forked from globaleaks/globaleaks-whistleblowing-software
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathCHANGELOG
3300 lines (2716 loc) · 134 KB
/
CHANGELOG
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
Changes in version 3.11.48 - 2019-12-10
Removing python3-distro dependency requiring unusual large
set of apparmor rules for the functionality offered
Changes in version 3.11.47 - 2019-12-10
Update applying rules fixing issue #2747
Update translations
Changes in version 3.11.46 - 2019-12-08
Revise installation script in relation to installation privacy
Deprecate compatibility with python2
Update translations
Changes in version 3.11.45 - 2019-12-04
Fixes issue #2737 and #2738
Changes in version 3.11.44 - 2019-12-03
Apply minor UI fixes
Bump npm dependencies to latest versions
Update translations
Changes in version 3.11.43 - 2019-12-01
Add error logging on impossibility to validate a TLS Certificate (#2732)
Improve font selection in relation to feature #2530
Fix serialization of encrypted tips in relation to tip preview
Bump npm dependencies to latest versions
Update translations
Changes in version 3.11.42 - 2019-11-26
Implement certificate chain verification for outgoinv HTTPS and SMTPS (#2732)
Apply minor bugfixing
Bump npm dependencies to latest versions
Update translations
Changes in version 3.11.41 - 2019-11-20
Apply minor bugfixing
Changes in version 3.11.40 - 2019-11-20
Apply minor bugfixing
Update translations
Changes in version 3.11.39 - 2019-11-17
Apply minor bugfixing
Update translations
Changes in version 3.11.38 - 2019-11-01
Fix regression #2720
Update translations
Changes in version 3.11.37 - 2019-10-31
Apply minor fixes
Update translations
Changes in version 3.11.36 - 2019-10-31
Bump npm dependencies to latest versions
Implement feature #2521
Export tip status inside the submission export (#2526)
Revise CSS in relation to UI responsivenes
Update translations
Changes in version 3.11.35 - 2019-10-28
Revise UI of context selection
Changes in version 3.11.34 - 2019-10-28
Revise authentication decorator ensuring session.tid/request.id correspondance
Improve UI in relation to responsivenes
Update translations
Changes in version 3.11.33 - 2019-10-27
Fix issue #2717
Changes in version 3.11.32 - 2019-10-27
Improve UI of language selector
Update translations
Changes in version 3.11.31 - 2019-10-26
Improve UI of maximum recipients feature (#2530)
Improve client minification
Update translations
Changes in version 3.11.30 - 2019-10-21
Optimize accesibility of the application (rank 92% of LightHouse)
Optimize performance of first load (rank 65% of LightHouse)
Optimize SEO of the appplication (rank 100% of LightHouse)
Revise CSS using rem in place of em to ease customizations
Update translations
Changes in version 3.11.29 - 2019-10-16
Apply minor style fixes
Changes in version 3.11.28 - 2019-10-16
Add virtualhost to access.log (#2703)
Improve loading implementing resource preload
Optimize code of password complexity meter removing zxcvbn library
Improve style of NoScrypt message
Improve Search Engine Optimizatin
Fix disclaimer implementation reducing forensic traces
Improve HTTP interface implementing HEAD method
Improve multisite login UI adding the domain name
Fix implementation of password reset link
Fix configuration for instance of question templates
Update translations
Bump npm dependencies to latest version
Changes in version 3.11.27 - 2019-10-10
Fix typo preventing authentication on old migrated platforms
Changes in version 3.11.26 - 2019-10-09
Apply minor bugfixing
Update translations
Changes in version 3.11.25 - 2019-10-08
Implement pagination for Comments and Messaging (#531)
Apply text revisions thanks to the community support
Revise UI of Custodian functionalities
Update translations
Changes in version 3.11.24 - 2019-10-07
Postpone application of EAT patch included in previous release
Changes in version 3.11.23 - 2019-10-07
Simplify User model removing incomplete multi tenant support
Update ER representation of the database schema
Improve privacy of whistleblower identity by showing the widget collapsed
by default (#2497)
On the EAT project archive questionnaire answer considering every answer
subject to stats
Apply minor bugfixing
Update translations
Changes in version 3.11.22 - 2019-10-04
