Julio Montoya 15 years ago
parent
commit
3255f36863
1 changed files with 8 additions and 2 deletions
  1. 8 2
      documentation/changelog.html

+ 8 - 2
documentation/changelog.html

@@ -54,7 +54,6 @@
 
 <h3>Debugging</h3>
 <ul>
-  <li>Security: fixed several possible SQL injections in links edition</li>
   <li>Fixed major course copy drawback by which exercise contents were keeping links to the old course (thanks to Ludovic Gasc and SANTEXCEL - BT#658)</li>
   <li>Some PHP short tags fixed. Reported by Sicabol, see <a href="http://www.chamilo.org/node/114" target="_blank">http://www.chamilo.org/node/114</a> (Feature #347)</li>
   <li>Student publications deleted when an user is unsubscribed of a course. Reported and fixed by André Boivin</li>
@@ -107,10 +106,17 @@
 <ul>
   <li>Timezone functionality is not available in the most recent versions of PHP available for CentOS/RHEL ( 5.1.6-23.2.el5_3 ) (see http://www.php.net/manual/en/function.timezone-identifiers-list.php). Chamilo now requires PHP 5.1 or superior and <b>highly</b> recommends PHP 5.2.</li>
   <li>When the user publishes an event as announcement, this same announce can be repeat many times</li>
+  <li>FCKEditor FLV Videos: If you already insert a FLV video you should re-embed it. The SWFObject was replaced with object tags.</li>
 </ul>
 <h3>Deprecated files</h3>
 <ul>
-  <li>Online editor: The plugins "Flash" (obsolete) and "placeholder" (non-relevant to the finished product) have been removed. (Feature #347)</li>
+  <li>Online editor: The plugins "Flash" (obsolete) and "placeholder" (non-relevant to the finished product) have been removed. (Feature #347)</li>  
+</ul>
+<h3>Security</h3>
+<ul>
+  <li>HTMLPurifier updated to version 4.1.0</li>
+  <li>FLV FCKEditor Plugin modified. SWFObject replaced with "object" and embed tags. Avoids the execution of javascript. See CT#1297</li>
+  <li>Security: fixed several possible SQL injections in links edition</li>  
 </ul>
 <br />