Vanilla Forums 2.2
17 November 2015
Vanilla Forums version 2.2 is now available (major release).
Upgrading to Vanilla Forums 2.2
Vanilla Forums 2.2 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply Vanilla Forums updates as new versions are released, or use Installatron's Clone feature to duplicate an existing Vanilla Forums install to test the 2.2 upgrade prior to applying it live. Get started managing your Vanilla Forums installations with Installatron
What's New in Vanilla Forums 2.2
What's New
- Add Advanced Editor (HTML5 full drag-and-drop WYSIWYG).
- Remove cleditor (not secure).
- Add Emoji and an Emoji Extender addon to create your own sets.
- Add Google+ SSO.
- Add Section 508 support (accessibility improvements).
- Add support for controllers in plugins.
- Add spam checking & more flood control in Conversations.
- Upgrade PHP Markdown and split out Vanilla Markdown customizations.
- Add the Garden.Community.Manage permission for community managers.
- Allow Unicode in mentions and usernames.
- Allow using utf8mb4 databases (to allow Unicode emoji characters).
- Added support for Twitch.tv, Hitbox.tv, and SoundCloud.
- Add new social icons.
- Add new class to handle event logging.
Security Patches
- Fix issues with fetchPageInfo() implementation.
- Implement public stashes.
- Protect transient key from JSONP.
- Protect transient key on profile pages.
- Don't allow SSO with empty secrets.
- Remove htmlEntityDecode() endpoint.
- Improve addon testing / enabling / disabling security.
- Add validation to .org feed pulling.
- Protect discussions from unauthorized split/merge.
- Add output filtering to a few places.