forked from globaleaks/globaleaks-whistleblowing-software
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathCHANGELOG
3816 lines (3135 loc) · 154 KB
/
CHANGELOG
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
Changes in version 4.1.17
Fix issue #2970
Revise access log format to keep it standard
Fix auto-epiration of new sites if not activated within 1 day
Revise cleaning sched in relation to activation tokens expiration
Add message-id header to emails to mitigate spam
Make it possible for field templates to be defined by using field templates
Downgrade D3 version to preserve compatibility with IE 11
Update npm dependencies to latest versions
Changes in version 4.1.16
Fix mail notifications on ubuntu focal / python 3.8
Bump npm dependencies to latest version
Changes in version 4.1.15
Fix issue #2967
Changes in version 4.1.14
Fix generation of email notifications for labeled submissions
Changes in version 4.1.13
Add Covenant Contributor Code of Conduct
Update Tor download link
Archive testing code related to CORS embedding (#1270)
Fix regression on report's postpone and delete interfaces
Fix loading of minified version of CSS and JS
Generate onion service only when platform mode is 'default'
Fix issue on visualization of answers for conditional steps
Changes in version 4.1.12
Compact database during cleaning schedule using sqlite VACCUM command
Revise application packaging moving PID file inside /var/globaleaks
Fix packaging adding explicit dependency on python3-cryptography
Bump npm dependencies to latest version
Changes in version 4.1.11
Fix possibility of resetting onion address
Changes in version 4.1.10
Make it possible to download https encryption key for backup purposes
Implement possibility to download access and debug log via the audit log
Fix statistics tracking of logins and submissions
Use cssmin and terser instead of using already minified libraries
Rework http gzip doing it in streaming to every resource served
Avoid caching of admin resources
Add Swahili language
Update translations
Bump npm dependencies to latest version
Changes in version 4.1.9
Fix issue #2904
Update translations
Changes in version 4.1.8
Fix serialization of tip preview for platforms with encryption OFF
Move experimentaal docker scripts to dedicated repository:
https://github.com/globaleaks/globaleaks-docker-scripts
Bump travis testing environment to Focal
Bump npm dependencies to latest version
Changes in version 4.1.7
Deprecate code related to onion service v2 generation
Add list of italian public agencies that use the software to
Developers Italia: https://developers.italia.it/it/software/globaleaks-globaleaks-f22648
Pre-generate Onion Service key as soon that the database is initiaized
Reset Authentication session when navigating public interface
Add Amharic translation
Fix issue #2945
Bump npm dependencies to latest version
Update translations
Changes in version 4.1.6
Fix regression on migration 52 (#2936)
(bug introduced in version 4.1.0)
Changes in version 4.1.5
Fix bug on PGP encryption of files resulting on using always the same recipient key for every user
(bug introduced in version 4.1.0)
Changes in version 4.1.4
Revise header implementation adding css ID ProjectName, TitleSeparator and PageTitle
Revise feature for enabling recipients to upload files to whistleblowers
Update translations
Changes in version 4.1.3
Revise logic of Tor network sandboxing
Update translations
Changes in version 4.1.2 - 2020-11-23
Revise notifications for custodian replies
Fix visualization of recipient selection cards
Changes in version 4.1.1 - 2020-11-22
Fix creation of new users for platforms where english is not enabled
Fix gl-admin utility in relation to import error
Add notifications for custodians replies
Bump npm dependencies to latest versions
Update translations
Changes in version 4.1.0 - 2020-11-18
Revise the application UI following the official an new brand guidelines
- https://github.com/globaleaks/GlobaLeaks/blob/main/brand/globaleaks-brand-guidelines.pdf
Reduce colors of the application removing the usage of Green, preferring to use the Blue
color of the brand to communicate the values of the project along security and transparency.
Add compound favicon with resolution 16x16 32x32 48x48
Adopt Metropolis as application Font as defined by the brand guidelines
Optimize the application for better accessibility and responsiveness
Improve usability in relation to key escrow mechanism adding user hints about the
necessity of saving the key esrow.