Combine password reset with 2fa
Enable password reset in default configuration
Apply minor bugfixing
Changes in version 3.11.21 - 2019-10-02
Update translations
Changes in version 3.11.20 - 2019-10-01
Make TLS intermediate certificate optional (fix)
Changes in version 3.11.19 - 2019-09-30
Fix regression #2683
Changes in version 3.11.18 - 2019-09-27
Fix demo mode in relation to creation of admin account
Apply minor style bugfixing
Changes in version 3.11.17 - 2019-09-27
Improve UX for enforced password change
Implement possibility to enforce two factor authentication (#2681)
Ensure that on enforced password are not reused (#2614)
Changes in version 3.11.16 - 2019-09-26
Add support drag and drop of files (#2063)
Make TLS intermediate certificate optional
Bump npm dependencies to latest stables versions
Changes in version 3.11.15 - 2019-09-24
Fix javascript packaging path
Changes in version 3.11.14 - 2019-09-23
Apply revisions to apparmor profile
Changes in version 3.11.13 - 2019-09-23
Apply revision to apparmor profile
Fix export of tip comments
Apply mix fixes in relation to RTL layout
Changes in version 3.11.12 - 2019-09-23
Fix CSS processing in relation to RTL and pre-existent configs (#2677)
Changes in version 3.11.11 - 2019-09-22
Disable Twisted logging in H2Connection and HTTPChannel class
Changes in version 3.11.10 - 2019-09-22
Set Debian Buster as main supported platform
Changes in version 3.11.9 - 2019-09-22
Add packaging for Debian Buster (#2676)
Changes in version 3.11.8 - 2019-09-21
Fix reversed check on HSTS preload header injection introduced in 3.11.4
Changes in version 3.11.7 - 2019-09-20
Apply minor bugfixing
Update translations
Changes in version 3.11.6 - 2019-09-19
Fix packaging issue of 3.11.5 in relation to bootstrap inclusion
Changes in version 3.11.5 - 2019-09-19
Bump npm dependencies to latest stables versions
Make it possible for the whistleblower to remove a file before
upload completion (#2521)
Add demo badge to inform users to not use the platform for
real submissions
Avoid user of browser navigation reducing browser evidences (#2668)
Update translations
Changes in version 3.11.4 - 2019-09-16
Fix defect in field triggers
WBPA: Enable HTTPS preload
Changes in version 3.11.3 - 2019-09-16
Fix regression #2675
Changes in version 3.11.2 - 2019-09-16
Fix regression #2673
Update translations
Changes in version 3.11.1 - 2019-09-10
Fix serialization of question templates
Apply minor UI fixes
Changes in version 3.11.0 - 2019-09-09
Implement HTTP/2
Revise HTTPS implementation enabling only TLS1.3 andTLS1.2 with ECDH key exchange
Revise Lets'Encrypt implementation requesting ECC certificates with curve prime256v1
Prioritize CHACHA20 on clients that don't have AES-NI (e.g., Android devices)
Optimize TLS implementation enabling session resumption
Implement TOTP 2FA based on RFC 6238
Implement HTTP Feature-Policy Header (#2667)
Implement encryption of file uploads metadata (#2665)
Implement recovery procedure for encryption feature (#2649)
Bump Bootstrap to version 4
Update translations
Changes in version 3.10.7 - 2019-08-19
Revise application packaging in relation to CSP rules
Fix progress bar UI of file uploads
Changes in version 3.10.7 - 2019-08-16
Improve retrocompatibility of Content Security Policy for browsers not supporting CSP3
Changes in version 3.10.6 - 2019-08-16
Implement Content Security Policy as by #1998
Add Strict Transport Security header removed since HTTPS refactoring
Fix issue on HTTPS redirects causing LetsEncrypt renewal to fail
Add migration fix for very old setups in relation to commit 238c0dc (#2661)
Changes in version 3.10.5 - 2019-08-13
Revert regression causing migrations scripts to proceed even on failure
Apply minor bugfixing
Changes in version 3.10.4 - 2019-08-09
Apply minor bugfixing
Changes in version 3.10.3 - 2019-08-01
Apply minor bugfixing
Changes in version 3.10.2 - 2019-08-01
Apply minor UI fixes
Changes in version 3.10.1 - 2019-07-31
Fix regression on mail notification added in 3.10.0
Changes in version 3.10.0 - 2019-07-31
Automatically delete platforms not activated within 24 hours (#2639)
Implement database support and encryption primitives for Recovery Keys (#2649)
Improve UI of Whistleblower Login (#1693)
