docs/CHANGES
author Thomas Waldmann <tw AT waldmann-edv DOT de>
Tue, 01 Nov 2016 17:56:32 +0100
changeset 6128 561b7a9c2bd9
parent 6123 8537503261b1
permissions -rw-r--r--
fix wrong digestmod of hmac.new calls

stdlib default is md5, but we need sha1. this bug was introduced when removing
python_compatibility module usage in changeset 500f68d3e2fd594b2f4ea4a272b828a07d9eac1d.
     1 MoinMoin Version History
     2 ========================
     3 
     4 Please note: Starting from the MoinMoin version you used previously, you
     5 should read all more recent entries (or at least everything marked with HINT).
     6 
     7 This release has known bugs (see MoinMoin:MoinMoinBugs), but we think it is
     8 already better than the previous stable release. Our release policy is not
     9 trying to make a "perfect release" (as that release might NEVER get released),
    10 but to make progress and don't delay releases too much.
    11 
    12 Known main issues:
    13 
    14   * The GUI WYSIWYG editor has still some issues and limitations.
    15     If you can't live with those, you can simply switch it off by using:
    16     editor_force = True
    17     editor_default = 'text'  # internal default, just for completeness
    18 
    19 Version 1.9.9 aka "The undead MoinMoin Halloween Release" 2016-10-31
    20 
    21   SECURITY HINT: make sure you have allow_xslt = False (or just do not use
    22   allow_xslt at all in your wiki configs, False is the internal default).
    23   Allowing XSLT/4suite is very dangerous, see HelpOnConfiguration wiki page.
    24 
    25   HINT: Python 2.7 is required! See docs/REQUIREMENTS for details.
    26 
    27   Fixes:
    28   * security: fix XSS in AttachFile view (multifile related) CVE-2016-7148
    29   * security: fix XSS in GUI editor's attachment dialogue CVE-2016-7146
    30   * security: fix XSS in GUI editor's link dialogue CVE-2016-9119
    31   * catch IOError for zipfile errors (sometimes triggered by zipfile.is_zipfile
    32     false positives, see http://bugs.python.org/issue28494 ).
    33 
    34   Other changes:
    35   * update moin.spec, setup.py: py27 only
    36 
    37 
    38 Version 1.9.9rc1:
    39 
    40   Fixes:
    41   * add meta "viewport" for small device viewports
    42   * add meta X-UA-Compatible IE=Edge, make IE happy on intranets
    43 
    44   New features:
    45   * AttachFile multifile operation: support copying multiple files to another page
    46   * cfg.xmlrpc_overwrite_user is a new setting to control whether the xmlrpc
    47     code overwrites an already authenticated user before processing a request.
    48     True (default): behaviour as in 1.9.8 and before
    49     False: use this if you want to use GivenAuth (e.g. http basic auth) for
    50            xmlrpc requests.
    51 
    52   Other changes:
    53   * upgraded bundled 3rd party code:
    54     * werkzeug 0.11.11
    55     * passlib 1.6.5
    56     * pygments 2.1.3
    57     * parsedatetime 2.1
    58     * FCKEditor 2.6.11
    59   * removed some bundled stuff we needed due to stdlib issues in older Pythons:
    60     * MoinMoin.support.difflib
    61     * MoinMoin.support.tarfile
    62     * MoinMoin.support.HeaderFixed (-> email.header)
    63   * SubProcess: reimplement exec_cmd, remove our stdlib hacks
    64   * remove own usage of python_compatibility module which we needed to support
    65     older Pythons. the module is still there, in case some 3rd party moin
    66     extensions used it.
    67 
    68 
    69 Version 1.9.8:
    70   New features:
    71   * cfg.recovery_token_lifetime to determine how long the password recovery
    72     token will be valid, default is 12 [h]. Check this setting to be adequate
    73     before doing (global) password resets, so your users have enough time to
    74     react before the toke times out!
    75   * cfg.log_events_format can be used to configure the format of the records
    76     written to <data_dir>/event-log:
    77     0 = dot not create event-log entries (saves disk space, disk I/O)
    78     1 = standard (like in moin <= 1.9.7) [default]
    79     2 = extended (add infos about username, wikiname, url)
    80   * add a tool to output the contents of the event-log to CSV:
    81     moin export eventlog --file=output.csv
    82     Output encoding is utf-8, columns are in this order:
    83     time, event, username, ip, wikiname, pagename, url, referrer, ua
    84     time: UNIX timestamp (float)
    85   * reimplement cfg.log_timing - if True, emits INFO level log output like:
    86     "timing: <REMOTE_ADDR> <URL> <REFERRER> <TIME> <SLOWNESS-INDICATOR>"
    87     TIME is in seconds, the slowness indicator is "." for sub-second requests
    88     or N times "!" for requests taking N seconds (so you easily can grep for
    89     slow stuff).
    90   * add "abuse" logging. this will log every attempt to login (successful ones
    91     as well as unsuccessful ones). abuse logging is configured via the logging
    92     configuration, see example in wiki/config/logging/abuse.
    93     Currently, abuse logging is implemented for:
    94     * authentication system
    95       * "moin" auth
    96       * "given" auth
    97       * setuid (when superuser switches to another user)
    98     * new user creation
    99     * some security/ACL violations (xmlrpc and perhaps others not implemented)
   100   * surge protection for authentication (currently only for MoinAuth):
   101     a) surge protect by IP
   102        This covers the case someone is trying to authenticate way too
   103        often - we don't look at the username here, just at the remote IP
   104        address. If surge protection kicks in for some specific IP, that IP
   105        won't be able to try to authenticate any more until surge_lockout_time
   106        is over.
   107        Note: be careful with users behind proxies or NAT routers - these are
   108              common and legitimate cases with (potentially lots of)
   109              authentication requests coming from same IP.
   110              if it is a trusted proxy, you can configure moin so it sees the
   111              real remote IP address (not just the proxy's address).
   112     b) surge protect by name
   113        This covers the case someone is trying to authenticate for a
   114        specific user name way too often (e.g. when someone tries to attack the
   115        wiki admin's account). We don't look at the IP here, just at the user
   116        name. If surge protection kicks in for some specific user name, that user
   117        name will not be able to try to authenticate any more until
   118        surge_lockout_time is over.
   119        Note: this even covers widely distributed attacks against a user, but
   120              you should only enable this if you are aware that the "real" user
   121              also won't be able to authenticate while surge protection is active
   122              (at least not using the account for that specific username).
   123              Thus, there is some denial-of-service danger with this if the
   124              attacker can guess or find your valid user names (which isn't too
   125              difficult if your wiki is publicly readable).
   126              This is bad, but technically hard to avoid.
   127     Configuration (allowing 10 authentication attempts per hour):
   128         surge_action_limits = {
   129             # ...
   130             'auth-ip': (10, 3600),  # same remote ip (any name)
   131             'auth-name': (10, 3600),  # same name (any remote ip)
   132          }
   133   * backlinks performance tuning: the pagename in the theme has historically
   134     been used to trigger a "linkto:ThisPage" search. While this is a nice
   135     feature for human users of the wiki (esp. on category pages), it has one
   136     big issue: as it is a normal link, stupid crawlers (ignoring "nofollow")
   137     follow it and cause a lot of unneccessary load.
   138 
   139     What moin shows in that "backlinks" place can now be configured in your
   140     wiki config:
   141 
   142     # always render the backlink as in moin < 1.9.8 (bad bots causing high load!):
   143     backlink_method = lambda cfg, req: 'backlink'
   144 
   145     # always render a simple link to same page, as in moin 2.0:
   146     backlink_method = lambda cfg, req: 'pagelink'
   147 
   148     # logged-in users get the backlink, anon users/bots get a pagelink (default):
   149     backlink_method = lambda cfg, req: 'backlink' if req.user.valid else 'pagelink'
   150 
   151     # logged-in users get the backlink, anon users/bots get simple text:
   152     backlink_method = lambda cfg, req: 'backlink' if req.user.valid else 'text'
   153   * AbandonedPages macro: check user agent to reduce load caused by bots
   154   * RSS feed: check for bots and rather give them empty results than waste a
   155     lot of time with them
   156   * ldap_auth: support placeholders for basedn also, e.g. you could use:
   157     base_dn='uid=%(username)s,ou=people,dc=company,dc=com'
   158   * move or delete multiple attachments (see checkboxes and buttons on the
   159     AttachFile view). Be careful: in the same way as you could delete a single
   160     attachment with one click, you can now delete all attachments of a page
   161     with one click (we don't ask for a 2nd confirmation, so think first).
   162   * mailimport: use relative attachment link markup instead of absolute links,
   163     enables some page renaming operations without needing to edit the markup.
   164   * better caching and lookup optimizations for userprofile data:
   165     * name, email, jid, openids -> userid lookups
   166     * page subscriptions for notifications (as a consequence, determination of
   167       subscribers when a page is saved is much faster now, esp. for wikis with
   168       many users) - see also MoinMoinBugs/GetSubscribersSlow
   169   * Notification template strings are now configurable via cfg.mail_notify_...
   170     * page_text (this puts together the pieces for the mail body, used for all
   171       changed / deleted / renamed page mail notifications)
   172     * page_changed_subject, page_changed_intro
   173     * page_deleted_subject, page_deleted_intro
   174     * page_renamed_subject, page_renamed_intro
   175     * att_added_subject, att_added_intro
   176     * att_removed_subject, att_removed_intro
   177     * user_created_subject, user_created_intro
   178     * Best is to read HelpOnConfiguration and look at MoinMoin.config.multiconfig
   179       to see the help text and the defaults.
   180     * The defaults are chosen to be the same as the old hardcoded values, so the
   181       translations keep working.
   182     * If you overwrite the strings in your configuration moin will still try to
   183       translate your strings, but it will only find translations if you add them
   184       to the gettext catalogs, too.
   185     * Examples:
   186 
   187       a) notification mail body: you don't want the rendered diff, you don't
   188          want to link to the diff, but to the full page view on your wiki.
   189 
   190       # original (default) value
   191       mail_notify_page_text = '%(intro)s%(difflink)s\n\n%(comment)s%(diff)s'
   192       # put this in your wiki config
   193       mail_notify_page_text = '%(intro)s%(pagelink)s\n\n%(comment)s'
   194 
   195       b) notification mail subject:
   196       # original (default) value
   197       mail_notify_page_changed_subject = '[%(sitename)s] %(trivial)sUpdate of "%(pagename)s" by %(username)s'
   198 
   199       c) notification mail intro:
   200       # original (default) value
   201       mail_notify_page_changed_intro = \
   202           ("Dear Wiki user,\n\n"
   203            'You have subscribed to a wiki page or wiki category on "%(sitename)s" for change notification.\n\n'
   204            'The "%(pagename)s" page has been changed by %(editor)s:\n')
   205 
   206       Note: if you change "*_page_changed_*", you likely also want to change
   207       "*_page_deleted_*" and "*_page_renamed_*", maybe even "*_att_added_*"
   208       and "*_att_removed_*".
   209 
   210   Fixes:
   211   * security fix: XSS in useragents stats
   212   * do not create empty pagedirs (with empty edit-log). To clean up all the
   213     trash pagedirs, use moin ... maint cleanpage.
   214   * page rename/delete, attachment add/remove email notifications work now
   215     (somehow we had an event for this, but no code handling it)
   216   * AttachFile do=get and do=view: send 404 status if file does not exist
   217   * link rel="Alternate" links: rather use page.url than request.href, so
   218     url_prefix_action gets used for the (print and raw) action URLs
   219   * fixed wrong detection of UI language from accept-language header for not
   220     logged-in users if the language identifier there was (partially) uppercase.
   221   * fix Python 2.7.4/5 compatibility issue with rss_rc action using handler._out
   222   * fix "moin import wikipage" timestamp confusion
   223   * use 302 http status for #redirect as some clients cache 301 redirects, but
   224     the #redirect might get changed or removed later (so it should not be
   225     cached and we also can't really say it is permanent)
   226   * fix crash when macro names contain non-ascii chars
   227   * CopyPage action: fix NameError exception when TextCha was answered wrong
   228   * docbook formatter: fix image URL generation, avoid script name duplication
   229   * fix caching scope of name2id/openid2id caches (was: "wiki", now:
   230     "userdir"). this is relevant for shared user_dir configurations.
   231   * moin maint cleancache: cleans up openid2id cache now also
   232   * "userdir" caching scope used for userid lookup caches (the previously used
   233     name2id cache with "wiki" caching scope could have outdated data if you
   234     share the user_dir between multiple wikis)
   235   * catch "filename too long" exception if some crap URL refers to a too long
   236     pagename that the filesystem can not represent. It is treated like a not
   237     existing page then, so you don't get a traceback in your log file.
   238 
   239   Other changes:
   240   * rss_rc action (RSS feed) is now much faster / much less resource consuming
   241     when requested for a specific single page. As we have a link to this in
   242     every page's html output, this likely also lightens the load caused by bots
   243     and search engine crawlers.
   244   * tuned editlog.news() - only open/read log if there is new stuff in it after
   245     last read position
   246   * improve python2.5 compatibility (with_statement)
   247   * add bingbot to ua_spiders
   248   * upgraded bundled werkzeug to 0.8.3
   249   * upgraded bundled passlib to 1.6.2
   250   * upgraded bundled pygments to 1.6
   251 
   252 
   253 Version 1.9.7:
   254   New features:
   255   * passlib support - enhanced password hash security. Special thanks go to
   256     the Python Software Foundation (PSF) for sponsoring development of this!
   257 
   258     Docs for passlib: http://packages.python.org/passlib/
   259 
   260     If cfg.passlib_support is True (default), we try to import passlib and set
   261     it up using the configuration given in cfg.passlib_crypt_context (default
   262     is to use sha512_crypt with default configuration from passlib).
   263 
   264     The passlib docs recommend 3 hashing schemes that have good security, but
   265     some of them have additional requirements:
   266     sha512_crypt needs passlib >= 1.3.0, no other requirements.
   267     pbkdf2_sha512 needs passlib >= 1.4.0, no other requirements.
   268     bcrypt has additional binary/compiled package requirements, please refer to
   269     the passlib docs.
   270 
   271     cfg.password_scheme should be '{PASSLIB}' (default) to tell that passlib is
   272     wanted for new password hash creation and also for upgrading existing
   273     password hashes.
   274 
   275     For the moin code as distributed in our download release archive, passlib
   276     support should just work, as we have passlib 1.6.1 bundled with MoinMoin
   277     as MoinMoin/support/passlib. If you use some other moin package, please
   278     first check if you have moin AND passlib installed (and also find out the
   279     passlib version you have installed).
   280 
   281     If you do NOT want to (not recommended!) or can't use (still using python
   282     2.4?) passlib, you can disable it your wiki config:
   283 
   284         passlib_support = False  # do not import passlib
   285         password_scheme = '{SSHA}'  # use best builtin hash (like moin < 1.9.7)
   286 
   287     Please note that after you have used moin with passlib support and have user
   288     profiles with passlib hashes, you can't just switch off passlib support,
   289     because if you did, moin would not be able to log in users with passlib
   290     password hashes. Password recovery would still work, though.
   291 
   292     password_scheme always gives the password scheme that is wanted for new or
   293     recomputed password hashes. The code is able to upgrade and downgrade hashes
   294     at login time and also when setting / resetting passwords for one or all
   295     users (via the wiki web interface or via moin account resetpw script
   296     command).
   297 
   298     So, if you want that everybody uses strong, passlib-created hashes,
   299     resetting the passwords for all users is strongly recommended:
   300     First have passlib support switched on (it is on by default), use
   301     password_scheme = '{PASSLIB}' (also default), then reset all passwords.
   302 
   303     Same procedure can be used to go back to weaker builtin hashes (not
   304     recommended): First switch off passlib support, use password_scheme =
   305     '{SSHA}', then reset all passwords.
   306 
   307     Wiki farm admins sharing the same user_dir between multiple wikis must use
   308     consistent password hashing / passlib configuration settings for all wikis
   309     sharing the same user_dir. Using the builtin defaults or doing the
   310     configuration in farmconfig.py is recommended.
   311 
   312     Admins are advised to read the passlib docs (especially when experiencing
   313     too slow logins or when running old passlib versions which may not have
   314     appropriate defaults for nowadays):
   315     http://packages.python.org/passlib/new_app_quickstart.html#choosing-a-hash
   316     http://packages.python.org/passlib/password_hash_api.html#choosing-the-right-rounds-value
   317 
   318   * Password mass reset/invalidation support, see docs/resetpw/.
   319     This is useful to make sure everybody sets a new password and moin computes
   320     the password hash using the current configuration.
   321 
   322   * Customizable default password checker:
   323     Moin's default password checker used and still uses min_length=6 (minimum pw
   324     length) and min_different=4 (minimum count of different chars in the password).
   325     If you feel that you need to require better passwords from your users, you
   326     can customize it now like that in your wiki config:
   327 
   328     password_checker = lambda cfg, request, name, pw: multiconfig._default_password_checker(cfg, request, name, pw, min_length=10, min_different=7)
   329 
   330   * Removing/disabling inactive users (moin ... account inactive)
   331     Many wikis have a lot of inactive users, that never ever made a single edit.
   332     See help of the command for more details, be careful.
   333   * SystemAdmin user browser: show disabled user accounts at the bottom of
   334     the list
   335   * At startup, announce moin version and code path in log output (makes
   336     support and debugging easier).
   337   * AttachList: introduced search_term parameter (optional) for listing
   338     attachments filtered by a regular expression on their name.
   339   * sign release archive using GnuPG with the key of tw@waldmann-edv.de
   340     ID 31A6CB60 (main key ID FAF7B393)
   341 
   342   Fixes:
   343   * logging: if the logging config file can't be read, give a helpful error msg
   344   * logging: use info loglevel (not warning) for telling about using the builtin
   345     default logging config
   346   * moin script commands: warn if someone gave ... to the moin script, avoids a
   347     strange and unhelpful 'empty module name' error message
   348   * reorder html input fields in recoverpass form, to help browsers remember
   349     the user name and password (not erroneously the recovery token and password)
   350   * don't try to send password recovery email to user if email address in
   351     user profile is empty
   352   * cache action: fix 304 http status
   353   * rst parser: fix safe_import for level param in __import__ call of docutils 0.10
   354   * moin maint cleancache: also kill the i18n cache 'meta' pickle file
   355   * sendmail: catch unicode errors when E-Mail addr has non-ascii chars
   356   * redirect last visited: if last visited page is on same wiki, use a local
   357     redirect, do not compute via interwiki map (fixes https: usage)
   358 
   359 
   360 Version 1.9.6:
   361 
   362   Fixes:
   363   * fix remote code execution vulnerability in twikidraw/anywikidraw action
   364   * fix path traversal vulnerability in AttachFile action
   365   * fix XSS issue, escape page name in rss link
   366   * escape user- or admin-defined css url
   367   * make taintfilename more secure
   368   * use a constant time str comparison function to prevent timing attacks
   369   * Attachment handler: catch all Zip-related errors
   370 
   371 
   372 Version 1.9.5:
   373 
   374   Fixes:
   375    * Security fix: fix virtual group bug in ACL evaluation.
   376    * Avoid crash if #refresh processing instruction is used without arguments.
   377    * Fix issue with non-ASCII textchas.
   378    * Xapian indexing: remove copy.copy() that crashed on Windows/IIS/isapi-wsgi
   379      after page save.
   380    * Fix dictionary file reading crash under Windows.
   381    * Work around crash of AdvancedSearch macro rendering caused by non-ascii
   382      mimetypes.types_map entries.
   383    * Added migration script for moin 1.8.9.
   384    * rss_rc: Fix diffs added in RSS with diffs=1 (now they correspond to item
   385      listed in feed and not just last page diffs). Links generated with ddiffs=1
   386      also fixed.
   387    * rss_rc: fix double escaping issue.
   388    * rss_rc: respect show_names configuration option.
   389    * rss_rc: proper support of rename, revert, page creation.
   390    * modern/modernized theme: fix padding/width for editor preview
   391    * group/pagelinks formatters: avoid to create unnecessary output, redirect
   392      output of send_page call with the groups formatter, it must not be written
   393      to the output stream
   394    * rst parser: fix include and macro directives
   395    * wikisync: fix unicode pagename sending for python 2.7 httplib
   396 
   397   New features:
   398    * add a comment_required config option (default: False) to require a
   399      non-empty comment when saving a page
   400    * when a save error happens, show the editor again and highlight the error
   401    * rss_rc: several new options added: lines parameter gives ability to set
   402      maximum size of diffs showed in RSS. show_att parameter gives ability
   403      to show information aboout attachment-related items in RSS. page parameter
   404      gives ability to specify set of pages for which changes RSS feed should be
   405      generated. Configuration of defaults and limits can now be done via wiki
   406      configuration mechanism.
   407    * As soon as it is now possible to provide RSS for page change history,
   408      appropriate alternate link is now added for every page (controlled by
   409      rss_show_page_history_link configuration parameter).
   410    * Search: "no_highlight:" search query option provided for suppressing
   411      highlighting search results.
   412    * Search macros: new options for FullSearch, FullSearchCached and PageList
   413      available:
   414      * highlight_titles option controls highlighting of matches in search
   415        results provided by these macros. Default value is set in
   416        search_macro_highlight_titles configuration option)
   417      * highlight_pages option controls adding of highlight URL parameter to
   418        page links (so search term is highlighted when user goes to one of
   419        these pages via provided link) in search results. Default value is set
   420        in search_macro_highlight_pages configuration option.
   421      Usage of these options is disabled (via search_macro_parse_args
   422      configuration option) by default due to behavioural changes introduced
   423      in macro parameter parsing mechanism to support them. Related to
   424      http://moinmo.in/FeatureRequests/FullSearchResultsWithoutHighlight .
   425 
   426   Other changes:
   427    * Remove 4suite dependency for docbook formatter, use minidom (included in
   428      Python).
   429    * Upgraded FCKeditor to 2.6.8.
   430 
   431 
   432 Version 1.9.4:
   433 
   434   HINT: Python >= 2.5 is maybe required! See docs/REQUIREMENTS for details.
   435 
   436   Fixes:
   437    * Fix XSS / remove javascript URL support in rst parser (CVE-2011-1058).
   438    * werkzeug: Removed a dummy import. Fixes Python 2.7 compatibility.
   439    * Fix linux-to-windows edit-log migration/upgrade issue (wrong line endings)
   440    * logfile: strip \n lineends from line data (\n is part of the file
   441      structure, not of the data)
   442    * Fix for MoinMoinBugs/SinglePageSlideShowAndParserMarkup.
   443    * Simplify auto scroll initialization; fix bug in IE init discovered when
   444      using IE7 on pages with wide tables.
   445    * Fix timestamp in edit lock message to show the time when edit-locking ends.
   446    * Updated wikiserverconfig.py from internal defaults, sync the one in
   447      toplevel dir and the one in wiki/server/ - fixes hostname setting.
   448    * SubProcess: make sure files are closed at the end (experimental change).
   449    * text plain formatter: fix bullet_list, see number_list.
   450    * Add some image mimetypes to MIMETYPES_MORE to fix windows issues.
   451    * Include page name in password reset URL.
   452    * Fix moin export dump to generate relative URLs.
   453    * Fix MonthCalendar mouseover for pages with ampersand in page name.
   454    * ldap_login: assign server early, it is used in exception handler.
   455    * OpenID server preferences: fix traceback related to request method.
   456    * Work around page.mtime_usecs() returning 0 for pages without edit-log.
   457    * revert action: catch and display all SaveErrors when revert failed.
   458    * Fixed bug in groups formatter which caused the last list item to be not in the group.
   459    * Avoid strange exception in zipfile.py for pre-1980 timestamps.
   460    * TableOfContents: fix for other markups than default wiki markup, e.g. rst
   461    * script.account.homepage: added wiki format to homepage_default_text
   462    * Enable webkit based browsers (try chrome/safari/konqueror now) for GUI
   463      editing (after fixing selection FCKeditor plugin for chrome).
   464    * Parsers: avoid crash when Parser.format() call gets inhibit_p kw arg.
   465    * advancedsearch: fix problem with non-ascii chars breaking up words for OR
   466      and NOT terms
   467    * fix globaledit script to keep comments on Homepage...Template pages
   468 
   469   New features:
   470    * Added print mode to action.SlideShow, see
   471      FeatureRequests/PrintableSinglePageSlideshows.
   472    * xmlrpc: new methods xmlrpc_getProcessingInstruction(Version)
   473    * Add support for other password hashes (all of them will get auto-upgraded
   474      to SSHA when user logs in):
   475      * {DES} (Unix crypt(3))
   476      * {MD5} (MD5-based crypt())
   477      * {APR1} (Apache .htpasswd). 
   478    * Experimental queued indexing support to work around memory leak - use it like this:
   479      # put all pages into indexer queue:
   480      python MoinMoin/script/moin.py index build --mode=makequeue
   481      # take <count> pages out of the indexer queue and index them,
   482      # you need to repeat the following line respective to the total amount of pages
   483      # in your wiki (doing more indexer calls does no harm, doing less means an
   484      # incomplete index):
   485      python MoinMoin/script/moin.py index build --mode=buildnewindexqueued --count=500
   486      python MoinMoin/script/moin.py index build --mode=buildnewindexqueued --count=500
   487      python MoinMoin/script/moin.py index build --mode=buildnewindexqueued --count=500
   488      # ...
   489      # switch to new index:
   490      python MoinMoin/script/moin.py index build --mode=usenewindex 
   491 
   492   Other changes:
   493    * Raise exceptions as recommended in PEP 8.
   494    * Updated i18n / underlay pages.
   495    * Updated interwiki map.
   496    * Use logging.traceback to get more information if a indexing filter crashes.
   497    * u200b is not considered a space any more in unicode 4.0.1.
   498    * Improve textcha security, use some crypto and timing to make cheating
   499      harder - use cfg.textchas_expiry_time = 600 (default, seconds) to set the
   500      time a textcha is valid.
   501    * Upgraded bundled werkzeug to 0.8.1, pygments to 1.4, flup to repo tip.
   502 
   503 
   504 Version 1.9.3:
   505   Fixes:
   506   * Fix XSS in Despam action (CVE-2010-0828).
   507   * Fix XSS issues (see MoinMoinBugs/1.9.2UnescapedInputForThemeAddMsg):
   508     * by escaping template name in messages
   509     * by fixing other places that had similar issues
   510   * Make moin compatible to werkzeug 0.5 .. 0.6.2 (1.9.2 had issues
   511     with xmlrpc when used with werkzeug 0.6.x).
   512   * MoinMoin.util.filesys: disable usage of dircache, deprecate dc* functions,
   513     because the dircache stdlib module can't work correctly for fast updates of
   514     directories.
   515   * rss_rc and sisterpages actions: fix Content-Type header (mimetype)
   516   * Fix associating OpenID identity with user, wasn't adapted to werkzeug yet.
   517   * openidrp auth: fix undefined _ (gettext)
   518   * Fix auth.cas and userprefs.oidserv request object usage.
   519   * highlight parser: fixed MoinMoinBugs/LineNumberSpansForProcessInstructionsMissed
   520   * Pygments syntax highlighting: add missing code files
   521   * Notifications: use same email subject format for every notification
   522   * Fix docbook formatter crashing, see MoinMoinPatch/IncludeMacroWithDocBookFormatter
   523   * Fix regex content search for xapian search.
   524   * Get rid of the empty line at the end of code highlights.
   525   * GUI editor: compute editor height like the text editor does.
   526   * Added help texts for: standalone server and moin migration.
   527   * script.maint.cleancache: clean also i18n cache files
   528   * Improved formatter.text_plain, see FeatureRequests/TextPlainFormatterRewrite
   529     (fixes many issues of this formatter).
   530   * text_html_text_moin_wiki: fixed index error for width="", see also:
   531     MoinMoinBugs/GUI_convertor_list_index_out_of_range
   532   * xmlrpc: disable editor backup for putPage, renamePage and revertPage
   533     because if pages get uploaded by xmlrpc then the draft cache file can
   534     rapidly increase in size, causing high memory usage because it needs to
   535     get loaded into memory for updating/processing.
   536   * Emit Content-Type header (with charset) for SlideShow action and many other
   537     actions that just call send_title().
   538   * ActionBase: better compatibility to moin 1.8, use request.values by
   539     default, optionally use request.form data only
   540 
   541   New features:
   542   * RenamePage action: added ability to create redirect pages when renaming
   543     (turned off by default, see show_rename_redirect config option).
   544   * formatter/text_html: Added line number links to code blocks.
   545   * diff action:
   546     * Fixed whitespace in generated (html) diff view table so white-space: pre
   547       can be used (and whitespace in diffs preserved).
   548     * Added links to first/last revision.
   549   * MoinMoin.widget.browser: introduced feature for sorting tables, see:
   550     http://moinmo.in/FeatureRequests/SortableTables
   551   * SystemAdmin user and attachment browsers: sorting feature used there now
   552   * Scrolling the text editor to the double clicked line.
   553   * Enable double-click-editing by default.
   554   * WikiConfigHelp macro: make heading and description display optional,
   555     heading level as a parameter (default 2)
   556   * If edit ticket check fails, send the editor with the current content.
   557   * moin import wikipage - use this script to import local files as a wiki page
   558 
   559   Other changes:
   560   * upgraded pygments from 1.2.2 to 1.3.1
   561   * upgraded FCKeditor from 2.6.4.1 to 2.6.6
   562   * added configuration snippet for ldap authentication against 2 servers
   563   * improved script help output
   564 
   565 Version 1.9.2:
   566   Fixes:
   567   * Fixed CVE-2010-0668: major security issues were discovered in misc. parts
   568     of moin.
   569     HINT: if you have removed superuser configuration to workaround the issue
   570     (following our security advisory), you may re-add it after installing this
   571     moin release. If you don't need superuser capabilities often, it might be
   572     wise to not have superusers configured all the time, though.
   573   * Fixed CVE-2010-0669: potential security issue due to incomplete user profile
   574     input sanitizing.
   575   * Improved package security: cfg.packagepages_actions_excluded excludes
   576     unsafe or otherwise questionable package actions by default now.
   577   * wiki parser: fixed transclusion of (e.g. video) attachments from other
   578     pages.
   579   * Fixed edit locking for non-logged in editors and cfg.log_remote_addr=False.