Add receipt to the tip page to support users to annotate it (#2915)
Bump npm dependencies to latest version
Revise and improve network sandboxing enabling traffic to used ports
Implement restricted indexing policiy by means of X-Robots-Tag: noarchive when
indexing is enabled
Revise Cache-Control headers and update related security documentation
Implement automatic screenshot collection during tests and documentation update
Fix issue https://github.com/globaleaks/GlobaLeaks/issues/2911
Fix password reset malfunction in relation to users using 2FA
Revise email spooling setting interval to 10 seconds and retry to 7 days
Replace Feature-Policy Header with the renamed new standard Permission-Policy header
Complete documentation of securit features currently implemented
- https://docs.globaleaks.org/en/main/security/index.html
Add preliminar documentation for more important user features:
- https://docs.globaleaks.org/en/main/user/index.html
Revise project documentation added to Developers Italia via publiccode.yml
- https://developers.italia.it/it/software/globaleaks-globaleaks-f22648
Make is possible to use markdown when configuring a custom privacy badge
Remove possibility to filter ip access for whistleblowers; the feature was never actually
implemented and the interface shown was just added by mistake. We consider that
Whistleblowers access shall never be prevented and that any restriction on this
topic should be considered against the best practice.
Pospone notification of Letsencrypt failures after a week of the initial failure
Implement scheduler to notify users after 7 days of unread or updated reports
Implement automatic update to onion services version 3 and
plan OnionServices V2 deprecation in compatibility with Tor timeline (#2894)
Update default smtp configuration
Implement admin assisted password reset (applicable when escrow keys are enabled)
Revise CSS of the application removing redundant or unused classes
Bump database schema to version 53
Update ER schema of the application:
- https://github.com/globaleaks/GlobaLeaks/blob/main/documentation/data/er.pdf
Reimplemt periodic file cleaning postponing deletion of files to 1 day since deletion and
ensuring that files that are not linked to the database are properly deleted
Bump test code coverage from 81% to 84%
Remove possibility to include the application by means of an iframe making it possible to
load the application via proper CORS requests
Add subscriber table and subscribed document table for tracking GDPR and other contracts
for demo and professional uses in preparation to furter planned development
Replace GL-Language header making use of the standard Accept-Language header
Implement HTTP OPTIONS method
Add Estonian translation
Update translations
Changes in version 4.0.58 - 2020-09-28
Fix issue #2899
Fix possibility to reset password for platforms that are admin-only
Remove HTTP Basic Authentication feature; this feature was
been developed in order to be used in pre-production but many users
seems to continue to abuse of its presence to create private
whistleblowing portals not really accessible to the end users;
from this the decision to remove completely the feature from the software.
Changes in version 4.0.57 - 2020-09-27
Fix serialization for questions of type date (#2896)
Implement serialization for questions of type date range
Changes in version 4.0.56 - 2020-09-25
Fix additional question answers functionality
Changes in version 4.0.55 - 2020-09-21
Fix issue #2892
Changes in version 4.0.54 - 2020-09-03
Fix recipient feature to load files to whistleblowers
Changes in version 4.0.53 - 2020-08-31
Fix functionality for re-generating Onion addresses
Changes in version 4.0.52 - 2020-08-30
Revise IPv6 support in relation to IP filtering and logging
Changes in version 4.0.51 - 2020-08-09
Do not show multitenancy menu if multisite feature is disabled
Add support for IPv6
Changes in version 4.0.50 - 2020-08-04
Add 1 second delay between mailung attempts
Fix issue #2882
Fix regression on issue #2720
When encryption is not enabled preserve statistic data
Fix visualization of admin interface for disabling user notifications
Update npm dependencies to latest versions
Update translations
Changes in version 4.0.49 - 2020-07-27
Fix exception error on recipients selection