Implement database support for immutable submissions (#2581)
Bump npm dependencies to latest stables versions
Update translations
Changes in version 3.9.15 - 2019-07-24
Fix failure on authentication added in 3.9.14
Changes in version 3.9.14 - 2019-07-23
Update translations
Changes in version 3.9.13 - 2019-07-19
Disable Copy-Cut-Paste on signup user email confirmation (#2637)
On signup ask the user email twice (#2637)
Fix login issue on old migrated platforms
Fix the gl-admin reset pass in relation to mixed Argon/Scrypt situations
Changes in version 3.9.12 - 2019-07-11
Fix issues #2625, #2626, #2630
Improve UI in relation to issue #2627
Fix regression #2629
Make it possible to reset HTTPS configuration without disabling HTTPS
Make it possible for users to reset their password also when simplified login is enabled
When a platform is created with a mode different from default, delete the admin user
Bump npm dependencies to latest stables versions
Update translations
Changes in version 3.9.11 - 2019-07-05
Revise fix for issue #2612
Changes in version 3.9.10 - 2019-07-05
Fix issue #2612
Changes in version 3.9.9 - 2019-07-03
Fix issues: #2591, #2611, #2613
Update translations
Changes in version 3.9.8 - 2019-07-02
Fix compatibility with IE11
Fix visualization of whistleblower identity answers
Rewrite letsencrypt renewal routines decoupling them from certificate issuance
Fix issues #2608, 2610
Update Translations
Bump npm dependencies to latest stables versions
Changes in version 3.9.7 - 2019-06-19
Apply minor bugfixing
Bump npm dependencies to latest stable versions
Update translations
Changes in version 3.9.6 - 2019-06-13
Fix issue #2584
Fix issue #2588
Open ToS URLs in a new tab with no-referrer policy
Apply minor bugfixing
Changes in version 3.9.5 - 2019-06-10
Change requirement for Tor Onion Services V3 to Tor 0.3.3.9
Changes in version 3.9.4 - 2019-06-10
Apply minor bugfixing
Changes in version 3.9.3 - 2019-06-10
Upgrade Tor Onion Services to version 3 (#2582)
Disable HEAD requests
Disable connection persistance
Reorganize access log to be in Apache Combined Format
Redact the identity answers from tip export when the visibility
should be subject to custodian authorization
Apply minor bugfixing
Changes in version 3.9.2 - 2019-06-05
Apply minor bugfixing
Update translations
Changes in version 3.9.1 - 2019-06-05
Apply minor bugfixing
Changes in version 3.9.0 - 2019-06-05
Implement URL redirects (#2575)
Collect statistics about mobile/desktop users (#2207)
Optimize language selector for Mobile users (#2574, #1780)
Implement Ricochet panel (#2513)
Prepare database for Audit Log (#2579)
Improve resiliency of HTTPS component
Fix reload of renewed Let'sEncrypt certificates
Improve securization of HTTPS configuration
Apply minor bugfixing
Update translations
Changes in version 3.8.6 - 2019-05-21
Apply minor bugfixing
Updates translations
Changes in version 3.8.5 - 2019-05-16
Apply minor bugfixing
Changes in version 3.8.4 - 2019-05-14
Fix configuration of recipients triggers on selectbox options
Apply minor bugfixing
Changes in version 3.8.3 - 2019-05-10
Apply minor bugfixing
Changes in version 3.8.2 - 2019-05-09
Add basic profile for EAT project (#2568)
Apply minor bugfixing
Changes in version 3.8.1 - 2019-05-08
Apply minor bugfixing
Changes in version 3.8.0 - 2019-05-07
Make it possible to configure the node timezone (#2525)
Implement questions of type DATERANGE (#2561)
Make it possible to block the submission after the selection of an answer (#2565)
Make it possible to show a message after the selection of an answer (#2564)
Make it possible to configure an 'hint' for the options of type checkbox and selectbox (#2524)
Fix authentication issues on python2 and Ubuntu Xenial
Changes in version 3.7.4 - 2019-05-03
Apply minor bugfixing
Changes in version 3.7.3 - 2019-05-03
Fix authentication issue introduced in 3.7.2 (#2563)
Changes in version 3.7.2 - 2019-05-01
Apply minor bugfixing
Add malagasy language (currently copy of French translation)
Update translations
Changes in version 3.7.1 - 2019-04-23
Apply minor bugfixing
Changes in version 3.7.0 - 2019-04-23
Implement features: #2534, #2535, #2536, #2537
Prepare database support for #2523 and #2552
Preinitialize the logo of secondary tenants when the mode is 'default'
