Menu
▾
▴
NewFeaturesTrunk
Anonymous
New and changed features that have not yet been released
JForum is in constant development and improvement, and we always try to ship the best code possible. If you want to make use of the features listed on this page, you will have to get the source code and build the war file yourself.
New Features and fixes
- During password recovery, JForum no longer says whether the account exists or not; this is in line with current security practices.
- Fixed some potential XSS vulnerabilities (which would have been hard to exploit in practice)
- Languages that haven't been updated for many years, and are now missing many translations, have been deactivated: NO, JP, HU, TR
- removed ICQ and Skype (which have been turned off) from user profile
- new feature: the POP3 mail integration can now import attachments from mails and save those along with the newly created posts (development sponsored by https://captaincasa.org/)
- set Secure and HttpOnly flags on cookies
Libraries
- update Apache Commons IO from 2.13.0. to 2.19.0
- update Apache Commons Lang3 from 3.12.0. to 3.17.0
- update Apache Commons Text from 1.10.0. to 1.13.1
- update Apache FreeMarker from 2.3.32 to 2.3.34
- update Apache log4j from 2.20.0 to 2.24.3
- update Apache Lucene from 8.11.2 to 8.11.4
- update Apache PDFBox from 3.0.0. to 3.0.5
- update C3P0 from 0.9.5.5 to 0.11.0
- update HSQLDB from 2.7.2 to 2.7.4
- update jsoup from 1.16.1 to 1.20.1
- update Microsoft JDBC driver from 12.4.1.jre8 to 12.10.0.jre8
- update MySQL JDBC driver from 8.1.0 to 9.3.0
- update Oracle JDBC driver from 21.11.0.0 to 23.8.0.25.04
- update PostgreSQL JDBC driver from 42.6.0 to 42.7.5
- update slf4j from 2.0.9 to 2.0.17
New Configurations
| Entry name | Default value | Description |
|---|---|---|
| mail.pop3.integration.attachments | true | causes the POP3 mail integration to import attachments from emails |