Fix visualization of icons in questions messaging
Changes in version 4.0.48 - 2020-07-26
Fix check on maximum selectable recipients
Changes in version 4.0.47 - 2020-07-25
Fix issue #2878
Improve markdown avoiding privacy leaks on external links (#2879)
Update translations
Changes in version 4.0.47 - 2020-07-21
Fix disclaimer modal in relation to addition of Showdown Markdown (#1101)
Changes in version 4.0.46 - 2020-07-21
Fix visualization of admin advanced settings on root tenant while in demo mode
Changes in version 4.0.45 - 2020-07-21
Fix link for accessing reports in emails sent to recipients
Changes in version 4.0.44 - 2020-07-20
Revise fix for HTTPS redirects in relation to letsencrypt and renewal
Changes in version 4.0.43 - 2020-07-10
Revise tenatative domain correction introduced in 4.0.42
Bump npm dependencies to latest versions
Update translations
Changes in version 4.0.42 - 2020-07-19
Fix HTTPS redirects in relation to letsencrypt and renewal
Implementat tentative domain correction in relation to presence
or absence of 'www.' domain prefix
Changes in version 4.0.41 - 2020-07-18
Do not send certificate expiry notice to users with disabled notifications
Revise style of feature that enable to block submissions based on answers
Update npm dependencies to latest version
Improve lets'encrypt cert renewal for multisite platforms adding 60s delay
Add latvian translation
Update translations
Changes in version 4.0.40 - 2020-07-08
Fix regression in logo upload introduced in 4.0.39
Changes in version 4.0.39 - 2020-07-08
Fix import of questionnaires in relation to step triggers
Add unit tests for import of complex questionnaires
Fix visualization of steps triggers in relation to score enabler
Fix preferences interface for disabling email notifications
Add Onion-Location header only over HTTPS
Reimplement API token in compatibility with encryption functionality
Move REST API to /api/* path
Apply minor UI fixes
Update npm dependencies to latests version
Update translations
Changes in version 4.0.38 - 2020-06-28
Fix regression on encrypted file uploads paths introduced in 4.0.33
Fix visualization of file uploads by recipients
Fix audit log filter in relation to multitenancy
Change comments serialization API serializing ids in place of author names
Add Showdown markdown to homepage texts, footer,
and questions description ToS questionstext (#1101, #2206)
Update npm dependencies to latest version
Update translations
Changes in version 4.0.37 - 2020-06-22
Fix selected recipients count function
Fix regexp based form validation
Update translations
Changes in version 4.0.36 - 2020-06-18
Retest and fix admin heatmap broken since initial release 4
Fix file upload buttons with 2-click defect
Changes in version 4.0.35 - 2020-06-17
Apply minor style fixes
Fix packaging version bump
Update translations
Changes in version 4.0.33 - 2020-06-10
Improve UI in relation to #2862
Always re-generate salt when changing password
Revise TLS configuration preferring security over
Update npm dependencies to latest version
Prioritize PGP encryption for files when available
Enable to download the audit log resources as CSV
Update translations
Changes in version 4.0.32 - 2020-06-08
Fix alphabetic display of receipients
Changes in version 4.0.31 - 2020-06-07
Apply minor UI fixes
Update translations
Changes in version 4.0.30 - 2020-06-06
Apply minor UI fixes
Changes in version 4.0.29 - 2020-06-05
Fix sidebar of recipients showing site settings link
Revise implementation of Location headers redirecting to the homepage
Changes in version 4.0.28 - 2020-06-05
Bump to angular version 1.8.0
Uniform UI to new brand guidelines
Update translations
Changes in version 4.0.27 - 2020-06-04
Fix immediate generation of onion services for secondary tenants
Send exception notifications only to administrators of the root tenant
Remove redundant borders to whistleblowers' login interface
Disable user email notifications if they are disabled at user level
Fix password reset feature broken in 4.0.26
Fix custom order visualization of recipients
Uniform context and recipient selection interfaces
Changes in version 4.0.26 - 2020-06-02
Uniform all random secrets to 256bit length
Change default password change interval from 90 days to 1 year
Fix exception email notifications in relation to multitenancy
Fix issue #2861
