High­lights of this re­lease

• Se­cu­ri­ty, per­for­mance and bug fix Re­lease

For users:

• 44 bug fix­es and 4 en­hance­ments rel­a­tive to 1.1.8
• JQuery 2.x is the fastest, light­est JQuery, for an im­proved user ex­pe­ri­ence.

For ad­min­is­tra­tors:

• Fix­es sev­er­al code is­sues that would block mi­gra­tion to re­cent ver­sions of perl and cer­tain CPAN mod­ules.
• Re­solves two im­por­tant per­for­mance is­sues, ac­cu­mu­la­tion of CSS by TablePlu­g­in, and a ma­jor mem­o­ry leak for cer­tain search strings.
• Se­cu­ri­ty changes:
  • TOPICLIST macro no longer re­veals names of view re­strict­ed top­ics
  • user­name and pass­word URL params are re­strict­ed to POST to the lo­gin script
  • Ad­di­tion­al san­i­tiz­ing of the URL path is per­formed.

• Se­cu­ri­ty Re­lease

For users:

• 20 bug fix­es and 4 im­prove­ments rel­a­tive to 1.1.6
• Wysi­wyg ed­i­tor im­proves han­dling of Wik­iWord links. Chang­ing the dis­played Wik­iWord also up­dates the link tar­get.
• The de­fault font has been re­stored to the at­trib­ut­es from 1.1.5. This pre­vents lay­out dif­fer­ences when up­grad­ing to Foswi­ki 1.1.7

For ad­min­is­tra­tors:

• For sites us­ing SSL ac­cel­er­a­tors and load bal­ancers: A new ex­pert con­fig­u­ra­tion pa­ra­me­ter {ForceDe­fault­Ur­lHost} can be en­abled to force Foswi­ki to over­ride the user en­tered URL with the {De­fault­Ur­lHost} set­ting.
• SSL Email works again on new­er ver­sions of IO::Sock­et::SSL
• Pend­ing reg­is­tra­tion re­quests now has a sep­a­rate timer in­de­pen­dent from the Ses­sion timer.
• Re­moved un­doc­u­ment­ed de­pen­den­cy on up­dat­ed HTML::TreeBuilder > 4.0