0.54.0

Welcome to Zotonic 0.54.0, released on February 4, 2020.

Main changes are:

  • Now fixed DHE parameters are used for SSL. If there is an existing DH file then that file will still be used.

  • Options and configurations to set the HSTS headers

  • Upgraded Locus (MaxMind Geo Location Library), now a license key is mandatory. See http://docs.zotonic.com/en/0.x/ref/modules/mod_geoip.html

  • A scomp ignore_user_inactivity is introduced to disable activity tracking. This is useful for pages that should not timeout with their session.

  • Generating the translation .pot files now needs administrator or use.mod_development rights.

  • Fixes a problem with LinkedIn OAuth autentication

  • Fixes a problem where password reminders could be sent to non-user accounts.

Commits since 0.53.0

Maas-Maarten Zeeman (4):

  • core: Don’t close the connection in a beforeunload, but later in an unload. Make sure all ajax requests are async (#2296)

  • 1329 set hsts headers (#2297)

  • 2290 session active (#2291)

  • mod_ssl: Use rfc7919 dhe parameters (#2299)

Marc Worrell (8):

  • mod_geoip: add support for MaxMind license key (#2283)

  • mod_base: safe check on error stack object. Fix #2276

  • mod_base_site: fix Twitter share page link.

  • Fix problem with LinkedIn login. Fix #2277

  • overlay: cancel js close click event.

  • mod_authentication: Only send password reminders to resources with a password identity.

  • mod_translation: demand admin or use.mod_development right to generate .pot files. Issue #2298

  • Upgrade locus to 1.9.0

Edit on GitHub

0.54.1 Release Notes 0.53.0