Update npm dependencies to latest version
Update translations
Changes in version 4.0.25 - 2020-05-29
Fix issues: #2857, #2859
Update translations
Changes in version 4.0.24 - 2020-05-25
Fix interfaces for enabling languages
Apply minor UI fixes in relation to mobile responsiveness
Changes in version 4.0.23 - 2020-05-24
Postpone integration of basic auth bypass for multitenancy management
Changes in version 4.0.22 - 2020-05-24
Apply minor UI fixes in relation to mobile responsiveness
Changes in version 4.0.21 - 2020-05-23
Fix issues: #2043, #2852
Apply mix UI refinements
Update npm dependencies to lates versions
Update translations
Changes in version 4.0.20 - 2020-05-16
Fix minor UI defects
Update translations
Changes in version 4.0.19 - 2020-05-15
Fix issues: #2784, #2825, #2431, #2833, #2835, #2837, #2841, #2843
Implement Onion-Location Header (#2847)
Update translations
Changes in version 4.0.18 - 2020-04-28
Add support for latest Ubuntu LTS (20.04: Focal)
Update translations
Changes in version 4.0.17 - 2020-04-24
Fix issues: #2822, #2829
Update translations
Changes in version 4.0.16 - 2020-04-23
Fix issue #2826
Bump npm dependencies to latest version
Update translations:
Changes in version 4.0.15 - 2020-04-16
Apply minor bugfixing
Changes in version 4.0.14 - 2020-04-14
Fix issue #2818
Changes in version 4.0.13 - 2020-04-13
Add recipient name to reports' messages UI (#2815)
Update translations
Changes in version 4.0.12 - 2020-04-10
Fix issue #2814
Update translations
Changes in version 4.0.10 - 2020-04-08
Fix issues: #2800, #2810, #2812
Fix counters on reports lists showing always counters of last report
Update translations
Changes in version 4.0.9 - 2020-04-07
Revise fix on connection check admin and recipient roles
Fix issue #2800
Add updated documentation abouth threat model and encryption
Update translation
Changes in version 4.0.8 - 2020-04-02
Add updated documentation abouth threat model and encryption
Update translation
Changes in version 4.0.7 - 2020-04-02
Fix opening of 2FA and encryption recovery key modals
Fix connection check admin and recipient roles
Changes in version 4.0.6 - 2020-04-01
Apply minor UI bugfixing
Update translations
Changes in version 4.0.5 - 2020-03-25
Apply minor UI bugfixing
Update translations
Changes in version 4.0.4 - 2020-03-18
Add mock frunctions: replace, add-before, add-after
Improve resiliency of notification job
Fix issues: #2790, #2791
Changes in version 4.0.3 - 2020-03-12
Remove migration of two-factor-authentication secret from old setup
due to many incompatibilities preventing correct authentication.
Always serve the root tenant suring setup to enable reverse proxy configs.
Revise privacy aspects of robots indicization.
Update translations
Changes in version 4.0.2 - 2020-03-09
Revise fixes included in 4.0.1 in relation to authentication failures
Changes in version 4.0.1 - 2020-03-09
Apply minor bugfixing
Changes in version 4.0.0 - 2020-03-05
Enable encryption and key escrow mechanism by default for new setups
Make it possible to enable encryption and key escrow mechanism on
existing setups
Please refer to the official release announcement for important
information about the update:
- https://www.globaleaks.org/docs/en/globaleaks4-release-notes.pdf
Changes in version 3.11.70 - 2020-02-24
Fix custodian functionalities in relation to custom identity template
Changes in version 3.11.69 - 2020-02-11
Fix qrcode visualization in forced two factor authentication mode
Fix listing of identity access requests
Show context selection interface only when multiple contexts are available
Update version of chrome used during testing
Fix migration of whistleblower identity customizations
Changes in version 3.11.68 - 2020-01-28
Fix regression preventing to configure admin users
Changes in version 3.11.67 - 2020-01-23
Improve packaging removing unused dependencies
Revise old migration scripts fixing defect in migration of db 36
Changes in version 3.11.65 - 2020-01-23
Fix package version
Changes in version 3.11.64 - 2020-01-23
Fix regression in questionnaires update introduced in 3.11.63
Enforce file download on Terms of Service attachments (#2763)
Fix defect in submission token implementaton preventing expiration
Changes in version 3.11.63 - 2020-01-20
Fix check on user-context association on the same tenant