Revise texts related to the receipt
Hide MultiSite enabler from secondary tenants
Make it possible to use the root site for administrative purposes only (#2559)
Update ER representation of the database schema
Make it possible to configure a field trigger as "Sufficient"
Fix score reorganizing the total_score formula and moving ranking on the client
Update translations
Changes in version 3.6.46 - 2019-04-17
Fix visualization of submissions received before version 3.6.41
Changes in version 3.6.45 - 2019-04-16
Apply minor bugfixing
Addressed issues:
- https://github.com/globaleaks/GlobaLeaks/issues/2545
- https://github.com/globaleaks/GlobaLeaks/issues/2548
- https://github.com/globaleaks/GlobaLeaks/issues/2549
- https://github.com/globaleaks/GlobaLeaks/issues/2551
- https://github.com/globaleaks/GlobaLeaks/issues/2554
Changes in version 3.6.44 - 2019-04-07
Make it possible to reset submissions (#2447)
Revise error codes of /bin/globaleaks
Add project description to publiccode.yml
Changes in version 3.6.43 - 2019-04-04
Apply minor bugfixing
Changes in version 3.6.42 - 2019-04-02
Update translations
Apply minor bugfixing
Changes in version 3.6.41 - 2019-04-01
Bump npm dependencies to latest stables versions
Add Slovak translation
Update translations
In the install script correct the detection about installed globaleaks
Revise tip page hiding steps and questions that are not triggered
Make it possible to run the application as root needed in many containers
Add users' username to admin users overview
Fix setup of development environment in relation to client updates
Restrict submissions and files visibility to recipients only
Always re-open the disclaimer modal when opening the submission page
Revise visibility of the mandatory-field warning
Re-evaluate recipients at every question-answer update
Fixes and improvements to publiccode.yml
Update publiccode.yml
Changes in version 3.6.40 - 2019-03-07
Fix minor issue in visualization of the latest db version
Make it possible to configure score points of type multiplier (#2531)
Changes in version 3.6.39 - 2019-03-06
Fix wb identity field in relation to refactor #2504
Changes in version 3.6.38 - 2019-03-05
Fix navigation of submission steps for conditional steps
Changes in version 3.6.37 - 2019-03-04
Optimize Comfort Loader
Fix status visualization in recipient tip interface
Changes in version 3.6.36 - 2019-03-04
Fix client lint errors
Changes in version 3.6.35 - 2019-03-04
Fix minor regression added in 3.6.32
Changes in version 3.6.34 - 2019-03-04
Fix validation of mandatory fields for last step (#2504)
Changes in version 3.6.33 - 2019-03-03
Apply minor fix to 3.6.32 postponing patch to next db update
Changes in version 3.6.32 - 2019-03-03
Reduce configuraton inheritance to the whistleblowing.it project
Implement basic print for submissions
Changes in version 3.6.31 - 2019-02-28
Revise fix for issue #2506
Changes in version 3.6.30 - 2019-02-26
Remove debugging output
Changes in version 3.6.29 - 2019-02-25
Reimplement fixes included in 3.6.26
Changes in version 3.6.28 - 2019-02-24
Apply minor bugfixing
Changes in version 3.6.27 - 2019-02-24
Apply minor bugfixing
Changes in version 3.6.26 - 2019-02-24
Implement migration for change of name in submission state: open->opened
Changes in version 3.6.25 - 2019-02-24
Revise fix for issue #2506
Update translations
Changes in version 3.6.24 - 2019-02-21
Revise fix for issue #2506
Changes in version 3.6.23 - 2019-02-21
Revise fix for issue #2506
Changes in version 3.6.22 - 2019-02-20
Revise fix for issue #2506
Changes in version 3.6.21 - 2019-02-19
Revise fix for issue #2506
Changes in version 3.6.20 - 2019-02-19
Revise fix for issue #2506
Address issue #2515
Bump npm dependencies to latest stable versions
Update translations
Changes in version 3.6.19 - 2019-02-19
Revise fix for issue #2506
Changes in version 3.6.18 - 2019-02-17
Revise fix for issue #2506
Changes in version 3.6.17 - 2019-02-15
Fix issue #2506
Changes in version 3.6.16 - 2019-02-14
Fix clean deb install over an existing migrated /var/globaleaks
Changes in version 3.6.15 - 2019-02-11
Fix issue #2514
Changes in version 3.6.14 - 2019-02-08
Fix visualization of questionnaire answers of type multichoice
(fix necessary for the correct visualization of old submissions)
