History: ReleaseNotes182

1.8.2 addresses some security problems in TikiWiki mainly Path Disclosure, XSS and improved CSRF routines (thanks to http://gulftech.org). Polaris Tikis should upgrade to 1.8.2 while a Eta Carinae 1.7.7 with backported security fixes is scheduled soon.

mose and Oliver Hertel were the coordinators of this release.

Some links for more information about this release

• SF release info
• ReleaseProcess182

Upgrade instructions

This is badly missing. Those on ReleaseNotes181 should help.

Bug known to have been introduced in this version

• Mini-calendar is broken Fixed for 1.8.3 if you need this before you get 1.8.3, fix is trivial get tiki-minical.php revision 1.10.2.5

Resolved bugs and misbehaviors since 1.8.1

• article without body couldn't be commented
• categories display with IE Damian
• width of all admin screens by adding a missing class to CSS Damian
• query in integrator lib had extra parameter Damian
• replaced obsolete module-title.tpl with module.tpl in simple style (when modcontrols set on) luci
• fixed article_image that was failing to display mose
• fixed hotwords parsing so it avoids hotwording in description that are used as url labels in wiki pages mose

New Features and changes

• PHPLayers is included again
• Blended the tree class into all themes Damian
• Improved spacing on tiki-removepage.tpl Damian
• added an option in wiki admin panel to make use of dashes and underscores optional in WikiWords mose