Bump npm dependencies to latest versions
Fix minor lint errors
Make it possible to reset the platform hostname
Hide score UI when the feature is disabled
Remove ricochet configuration visibility in content settings
When creating a new context set the tip time to live to 90 days
Changes in version 3.11.62 - 2020-01-12
Apply user suggestions for feature #2643
Changes in version 3.11.61 - 2020-01-12
Apply minor UI fix
Changes in version 3.11.60 - 2020-01-12
Show the logo of the context that is selected (#2643)
Re-add whistleblower login form on submission page
Deprecated ol txtorcon mock
Apply minor UI fx
Bump npm dependencies to latest version
Changes in version 3.11.59 - 2020-01-04
Fix defect in application responsiveness
Bump npm dependencies to latest versions
Changes in version 3.11.58 - 2020-01-02
Fix defect in exceptions logging
Changes in version 3.11.57 - 2019-12-30
Fix issue #2756
Remove apparmor rule for dash previously required by gnupg
Bump npm dependencies to latest versions
Update translations
Changes in version 3.11.56 - 2019-12-25
Fix issue #2755
Changes in version 3.11.55 - 2019-12-19
Fix issue #2754
Update translations
Changes in version 3.11.54 - 2019-12-14
Apply minor UI improvements
Update translations
Changes in version 3.11.53 - 2019-12-12
Fix defect regression on customization provisioning introducted in 3.11.53
Changes in version 3.11.52 - 2019-12-12
Apply minor UI improvements
Changes in version 3.11.51 - 2019-12-12
Apply minor UI improvements
Update translations
Changes in version 3.11.50 - 2019-12-11
Fix client build regression introduced in 3.11.49
Changes in version 3.11.49 - 2019-12-11
Replace qrious with angular-qrcode
Changes in version 3.11.48 - 2019-12-10
Removing python3-distro dependency requiring unusual large
set of apparmor rules for the functionality offered
Changes in version 3.11.47 - 2019-12-10
Update applying rules fixing issue #2747
Update translations
Changes in version 3.11.46 - 2019-12-08
Revise installation script in relation to installation privacy
Deprecate compatibility with python2
Update translations
Changes in version 3.11.45 - 2019-12-04
Fixes issue #2737 and #2738
Changes in version 3.11.44 - 2019-12-03
Apply minor UI fixes
Bump npm dependencies to latest versions
Update translations
Changes in version 3.11.43 - 2019-12-01
Add error logging on impossibility to validate a TLS Certificate (#2732)
Improve font selection in relation to feature #2530
Fix serialization of encrypted tips in relation to tip preview
Bump npm dependencies to latest versions
Update translations
Changes in version 3.11.42 - 2019-11-26
Implement certificate chain verification for outgoinv HTTPS and SMTPS (#2732)
Apply minor bugfixing
Bump npm dependencies to latest versions
Update translations
Changes in version 3.11.41 - 2019-11-20
Apply minor bugfixing
Changes in version 3.11.40 - 2019-11-20
Apply minor bugfixing
Update translations
Changes in version 3.11.39 - 2019-11-17
Apply minor bugfixing
Update translations
Changes in version 3.11.38 - 2019-11-01
Fix regression #2720
Update translations
Changes in version 3.11.37 - 2019-10-31
Apply minor fixes
Update translations
Changes in version 3.11.36 - 2019-10-31
Bump npm dependencies to latest versions
Implement feature #2521
Export tip status inside the submission export (#2526)
Revise CSS in relation to UI responsivenes
Update translations
Changes in version 3.11.35 - 2019-10-28
Revise UI of context selection
Changes in version 3.11.34 - 2019-10-28
Revise authentication decorator ensuring session.tid/request.id correspondance
Improve UI in relation to responsivenes
Update translations
Changes in version 3.11.33 - 2019-10-27
Fix issue #2717
Changes in version 3.11.32 - 2019-10-27
Improve UI of language selector
Update translations
Changes in version 3.11.31 - 2019-10-26
Improve UI of maximum recipients feature (#2530)
Improve client minification
Update translations
Changes in version 3.11.30 - 2019-10-21
Optimize accesibility of the application (rank 92% of LightHouse)
Optimize performance of first load (rank 65% of LightHouse)
Optimize SEO of the appplication (rank 100% of LightHouse)
Revise CSS using rem in place of em to ease customizations
Update translations
Changes in version 3.11.29 - 2019-10-16
Apply minor style fixes
Changes in version 3.11.28 - 2019-10-16