Fix minor lint errors
Changes in version 3.6.13 - 2019-02-08
Fix issue #2512
Fix possibility for the whistleblower to select its own recipients
Changes in version 3.6.12 - 2019-02-07
Fix deactivation of conditional steps
Fix gl-admin fixing the possibility to set boolean values
During migrations drop Statistics for nodes using db version < 38
Remove unused configuration 'unselectable' of recipients
Fix usage of variable recipient_configuration
Hide inverted triggers configuration that are still not fully implemented
Hide steps errors when the steps navigation interface is hidden
By default show selectbox options in configuration-order
Correct danish language native name (#2508)
Fix whitelisted ip addresses configuration for recipients (#2507)
Make it possible to read and backup the encryption key from the user preferences
Extend GCE to make it possible to export and import an existing encryption key
Bump npm dependencies to latest stable versions
Add Galician translation
Update translations
Changes in version 3.6.11 - 2019-01-31
Fix possibility for administrators to issue user password reset
Fix bug in the disabling of HTTP basic authentication
Differentiate user sessions by tenant id
Fix texts as for suggestion #2503
Update translations
Changes in version 3.6.10 - 2019-01-29
Fix migration 45 in relation to duplicated whistleblowerfile names
Changes in version 3.6.9 - 2019-01-29
Fix migration 46 in relation to duplicated whistleblowerfile names
Changes in version 3.6.8 - 2019-01-28
Fix issue #2498
Changes in version 3.6.7 - 2019-01-24
Fix regression on 2FA
Changes in version 3.6.6 - 2019-01-24
Fix issues on authentication when 2FA is disabled
Reduce period of Cleaning and Certificate Check to be daily
Downgrade angular to 1.7.5 to solve #2495
Changes in version 3.6.5 - 2019-01-19
Fix validation of required questions of type checkbox
Bypass HTTPS restart when a new tenant is created
Changes in version 3.6.4 - 2019-01-18
Fix typ0 preventing visualization of questionnair navigation interface with steps names
changes in version 3.6.3 - 2019-01-17
Fix issue causing reset of internationalized texts on update
Changes in version 3.6.2 - 2019-01-16
Revert transaction changes included in 3.6.0 that seems to cause instability
Changes in version 3.6.1 - 2019-01-15
Fix initialization of Tor Hidden Service
Fix clientside logic of the multitenant auth switch
Changes in version 3.6.0 - 2019-01-13
Add IP filtering check to TokenAuthHandler (#1211)
Address issue #2469 removing private IP information from the public API
Implement notifications of custodian events (#1464)
Implement Location question by using a Graphical Map Selector and TopoJSON (#1407)
Make it possible to configure explicitly context as Enabled, Disabled, Hidden
Make it possible to configure enabled context with 0 static recipients assigned
Make it possible to dyniamically change recipients based on questionnaire answers (#2477)
Extend Terms of Service field to make it possible to configure an attachment (#2478)
Implement email based two factor authentication) (#2481)
Create database support for tracking backups
Refactor automatic on update backups to use the database
Prepare routines for automatic jobs; functionality currently disabled that will be finalized
with the possibility of automatically saving backups on a remote scp server (#528)
Fix ORM integration in relation to concurrency and transactions where some submissions id were
found to be dupliated.
Refactor Config variables in order to track the date of their change
Implement Docker scripts (experimental)
Update npm dependencies to latest versions
Update translations
Changes in version 3.5.8 - 2018-11-29
Fix visualization of logo preview
Changes in version 3.5.7 - 2018-11-29
Add missing template home.html
Changes in version 3.5.6 - 2018-11-28
Fix file upload in relation to files bigger than 1MB
Fix configuration of boolan attributes of fields (#2463)
Changes in version 3.5.5 - 2018-11-21
Fix whistleblower authentication on systems with pynacl < 1.2
Enforce usage of pynacl >= 1.2 on Bionic and Stretch
Changes in version 3.5.4 - 2018-11-19:
Fix migration 45 in relation to existing whistleblower access
Changes in version 3.5.3 - 2018-11-19:
Fix file delivery job in relation to encryption for multiple users.
