file updated. Now I’m trying to deal with my broken upgrade to Ubuntu Gutsy. Weepee. -.-
I don’t have much time to figure how many files I’ve changed, so I’ve only done a whole re-distribution.
Ok, here’s the changelog:
FIXED XSS vulnerabilities in comments.tpl and contact.tpl FIXED Backported from Crescendo+1 fix for XSS in $_GET fields FIXED bug in static handling (THEME_LEGACY_MODE not checked) FIXED Moved html escaping from default-filters to bbcode plugin FIXED Added option to bbcode plugin to allow inline html! (no more ugly [html] tags! :)
I think the coolest thing is this small new feature (inline html), which anyway depends on a bug fix :P notice: you have to enable it
Inline html will let you completely break the validation if you don’t know html.
Who cares, you say? Well, next time your layout will be all f-ed up, don’t come crying to me, LOL :D :D :D
Have fun!
(and donate, damnit! :D)