Add virtualhost to access.log (#2703)
Improve loading implementing resource preload
Optimize code of password complexity meter removing zxcvbn library
Improve style of NoScrypt message
Improve Search Engine Optimizatin
Fix disclaimer implementation reducing forensic traces
Improve HTTP interface implementing HEAD method
Improve multisite login UI adding the domain name
Fix implementation of password reset link
Fix configuration for instance of question templates
Update translations
Bump npm dependencies to latest version
Changes in version 3.11.27 - 2019-10-10
Fix typo preventing authentication on old migrated platforms
Changes in version 3.11.26 - 2019-10-09
Apply minor bugfixing
Update translations
Changes in version 3.11.25 - 2019-10-08
Implement pagination for Comments and Messaging (#531)
Apply text revisions thanks to the community support
Revise UI of Custodian functionalities
Update translations
Changes in version 3.11.24 - 2019-10-07
Postpone application of EAT patch included in previous release
Changes in version 3.11.23 - 2019-10-07
Simplify User model removing incomplete multi tenant support
Update ER representation of the database schema
Improve privacy of whistleblower identity by showing the widget collapsed
by default (#2497)
On the EAT project archive questionnaire answer considering every answer
subject to stats
Apply minor bugfixing
Update translations
Changes in version 3.11.22 - 2019-10-04
Combine password reset with 2fa
Enable password reset in default configuration
Apply minor bugfixing
Changes in version 3.11.21 - 2019-10-02
Update translations
Changes in version 3.11.20 - 2019-10-01
Make TLS intermediate certificate optional (fix)
Changes in version 3.11.19 - 2019-09-30
Fix regression #2683
Changes in version 3.11.18 - 2019-09-27
Fix demo mode in relation to creation of admin account
Apply minor style bugfixing
Changes in version 3.11.17 - 2019-09-27
Improve UX for enforced password change
Implement possibility to enforce two factor authentication (#2681)
Ensure that on enforced password are not reused (#2614)
Changes in version 3.11.16 - 2019-09-26
Add support drag and drop of files (#2063)
Make TLS intermediate certificate optional
Bump npm dependencies to latest stables versions
Changes in version 3.11.15 - 2019-09-24
Fix javascript packaging path
Changes in version 3.11.14 - 2019-09-23
Apply revisions to apparmor profile
Changes in version 3.11.13 - 2019-09-23
Apply revision to apparmor profile
Fix export of tip comments
Apply mix fixes in relation to RTL layout
Changes in version 3.11.12 - 2019-09-23
Fix CSS processing in relation to RTL and pre-existent configs (#2677)
Changes in version 3.11.11 - 2019-09-22
Disable Twisted logging in H2Connection and HTTPChannel class
Changes in version 3.11.10 - 2019-09-22
Set Debian Buster as main supported platform
Changes in version 3.11.9 - 2019-09-22
Add packaging for Debian Buster (#2676)
Changes in version 3.11.8 - 2019-09-21
Fix reversed check on HSTS preload header injection introduced in 3.11.4
Changes in version 3.11.7 - 2019-09-20
Apply minor bugfixing
Update translations
Changes in version 3.11.6 - 2019-09-19
Fix packaging issue of 3.11.5 in relation to bootstrap inclusion
Changes in version 3.11.5 - 2019-09-19
Bump npm dependencies to latest stables versions
Make it possible for the whistleblower to remove a file before
upload completion (#2521)
Add demo badge to inform users to not use the platform for
real submissions
Avoid user of browser navigation reducing browser evidences (#2668)
Update translations
Changes in version 3.11.4 - 2019-09-16
Fix defect in field triggers
WBPA: Enable HTTPS preload
Changes in version 3.11.3 - 2019-09-16
Fix regression #2675
Changes in version 3.11.2 - 2019-09-16
Fix regression #2673
Update translations
Changes in version 3.11.1 - 2019-09-10
Fix serialization of question templates
Apply minor UI fixes
Changes in version 3.11.0 - 2019-09-09
Implement HTTP/2
Revise HTTPS implementation enabling only TLS1.3 andTLS1.2 with ECDH key exchange
Revise Lets'Encrypt implementation requesting ECC certificates with curve prime256v1
Prioritize CHACHA20 on clients that don't have AES-NI (e.g., Android devices)
Optimize TLS implementation enabling session resumption
Implement TOTP 2FA based on RFC 6238
Implement HTTP Feature-Policy Header (#2667)