Fix SNI in relation to py2/py3 compatibility on hostnames
Update translations
Changes in version 3.5.2 - 2018-11-15:
Apply minor bugfixing
Changes in version 3.5.1 - 2018-11-14:
Apply minor bugfixing
Changes in version 3.5.0 - 2018-11-14
Add implementation of Additinal Questionnaire feature (#1404)
Implement access.log in Apache Combined Log Format (#2420)
Stop globaleaks process during preinst script (#2443)
Add crypto engine implementation (still not enabled)
Prepare database for the enabling of encryption
Update npm dependencies to latest versions
Update translations
Addressed issues:
- https://github.com/globaleaks/GlobaLeaks/issues/2334
- https://github.com/globaleaks/GlobaLeaks/issues/2426
- https://github.com/globaleaks/GlobaLeaks/issues/2450
Changes in version 3.4.1 - 2018-10-04
Revise configuration applied on whistleblowing.it
Fix defect on initialization of onion services present in 3.4.0
Disable caching for admin.tenants handler
Changes in version 3.4.0 - 2018-09-30
Revise foreign keys used in database schema
Changes in version 3.3.16 - 2018-09-29
Revise configurations applied in whistleblowing.it mode
Changes in version 3.3.15 - 2018-09-28
Revise X-Frame-Options policy
Changes in version 3.3.14 - 2018-09-27
Improve usability of wistleblowing.it signup form
Update translations
Changes in version 3.3.13 - 2018-09-21
Start using Tor packages included in debian distributions
Reduce application footprint removing OpenPGP.js library from the client
Improve resiliency in relation to management of open file descriptors
Adopt Codacy coverage as code coverage tracking service in place of Coveralls
Rewrite ZipStream utilities enabling to read from open file descriptors
Update translations
Changes in version 3.3.12 - 2018-09-10
Implement explicit deny x-frame-options to prevent iframe inclusion
Update npm dependencies to latest versions
Update translations
Changes in version 3.3.11 - 2018-08-25
Update npm dependencies to latest versions
Update translations
Changes in version 3.3.10 - 2018-08-24
Fix serialization of fields of very old submissions missing field.template_id
Fix serialization of public resource
Make it possible to specify the mode for new created tenants
Changes in version 3.3.9 - 2018-08-23
Add CSS selectors to simplify customization of Tip and Tip list pages
Apply set of UI simplifications folling whistleblowing.it review
Update translations
Changes in version 3.3.8 - 2018-08-22
Fix serialization of /public resource in secondary tenants
Changes in version 3.3.7 - 2018-08-22
Implement redirects for urls without the hashtag (#2160)
Reload Tor hidden services in case of failures on the Tor control port
Update translations
Changes in version 3.3.6 - 2018-08-18
Revise configuration presets for whistleblowing.it mode
Update translations
Changes in version 3.3.5 - 2018-08-16
Fix path for preferences template in forced_password_change page
Fix python-acme dependency version (0.25.1)
Changes in version 3.3.4 - 2018-08-15
Add sidebar to users' preferences pages
Add dashboard for users and custodians (currently empty)
Revise platform settings that a recipient/custodian can edit
Revise configuration presets for whistleblowing.it mode
Fix submission status deletion (#2389)
Fix diplay of expiration date of HTTPS certificates
Fix display of fingerprint of PGP keys
Changes in version 3.3.3 - 2018-08-10
Add missing templates for refactored user homepage
Changes in version 3.3.2 - 2018-08-09
Add a landing homepage for both recipient and custodian users
Fix possibility of changing logo by recipient / custodian
Update npm dependencies to latest versions
Update translations
Changes in version 3.3.1 - 2018-08-07
Apply py2/py3 compatibility fixes
Changes in version 3.3.0 - 2018-08-06
