Pydio 6.2.2

20 January 2016

Pydio version 6.2.2 is now available (security release).

What's New in Pydio 6.2.2

• Over-agressive caching could end up creating issues in IE when switching workspaces
• Security: sanitization strengthen for potential XSS attacks.
• Fix regression on "Remember Me" switch
• Fix Video Player for FireFox
• Joomla Bridge Compatibility (broken by last Joomla version).

• Update Italian translation for plugins: 'access.ajxp_conf', 'action.compression', 'action.share', 'core.ajaxplorer', 'core.notifications'
• Take the active mailer plugin , not the first that comes
• [core.mailer] Update the class which takes the active mailer plugin
• [conf.sql / access.ajxp_user] Improve Team management.
• Websocket: if there's an internal BIND address, it's most likely the address the php server will have to connect to. Added a Todo to handle REST auth.
• Unserialization can fail on some systems, make sure to reload role if it's not an object after waking up object.
• Fix SFTP username containing dash character (git issue #1014)
• [gui.user] Fix display & i18n message
• [gui.ajax] Create a "legacy" version of the bundle without ReactDND, and add fallbackCondition and fallbackFile in the js/css ressources to load alternative versions.
• Make test on personalRole stronger if there is an error at deserialization time.
• IE Caching policy is too agressive, we have to add some random ID to force reload sometime.
• Renamed constructor for PHP7 compatibility
• Update CLA URL
• Handle repository with deleted parent. Should fix #1025
• Typo in getRelatedNotifications() method (not used).
• Update CONTRIBUTING.md
• [core.notifications] fix getRelatedNotifications()
• Fix #1019
• Util function to get user label either from role directly or from user object.
• Fixed recursive indexation issue with FTP workspaces.
• Wrappers must declare isSeekable() to enable listing optimizations in fsAccessDriver.
• Make sure not to load an indexed document if the meta.change event comes from a "delete" operation.
• Enforce sanitization of user id when sending to error log.
• Update window.MessageHash when changing i18n. Alternative fix #1021
• Typo in rest parameter for role_update_right
• Pass optional parameters to the node->load() method.
• Pass optional cursor parameter to the logs. SQL logger can use it as a query limiter to only load data starting from a given id. Return cursor attribute in XML as well.
• Use udevil to mount instead of sudo
• Improve performance: caching ldap search result in class static variable
• Improve notifications on shared resources - Separate Location from the notifications - Avoid empty label in Alerts feed.
• Better catch of imagick call error.
• Fix tmp folder for unoconv
• Strip only left space on dirname - Fix #1023
• Imagick: Parameters should follow convert command.
• Fix rewind on SchemeTranslator wrapper - Prevent editing meta on non-writeable resource.
• [auth.remote] Make sure to keep the initial session.save_handler - Fix Joomla connector.
• Joomla plugin: make sure to switch back to previous session, as the session content is saved in register_shutdown_handler.
• Compute locationType when setting node, so that it can be serialized/unserialized
• Do not cache Sharing configs - Fix #1013
• Make sure to use === when comparing to constants, or repo 0 can be considered as repo_scope_all. Enable kvcaching in non-rest controller.
• [ShareCenter] Fix unshare workspaces from My Account zone - Fix readonly mode not being switched correctly in some case.
• Registry Cache Key : repo can be null.
• Fix Exif metadata display in InfoPanel when no GPS parameter is defined in the plugin or no GPS data is present in photo.
• Fix regression on contextual menu content and default item display.
• Fix regression on "Remember Me" feature.
• Replace pydio.getController().parseXmlMessage() by PydioApi.getClient().parseXmlMessage. Same for triggerDownload() moved as static method on PydioApi.
• Fix Eml Attachment Download.
• Replace all Controller.parseXmlMessage calls by PydioApi.getClient().parseXmlMessage in manifests.
• Replace ' by " to avoid label truncating on users/teams listing. Better sanitization and error catching on Team creation.
• Prevent editor.browser to open SVG files directly, always force as attachment.
• Pass the $url to isSeekable(), allowing to return different value depending on the path (=> return false for Zip files in fsAccessWrapper, or it's messed up when browsing zip subfolders).
• Declare restParams on compress in action.powerfs, otherwise API is not working for this action when plugin is active.
• Fix ChangesTracker for filter + mask management. Fix indexation issue when copying folders.
• Specific fix for video player for Firefox
• Update sdk generator: do not skip already parsed actions.
• Setup wizard can now be translated completely. Added german translations for setup wizard
• Fix display quota on FreeBSD
• Fix file/folder message on move. Close and replace PR #1000 ($dirRes is never set in that case)
• Update .travis.yml
• Updated ca/es files
• PHP7 Constructors fixes
• PHP7 Constructor fixes
• Missing Comma in ca.php
• Add Travis Badge
• Fix #1010 Zip Browsing on Windows Server
• Add new parameter for signature - Add Frankfurt & Seoul Regions. Close #846
• Fix log grouping Fix Copy Selection action
• Fix google shortner api key - Close #1030
• Make sure to not return an empty value.
• Fix some specific zip extraction case on Windows Server.
• Fix multimode value : check instance_name OR group_switch_value
• Fix MacOS Yosemite / El Capitan Detection
• Fix italian "Invite" button: missing translation strings.
• HTML Base Tag is not correctly applied in IE10 when dynamically inserting "link". Add an data-hrefRebase tag to be processed (prepending the base) on ie10 only.
• Close session when sending binary files. Could create a race condition with tryLogUserFromCookie.