Implement encryption of file uploads metadata (#2665)
Implement recovery procedure for encryption feature (#2649)
Bump Bootstrap to version 4
Update translations
Changes in version 3.10.7 - 2019-08-19
Revise application packaging in relation to CSP rules
Fix progress bar UI of file uploads
Changes in version 3.10.7 - 2019-08-16
Improve retrocompatibility of Content Security Policy for browsers not supporting CSP3
Changes in version 3.10.6 - 2019-08-16
Implement Content Security Policy as by #1998
Add Strict Transport Security header removed since HTTPS refactoring
Fix issue on HTTPS redirects causing LetsEncrypt renewal to fail
Add migration fix for very old setups in relation to commit 238c0dc (#2661)
Changes in version 3.10.5 - 2019-08-13
Revert regression causing migrations scripts to proceed even on failure
Apply minor bugfixing
Changes in version 3.10.4 - 2019-08-09
Apply minor bugfixing
Changes in version 3.10.3 - 2019-08-01
Apply minor bugfixing
Changes in version 3.10.2 - 2019-08-01
Apply minor UI fixes
Changes in version 3.10.1 - 2019-07-31
Fix regression on mail notification added in 3.10.0
Changes in version 3.10.0 - 2019-07-31
Automatically delete platforms not activated within 24 hours (#2639)
Implement database support and encryption primitives for Recovery Keys (#2649)
Improve UI of Whistleblower Login (#1693)
Implement database support for immutable submissions (#2581)
Bump npm dependencies to latest stables versions
Update translations
Changes in version 3.9.15 - 2019-07-24
Fix failure on authentication added in 3.9.14
Changes in version 3.9.14 - 2019-07-23
Update translations
Changes in version 3.9.13 - 2019-07-19
Disable Copy-Cut-Paste on signup user email confirmation (#2637)
On signup ask the user email twice (#2637)
Fix login issue on old migrated platforms
Fix the gl-admin reset pass in relation to mixed Argon/Scrypt situations
Changes in version 3.9.12 - 2019-07-11
Fix issues #2625, #2626, #2630
Improve UI in relation to issue #2627
Fix regression #2629
Make it possible to reset HTTPS configuration without disabling HTTPS
Make it possible for users to reset their password also when simplified login is enabled
When a platform is created with a mode different from default, delete the admin user
Bump npm dependencies to latest stables versions
Update translations
Changes in version 3.9.11 - 2019-07-05
Revise fix for issue #2612
Changes in version 3.9.10 - 2019-07-05
Fix issue #2612
Changes in version 3.9.9 - 2019-07-03
Fix issues: #2591, #2611, #2613
Update translations
Changes in version 3.9.8 - 2019-07-02
Fix compatibility with IE11
Fix visualization of whistleblower identity answers
Rewrite letsencrypt renewal routines decoupling them from certificate issuance
Fix issues #2608, 2610
Update Translations
Bump npm dependencies to latest stables versions
Changes in version 3.9.7 - 2019-06-19
Apply minor bugfixing
Bump npm dependencies to latest stable versions
Update translations
Changes in version 3.9.6 - 2019-06-13
Fix issue #2584
Fix issue #2588
Open ToS URLs in a new tab with no-referrer policy
Apply minor bugfixing
Changes in version 3.9.5 - 2019-06-10
Change requirement for Tor Onion Services V3 to Tor 0.3.3.9
Changes in version 3.9.4 - 2019-06-10
Apply minor bugfixing
Changes in version 3.9.3 - 2019-06-10
Upgrade Tor Onion Services to version 3 (#2582)
Disable HEAD requests
Disable connection persistance
Reorganize access log to be in Apache Combined Format
Redact the identity answers from tip export when the visibility
should be subject to custodian authorization
Apply minor bugfixing
Changes in version 3.9.2 - 2019-06-05
Apply minor bugfixing
Update translations
Changes in version 3.9.1 - 2019-06-05
Apply minor bugfixing
Changes in version 3.9.0 - 2019-06-05
Implement URL redirects (#2575)
Collect statistics about mobile/desktop users (#2207)
Optimize language selector for Mobile users (#2574, #1780)
Implement Ricochet panel (#2513)
Prepare database for Audit Log (#2579)
Improve resiliency of HTTPS component
Fix reload of renewed Let'sEncrypt certificates
Improve securization of HTTPS configuration
Apply minor bugfixing
Update translations
Changes in version 3.8.6 - 2019-05-21
Apply minor bugfixing
Updates translations
Changes in version 3.8.5 - 2019-05-16
Apply minor bugfixing
Changes in version 3.8.4 - 2019-05-14
Fix configuration of recipients triggers on selectbox options
Apply minor bugfixing
Changes in version 3.8.3 - 2019-05-10
Apply minor bugfixing
Changes in version 3.8.2 - 2019-05-09
Add basic profile for EAT project (#2568)
Apply minor bugfixing
Changes in version 3.8.1 - 2019-05-08
Apply minor bugfixing
Changes in version 3.8.0 - 2019-05-07
Make it possible to configure the node timezone (#2525)
Implement questions of type DATERANGE (#2561)
Make it possible to block the submission after the selection of an answer (#2565)
Make it possible to show a message after the selection of an answer (#2564)
Make it possible to configure an 'hint' for the options of type checkbox and selectbox (#2524)
Fix authentication issues on python2 and Ubuntu Xenial
Changes in version 3.7.4 - 2019-05-03
Apply minor bugfixing
Changes in version 3.7.3 - 2019-05-03
Fix authentication issue introduced in 3.7.2 (#2563)
Changes in version 3.7.2 - 2019-05-01
Apply minor bugfixing
Add malagasy language (currently copy of French translation)
Update translations
Changes in version 3.7.1 - 2019-04-23
Apply minor bugfixing
Changes in version 3.7.0 - 2019-04-23
Implement features: #2534, #2535, #2536, #2537
Prepare database support for #2523 and #2552
Preinitialize the logo of secondary tenants when the mode is 'default'
Revise texts related to the receipt
Hide MultiSite enabler from secondary tenants
Make it possible to use the root site for administrative purposes only (#2559)
Update ER representation of the database schema
Make it possible to configure a field trigger as "Sufficient"
Fix score reorganizing the total_score formula and moving ranking on the client
Update translations
Changes in version 3.6.46 - 2019-04-17
Fix visualization of submissions received before version 3.6.41
Changes in version 3.6.45 - 2019-04-16
Apply minor bugfixing
Addressed issues:
- https://github.com/globaleaks/GlobaLeaks/issues/2545
- https://github.com/globaleaks/GlobaLeaks/issues/2548
- https://github.com/globaleaks/GlobaLeaks/issues/2549
- https://github.com/globaleaks/GlobaLeaks/issues/2551
- https://github.com/globaleaks/GlobaLeaks/issues/2554
Changes in version 3.6.44 - 2019-04-07
Make it possible to reset submissions (#2447)
Revise error codes of /bin/globaleaks
Add project description to publiccode.yml
Changes in version 3.6.43 - 2019-04-04
Apply minor bugfixing
Changes in version 3.6.42 - 2019-04-02
Update translations
Apply minor bugfixing
Changes in version 3.6.41 - 2019-04-01
Bump npm dependencies to latest stables versions
Add Slovak translation
Update translations
In the install script correct the detection about installed globaleaks
Revise tip page hiding steps and questions that are not triggered
Make it possible to run the application as root needed in many containers
Add users' username to admin users overview
Fix setup of development environment in relation to client updates
Restrict submissions and files visibility to recipients only
Always re-open the disclaimer modal when opening the submission page
Revise visibility of the mandatory-field warning
Re-evaluate recipients at every question-answer update
Fixes and improvements to publiccode.yml
Update publiccode.yml
Changes in version 3.6.40 - 2019-03-07
Fix minor issue in visualization of the latest db version
Make it possible to configure score points of type multiplier (#2531)
Changes in version 3.6.39 - 2019-03-06
Fix wb identity field in relation to refactor #2504
Changes in version 3.6.38 - 2019-03-05
Fix navigation of submission steps for conditional steps
Changes in version 3.6.37 - 2019-03-04
Optimize Comfort Loader
Fix status visualization in recipient tip interface
Changes in version 3.6.36 - 2019-03-04
Fix client lint errors
Changes in version 3.6.35 - 2019-03-04
Fix minor regression added in 3.6.32
Changes in version 3.6.34 - 2019-03-04
Fix validation of mandatory fields for last step (#2504)
Changes in version 3.6.33 - 2019-03-03
Apply minor fix to 3.6.32 postponing patch to next db update
Changes in version 3.6.32 - 2019-03-03
Reduce configuraton inheritance to the whistleblowing.it project
Implement basic print for submissions
Changes in version 3.6.31 - 2019-02-28
Revise fix for issue #2506
Changes in version 3.6.30 - 2019-02-26
Remove debugging output
Changes in version 3.6.29 - 2019-02-25
Reimplement fixes included in 3.6.26