Fix SSRF issue on HTTPS Proxy
Disable Error Stacktrace on production enviroment
Add Indonesian translation thanks to @LocalizationLab volunteers
Update translations
Changes in version 3.2.6 - 2018-07-31
Fix initialization of tenants at user signup
Fix initialization of user passwords
Changes in version 3.2.5 - 2018-07-30
Fix HTTPs certificates renewal
Changes in version 3.2.4 - 2018-07-29
Fix reinitialization of missing tenant variables
Make it possible to configure the default questionnaire
Implement the first set of configurations for whistleblowing.it
Fix duplication of questionnaires in relation to field triggers
Fix serializations of users in relation to multitenancy
Changes in version 3.2.3 - 2018-07-21
Apply minor bugfixing
Addresses issues:
- https://github.com/globaleaks/GlobaLeaks/issues/2328
Changes in version 3.2.2 - 2018-07-19
Implement signup form for whistleblowing.it project
Update protractor testin library to 3.4.0
Apply minor bugfixing
Update translations
Changes in version 3.2.1 - 2018-07-16
Apply minor bugfixing
Changes in version 3.2.0 - 2018-07-16
Implement password reset feature (#113)
Implement possibility for Users to change General Settings (#2273)
Implement Submission states feature (#1416)
Implement multitenant login interface (#2357)
Implement simplified multisite login interface (#2360)
Addressed issues:
- https://gitgub.com/globaleaks/GlobaLeaks/issues/2266
- https://github.com/globaleaks/GlobaLeaks/issues/2287
- https://github.com/globaleaks/GlobaLeaks/issues/2313
- https://github.com/globaleaks/GlobaLeaks/issues/2314
- https://github.com/globaleaks/GlobaLeaks/issues/2317
- https://github.com/globaleaks/GlobaLeaks/issues/2325
- https://github.com/globaleaks/GlobaLeaks/issues/2345
Changes in version 3.1.10 - 2018-07-08
Bump python-acme to version 0.25.1
The updated is required to make HTTPS certificate renewal to work
due to a breaking change in the LE protocol.
Addressed issues:
- https://github.com/globaleaks/GlobaLeaks/issues/2324
- https://github.com/globaleaks/GlobaLeaks/issues/2349
- https://github.com/globaleaks/GlobaLeaks/issues/2351
Changes in version 3.1.9 - 2018-06-14
Apply minor bugfixing
Changes in version 3.1.8 - 2018-06-11
Fix issue in migration of default questiont templates
Changes in version 3.1.7 - 2018-06-05
Fix issues on multiple field triggers and change of their state
Addresses issues:
- https://github.com/globaleaks/GlobaLeaks/issues/2307
Changes in version 3.1.6 - 2018-06-5
Fix py2/py3 compatibility issues
Changes in version 3.1.5 - 2018-06-05
Fix py2/py3 issues in letsencrypt utilities
Fix init script in relation to NETWORK_SANDBOXING startup
Fix apparmor script for the multiple versions of python supported
Addresses issues:
- https://github.com/globaleaks/GlobaLeaks/issues/2306
Changes in version 3.1.4 - 2018-06-01
Fix init script in relation to NETWORK_SANDBOXING startup
Changes in version 3.1.3 - 2018-05-31
Fix regression in processing of file uploads
Changes in version 3.1.2 - 2018-05-30
Fix issue on navigation of submissions steps
Changes in version 3.1.1 - 2018-05-30
Add constraint on python-acme (>= 0.22)
Changes in version 3.1.0 - 2018-05-29
Complete compatibility with Py3 while maintaining support for Py2
Complete packaging for Ubuntu Bionic
Drop support to pip based distributions: trusty, wheezy, jessie
Upgrade Letsencrypt to use APIv2
Implement database additions to support next round of features
Implement optional IP filtering for authenticated users (1211)
Implement possibility for users to change their visualized name (2271)
Implement possibility for users to change their email address (2272)
Make it possible to configure the same footer for all the tenants (2274)
Add Danish translation thanks to voluqnteers support!
