Summary

• Page properties (1 modified, 0 added, 0 removed)

Details

Page properties

Content

...	...	@@ -85,6 +85,7 @@
85	85	image:annotation-avatars.png
86	86
87	87	\\
	88	+
88	88	== More image manipulation settings ==
89	89
90	90	For a long time it was possible to scale attached images on the server, thus reducing the download time and ensuring consistent scaling of images across browsers. This is achieved by appending ##width## and/or ##height## query string parameters to the URL of the image. This feature has been further enhanced:
...	...	@@ -160,7 +160,6 @@
160	160	* [[Space List>>http://code.xwiki.org/xwiki/bin/inline/Macros/SpacesMacro]] Macro. This macro creates a box with links to all the spaces existing in the wiki.
161	161	* [[TagCloud>>http://code.xwiki.org/xwiki/bin/view/Macros/TagCloudMacro]] Macro. Generates a TagCloud from all the tags within the wiki.
162	162
163		-
164	164	== New User Directory ==
165	165
166	166	Added User Directory section on the Quick Links tab on the left of the page. This will show you the users that the XWiki instance has, along with their avatar image. This page also allows to filter users by username.
...	...	@@ -223,11 +223,10 @@
223	223
224	224	Continuing a push for better security started this summer, 2.5 fixes some of the few remaining cross-site scripting and SQL injections holes, and tightens the scope of programming rights. Of particular concern:
225	225
226		-* With a default skin, programming rights are no longer available after the main content of the page; this means that the panels and the bottom tabs can't use restricted APIs anymore.
	226	+* With a default skin, the panels and the bottom tabs can no longer use restricted APIs.
227	227	* To explicitly drop programming rights, a new API method was introduced: ##$xcontext.dropPermissions()##
228	228	* An experimental Cross-Site Request Forgery prevention mechanism is included, though not enabled by default. To enable it and test/upgrade your custom applications for compatibility, edit ##xwiki.properties## and flip on the ##core.csrf.enabled## setting.
229	229
230		-
231	231	== WYSIWYG and Rendering improvements ==
232	232
233	233	Display macro parameter names instead of IDs, generalized the syntax for links, added support for query string for image links, fixed a random error when loading several WYSIWYG instances in parallel.
...	...	@@ -302,5 +302,3 @@
302	302	[ERROR] org.xwiki.rendering.transformation.Transformation: Method 'public void transform(org.xwiki.rendering.block.Block, org.xwiki.rendering.transformation.TransformationContext)' has been added to an interface
303	303	[ERROR] org.xwiki.rendering.transformation.TransformationManager: Method 'public void performTransformations(org.xwiki.rendering.block.Block, org.xwiki.rendering.transformation.TransformationContext)' has been added to an interface
304	304	{{/code}}
305		-
306		-