[interchange-cvs] [SCM] Interchange branch, master, updated. REL_5_7_2-40-gbf90ac7

Jon Jensen interchange-cvs at icdevgroup.org
Fri Nov 6 03:13:55 UTC 2009


This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "Interchange".

The branch, master has been updated
       via  bf90ac73e96954deace65cdad0f2b69f62f376d4 (commit)
      from  f6b3108c4347f1cf3c1990bf3557989117e79984 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit bf90ac73e96954deace65cdad0f2b69f62f376d4
Author: Jon Jensen <jon at endpoint.com>
Date:   Thu Nov 5 20:12:58 2009 -0700

    Update WHATSNEW for release

-----------------------------------------------------------------------

Summary of changes and diff:
 WHATSNEW-5.7 |   41 ++++++++++++++++++++++++++++++++++-------
 1 files changed, 34 insertions(+), 7 deletions(-)

diff --git a/WHATSNEW-5.7 b/WHATSNEW-5.7
index 93712cd..3ea94a5 100644
--- a/WHATSNEW-5.7
+++ b/WHATSNEW-5.7
@@ -8,25 +8,37 @@
 See UPGRADE document for a list of incompatible changes.
 
 
-Interchange 5.7.3 not yet released.
+Interchange 5.7.3 released 2009-11-05.
 
 
 Core
 ----
 
-* Add BounceRobotSessionURL directive to 301 redirect robots which
-  provide an explicit mv_session_id to the canonical page URL without
-  the explicit mv_session_id.  This prevents search engine urls from
-  being indexed with an explicit session_id.
-
 * Fix empty charset= lines when no $Vend::StatusLine was previously set.
 
 * Allow POST with Content-type of application/json.
 
 * Remove empty mv_arg from more-list links.
 
+* Cleanup some POD documentation.
+
 * Fix crash with TolerateGet and upload forms (#325).
  
+* Show discount error message that was missing. Fixed by Jeff Boes.
+
+* Die on errors in global configuration of crontab.
+
+* Stop display of invalid user-provided session ID. Should not be XSS
+  exploitable, since displayed in text/plain context, but don't show anyway
+  in case any browser does improper content-type handling.
+
+* Avoid XSS exploit in CGI input error. Reported by Justin Otten.
+
+* Add BounceRobotSessionURL directive to 301 redirect robots which
+  provide an explicit mv_session_id to the canonical page URL without
+  the explicit mv_session_id. This prevents search engine urls from
+  being indexed with an explicit session_id.
+
 Tags
 ----
 
@@ -71,9 +83,24 @@ Standard Demo
 
 * Correct bounces to nonexistent error pages.
 
-* Fixed bug that causes options to not show up on the checkout reciept, or the
+* Fixed bug that causes options to not show up on the checkout receipt, or the
   order report, or the mail reciept for most or all items.
 
+* Fix problem that prevented unsubscribing from all mailing lists.
+
+Debian packaging
+----------------
+
+* Keep virtual host name supplied by user.
+
+* Move CSS & image files from /var/www/interchange-5 to
+  /usr/share/interchange-ui.
+
+* Use virtual host instead of system hostname as server name for demo catalog
+  if FullUrl is enabled.
+
+* Updated translations of Debconf templates.
+
 
 ------------------------------------------------------------------------------
 


hooks/post-receive
-- 
Interchange



More information about the interchange-cvs mailing list