Update translations
Update npm dependencies to latest versions
Addresses issues:
- https://github.com/globaleaks/GlobaLeaks/issues/2269
Changes in version 3.0.29 - 2018-05-07
Apply code revisions for compatibility with both py2 and py3
Changes in version 3.0.28 - 2018-05-04
Fix bug related to overlapping usernames (#2266)
Changes in version 3.0.27 - 2018-04-24
Fix counters for files,messages,comments shown in the tip list
Implement minimal self-contained SOCKS5 capability (#2243)
Update npm dependencies to latest versions
Changes in version 3.0.26 - 2018-04-19
Fix minor regression in exception notification
Changes in version 3.0.25 - 2018-04-18
Fix migration of default fields attributes in relation to wb_identity
Update translations
Update npm dependencies to latest versions
Addresses issues:
- https://github.com/globaleaks/GlobaLeaks/issues/2259
Changes in version 3.0.24 - 2018-04-12
o Fix regression on privacy badge visible also over Tor
Changes in version 3.0.23 - 2018-04-11
o Fix static file handler in relation to broken cache
o Fix packaging in relation to disclaimer.html template
Changes in version 3.0.22 - 2018-04-09
o Fix packaging in relation to D3 library inclusion
Changes in version 3.0.21 - 2018-04-09
o Fix regression preventing the application to start
Changes in version 3.0.20 - 2018-04-09
o Implement first round of fixes for supporting Win32
o Implement admin notifications for users signup
o Complete migrations necessary for implementing deferred foreign keys
o Update translations
o Bump npm dependencies to latest stables versions
Addresses issues:
- https://github.com/globaleaks/GlobaLeaks/issues/2050
- https://github.com/globaleaks/GlobaLeaks/issues/2248
- https://github.com/globaleaks/GlobaLeaks/issues/2196
Changes in version 3.0.19 - 2018-04-04
o Update translations
o Bump npm dependencies to latest stables versions
Addresses issues:
- https://github.com/globaleaks/GlobaLeaks/issues/2238
- https://github.com/globaleaks/GlobaLeaks/issues/2240
- https://github.com/globaleaks/GlobaLeaks/issues/2249
Changes in version 3.0.18 - 2018-03-28
o Fix errors on validation of PGP key
o Update translations
o Bump npm dependencies to latest stables versions
Addresses issues:
- https://github.com/globaleaks/GlobaLeaks/issues/2230
- https://github.com/globaleaks/GlobaLeaks/issues/2231
- https://github.com/globaleaks/GlobaLeaks/issues/2233
Changes in version 3.0.17 - 2018-03-22
o Fix update of whistleblower identity question
Changes in version 3.0.16 - 2018-03-22
o Apply minor UI bugfixing
o Prevent multitenancy regression that allow admin
configuration of reused usernames
o Update translations
Addresses issues:
- https://github.com/globaleaks/GlobaLeaks/issues/2217
Changes in version 3.0.15 - 2018-03-21
o Apply minor bugfixing
Changes in version 3.0.14 - 2018-03-21
o Fix regression in file uploads bigger than 1MB (#2226)
o Improve UI of mandatory fields
o Apply minor bugfixing
o Update translations
Addresses issues:
- https://github.com/globaleaks/GlobaLeaks/issues/2226
Changes in version 3.0.13 - 2018-03-18
o Apply minor bugfixing
Addresses issues:
- https://github.com/globaleaks/GlobaLeaks/issues/2218
Changes in version 3.0.12 - 2018-03-15
o Apply minor bugfixing
Addresses issues:
- https://github.com/globaleaks/GlobaLeaks/issues/2216
Changes in version 3.0.11 - 2018-03-12
o Fix migration 39 in relation to contexts and users images
Changes in version 3.0.10 - 2018-03-12
o Apply minor bugfixing
Changes in version 3.0.9 - 2018-03-12
o Apply minor bugfixing
Addresses issues:
- https://github.com/globaleaks/GlobaLeaks/issues/2202
- https://github.com/globaleaks/GlobaLeaks/issues/2208
Changes in version 3.0.8 - 2018-03-06
o Apply minor bugfixing
Addresses issues:
- https://github.com/globaleaks/GlobaLeaks/issues/2148
Changes in version 3.0.7 - 2018-03-06
o Apply minor bugfixing
o Update translations
Addresses issues:
- https://github.com/globaleaks/GlobaLeaks/issues/2190
- https://github.com/globaleaks/GlobaLeaks/issues/2156
- https://github.com/globaleaks/GlobaLeaks/issues/2192
Changes in version 3.0.6 - 2018-03-01
o Apply minor bugfixing
Addresses issues:
- https://github.com/globaleaks/GlobaLeaks/issues/2183
- https://github.com/globaleaks/GlobaLeaks/issues/2186
Changes in version 3.0.5 - 2018-02-28
o Apply minor bugfixing
Changes in version 3.0.4 - 2018-02-27
o Apply minor bugfixing
Addresses issues: