Skip to content

2.4.0
Compare
Choose a tag to compare
@jbroadway jbroadway released this 16 Oct 15:54
· 4 commits to master since this release
v2.4.0-stable
9fa37d5

Improvements

  • Added 2-factor authentication support with site-wide, admin-only, or optional enforcement. Run composer update after upgrading
  • Added an OAuth 2.0 server to the user app so APIs can be built with either HMAC and OAuth security
  • Added an Nginx proxy to the docker compose setup so you can use custom local domains with HTTPS support
  • Added make local-cert DOMAIN=www.elefant.lo command to generate local SSL certificates (note: requires mkcert)
  • Added redis-commander container accessible at localhost:8081 to docker compose setup for local development
  • Added ability to use a callback to override app names in the Elefant toolbar via $appconf['Admin']['name_override']
  • Updated Google API client used in user app. Run composer update after upgrading
  • Switched MySQL character set from utf8 to utf8mb4. When upgrading an existing website, either migrate the database to utf8mb4 by running ALTER TABLE table_name CONVERT TO CHARACTER SET utf8mb4 for each table or add master[charset] = utf8 to your conf/config.php in the [Database] section to remain using utf8
  • Added zip to Dockerfile-DEV so composer can prefer dist when run inside the container
  • Removed outdated ActiveResource from vendor libraries
  • Added Pluralizer class for simple pluralization of English words
  • Added DB::$query_count and DB::$result_count which track the total number of queries and results fetched for the current request
  • Added query stats to the bottom of the page while logged in as an admin if conf('General', 'debug') is set to true
  • Added Empty Contents option to dynamic objects list to be able to explicitly create empty blocks
  • Added support for Google Analytics 4
  • Added &outer_title=on option to blocks/group helper to move the title outside of the first column div
  • Preview pages now include all edit buttons and redirect links work properly

Bug fixes

  • Various fixes for PHP 8+ compatibility including apps and test suite
  • Fixed XSS vulnerability in jQuery
  • Fixed remote execution vulnerability in admin file manager uploader on Windows
  • Don't render the outer div of the admin/editable helper when a user isn't logged in
  • Moved twemoji to unpkg now that MaxCDN has shut down
  • Reloading a preview link without a POST request no longer causes a 500 error
Assets 2
Loading