Sun, 18 Sep 2011 01:26:02 -0400 Dan Fuhry Improved vimperator compatibility in jBox
Sun, 04 Sep 2011 02:32:49 -0400 Dan Fuhry SECURITY: Various security enhancements to password resets. They are now rate-limited by username and IP, and it is possible to disable username autofill for guests.
Fri, 22 Jul 2011 23:14:06 -0400 Dan Fuhry Fixed CLI installer failing to set the DB version
Tue, 12 Jul 2011 22:49:40 -0400 Dan Fuhry Release: 1.1.8pl1
Tue, 12 Jul 2011 22:34:02 -0400 Dan Fuhry Release prep 1.1.8pl1 1.1.8pl1
Tue, 12 Jul 2011 22:21:08 -0400 Dan Fuhry SECURITY: CSRF protection in Private Messaging, which is a really broken feature and should get the TinyMCE treatment. *sigh* Reported by Secunia.
Tue, 12 Jul 2011 22:15:18 -0400 Dan Fuhry SECURITY: Fixed XSS in post-login page redirection. Reported by Secunia.
(0) -1000 -300 -100 -30 -10 -7 +7 +10 +30 tip