit-0.8.2.zip) | [war](http://code.google.com/p/gitblit/downloads/detail?name=gitblit-0.8.2.war) | [express](http://code.google.com/p/gitblit/downloads/detail?name=express-0.8.2.zip) | [fedclient](http://code.google.com/p/gitblit/downloads/detail?name=fedclient-0.8.2.zip) | [manager](http://code.google.com/p/gitblit/downloads/detail?name=manager-0.8.2.zip) | [api](http://code.google.com/p/gitblit/downloads/detail?name=gbapi-0.8.2.zip)) based on [JGit 1.2.0 (201112221803-r)][jgit] *released 2012-01-13* + #### fixes - Fixed bug when upgrading from users.properties to users.conf (issue 41) -- Gitblit v1.9.1