   580   * mailimport: fix missing wikiutil import for normalize_pagename
   581   * SubProcess: fix "timeout" AttributeError
   582   * "standalone" wikiserver.py: fixed calling non-existing os.getuid on win32
   583   * HTTPAuth deprecation warning moved from class level to __init__
   584   * Fixed MoinMoinBugs/1.9DiffActionThrowsException.
   585   * Fixed misc. session related problems, avoid unneccessary session file
   586     updates.
   587   * Fix/improve rename-related problems on Win32 (depending on Windows version).
   588   * Fixed spider / user agent detection.
   589   * Make sure to use language_default when language_ignore_browser is set.
   590   * diff action: fix for case when user can't revert page.
   591   * Fix trail size (was off by one).
   592   * Updated bundled flup middleware (upstream repo checkout), avoids
   593     socket.fromfd AttributeError on win32 if cgi is forced, gives helpful
   594     exception msg.
   595   * wikiutil: Fixed required_arg handling (no exception when trying to raise
   596     exception that choice is wrong).
   597   * Do not use MoinMoin.support.* to import 3rd party code, give dist packages
   598     a chance.
   599   * wikiutil.clean_input: avoid crash if it gets str type
   600   * request: fixed for werkzeug 0.6 and 0.5.1 compatibility. Please note that
   601     we didn't do much testing with 0.6 yet. So, if you use 0.6, please do some
   602     testing and provide feedback to us.
   603   * AttachFile._build_filelist: verifies readonly flag for unzip file link
   604   * attachUrl: fix wrongly generated tickets (e.g. for AttachList macro)
   605   * http headers: fix duplicated http headers (e.g. content-type)
   606 
   607   New features:
   608   * info action: added pagination ability to revision history viewer.
   609     Use cfg.history_paging = True [default] / False to enable/disable it.
   610   * ldap_login auth: add report_invalid_credentials param to control wrong
   611     credentials error message (this is typically used when using multiple
   612     ldap authenticators).
   613   * Add RenderAsDocbook to actions_excluded if we have no python-xml.
   614   * Upgraded pygments to 1.2.2 (some fixes, some new lexers).
   615   * Text editor: if edit_rows==0 (user profile or config), we dynamically size
   616     the text editor height. This avoids double sliders for the editor page
   617     in most cases.
   618 
   619   Other changes:
   620   * New docs/REQUIREMENTS.
   621   * Added a less magic cgi/fcgi driver (moin.fcgi), added fixer middleware
   622     for apache2/win32 to it.
   623 
   624 
   625 Version 1.9.1:
   626   Bug fixes:
   627   * Fixed CVE-2010-0667: sys.argv security issue.
   628   * Fixed FileSessionService - use session_dir from CURRENT request.cfg (it
   629     mixed up session_dirs in farm setups).
   630     HINT: if you added the hotfix to your wikiconfig, please remove it now.
   631   * Fixed creation of lots of session files (if anon session were enabled and
   632     user agent did not support cookies).
   633   * Fixed session file storage for a non-ascii base path.
   634   * Fixed session cookie confusion for nested URL paths (like path=/ and
   635     path=/mywiki - for more info, see also "New features").
   636   * Handle cookie_lifetime / anonymous_session_lifetime upgrade issue
   637     gracefully: emit errors/warnings to log, use old settings to create
   638     cfg.cookie_lifetime as expected by moin 1.9.
   639   * flup based frontends: fixed SCGI and AJP (didn't work).
   640   * farmconfig example: remove wrong comment, add sample http/https entry.
   641   * Fixed password reset url (email content needs full URL).
   642   * Page: fixed adding of page contents (only data added now, without metadata) -
   643     fixes MoinMoinBugs/DeprecatedPageInclusionErrornousPageInstructionsProcessing
   644   * xmlrpc:
   645     * Process attachname in get/putAttachment similarly.
   646     * revertPage: convert pagename to internal representation.
   647     * Fixed auth calls used by jabberbot (needs more work).
   648   * Added missing config.umask support code (setting was not used), fixed
   649     config.umask usage for page packages.
   650   * Fixed browser language detection.
   651   * Fixed language pack generation/installation for pt-br, zh, zh-tw.
   652   * Fixed caching of formatted msgs, see MoinMoinBugs/1.9EditPageHelpLinksBroken.
   653   * Fixed usage of i18n.wikiLanguages() on class level (moved to method), failed
   654     when tools import the module (e.g. pydoc -k foo).
   655   * highlight parser:
   656     * fixed caching issue for "toggle line numbers" link.
   657     * added missing support for console/bash session
   658   * Fixed precedence of parsers: more special parsers now have precedence
   659     before moin falls back to using the HighlightParser (syntax highlighting).
   660   * Added extensions to the rst, moin and creole parser (example.rst, example.moin and
   661     example.creole attachments are rendered now when viewed).
   662   * Fixed MoinMoinBugs/LineNumberSpansForProcessInstructionsMissed for
   663     moin_wiki, highlight and plain parser.
   664   * Fixed MoinMoinBugs/LineNumberAnchorsInPreformattedText for highlight and
   665     plain parser.
   666   * Fixed MoinMoinBugs/TableOfContentsBrokenForIncludedPages.
   667   * Exception raised on calling add_msg() after send_title(), which leads to 
   668     Internal Server Error on calling several actions (diff, preview) for 
   669     deprecated pages, is replaced with warning and call stack information in 
   670     the log.
   671   * AttachFile.move_file: send events (so e.g. xapian index update happens)
   672   * SubProcess: fixed win32-specific parts, fixed imports (fixes calling of
   673     external xapian index filters)
   674   * Fixed auth methods that use redirects (like OpenID).
   675   * OpenID client:
   676     * Add setting cfg.openidrp_allowed_op, default is [].
   677     * Fixed logging in with openid and associating with an existing account.
   678     * openidrp_sreg extension: handle UnknownTimeZoneError gracefully
   679   * OpenID server:
   680     * Fixed TypeError.
   681     * Fixed processing POSTed form data AND URL args.
   682 
   683   New features:
   684   * diff: Added displaying of information about revisions (editor, size, 
   685     timestamp, comment), added revision navigation.
   686   * text editor: added @TIMESTAMP@ variable for adding a raw time stamp
   687   * xmlrpc: added renamePage and deleteAttachment methods.
   688   * Accept "rel" attribute for links (moin wiki parser).
   689   * Generate session cookie names to fix cookie path confusion and enable port-
   690     based wiki farming.
   691 
   692     HINT: New setting cfg.cookie_name:
   693 
   694     None (default): use MOIN_SESSION_<PORT>_<PATH> as session cookie name. This
   695                     should work out-of-the-box for most setups.
   696 
   697     'siteidmagic': use MOIN_SESSION_<SITEID>, which is unique within a wiki farm
   698                    created by a single farmconfig (currently, cfg.siteid is just
   699                    the name of the wiki configuration module).
   700 
   701     'other_value': use MOIN_SESSION_other_value - this gives YOU control. Just
   702                    use same value to share the session between wikis and use a
   703                    different value, if you want a separate session.
   704 
   705     HINT: Please do not use cfg.cookie_path any more - it usually should not be
   706     needed any more, as we now always put path=/ into the cookie except if you
   707     explicitly configure something else (only do that if you know exactly what
   708     you're doing and if the default does not work for you).
   709 
   710     HINT: see also the HelpOnSessions page which shows some typical configs.
   711   * Store expiry into sessions, use moin maint cleansessions script to clean up.
   712     HINT: use moin ... maint cleansessions --all once after upgrading.
   713     HINT: you may want to add a cron job calling moin ... maint cleansessions
   714           to regularly cleanup expired sessions (it won't remove not expired
   715           sessions).
   716 
   717   Other changes:
   718   * Added rtsp, rtp, rtcp protocols to url_schemas.
   719   * Added more info about index building to xapian wikiconfig snippet.
   720   * Updated the wikicreole parser to version 1.1.
   721 
   722 
   723 Version 1.9.0:
   724   Note: This is a reduced CHANGES, ommitting details from rc/beta test and
   725         also less interesting minor changes and fixes. It shows changes
   726         relative to 1.8.6 release.
   727         If you want to see full detail, read it there:
   728         http://hg.moinmo.in/moin/1.9/file/b290d938be63/docs/CHANGES
   729 
   730   New features: ==============================================================
   731   * HINT: MoinMoin requires Python 2.4 now. If you only have Python 2.3 and
   732     you don't want to upgrade it, please use MoinMoin 1.8.x.
   733   * HINT: MoinMoin is now a WSGI application.
   734     Please read the new install docs about how to use it, see:
   735     http://master19.moinmo.in/InstallDocs
   736     You also have a local copy of that page as docs/INSTALL.html.
   737   * HINT: due to big changes in the request processing and the request
   738     object (related to the WSGI refactoring), many 3rd party plugins might
   739     need code updates to work with moin 1.9.
   740   * HINT: We now offer different sized sets of system/help pages and the default
   741     underlay just contains a single page: LanguageSetup. You need to be
   742     superuser, visit that page and then install the language packs you like
   743     (minimum is the essential set for English).
   744   * HINT: LanguageSetup is the default page_front_page, you need to change that
   745     after installing language packs (see above).
   746 
   747   * New modular group and dict data access, you can use group and dict 
   748     backend modules to access group and dict data stored anywhere you like.
   749     Currently we provide these backends:
   750       * WikiGroups and WikiDicts backends get data from wikipages. They work
   751         similar to old wikidicts code (but with less caching issues :).
   752       * ConfigGroups and ConfigDicts backends get data from a dictionary
   753         defined in the wiki config.
   754       * CompositeGroups and CompositeDicts compose several backends, so data
   755         may be retrieved from several sources. For example, groups may be
   756         defined in the wiki config and on wiki pages.
   757     * Using cfg.groups and cfg.dicts, you can define the backend to use to
   758       access group and dict information (default: WikiGroups / WikiDicts
   759       backend).
   760       See the wiki/config/more_samples/ directory (groups_wikiconfig_snippet
   761       and dicts_wikiconfig_snippet).
   762     * See also the new HelpOnDictionaries and HelpOnGroups pages.
   763 
   764   * Improved Xapian indexing / search:
   765     * Moin's Xapian based search code was refactored:
   766       * It is now based on the xappy library (see MoinMoin.support.xappy).
   767       * Minimum Xapian requirement is 1.0.6 now.
   768       * Outdated and unmaintained xapwrap lib was removed.
   769       * regex search with Xapian enabled also is based on the xapian index now
   770     * Safe 2-stage xapian index rebuilding:
   771       moin index build --mode=buildnewindex  # slow, concurrent
   772       <stop wiki>
   773       moin index build --mode=usenewindex  # fast
   774       <start wiki>
   775     * Added wikiconfig snippet for xapian search.
   776 
   777   * Improved drawing support:
   778     * TWikiDraw:
   779       * Support code was refactored/moved to the twikidraw action.
   780       * Use drawing:example.tdraw to invoke it (drawing:example also still
   781         works for backwards compatibility)
   782       * Drawings are now stored as a single attachment foo.tdraw.
   783         We added a migration script that converts your existing drawings.
   784     * AnyWikiDraw:
   785       * Java applet added, source code see contrib/.
   786       * Support code for it is in anywikidraw action.
   787       * Use drawing:example.adraw to invoke it.
   788       * Drawings are stored in a similar way as foo.adraw.
   789     * cfg.extensions_mapping added for mapping of attachment file extensions
   790       to actions (currently used for anywikidraw/twikidraw action)
   791 
   792   * Themes / static files related:
   793     * Added modernized_cms theme (hides most wiki widgets from modernized if the
   794       user is not logged in).
   795     * Static file serving built-in (moved wiki/htdocs to MoinMoin/web/static/htdocs).
   796       MoinMoin.web.static has a static file serving wrapper that uses the files
   797       from htdocs subdirectory by default (docs=True).
   798       You can also give another path or switch off creation of that static wrapper.
   799       See the docstring of the static package for details.
   800     * Theme packages: do_copythemefile now copies theme files to
   801       MoinMoin/web/static/htdocs.
   802 
   803   * Syntax highlighting is based on the pygments library now, it does this for
   804     LOTS of stuff (programming languages, config files, ...) - use it like this:
   805     {{{#!highlight xxx
   806     ...
   807     }}}
   808     xxx is any of the markups pygments supports (see HelpOnParsers).
   809     Note: we still have some (deprecated) small wrappers around pygments,
   810     so the old syntax #!python/pascal/cplusplus/... still works.
   811 
   812   * Authentication improvements:
   813     * HTTP auth related (see also HelpOnAuthentication):
   814       * HTTPAuthMoin: http basic auth done by moin
   815       * HINT: auth.http.HTTPAuth is now auth.GivenAuth
   816         This was badly named from the beginning as for most servers, it just
   817         looked at REMOTE_USER environment variable and relied on the server
   818         doing the authentication (could be http basic auth or any other auth).
   819     * LDAP/AD auth: new name_callback param to create a custom wiki username (not
   820       the ldap login username)
   821     * OpenID auth:
   822       * Support for Simple Registration (SREG) extension.
   823         Basic profile fields can be copied from OpenID provider when logging in.
   824       * Support for Teams extension.
   825       * Ability to accept logins from specific OpenID providers.
   826         Login form changes based on configuration for better usability:
   827         * 0 providers: normal text input box for OpenID URL
   828         * 1 provider: hidden field, automatic form submission with JavaScript
   829         * 2+ providers: select field, uses directed identity
   830 
   831   * Sessions / cookies:
   832     * HINT: cfg.cookie_lifetime is now a tuple (anon, loggedin), giving the
   833       lifetime of the cookie in hours, accepting floats, for anon sessions and
   834       logged-in sessions. Default is (0, 12). 0 means not to use a session
   835       cookie (== not to establish a session) and makes only sense for anon users.
   836     * cfg.cookie_httponly is new and defaults to False. Please note that if you
   837       set it to True, TWikiDraw and similar stuff won't be able to use the session
   838       cookie. Thus, if your wiki page doesn't allow writing for everybody, saving
   839       a drawing will fail, because there is no session (== no logged in user) for
   840       the TWikiDraw applet's saving POSTs.
   841 
   842   * Macros:
   843     * WikiConfigHelp: added section keyword for selecting a subset of the
   844       description, e.g. <<WikiConfigHelp(section="xapian")>>
   845     * HighlighterList: show Pygments syntax highlighters (see HelpOnParsers)
   846 
   847   * Actions:
   848     * SlideShow action added (please use the "modernized" theme [default])
   849     * raw action mimetype support: ...?action=raw&mimetype=text/css
   850     * PackagePages: create package file on-the-fly in memory and send it to the
   851       client (do NOT create package.zip attachment)
   852 
   853   * Improved logging / debugging / developer support:
   854     * Main exception handler: include request url in log output.
   855     * Environment variable MOIN_DEBUGGER=off/web/external (default is "off").
   856     * Handle wikiserverconfig(_local) in the same way as wikiconfig(_local).
   857 
   858   * GUI editor: improved attachment dialog
   859 
   860   * "moin ... account homepage" script to create user homepages.
   861 
   862 
   863   Removed features: ==========================================================
   864   * Removed cfg.traceback_* settings (use logging configuration)
   865   * Removed old session code and settings:
   866     * Removed cfg.session_handler and session_id_handler (use cfg.session_service)
   867     * Removed cfg.anonymous_session_lifetime (use cfg.cookie_lifetime)
   868 
   869 
   870   Bug fixes: =================================================================
   871   * Xapian indexing:
   872     * Rely on xapian's locking (remove moin's additional and sometimes broken
   873       locking, that blocked index-rebuilds or updates sometimes).
   874     * Removed indexer threading.
   875     * Fixed (reimplemented) indexer queue.
   876     * Less disruptive xapian index rebuild.
   877   * AdvancedSearch: example didn't work, fixed
   878 
   879   * With the groups/dicts code rewrite, we fixed the caching problems that the
   880     old code (< 1.9) sometimes had.
   881 
   882   * Actions:
   883     * Abort RenamePage if renaming of main page fails (do not try to rename
   884       subpages).
   885     * AttachFile do=view: quote filename and pagename params for EmbedObject
   886       macro call
   887     * unsubscribe action: add msg types so icons get displayed
   888 
   889   * Parsers:
   890     * fixed MoinMoinBugs/LineNumbersWorkingBuggyWithHighlightParser
   891 
   892   * GUI editor: roundtripping works now for .pdf/doc/... attachment transclusion
   893 
   894   * AttachFile: added remove_attachment() and FileRemovedEvent (mail and xapian
   895     support, no jabber support yet).
   896 
   897   * Fix makeForbidden403() calls - is makeForbidden(403, ...) now.
   898   * sendmail: add more debug logging, check for empty recipients list
   899   * Fix MoinMoinBugs/MissingPageShouldn'tOfferToCreatePageForReadonlyUsers
   900   * Fix MoinMoinBugs/1.6XmlRpcPutPagePagenameEscape
   901   * Bug with "language:en" was fixed for the Moin search. Now language:
   902     behaves like described on HelpOnSearching.
   903   * Fixed MoinMoinBugs/DeprecatedIsNotRespected (search ranking, WantedPages).
   904   * OpenID: always return error messages with CancelLogin if OpenID process fails.
   905   * suid: simplify and fix, bigger selection box
   906 
   907   * patch werkzeug 0.5.1 to catch OverFlowError and ValueError so it doesn't
   908     crash when receiving invalid If-modified-since header from client.
   909 
   910 
   911   Other changes: =============================================================
   912   * 'modernized' theme:
   913     * use it by default (1.8 used 'modern')
   914     * move title_with_separators() from Modernized theme to ThemeBase
   915     * add a span with "pagepath" class to title_with_separators
   916   * add the sidebar() method from Mandarin and Gugiel themes to ThemeBase
   917   * updated flup to 1.0.2+ ( http://hg.saddi.com/flup-server/rev/6ea1ffac1bcb )
   918   * updated pygments to 1.1.1+ ( http://dev.pocoo.org/hg/pygments-main/rev/948f8885af16 )
   919   * updated parsedatetime to 0.8.7
   920   * increase surge protection limits for AttachFile to avoid trouble with image galleries
   921   * HINT: simplify wikiserver configuration by using same names as werkzeug's
   922     run_simple() call.
   923   * Removed moin account check's --lastsaved option, it is default now
   924     (checking last use with trail file did not work in 1.9 anyway).
   925   * ImageLink page has been killed (ImageLink macro is gone since 1.6.1).
   926   * Allowed disabling of timezone and language user prefs if they are
   927     part of the user's login fields (i.e. OpenID SREG).
   928   * Added option to disable local registration links and direct user
   929     to registration page at an OpenID provider instead.
   930 
   931   Developer notes: ===========================================================
   932   * groups and dicts API changes:
   933     * request.groups and request.dicts provide access to groups and dicts.
   934     * MoinMoin.wikidicts is gone, please use MoinMoin.datastruct.
   935     * LazyGroup and LazyGroupsBackend base classes for implementing backends
   936       which potentially deal with huge amounts of data (like a LDAP directory).
   937       Use MoinMoin/datastruct/backends/config_lazy_groups.py as a draft for
   938       new backends.
   939     * See http://moinmo.in/Groups2009 for more details.
   940   * i18n: new approach for defining sets of system/help pages (see i18n.strings).
   941     CheckTranslation, page packager, wikiutil.isSystemPage() use those sets.
   942   * killed deprecated macro.form attribute (didn't work as expected anyway due
   943     to WSGI refactoring) - please use macro.request.{args,form,values}
   944 
   945 
   946 Version 1.8.8:
   947   Fixes:
   948     * Fixed XSS issues (see MoinMoinBugs/1.9.2UnescapedInputForThemeAddMsg).
   949     * Fixed XSS in Despam action (CVE-2010-0828).
   950     * wikiutil.clean_input: avoid crash if it gets str type
   951     * Add RenderAsDocbook to actions_excluded if we have no python-xml
   952     * AttachFile._build_filelist: verifies readonly flag for unzip file link
   953     * attachUrl: fix wrongly generated tickets (e.g. for AttachList macro)
   954     * MoinMoin.util.filesys.dc* (dircache can't work reliably):
   955       * disable usage of dircache, deprecate dc* functions
   956       * remove all calls to filesys.dc* (dclistdir, dcdisable)
   957     * Fixed crash, see MoinMoinPatch/IncludeMacroWithDocBookFormatter
   958     * Avoid hardly recoverable crashes if #format specification is invalid
   959 
   960   New features:
   961     * auth.ldap_login: add report_invalid_credentials param to control wrong
   962       credentials error message (typically used when using multiple ldap
   963       authenticators)
   964 
   965 
   966 Version 1.8.7:
   967   Fixes:
   968   * Fixed major security issues in miscellaneous parts of moin.
   969     HINT: if you have removed superuser configuration to workaround the issue
   970     (following our security advisory), you may re-add it after installing this
   971     moin release. If you don't need superuser capabilities often, it might be
   972     wise to not have superusers configured all the time, though.
   973   * Improved package security: cfg.packagepages_actions_excluded excludes
   974     unsafe or otherwise questionable package actions by default now.
   975   * wiki parser: fixed transclusion of (e.g. video) attachments from other
   976     pages.
   977   * Fixed edit locking for non-logged in editors and cfg.log_remote_addr=False.
   978   * xmlrpc:
   979     * Process attachname in get/putAttachment similarly.
   980     * revertPage: convert pagename to internal representation.
   981   * Fixed config.umask usage for page packages.
   982   * Fixed usage of i18n.wikiLanguages() on class level (moved to method),
   983     failed when tools import the module (e.g. pydoc -k foo).
   984   * SubProcess: fixed win32-specific parts, fixed imports (fixes calling of
   985     external xapian index filters)
   986 
   987 
   988 Version 1.8.6:
   989   Bug fixes:
   990   * Xapian indexing / indexing filters:
   991     * fix deadlocks with well- and misbehaving external filters
   992     * work around indexing run crashing when encountering encoding problems
   993       with non-ascii filenames
   994     * OpenOffice/OpenDocument filters: catch UnicodeDecodeErrors (happens
   995       with password protected files)
   996   * i18n: check if languages is not initialized yet, don't crash
   997   * http_redirect: use 301 redirect for some cases
   998   * do not use httponly session cookies, makes trouble with twikidraw and ACLs
   999   * GetText2 macro: fix for named placeholder
  1000   * Fix SHA -> SSHA password hash upgrade for old user profiles.
  1001   * abort RenamePage if renaming of main page fails (do not try to rename
  1002     subpages)
  1003 
  1004   New features:
  1005   * search: improve search result ordering
  1006   * add MS Powerpoint indexing filter (needs catppt from catdoc package)
  1007   * migration scripts: make finding damaged edit-log entries easier
  1008   * SubscribeUser action: support username regexes and unsubscribing.
  1009     Usage (enter this into the input form field you get after invoking
  1010     SubscribeUser action from the "More Actions" menu:
  1011     [+|-][re:]username[,username,...] 
  1012 
  1013     +username: subscribes user <username> (+ is optional/default)
  1014     -username: unsubscribes user <username>
  1015     +re:username_re: subscribes users who match <username_re> regex.
  1016     -re:username_re: unsubscribes users who match <username_re> regex.
  1017 
  1018 
  1019 Version 1.8.5:
  1020   Bug fixes:
  1021     * Attachment links: fix processing of attributes (e.g. 'target', 'title')
  1022     * Upgrade FCKeditor from 2.6.4 to 2.6.4.1.
  1023     * PDF embedding: fix html, works better with PDF browser plugins now.
  1024     * Fix typo in rightsidebar CSS.
  1025     * Action revert: avoids reverting to a deleted current revision.
  1026     * Action diff: enable prev/next button only in the range of given revisions.
  1027     * Add a Auto-Submitted: auto-generated header to generated mails.
  1028     * Include comment in email notifies.
  1029     * mailimport: fix endless looping while trying to import a forwarded mail.
  1030     * fuid: keep same fake_mtime for intervals of max_staleness duration.
  1031     * Fixes a bug with empty list items in the GUI editor.
  1032     * Improve filesys.rename compatibility code (win32).
  1033     * Fix locking for CacheEntry.
  1034     * Xapian indexing: catch exception when a bad zip file is encountered.
  1035     * openidrp / botbouncer: fix param count for CancelLogin().
  1036 
  1037   New features:
  1038     * Added CAS authentication.
  1039     * Added httponly cookie support and use it for session cookie.
  1040 
  1041   Other changes:
  1042     * HTTP auth: added debug logging.
  1043     * Minor LDAP auth improvements.
  1044     * Data browser widget:
  1045       * Add (h)column<idx> css class to make it styleable.
  1046       * Include only necessary autofilter options.
  1047     * moin maint cleancache purges now drafts, too.
  1048     * Add gopher and apt protocols to url_schemas.
  1049     * Add .csv, .flv, .swf to MIMETYPES_MORE.
  1050 
  1051 
  1052 Version 1.8.4:
  1053   Bug fixes:
  1054     * ACL security: fix bug in hierarchical ACL processing, more restrictive
  1055       sub page ACLs did not work if the current user name did not give a match
  1056       within the sub page ACL (instead, the less restrictive parent page ACL
  1057       was used).
  1058       Non-hierarchical ACL processing (the default) is NOT affected.
  1059     * Creole parser: fix spaces in multiline elements.
  1060     * Use msie.css only for Internet Explorer older than version 8, fixes
  1061       e.g. the double rendering of link icons.
  1062     * http auth: do auth_type comparisons case-insensitively (spec-compliant)
  1063 
  1064   New features:
  1065     * EmbedObject macro: changed default width value for PDF files to 100%
  1066                          (use a recent Adobe Reader to make this work).
  1067     * CopyPage action: added a TextCha for it
  1068 
  1069   Other changes:    
  1070     * Creole parser: Add second license: BSD
  1071 
  1072 
  1073 Version 1.8.3:
  1074   Bug fixes:
  1075     * AttachFile XSS fixes: move escaping to error_msg / upload_form
  1076     * AttachFile move: add more escaping (maybe not XSS exploitable though)
  1077     * email attachments import with xapian indexing enabled: fix AttributeError
  1078     * fix wrong links in attachment notifications
  1079     * AttachFile do=view: quote filename and pagename params for EmbedObject
  1080       macro call
  1081     * AttachFile: fix exception when someone just clicks on upload, without
  1082       giving a file
  1083     * ldap_login: use None as default value for ssl certs/keys (using '' for
  1084       the pathes lets it fail with Connect Error)
  1085     * release edit lock if someone saves an unchanged page
  1086     * fix sendmail.encodeAddress (do not [QP] encode blanks, do not un-
  1087       necessarily use [QP] encoding for pure ascii mail addresses)
  1088     * Fixed docs bug: see HINT about secrets configuration at version 1.8.0
  1089       (1.8.0 Other changes).
  1090     * backup action: add 'self' dummy argument for backup_exclude function
  1091     * login action: fix formatting of error messages
  1092     * unsubscribe action: add msg types so icons get displayed
  1093     * fix quoting for pagehits stats (info action) - was not working for pagenames with blanks
  1094     * macro.TableOfContents: bug fix for MoinMoinBugs/TableOfContentsIgnoresSectionNumbersPragma
  1095 
  1096   New features:
  1097     * added modernized_cms theme
  1098     * use url_prefix_fckeditor if you don't want to use the builtin FCKeditor
  1099       of moin, but a separate one at some specific url
  1100     * action.Load: added textcha feature
  1101     * add mumble protocol (nice and good quality F/OSS VOIP conference chat sw)
  1102     * ldap auth: new name_callback param to create a custom wiki username (not
  1103       the ldap login username).
  1104 
  1105   Other changes:
  1106     * add compatibility code for set to xapwrap.index (fix py 2.6 warnings)
  1107     * wikiutil: MIMETYPES_MORE extended for .md5 as text/plain
  1108 
  1109 
  1110 Version 1.8.2:
  1111   Bug fixes:
  1112     * Fix AttachFile and antispam XSS issues.
  1113     * Modernized, modern and rightsidebar themes: make nonexistent or
  1114       badinterwiki links gray also when they are already visited.
  1115     * Fix anchor parsing for interwiki links and #redirect processing
  1116       instruction.
  1117     * user.apply_recovery_token: key must be of type string (for Python 2.6).
  1118     * Fix MoinMoinBugs/GuiEditorBreaksIndentedTable.
  1119     * Fix autofilter javascript breakage caused by including a databrowser
  1120       widget.
  1121     * Use per-wiki i18n cache (fixes wrong links to other farm wikis).
  1122     * Made cfg.interwikiname and cfg.user_homewiki unicode objects (str only
  1123       worked for ascii names).
  1124     * Xapian search: fixed historysearch.
  1125     * Xapian search indexing:
  1126       * Fix index updating for trivial changes.
  1127       * With history search enabled and in update mode, do not try to re-index
  1128         old page revisions again.
  1129       * With history search enabled, index page attachments only once.
  1130       * Fix last modified time of xapian index (shown on SystemInfo page).
  1131     * Make logging handlers defined in logging.handlers work (e.g.
  1132       class=handlers.RotatingFileHandler)
  1133     * Jabber notifications:
  1134       * Use an RFC compliant message type.
  1135       * Fix user creation notifications.
  1136     * OpenID: Compatibility fix for python-openid 2.x.x (also works with
  1137       1.x.x), fixes crash when trying to associate moin user to OpenID.
  1138     * Have a wikiserverconfig.py in wiki/server/ so setup.py copies it.
  1139     * Fixed inconsistent handling of fragments / anchor IDs:
  1140       * Fixed creole and wiki parser, other parsers might need similar fixes.
  1141       * IDs with blanks, non-ASCII chars etc. are now sanitized in the same way
  1142         for links as well as for link targets, so the user editing a page won't
  1143         have to bother with it.
  1144         E.g. [[#123 foo bar]] will link to:
  1145         * <<Anchor(123 foo bar)>> (moin) or {{#123 foo bar}} (creole)
  1146         * headline = 123 foo bar = (moin / creole)
  1147         Simple rule: if the link and the target are consistent, it should work.
  1148       * The creole wiki parser created non-human-readable sha1 heading IDs
  1149         before 1.8.2, now it creates same (sometimes readable) heading IDs as
  1150         the moin wiki parser.
  1151       * TitleIndex/WordIndex now also use IDs sanitized in that way internally.
  1152       HINT: if you manually worked around the inconsistencies/bugs before, you
  1153             likely have to remove those workarounds now. Same thing if you used
  1154             creole's sha1 heading IDs or IDs on TitleIndex/WordIndex.
  1155 
  1156   Other changes:
  1157     * Updated FCKeditor to 2.6.4 (== many bug fixes in the GUI editor).
  1158     * Enhanced privacy by a new setting: cfg.log_remote_addr (default: True),
  1159       it controls whether moin logs the remote's IP/hostname to edit-log and
  1160       event-log. Use log_remote_addr = False to enhance privacy.
  1161     * Streamline attachment_drawing formatter behaviour.
  1162     * Search results: only redirect to a single search result for titlesearch
  1163       (fuzzy goto functionality), but not for fulltext search results.
  1164 
  1165 
  1166 
  1167 Version 1.8.1:
  1168   Bug fixes:
  1169     * Workaround win32 locking problems (caused by spurious access denied
  1170       exceptions on that platform).
  1171     * Fix unicode errors that happened when password checker failed a password
  1172     * WikiConfig/WikiConfigHelp: fixed wrong language table headings
  1173     * Themes: make the margins around trail line work properly
  1174     * "modernized" theme:
  1175       * make broken links gray
  1176       * add new right/center/left/justify css classes
  1177       * don't force Arial
  1178     * Standalone server: be more specific when catching socket exceptions,
  1179       treat socket errors in http header emission in the same way.
  1180     * GUI editor:
  1181       * Fix heading levels when inserting new headings.
  1182       * Fix headers already sent exception when using e.g. edit LOCKing.
  1183     * Xapian indexing: fixed missing import for execfilter (only happened on
  1184       non-posix platforms like win32)
  1185 
  1186   * New features:
  1187     * Themes:
  1188      * Make the TOC shrinkwrap, add white background to navigation macro.
  1189        The table of contents looked bad spanning the whole width of the page.
  1190        It's made to shrinkwrap now, so it will only get as wide, as the longest
  1191        heading. We use display:inline-table, so this won't work in MS IE6,
  1192        which still displays it the old way.
  1193        Navigation macro now has a white background, to make it more readable
  1194        when it's floating over a pre block or TOC.
  1195      * Make the numbers in lists in table of contents right-aligned.
  1196      * Refactored and extended theme.html_stylesheets() to make alternate
  1197        stylesheets possible. Stylesheet definitions now can either be:
  1198        2-tuples: (media, href)  # backwards compatibility
  1199        or:
  1200        3-tuples: (media, href, title)  # new, for defining alternate stylesheets
  1201        This works within themes as well as in the wiki config.
  1202        See also: http://www.w3.org/Style/Examples/007/alternatives.html
  1203 
  1204 
  1205 Version 1.8.0:
  1206   Note: This is a reduced CHANGES, ommitting details from rc/beta test and
  1207         also less interesting minor changes and fixes. It shows changes
  1208         relative to 1.7.2 release.
  1209         If you want to see full detail, read it there:
  1210         http://hg.moinmo.in/moin/1.8/file/6130eab15936/docs/CHANGES
  1211 
  1212   New Features: ==============================================================
  1213     * HINT: New "modernized" theme - if you use "modern" [default], try:
  1214       theme_default = 'modernized'
  1215       If you find problems with "modernized", please report them because we
  1216       want to use it as default theme in future.
  1217     * GUI Editor:
  1218       * upgraded to use FCKEditor version 2.6.3
  1219       * user can insert and modify various types of MoinMoin links
  1220     * New plugin_dirs setting to allow multiple plugin pathes (additional to
  1221       the automatically configured plugin_dir [default: data_dir/plugin]).
  1222     * @EMAIL@ expands to a MailTo macro call with the obfuscated email address
  1223       of the current user.
  1224     * New macros "WikiConfig" and "WikiConfigHelp".
  1225     * Per-parser quickhelp, 'quickhelp' class variable of parser class.
  1226     * Secure session cookies for https (see cfg.cookie_secure).
  1227     * Added left/center/right/justify css classes to builtin themes.
  1228       Use them like:
  1229       {{{#!wiki justify
  1230       this content is justified....
  1231       }}}
  1232 
  1233   Removed Features: ==========================================================
  1234     * HINT: url_prefix setting (use url_prefix_static or just use the default)
  1235     * traceback_log_dir setting (we just use logging.exception)
  1236     * editor_quickhelp setting (replaced by per-parser quickhelp)
  1237     * Restoring backups with the backup action and related settings (while
  1238       creating backups is no big issue and should work OK, restoring them
  1239       had fundamental issues related to overwriting or not-overwriting of
  1240       existing files - thus we removed the "restore" part of the action and
  1241       recommend that you just contact the wiki server admin in case of trouble,
  1242       give him your wiki backup file and let him carefully restore it.)
  1243     * Removed unmaintained DesktopEdition (moin 1.5.x style) and phpwiki
  1244       migration scripts from contrib/ directory.
  1245 
  1246   Bug Fixes: =================================================================
  1247     * GUI Editor - fixed lots of bugs.
  1248     * Fixing https detection for servers using HTTPS=1 and also for WSGI
  1249       servers not using HTTPS/SSL_ environment, but just wsgi.url_scheme.
  1250     * Search results: link to 'view' rendering of found attachments.
  1251     * Standalone server: fix serverClass and interface argument processing,
  1252       announce used serverClass in log output.
  1253     * mointwisted: fixed Twisted start script.
  1254     * Logging:
  1255       * Use logging framework for messages emitted by warnings module (e.g.
  1256         DeprecationWarning), silence some specific warnings.
  1257       * Removed superfluous linefeeds in timing log output.
  1258     * Bug fix for language not installed (MoinMoinBugs/WikiLanguageNotDefined).
  1259     * Fixed editbar hidden comment link cosmetics for sidebar themes (hide the
  1260       complete list element).
  1261     * MoinMoinBugs/DoubleScriptNameInSitemap (fixing urls given by sitemap
  1262       action, if the wiki does not run in the root url of the site)
  1263     * Fixed backup action configuration (broke on win32).
  1264     * Fixed MoinMoinBugs/PackagesAddRevision.
  1265     * SyncPages: add workaround for callers calling log_status with encoded
  1266       bytestrings.
  1267     * Fixed dbw_hide_buttons javascript.
  1268     * HINT: Jabber bot can now be configured to use an authentication realm
  1269       which is different from the server's hostname; the xmpp_node
  1270       configuration parameter can now contain a full JID and the xmpp_resource
  1271       parameter is no longer supported.
  1272 
  1273   Other Changes: =============================================================
  1274     * HINT: new configuration for misc. secrets, please use either:
  1275           secrets = "MySecretLooongString!" # one secret for everything
  1276       or:
  1277           secrets = {
  1278               'xmlrpc/ProcessMail': 'yourmailsecret', # for mailimport
  1279               'xmlrpc/RemoteScript': 'yourremotescriptsecret',
  1280               'action/cache': 'yourcachesecret', # unguessable cache keys
  1281               'wikiutil/tickets': 'yourticketsecret', # edit tickets
  1282               'jabberbot': 'yourjabberbotsecret', # jabberbot communication
  1283           }
  1284       Secret strings must be at least 10 chars long.
  1285       Note: mail_import_secret setting is gone, use
  1286             secrets["xmlrpc/ProcessMail"] instead of it.
  1287       Note: jabberbot secret setting is gone, use
  1288             secrets["jabberbot"] instead of it.
  1289     * HINT: user_autocreate setting was removed from wiki configuration and
  1290       replaced by a autocreate=<boolean> parameter of the auth objects that
  1291       support user profile auto creation.
  1292     * moin import irclog: use irssi parser to format logs, mapped .irc
  1293       extension to text/plain mimetype.
  1294     * HINT: backup action: backup_exclude (default: "do not exclude anything")
  1295       is now a function f(filename) that tells whether a file should be
  1296       excluded from backup.
  1297       You can get the old regex exclusion functionality by using:
  1298       backup_exclude = re.compile(your_regex).search
  1299       Be careful with your regex, you might need to use re.escape() to escape
  1300       characters that have a special meaning in regexes (e.g.: \.[] etc.).
  1301       If in doubt, maybe just leave backup_exclude at the default and don't
  1302       exclude anything.
  1303     * Speed up javascript comments processing on IE by getElementsByClassName()
  1304     * Added sk (slovak) i18n, updated i18n.
  1305 
  1306 
  1307 1.7.3:
  1308   New features:
  1309     * Secure session cookies for https, see cfg.cookie_secure.
  1310     * Add left/center/right/justify classes to builtin themes.
  1311 
  1312   Fixes:
  1313     * Python 2.3 compatibility fixes.
  1314     * Fixed https detection for servers using HTTPS=1 and also for wsgi servers
  1315       not using HTTPS/SSL_ environment, but just wsgi.url_scheme.
  1316     * GUI editor:
  1317       * Fix crash when editing a page with non-ASCII pagename and inserting a link
  1318       * Fix "headers already sent exception" with edit LOCKs.
  1319     * i18n.__init__: Bug fix for wiki language not installed.
  1320     * Fixed URLs given by sitemap action, if the wiki does not run at / URL.
  1321     * Search results: link to 'view' rendering of found attachments
  1322     * Logging:    
  1323       * Removed superfluous linefeed in timing log output.
  1324       * Use logging framework for messages emitted by warnings module (e.g.
  1325         DeprecationWarning), silence some specific warnings.
  1326     * Fix dbw_hide_buttons javascript.
  1327     * Standalone server:
  1328       * fix serverClass argument processing
  1329       * fix --interface="" argument processing
  1330     * mointwisted:
  1331       * added missing pidFile parameter
  1332       * better use Config.name for pidFile to avoid conflicts and keep same
  1333         behaviour as in the past
  1334     * Jabber bot can now be configured to use an authentication realm which
  1335       is different from the server's hostname
  1336 
  1337 
  1338 Version 1.7.2:
  1339   Fixes:
  1340     * Fix leakage of edit-log file handles (leaked 1 file handle / request!).
  1341     * Fix for MoinMoinBugs/SystemAdminMailAccountData (using POST and forms)
  1342     * Wiki parser: avoid IndexError for empty #! line
  1343     * MonthCalendar macro: fix parameter parsing / url generation
  1344     * Xapian indexing filters (MoinMoin/filter/ or data/plugin/filter/):
  1345       Some indexing filter scripts (e.g. for MS Word documents or PDF files)
  1346       failed on windows because of the single-quote quoting we used (that
  1347       works on Linux and other Posix systems). The fix introduces platform-
  1348       dependant automatic quoting, using double-quotes on win32 and single-
  1349       quotes on posix.
  1350       HINT: if you use own filter plugins based on execfilter, you have to
  1351       update them as the filename quoting (was '%s') is now done automatically
  1352       and must not be part of the command string any more (now just use %s).
  1353       See MoinMoin/filter/ for some up-to-date code (esp. the PDF filter).
  1354     * Prevent CategoryTemplate being listed as a category (it is a Template,
  1355       but matched also the category regex) - added to sample wikiconfig.
  1356     * LDAP auth: fix processing of TLS options
  1357     * UpdateGroup xmlrpc server side: fix wrong arg count error
  1358     * UpdateGroup client: use multicall / auth_token, refactor code so that
  1359       updateGroup function is reusable.
  1360     * Improve Python 2.3 compatibility, add notes where 2.4 is required.
  1361 
  1362 
  1363 Version 1.7.1:
  1364   New features:
  1365     * New 'cache' action (see developer notes).
  1366 
  1367   Fixes:
  1368     * Security fix: XSS fix for advanced search form
  1369     * Avoid creation of new pagedirs with empty edit-log files by just
  1370       accessing a non-existant page. If you used 1.7 before, you likely have
  1371       quite some trash pagedirs now and you can clean them up by using:
  1372       moin --config-dir=... --wiki-url=... maint cleanpage
  1373       This will output some shell script (please review it before running!)
  1374       that can be used to move trash pages into some trash/ directory and also
  1375       moves deleted pages into some deleted/ directory. Maybe keep a copy of
  1376       those directories for a while just for the case.
  1377     * Server specific fixes:
  1378       * standalone (wikiserver.py): fix --pidfile and --group option, fix
  1379         operation without a wikiserverconfig.py (use builtin defaults).
  1380       * mod_python: work around mod_python 3.3.1 problems with file uploads.
  1381         Note: if you are still using mod_python, we strongly recommend you
  1382 	      try out mod_wsgi (in daemon mode) - it has less bugs, better
  1383 	      security, better separation, WSGI is a Python standard, and moin
  1384 	      developers also use WSGI. See HelpOnInstalling/ApacheWithModWSGI.
  1385     * revert action: fixed for deleted pages.
  1386     * Search:
  1387       * Xapian indexing: Removed crappy "hostname" tokenization.
  1388         Fixes MoinMoinBugs/1.7 XapianNotWorkingWithLeadingNumbersInTitle.
  1389         Also tokenize CamelCase parts of non-wikiwords.
  1390       * Make query parser reject more invalid input.
  1391       * If query parsing raises a BracketError, at least tell what the problem
  1392         is (and not just raise empty  ValueError).
  1393       * Category search: ignore traling whitespace after ----
  1394     * Argument parser:
  1395       * Fixed sort() usage in UnitArgument to be Python 2.3 compatible.
  1396       * Fixed MoinMoinBugs/TypeErrorInWikiutils.
  1397     * Macros:
  1398       * TableOfContents: skip outer-most <ol> levels when page isn't using
  1399         the biggest headings
  1400       * MonthCalendar: fix MoinMoinBugs/MonthCalendarBreaksOnApostrophe
  1401     * xslt parser: fix MoinMoinBugs/DoNotConvertUnicodeToUTF8ForXsltParser
  1402     * OpenID RP: make it compatible to python-openid 2.2.x
  1403     * PackagePages.collectpackage: removed encoding from file name of zipfile
  1404     * Surge protection: exclude localnet no matter whether user is known or not.
  1405     * Notifications: fix MoinMoinBugs/DuplicateNewUserNotification
  1406     * Script moin account create/disable/resetpw: checks for already existing
  1407       user now.
  1408 
  1409   Other changes:
  1410     * Prevent CategoryTemplate being listed as a category (it is a Template)
  1411       by changing the default page_category_regex.
  1412 
  1413   Developer notes:
  1414     * New MoinMoin.action.cache - can be used to cache expensively rendered
  1415       output, e.g. generated images). Once put into the cache, moin can emit
  1416       a http response for that content very fast and very efficient (including
  1417       "304 not changed" handling.
  1418     * New file-like API in MoinMoin.caching (good for dealing with medium
  1419       to large files without consuming lots of memory).
  1420     * wikiutil.importPlugin supports getting the whole plugin module object
  1421       by giving function=None.
  1422 
  1423 
  1424 Version 1.7.0:
  1425   Note: This is a reduced CHANGES, ommitting details from rc/beta test and
  1426         also less interesting minor changes and fixes. It shows changes
  1427         relative to 1.6.3 release.
  1428         If you want to see full detail, read it there:
  1429         http://hg.moinmo.in/moin/1.7/file/76265568e8d3/docs/CHANGES
  1430 
  1431   New Features: ==============================================================
  1432     * HINT: we added generic UPDATE instructions as docs/UPDATE.html.
  1433 
  1434     * HINT: Standalone server usage changed:
  1435       * Standalone server can now be started via the "moin" script command,
  1436         optionally backgrounding itself.
  1437         See: moin server standalone --help
  1438       * In the toplevel dir, we have renamed moin.py to wikiserver.py (it was
  1439         often confused with the moin scripting command).
  1440         Now you have:
  1441         * wikiserver.py - to start the standalone server
  1442         * wikiserverconfig.py - to configure the standalone server
  1443         * wikiserverlogging.conf - to configure logging for it (default config
  1444           is ok for all day use, but can easily be modified for debugging)
  1445         * wikiconfig.py - to configure the wiki engine
  1446       * Removed old moin daemonizing script (replaced by moin server standalone
  1447         --start/stop)
  1448       * We now provide the "moin" script command also for people not using
  1449         setup.py, see wiki/server/moin.
  1450 
  1451     * Logging
  1452       * New powerful and flexible logging, please see wiki/config/logging/ -
  1453         HINT: you have to upgrade your server adaptor script (e.g. moin.cgi)
  1454         and load a logging configuration that fits your needs from there, or
  1455         alternatively you can also set MOINLOGGINGCONF environment variable
  1456         to point at your logging config file.
  1457         If you use some of our sample logging configs, make sure you have a
  1458         look INTO them to fix e.g. the path of the logfile it will use.
  1459       * Moin now logs the path from where it loaded its configuration(s).
  1460 
  1461     * Authentication / Sessions:
  1462       * HINT: New authentication plugin system, see HelpOnAuthentication. If
  1463         you do not use the builtin default for 'auth' list, you likely have to
  1464         change your configuration. See wiki/config/snippets/ for some samples.
  1465       * HINT: New session handling system (no moin_session any more, now done
  1466         internally and automatically), see HelpOnSessions for details.
  1467       * Added OpenID client and server support.
  1468         See: HelpOnAuthentication and HelpOnOpenIDProvider.
  1469       * cfg.trusted_auth_methods is a list of auth methods that put an
  1470         authenticated user into the "Trusted" ACL group.
  1471 
  1472     * User profiles / password recovery / notification:
  1473       * New newacount action for creating new user accounts/profiles. If you
  1474         don't want users creating new accounts on their own, you can add this
  1475         action to actions_excluded list.
  1476       * New recoverpass action for password recovery:
  1477         If you forgot your password, recoverpass sends you an email with a
  1478         password recovery token (NOT the encrypted password) that is valid
  1479         for 12 hours.
  1480       * New moin account resetpw script for resetting a user's password by
  1481         the wiki admin.
  1482       * New preferences plugin system, see MoinMoin/userprefs/__init__.py.
  1483       * New notification system with an optional jabber notification bot, see
  1484         HelpOnNotification. HINT: wiki users have to check their notification
  1485         settings, esp. if they want to receive trivial update notifications.
  1486 
  1487     * The diff action now has navigation buttons for prev/next change and also
  1488       a revert button to revert to the revision shown below the diff display.
  1489     * ThemeBase: support Universal Edit Button, see there for details:
  1490       http://universaleditbutton.org/
  1491     * ?action=info&max_count=42 - show the last 42 history entries of the page.
  1492       max_count has a default of default_count and a upper limit of
  1493       limit_max_count - you can configure both in your wiki config:
  1494       cfg.history_count = (100, 200) # (default_count, limit_max_count) default
  1495     * The CSV parser can sniff the delimiter from the first CSV line so other
  1496       delimeters than ";" can be used.
  1497     * Admonition support. Added styling for tip, note, important, warning 
  1498       and caution in the modern theme. For more info see HelpOnAdmonitions.
  1499     * DocBook-formatter:
  1500       * supports HTML entities like &rarr; and &#9731;
  1501       * supports the FootNote macro
  1502       * supports bulletless lists
  1503       * support for admonitions
  1504       * will export the wiki page's edit history as the generated article's
  1505         revision history. Doesn't add history of included pages.
  1506       * supports for the MoinMoin comment element, though only inline comments
  1507         are likely to be valid since the DocBook remark is an inline element.
  1508     * New Hits macro: shows the total hits for the page it is used on.
  1509 
  1510   Removed Features: ==========================================================
  1511     * HINT: Removed attachments direct serving (cfg.attachments - this was
  1512             deprecated since long!). Use AttachFile action to serve attachments.
  1513     * Duplicated file attachment upload code was removed from Load action (just
  1514       use AttachFile action to deal with attachments).
  1515     * Removed 'test' action. If you like to run unit tests, use py.test.
  1516     * Removed Login macro.
  1517 
  1518   Bug Fixes: =================================================================
  1519     * Better handling of ImportErrors (farmconfig, macros, wikiserverconfig).
  1520     * Fix failure of detection of on-disk cache updates.
  1521     * Fix traceback in filesys.py on Mac OS X when "import Carbon" fails.
  1522 
  1523     * AttachFile action / file up- and download / zip support:
  1524       * WSGI: use wsgi.file_wrapper (or a builtin simple wrapper). Fixes memory
  1525         consumption for sending of large file attachments.
  1526       * FastCGI: flush often. Fixes memory consumption for sending of large
  1527         file attachments.
  1528       * Use the open temporary file for receiving file attachment uploads
  1529         (fixes big memory consumption for large file uploads).
  1530       * Catch runtime errors raised by zipfile stdlib modules when trying to
  1531         process a defective zip.
  1532       * When unzipping member files, decode their filenames from utf-8 and
  1533         replace invalid chars.
  1534       * Make error msg less confusing when trying to overwrite a file attachment
  1535         without having 'delete' rights.
  1536 
  1537     * HINT: page_*_regex processing had to be changed to fix category search.
  1538       If you don't use the builtin (english) defaults, you will have to change
  1539       your configuration:
  1540         old (default): page_category_regex = u'^Category[A-Z]'
  1541         new (default): page_category_regex = ur'(?P<all>Category(?P<key>\S+))'
  1542       As you see, the old regex did work for detecting whether a pagename is
  1543       a category, but it could not be used to search for a category tag in the
  1544       page text. The new regex can be used for both and identifies the complete
  1545       category tag (match in group 'all', e.g. "CategoryFoo") as well as the
  1546       category key (match in group 'key', e.g. "Foo") by using named regex
  1547       groups. \S+ means the category key can be anything non-blank.
  1548       If you like to simultaneously support multiple languages, use something
  1549       like this: ur'(?P<all>(Kategorie|Category)(?P<key>\S+))'
  1550       HINT: after changing your configuration, please rebuild the cache:
  1551         * stop moin
  1552         * moin ... maint cleancache
  1553         * start moin
  1554       If you don't do this, your groups / dicts will stop working (and also
  1555       your ACLs that use those groups). You better do a test whether it works.
  1556 
  1557     * Xapian search / indexing / stemming:
  1558       * Use text/<format> as mimetype for pages.
  1559       * Index also major and minor for mimetypes, so it will find 'text' or
  1560         'plain' as well as 'text/plain'
  1561       * Fix searching for negative terms.
  1562       * Improve result list ordering.
  1563       * Index filters: redirect stderr to logging system.
  1564       * Remove crappy num regex from WikiAnalyzer, improve tokenization.
  1565       * Fix AttributeError that happened when trying to access an attribute only
  1566         used with xapian search (but regex search is not done by xapian)
  1567       * Fix IndexErrors happening when pages are renamed/nuked after the index
  1568         was built.
  1569       * Fixed indexing of WikiWords (index "WikiWords", "Wiki" and "Words").
  1570       * Fix crash if default language is un-stemmable.
  1571       * xapian_stemming: removed some strange code (fixes search
  1572         title:lowercaseword with xapian_stemming enabled)
  1573       * Fixed category indexing (index CategoryFoo correctly as CategoryFoo, not
  1574         Foo - for all languages, see page_*_regex change above).
  1575     * Builtin search: support mimetype: search for pages for the builtin search
  1576       engine (using text/<format>).
  1577 
  1578     * Parser fixes:
  1579       * Wiki: fix subscript parsing (was broken for cases like 'a,,1,2,,').
  1580       * Docbook: fixed detection of WikiWords.
  1581       * All: Add ssh protocol to url_schemas for ssh:... URLs.
  1582 
  1583     * XMLRPC:
  1584       * Fix xmlrpc request.read() call to use content-length, if available,
  1585         fixes hangs with wsgiref server.
  1586       * Wiki xmlrpc getPageInfoVersion() fixed:
  1587         * works correctly now for old page versions (was unsupported)
  1588         * works correctly now for current page version (reported wrong
  1589           data when a page had attachment uploads after the last page
  1590           edit)
  1591         * returns a Fault if it did not find a edit-log entry
  1592 
  1593   Other Changes: =============================================================
  1594     * Using better ACLs and comments on system/help pages now, just taking
  1595       away 'write' permission, but using default ACLs for everything else.
  1596     * HINT: If you want to use xapian based indexed search, you need to have
  1597       Xapian >= 1.0.0 (and you can remove PyStemmer in case you have installed
  1598       it just for moin - we now use the stemmer built into Xapian as it
  1599       supports utf-8 since 1.0.0).
  1600     * Changed default value of cfg.search_results_per_page to 25.
  1601     * Surge Protection: If a user is authenticated by a trusted authentication
  1602       (see also cfg.auth_methods_trusted) then he/she won't trigger surge
  1603       protection, but moin will just log a INFO level log msg with the user's
  1604       name so you can find the culprit in case he/she is overusing ressources.
  1605     * HINT: Added MyPages and CopyPage to actions_excluded because MyPages
  1606       doesn't work without special SecurityPolicy anyway and CopyPage has
  1607       questionable behaviour.
  1608     * Load action now just creates a new revision of the target page, the
  1609       target pagename defaults to the current page name and can be edited.
  1610       If the target pagename is empty, moin tries to derive the target pagename
  1611       from the uploaded file's name.
  1612       Load tries to decode the file contents first using utf-8 coding and, if
  1613       that fails, it forces decoding using iso-8859-1 coding (and replacing
  1614       invalid characters).
  1615     * HINT: cfg.show_login is gone, see code in theme/__init__.py, this may
  1616       affect many themes!
  1617     * HINT: a new userprefs/ plugin directory will be created by the usual
  1618       "moin migration data" command.
  1619     * DocBook-formatter:
  1620       * generates a valid DOCTYPE
  1621       * table support has been improved
  1622       * handling of definitions and glossaries is more robust
  1623       * supports program language and line numbering in code areas
  1624     * HINT: ldap_login behaves a bit different now:
  1625       In previous moin versions, ldap_login tended to either successfully
  1626       authenticate a user or to completely cancel the whole login process in
  1627       any other case (including ldap server down or exceptions happening).
  1628       This made subsequent auth list entries rather pointless.
  1629       Now it behaves like this:
  1630         * user not found in LDAP -> give subsequent auth list entries a
  1631           chance to authenticate the user (same happens if it finds multiple
  1632           LDAP entries when searching - it logs an additional warning then).
  1633         * user found, but wrong password -> cancel login
  1634         * ldap server not reachable or other exceptions -> give subsequent
  1635           auth list entries a chance
  1636       So please make sure that you really trust every auth list entry you have
  1637       configured when upgrading or it might maybe change behaviour in a
  1638       unexpected or unwanted way.
  1639     * ldap_login now supports failover: if it can't contact your LDAP server
  1640       (e.g. because it is down or unreachable), it will just continue and
  1641       try to authenticate with other authenticators (if there are any in
  1642       cfg.auth list). So if you have some mirroring LDAP backup server, just
  1643       put another authenticator querying it there:
  1644           ldap_auth1 = LDAPAuth(server_uri='ldap://mainserver', ...)
  1645           ldap_auth2 = LDAPAuth(server_uri='ldap://backupserver', ...)
  1646           auth = [ldap_auth1, ldap_auth2, ]
  1647 
  1648   Developer notes: ===========================================================
  1649     * Page.last_edit() is DEPRECATED, please use Page.edit_info().
  1650     * Page._last_edited() is GONE (was broken anyway), please use
  1651       Page.editlog_entry().
  1652     * New request.send_file() call, making it possible to use server-specific
  1653       optimizations.
  1654     * getText's (aka _()) 'formatted' keyword param (default: True in 1.6 and
  1655       early 1.7) was renamed/changed: it is now called 'wiki' and defaults to
  1656       False. Example calls:
  1657       _('This will NOT get parsed/formatted by MoinMoin!')
  1658       _('This will be parsed/formatted by MoinMoin!', wiki=True)
  1659       _('This will be used as a left side of percent operator. %s',
  1660         wiki=True, percent=True)
  1661     * Page.url 'relative' keyword param (default: True in 1.6 and early 1.7)
  1662       was changed to default False).
  1663     * The themedict no longer contains 'page_user_prefs' and 'user_prefs',
  1664       this may affect custom themes.
  1665     * The rst-parser's admonition class names are no longer prepended with
  1666       "admonition_". Instead the class names are now for example "note"
  1667       and not "admonition_note".
  1668 
  1669 
  1670 Version 1.6.3:
  1671   Fixes:
  1672     * Security fix: a check in the user form processing was not working as
  1673       expected, leading to a major ACL and superuser priviledge escalation
  1674       problem. If you use ACL entries other than "Known:" or "All:" and/or
  1675       a non-empty superuser list, you need to urgently install this upgrade.
  1676     * Security fix: if acl_hierarchic=True was used (False is the default),
  1677       ACL processing was wrong for some cases, see
  1678       MoinMoinBugs/AclHierarchicPageAclSupercededByAclRightsAfter
  1679     * For {{transclusion_targets}} we checked the protocol to be http(s),
  1680       this check was removed (because file: and ftp: should work also) and
  1681       it's not moin's problem if the user uses silly protocols that can't
  1682       work for that purpose.
  1683     * Fixed TableOfContents macro for included pages.
  1684     * server_fastcgi: added Config.port = None. If you want to use some port
  1685       (not a fd), you can set it now in your Config, e.g. port = 8888.
  1686     * category: search matches categories even if there are comment lines
  1687       between the horizontal rule and the real categories, e.g.:
  1688       ... some page text ...
  1689       ----
  1690       ## optionally some comments, e.g. about possible categories:
  1691       ## CategoryJustACommentNotFound
  1692       CategoryTheRealAndOnly
  1693 
  1694       Note: there might be multiple comment lines, but all real categories
  1695             must be on a single line either directly below the ---- or
  1696             directly below some comment lines.
  1697   
  1698   Other changes:
  1699     * Added 'notes' to config.url_schemas, so you can use notes://notessrv/...
  1700       to invoke your Lotus Notes client.
  1701     * After creating a new user profile via UserPreferences, you are logged
  1702       in with that user (no need to immediately enter the same name/password
  1703       again for logging in).
  1704 
  1705 
  1706 Version 1.6.2:
  1707   Fixes:
  1708     * Security fix: check the ACL of the included page for the rst parser's
  1709       include directive.
  1710     * Potential security/DOS fix: we removed cracklib / python-crack support
  1711       in password_checker as it is not thread-safe and caused segmentation
  1712       faults (leading to server error 500 because the moin process died).
  1713     * Fix moin_session code for auth methods other than moin_login (e.g. http).
  1714       If you have worked around this using moin_anon_session, you can remove
  1715       this workaround now (except if you want anon sessions for other reasons).
  1716     * Fix moin_session code to delete invalid session cookies and also create
  1717       a new session cookie if it got a valid user_obj at the same time.
  1718     * Fix xmlrpc applyAuthToken: give good error msg for empty token.
  1719     * Fixed category search, use category:CategoryFoo as search term.
  1720     * xapian_stemming = False (changed default) to workaround some problems
  1721       in the code enabled by it. Fixes the problems when searching for
  1722       lowercase or numeric titles or word fragments with the builtin search.
  1723     * Fix trail for anon users without a session, do not show a single page.
  1724     * Fix MoinMoinBugs/WikiSyncComplainsAboutTooOldMoin.
  1725     * Wiki parser: fixed strange insertion of unwanted paragraphs.
  1726     * Wiki parser: fix interwiki linking:
  1727       Free interwiki links did not change since 1.5 (they still require to match
  1728       [A-Z][A-Za-z]+ for the wikiname part, i.e. a ASCII word beginning with an
  1729       uppercase letter).
  1730       Bracketed interwiki links now behave similar to how they worked in 1.5:
  1731       Moin just splits off the part left of the colon - no matter how it looks
  1732       like. It then tries to find that in the interwiki map. If it is found,
  1733       a interwiki link gets rendered. If it is not found, moin will render a
  1734       link to a local wiki page (that has a colon in the pagename). It will
  1735       also render a local wiki page link if there is no colon at all, of course.
  1736       Examples:
  1737       [[lowercasewikiname:somepage]] does an interwiki link (if in the map).
  1738       [[ABC:n]] does a local link to page ABC:n (if ABC is NOT in the map).
  1739     * Wiki parser: fix interwiki linking for the case that there are query args
  1740       in the interwiki map entry and you give additional query args via link
  1741       markup (uses correct query arg separator now), e.g.:
  1742       [[Google:searchterm|search this|&foo=bar]]
  1743     * Creole parser: fixed bug that prevents images inside links.
  1744     * Python parser: catch indentation error.
  1745     * PageEditor: fixed copyPage for write restricted pages.
  1746     * GUI editor: fixed javascript error with too complex word_rule regex,
  1747       see MoinMoinBugs/GuiEditorSyntaxError.
  1748     * Fixed FCKeditor dialog boxes for FireFox3.
  1749     * NewPage macro/newpage action: fixed for non-ascii template pagenames.
  1750     * FootNote macro: Fix MoinMoinBugs/FootNoteNumbering.
  1751     * EmbedObject macro: bug fix for image mimetype
  1752     * WSGI:
  1753       * fix TWikiDraw saving a drawing by also evaluating the query args.
  1754       * work around unpythonic WSGI 1.0 read() API, fixing broken xmlrpc
  1755         putPage with mod_wsgi
  1756     * Fix highlighting (see MoinMoinBugs/SearchForPagesWithComments).
  1757     * Fix logfile code for EACCESS errors.
  1758     * Removed the "logging initialized" log messages because it was issued once
  1759       per request for CGI.
  1760 
  1761   Other changes:
  1762     * Show "Comments" toggling link in edit bar only if the page really
  1763       contains comments.
  1764     * Made default configuration of surge protection a bit more forgiving,
  1765       especially for edit action which is currently also used for previews.
  1766     * Updated i18n, system/help pages, added Macedonian system text translation.
  1767     * Improved moin xmlrpc write command's builtin docs and auto-append
  1768       ?action=xmlrpc2 to the target wiki url given.
  1769 
  1770 
  1771 Version 1.6.1:
  1772   New features:
  1773     * Improved params for [[target|label|params]]:
  1774       Added accesskey link tag attribute, e.g.: [[target|label|accesskey=1]].
  1775       Additionally to specifying link tag attributes (like class=foo), you can
  1776       now also specify &key=value for getting that into the query string of
  1777       the link URL.
  1778       The "&" character is important, don't forget it or it won't get into the
  1779       query string!
  1780       E.g. for an attachment, you can use:
  1781       [[attachment:foo.pdf|Direct download of foo.pdf|&do=get]]
  1782       E.g. for linking to some specific diff, you can use:
  1783       [[SomePage|see that diff|&action=diff,&rev1=23,&rev2=42]]
  1784       See also the updated HelpOnLinking page!
  1785     * AdvancedSearch: make multipe categories/languages/mimetype selections possible
  1786     * Added a configuration directive to only do one bind to the LDAP server.
  1787       This is useful if you bind as the user the first time.
  1788       ldap_bindonce = False # default
  1789 
  1790   Fixes:
  1791     * Fix XSS issue in login action.
  1792     * Fix wrong pagename when creating new pages on Mac OS X - that was a big
  1793       showstopper for moin 1.6.0 on Mac OS X.
  1794     * Fixed 1.6 migration script:
  1795       Make sorting python 2.3 compatible.
  1796       Just skip corrupted event log lines.
  1797       Fix link conversion by using data.pre160 as data_dir.
  1798       Fix bad /InterWiki pagenames when encountering interwiki links with bad
  1799       wiki names.
  1800       Improve ImageLink conversion by using its argument parser code.
  1801       Added STONEAGE_IMAGELINK (default: False) switch to wiki markup converter,
  1802       toggle it if you had a very old ImageLink macro in production and the
  1803       converter output has target and image interchanged.
  1804       Fixed UnicodeDecodeError for wrongly encoded attachment filenames.
  1805     * Wiki parser:
  1806       Fix parsing of link/transclusion description and params.
  1807       Fix relative attachment targets.
  1808       Fix supported URL schemes (some got lost since 1.5.8).
  1809       Showing an upload link for non-existing non-text/non-image transclusions
  1810       now (like e.g. *.pdf).
  1811     * RST parser: fix attachment: and drawing: processing
  1812     * Fix quickhelp when editing RST markup pages.
  1813     * Fix Despam action: editor grouping was broken, increase time interval
  1814       to 30 days.
  1815     * Fix AdvancedSearch domain:system search crashing.
  1816     * Only switch off xapian search if we didn't use it because of missing index.
  1817     * Fix saving twikidraw drawings by removing 'java' from spider regex.
  1818     * Fix classic theme's unsubscribe icon's action link.
  1819     * Fix AttachFile action: don't show unzip for packages, only show install
  1820       for superuser.
  1821     * Fix "su user" troubles on UserPreferences.
  1822     * Removed unit tests from ?action=test (due to changes in our test
  1823       environment, using py.test now, this was broken).
  1824     * Duplicated the top directories' moin.py to wiki/server/moin.py so it gets
  1825       installed by setup.py.
  1826     * Fix MoinMoinBugs/1.6.0LanguageIgnoreBrowserConfigurationError
  1827     * Fix MoinMoinBugs/MoveAttachmentNotWorkingWithModPython
  1828     * Fix MoinMoinBugs/1.6.0SupplementationAndAccessRights
  1829     * Fix MoinMoinBugs/RenamingUserAllowsOldUsernameToLogin
  1830     * Fix MoinMoinBugs/GuiEditorExcelPasteExpatErrorUnboundPrefix
  1831 
  1832   Other changes:
  1833     * I18n texts, system and help pages updated, please update your underlay
  1834       directory (see wiki/underlay/...).
  1835     * Improved "moin" script help, invoke it with "moin ... package command --help".
  1836     * Added some .ext -> mimetype mappings missing on some systems (like Mac OS X).
  1837     * Removed ImageLink macro, as this can be easily done with moin wiki link
  1838       syntax now - see HelpOnMacros/ImageLink (the 1.6 migration scripts convert
  1839       all ImageLink calls to moin wiki link syntax).
  1840     * Updated EmbedObject macro.
  1841 
  1842 
  1843 Version 1.6.0:
  1844  * This is a reduced CHANGES, ommitting details from rc/beta test and also
  1845    less interesting minor changes and fixes. If you want to see full detail,
  1846    read it there: http://hg.moinmo.in/moin/1.6/file/640f21787334/docs/CHANGES
  1847 
  1848    It took MoinMoin development a lot of work and time to implement all the new
  1849    and fixed stuff, so please, before asking for support:
  1850    * take the time to read all the stuff below
  1851    * read the new help pages (copy them from wiki/underlay/ directory)
  1852 
  1853  * HINT: If you are upgrading from a older moin version and want to keep your
  1854    existing data directory, it is essential that you read and follow
  1855    README.migration because the wiki markup and user profiles changed significantly.
  1856    See also more HINTs below...
  1857 
  1858   New features: ==============================================================
  1859 
  1860   User interface: ------------------------------------------------------------
  1861     * Removed "underscore in URL" == "blank in pagename magic" - it made more
  1862       trouble than it was worth. If you still want to have a _ in URL, just
  1863       put a _ into pagename.
  1864     * Discussion pages, see FeatureRequests/DiscussionAndOrCommentPages.
  1865     * cfg.password_checker (default: use some simple builtin checks for too
  1866       easy passwords and, if available, python-crack).
  1867       Use password_checker = None to disable password checking.
  1868     * We now have a drafts functionality (no */MoinEditorBackup pages any
  1869       more):
  1870       * If you edit a page and cancel the edit, use preview or save, a draft
  1871         copy gets saved for you to a internal cache area (data/cache/drafts/).
  1872       * If it is a save what you did and it succeeds, the draft copy gets
  1873         killed right afterwards.
  1874       * If you accidentally used cancel or your browser or machine crashes
  1875         after you used preview, then just visit that page again and edit it.
  1876         the editor will notify you that there is a draft of this page and you
  1877         will see a "Load draft" button. Click on it to load the draft into the
  1878         editor and save the page.
  1879       * The draft storage is per user and per page, but only one draft per page.
  1880     * cfg.quicklinks_default and cfg.subscribed_pages_default can be used to
  1881       preload new user profiles with configurable values.
  1882     * attachment links for non-existing attachments look different now:
  1883       the note about the non-existing attachment moved to the link title,
  1884       the link is shown with nonexistent class (grey).
  1885     * attachment embeddings for non-existing attachments show a grey clip
  1886     * The list of InterWiki sites is editable in the wiki (page InterWikiMap),
  1887       it is getting reloaded every minute.
  1888     * We support some new languages and also have new underlay pages, thanks
  1889       to all translators and people helping with the docs!
  1890 
  1891   Actions: -------------------------------------------------------------------
  1892     * Synchronisation of wikis using the SyncPages action.
  1893     * Xapian (see http://xapian.org/) based indexed search code.
  1894       To use this:
  1895       * Install xapian-core and xapian-bindings on your machine.
  1896         We used 0.9.4, but newer code should hopefully work, too.
  1897       * cfg.xapian_search = True
  1898       * Execute this to build the index:
  1899         $ moin ... index build   # indexes pages and attachments
  1900         $ moin ... index build --files=files.lst  # same plus a list of files
  1901         You should run those commands as the same user you use for your wiki,
  1902         usually this is the webserver userid, e.g.:
  1903         $ sudo -u www-data moin --config=... --wiki-url=wiki.example.org/ \
  1904                index build --files=files.lst
  1905     * New searches:
  1906         - LanguageSearch: language:de
  1907         - CategorySearch: category:Homepage
  1908         - MimetypeSearch: mimetype:image/png (for attachments/files)
  1909         - DomainSearch: domain:underlay or domain:standard
  1910         - History Search: available in advanced ui
  1911       Note: Some currently only available when Xapian is used.
  1912     * New config options and their defaults:
  1913         xapian_search        False  enables xapian-powered search
  1914         xapian_index_dir     None   directory for xapian indices
  1915                                     (can be shared for wiki farms)
  1916         xapian_stemming      True   toggles usage of stemmer, fallback
  1917                                     to False if no stemmer installed
  1918         search_results_per_page 10  determines how many hits should be
  1919                                     shown on a fullsearch action
  1920         xapian_index_history False  indexes all revisions of pages to
  1921                                     allow searching in their history
  1922     * Speeded up linkto search by avoiding read locks on the pagelinks file.
  1923 
  1924     * The action menu now calls the actions for the revision of the page you
  1925       are currently viewing. If you are viewing the current page revision, you
  1926       get the same behaviour as in moin 1.5, but if you are viewing an old
  1927       page revision, action "raw" will now show you the raw text of this OLD
  1928       revision (not of the current revision as moin 1.5 did it).
  1929       Note that not every action does evaluate the rev=XX parameter it gets.
  1930       Also please note that the edit, info, ... links in the editbar do NOT
  1931       use the rev parameter, but operate on the latest page revision (as
  1932       they did in moin 1.5).
  1933     * Info action lost the links for "raw", "print" and "revert" actions,
  1934       because you can now just view an old revision and select those actions
  1935       from the menu there.
  1936     
  1937     * ?action=sitemap emits a google sitemap (XML), listing all your wiki pages
  1938       and the wiki root URL.
  1939       Page                      Priority / Frequency / Last modification
  1940       --------------------------------------------------------------------
  1941       /                         1.0 / hourly / <now>
  1942       cfg.page_front_page       1.0 / hourly / page last edit
  1943       TitleIndex,RecentChanges  0.9 / hourly / <now>
  1944       content pages             0.5 / daily / page last edit
  1945       system/help pages         0.1 / yearly / page last edit
  1946 
  1947     * Action DeletePage and RenamePage can now be used for subpages of a page, too.
  1948     * Added Action CopyPage so you can use now an existing page or page hierarchy
  1949       as template for a new page, see FeatureRequests/CloneOrCopyPages.
  1950     * "Package Pages" action supports attachments now.
  1951     * Added SisterPages support:
  1952       * action=sisterpages will generate a list of url pagename lines for all
  1953         pages in your moin wiki.
  1954       * action=pollsistersites will poll all sister sites listed in
  1955         cfg.sistersites = [(wikiname, fetchURL), ...]
  1956         The fetch URL for the sistersites depends on the wiki engine, e.g.:
  1957         # moin based wiki:
  1958         ('MoinExample', 'http://moin.example.org/?action=sisterpages')
  1959         # oddmuse based wiki:
  1960         ('EmacsWiki', 'http://www.emacswiki.org/cgi-bin/test?action=sisterpages')
  1961         # JspWiki based wiki:
  1962         ('JspWiki', 'http://www.jspwiki.org/SisterSites.jsp')
  1963       * If the current page exists on some sister wiki, a link to it will be
  1964         added to the navibar.
  1965       You can use sister wikis for adding another dimension to your wiki UI: use
  1966       it for simple multi language support, or for comments, or anything else
  1967       "related" you need.
  1968       TODO: add sistersites_force with sister sites we link to even if they do not
  1969             have the page yet (will work only for moin as we don't know
  1970             pagename>url transformation of other wikis)
  1971     * showtags action that lists all tags related to a page.
  1972     * action=view does use mimetypes of EmbedObject too and text files will be shown
  1973       by using their colorized parsers
  1974 
  1975   Macros: --------------------------------------------------------------------
  1976     * RecentChanges:
  1977       * If a change has happened after your bookmark, the updated/new/renamed
  1978         icon links to the bookmark diff.
  1979       * If a page does not exist any more (because it was deleted or renamed),
  1980         we link the deleted icon to the diff showing what was deleted (for the
  1981         delete action). For the rename action, we just show the deleted icon.
  1982     * Conflict icon in RecentChanges is shown if a edit conflict is detected.
  1983     * Enhanced SystemAdmin's user browser, so a SuperUser can enable/disable
  1984       users from there.
  1985     * Included EmbedObject macro for embedding different major mimetypes:
  1986       application, audio, image, video, chemical, x-world. 
  1987       You are able to change the defaults of allowed mimetypes in the config
  1988       var mimetypes_embed. The config var mimetypes_xss_protect is used to deny
  1989       mimetypes. The order of both variables is Allow, Deny (mimetypes_embed,
  1990       mimetypes_xss_protect).
  1991     * Added support for @SELF to the NewPage macro.
  1992     * GetText2 macro that allows to translate messages that contain data.
  1993     * Make the FootNote macro filter duplicates and display a list of numbers
  1994       instead of a list of identical footnotes. Thanks to Johannes Berg for the
  1995       patch.
  1996 
  1997   Parsers: -------------------------------------------------------------------
  1998     * Moin Wiki parser: Changed markup for links, images and macros, see these
  1999       wiki pages: HelpOnLinking, HelpOnMacros
  2000     * New wiki markup for /* inline comments */ - they get rendered as a span
  2001       with class="comment", see next item:
  2002     * There is a new item in the edit bar: "Comments". If you click it, the
  2003       visibility of all class "comment" tags will be toggled. There is a user
  2004       preferences item "show_comments" to set if the default view shows them or not.
  2005     * The wiki parser can be used with css classes now:
  2006       {{{#!wiki comment
  2007       This will render output within a div with class "comment".
  2008       You can use any wiki markup as usual.
  2009       }}}
  2010       You can also combine multiple css classes like this:
  2011       {{{#!wiki red/dotted/comment
  2012       This will render a red background, dotted border comment section.
  2013       }}}
  2014       The same thing will work for any other css classes you have.
  2015       If the css classes contain the word "comment", they will trigger some
  2016       special feature, see next item:
  2017     * Wiki nested parser/pre sections work now, using this syntax:
  2018       a) just use more curly braces if you have 3 closing in your content:
  2019          {{{{
  2020          }}} <- does not terminate the section!
  2021          }}}}
  2022       b) use {{{ + some magic string:
  2023          {{{somemagicstring
  2024          }}} <- does not terminate the section!
  2025          somemagicstring}}}
  2026       c) {{{whatever#!python
  2027          # py code
  2028          whatever}}}
  2029       Pitfall: stuff like below does not work as it did in 1.5:
  2030          {{{aaa
  2031          bbb}}}
  2032       Solution:
  2033          {{{
  2034          aaa
  2035          bbb
  2036          }}}
  2037     * Added support for ircs: URLs (secure IRC).
  2038     * New text/creole parser that allows you to use WikiCreole 1.0 markup,
  2039       use #format creole.
  2040     * HTML parser (called "html") that allows you to use HTML on the page.
  2041       Thanks to the trac team for the nice code.
  2042     * Added the diff parser from ParserMarket, thanks to Emilio Lopes, Fabien
  2043       Ninoles and Juergen Hermann.
  2044 
  2045   XMLRPC: --------------------------------------------------------------------
  2046     * actions_excluded now defaults to ['xmlrpc'] - this kind of disables the
  2047       built-in wiki xmlrpc server code (not completely: it will just answer
  2048       with a Fault instance for any request). If you want to use xmlrpc v1 or
  2049       v2, you have to remove 'xmlrpc' from the actions_excluded list (for
  2050       example if you want to use wikisync, mailimport or any other feature
  2051       using xmlrpc). If you enable xmlrpc, it will be possible that someone
  2052       changes your wiki content by using xmlrpc (it will of course honour ACLs).
  2053     * New XMLRPC methods (see doc strings for details):
  2054       * getMoinVersion
  2055       * system.multicall -- multicall support
  2056       * Authentication System: getAuthToken/appyAuthToken
  2057       * getDiff -- method to get binary diffs
  2058       * mergeDiff -- method to local changes remotely
  2059       * interwikiName -- method to get the IWID and the interwiki moniker
  2060       * getAllPagesEx -- method to get the pagelist in a special way (revnos,
  2061         no system pages etc.)
  2062       * getAuthToken -- make and authentication token by supplying username/password
  2063       * applyAuthToken -- set request.user for following xmlrpc calls (within the
  2064                           same multicall)
  2065       * getUserProfile -- method to get user profile data for request.user
  2066     * Added XMLRPC methods for attachment handling. Thanks to Matthew Gilbert.
  2067     * XMLRPC putPage method adjusted to new AuthToken, config vars 
  2068       xmlrpc_putpage_enabled and xmlrpc_putpage_trusted_only removed.
  2069 
  2070   Scripts / Commandline interface: -------------------------------------------
  2071     * moin export dump now better conforms to the theme guidelines.
  2072     * Added a --dump-user option to the moin export dump command.
  2073       Thanks to Oliver O'Halloran.
  2074 
  2075   Security / Auth / AntiSpam / etc.: -----------------------------------------
  2076     * Hierarchical ACLs are now supported, i.e. pages inheriting permissions
  2077       from higher-level pages. See HelpOnAccessControlLists.
  2078     * If you have "#acl" (without the quotes) on a page, this means now:
  2079       "this page has own (empty) ACLs, so do not use acl_rights_default here"
  2080       Please note that this is COMPLETELY DIFFERENT from having no ACL line at
  2081       all on the page (acl_rights_default is used in that case).
  2082     * Antispam master url is now configurable via cfg.antispam_master_url.
  2083       The default is to fetch the antispam patterns from MoinMaster wiki.
  2084     * Antispam now checks the edit comments against BadContent also.
  2085     * TextCHAs (text-form CAPTCHAs).
  2086       Due to increasingly annoying wiki spammers, we added the option to use
  2087       TextCHAs (for page save (not for preview!), for attachment upload, for
  2088       user creation (not for profile save)).
  2089       This function is disabled by default. If you run a wiki that is editable
  2090       by anonymous or non-approved users from the internet (i.e. All: or Known:
  2091       in ACL terms), you should enable it in your wiki config by:
  2092       textchas = { # DO NOT USE EXACTLY THESE QUESTIONS!!!
  2093           'en': {
  2094               u'H2O is ...': u'water', # bad: too common
  2095               u'2 apples and three bananas makes how many fruits?': ur'(five|5)', # good
  2096               u'2 apples and three pigs makes how many fruits?': ur'(two|2)', # good
  2097               u'2+3': ur'5', # bad: computable
  2098               u'
  2099           },
  2100           'de': { # for german users
  2101               u'H2O ist ...': u'wasser',
  2102           },
  2103       }
  2104       This means that english users will get some random question from the 'en'
  2105       set, german users will get some from the 'de' set. If there is no 'de'
  2106       set configured, moin will fallback to language_default and then to 'en',
  2107       so make sure that you at least have a 'en' set configured (or whatever
  2108       you have set as language_default).
  2109       You need to use unicode for the questions and answers (see that u"...").
  2110       For the answer, you need to give a regular expression:
  2111       * In the easiest case, this is just some word or sentence (first en
  2112         example). It will be matched in a case-insensitive way.
  2113       * For more complex stuff, you can use the power of regular expressions,
  2114         e.g. if multiple answers are correct (second en example). Any answer
  2115         matching the regular expression will be considered as correct, any
  2116         non-matching answer will be considered as incorrect.
  2117 
  2118       Tipps for making it hard to break for the spammers and easy for the users:
  2119       * Use site-specific (not too common) questions.
  2120       * Don't use too hard questions (annoys legitimate users).
  2121       * Don't use computable questions.
  2122       * Don't reuse textchas from other sites.
  2123 
  2124       textchas_disabled_group = None # (default)
  2125       Set this to some group name and noone in this group will get textchas.
  2126       E.g.: textchas_disabled_group = u'NoTextChasGroup'
  2127 
  2128     * The login page gives now the possibility to recover a lost password, thanks to 
  2129       Oliver Siemoneit. This is especially useful for wikis where access to user 
  2130       preferences is restricted by acl.
  2131     * Session handling for logged-in users and (not by default due to expiry
  2132       problems) anonymous users.
  2133     * Updated the ldap_login code from 1.5 branch, supports TLS now.
  2134       See MoinMoin/config/multiconfig.py for supported configuration options
  2135       and their defaults (and please just change what you need to change,
  2136       in your wikiconfig).
  2137     * Interwiki auth: You need to define cfg.trusted_wikis and
  2138        cfg.user_autocreate to use it. Logging in works by entering:
  2139       Name: RemoteWikiName RemoteUserName
  2140       Password: remotepass
  2141       Then moin contacts RemoteWikiName after looking it up in the interwiki
  2142       map and tries to authenticate there using RemoteUserName and remotepass.
  2143       If it succeeds, the remote wiki will return the remote user profile items
  2144       and your local moin will autocreate an account with these values.
  2145 
  2146   Server / Network / Logging: ------------------------------------------------
  2147     * The standalone server script moved to the toplevel directory. This makes
  2148       it possible to directly start moin.py without additional configuration
  2149       to run a MoinMoin DesktopEdition like wiki setup.
  2150       Be careful: DesktopEdition uses relaxed security settings only suitable
  2151       for personal and local use.
  2152     * Added TLS/SSL support to the standalone server. Thanks to Matthew Gilbert.
  2153       To use TLS/SSL support you must also install the TLSLite library
  2154       (http://trevp.net/tlslite/). Version 0.3.8 was used for development and
  2155       testing.
  2156 
  2157     * cfg.log_reverse_dns_lookups [default: True] - you can set this to False
  2158       if rev. dns lookups are broken in your network (leading to long delays
  2159       on page saves). With False, edit-log will only contain IP, not hostname.
  2160     * Added support for "304 not modified" response header for AttachFile get
  2161       and rss_rc actions - faster, less traffic, less load.
  2162 
  2163     * Added logging framework, using stdlib's "logging" module. Just do
  2164       import logging ; logging.debug("your text"). Depending on configuration
  2165       in the server Config class, your stuff will be written to screen (stderr),
  2166       to a moin logfile, to apache's error.log, etc.:
  2167       logPath = None # 'moin.log'
  2168       loglevel_file = None # logging.DEBUG/INFO/WARNING/ERROR/CRITICAL
  2169       loglevel_stderr = None # logging.DEBUG/INFO/WARNING/ERROR/CRITICAL
  2170       NOTE: this is NOT in wikiconfig, but e.g. in moin.cgi or moin.py or ...
  2171 
  2172     * Added some experimental and disabled code, that uses x-forwarded-for
  2173       header (if present) to get the right "outside" IP before a request
  2174       enters our chain of trusted (reverse) proxies.
  2175       This code has the problem that we can't configure it in wikiconfig, so
  2176       if you want to use it / test it, you have to edit the moin code:
  2177       MoinMoin/request/__init__.py - edit proxies_trusted (near the top).
  2178       We will try to make this easier to configure, but there was no time left
  2179       before 1.6.0 release for doing bigger code refactorings needed for that.
  2180 
  2181   Mail: ----------------------------------------------------------------------
  2182     * You can send email to the wiki now (requires xmlrpc), see:
  2183       FeatureRequests/WikiEmailIntegration, HelpOnConfiguration/EmailSupport
  2184 
  2185     * Mail notifications contain a link to the diff action so the user
  2186       can see the coloured difference more easily. Thanks to Tobias Polzin.
  2187 
  2188   Other changes: =============================================================
  2189     * HINT: please copy a new version of your server script from the wiki/server/
  2190       directory and edit it to match your setup.
  2191     * HINT: instead of "from MoinMoin.multiconfig import DefaultConfig" you
  2192       need to use "from MoinMoin.config.multiconfig import DefaultConfig" now.
  2193       You need to change this in your wikiconfig.py or farmconfig.py file.
  2194       See MoinMoin/multiconfig.py for an alternative way if you can't do that.
  2195     * HINT: you need to change some imports (if you have them in your config):
  2196       Old: from MoinMoin.util.antispam import SecurityPolicy
  2197       New: from MoinMoin.security.antispam import SecurityPolicy
  2198       Old: from MoinMoin.util.autoadmin import SecurityPolicy
  2199       New: from MoinMoin.security.autoadmin import SecurityPolicy
  2200     * HINT: you need to change your auth stuff, the new way is:
  2201       from MoinMoin.auth import moin_login, moin_session
  2202       from MoinMoin.auth.http import http
  2203       auth = [http, moin_login, moin_session]
  2204       Do it in a similar way for other auth methods.
  2205     * HINT: you need to change your url_prefix setting in 2 ways:
  2206       1. The setting is now called url_prefix_static (to make it more clear
  2207          that we mean the static stuff, not the wiki script url).
  2208       2. The strongly recommended (and default) value of it is '/moin_static160'
  2209          for moin version 1.6.0 (and will be ...161 for moin 1.6.1). It is
  2210          possible and recommended to use a very long cache lifetime for static
  2211          stuff now (Expires: access plus 1 year), because we require to change
  2212          the URL of static stuff when the static stuff changes (e.g. on a
  2213          version upgrade of moin) to avoid problems with stale cache content.
  2214          Your moin will be faster with lower load and traffic because of this.
  2215          For standalone server, we use 1 year expiry for static stuff now.
  2216          For Apache, Lighttpd and other "external" servers, you have to care
  2217          for configuring them to use a long expiry and change url_prefix_static
  2218          related configuration on upgrade.
  2219       HINT: if you run standalone or Twisted server, the easiest way to get a
  2220             working configuration (with server configuration matching wiki
  2221             configuration) is to NOT set url_prefix_static at all. Moin will
  2222             use matching configuration defaults in this case.
  2223     * url_prefix_action ['action'] was introduced for lowering load and traffic
  2224       caused by searchengine crawlers. Up to now, crawlers where causing a high
  2225       load in internet moin wikis because they tried to get about everything,
  2226       including all actions linked from the user interface.
  2227       Known crawlers only get 403 for most actions, but nevertheless they first
  2228       tried. There was no means keeping them away from actions due to the rather
  2229       braindead robots.txt standard. You can only disallow pathes there, but
  2230       moin's actions were querystring based, not path based (this would need
  2231       regex support in robots.txt, but there is no such thing).
  2232       This changed now. Moin is able to generate action URLs you can handle in
  2233       robots.txt, like /action/info/PageName?action=info. So if you don't want
  2234       bots triggering actions, just disallow /action/ there. Keep in mind that
  2235       attachments are handled by /action/AttachFile, so if you want attached
  2236       files and pictures indexed by search engine, don't disallow
  2237       /action/AttachFile/ in your robots.txt. In order to use this feature,
  2238       set url_prefix_action in your wikiconfig to e.g. "action".
  2239     * We use (again) the same browser compatibility check as FCKeditor uses
  2240       internally, too. So if GUI editor invocation is broken due to browser
  2241       compatibility issues or a wrong browser version check, please file a bug
  2242       at FCKeditor development or browser development.
  2243     * HINT: We removed Lupy based indexed search code. If you were brave enough
  2244       to use cfg.lupy_search, you maybe want to try cfg.xapian_search instead.
  2245 
  2246   Developer notes: ===========================================================
  2247     * We moved the IE hacks to theme/css/msie.css that gets included after all
  2248       other css files (but before the user css file) using a conditional
  2249       comment with "if IE", so it gets only loaded for MSIE (no matter which
  2250       version). The file has some standard css inside (evaluated on all MSIE
  2251       versions) and some * html hacks that only IE < 7 will read.
  2252       HINT: if you use custom themes, you want to update them in the same way.
  2253     * autofilters for databrowser widget. Thanks to Johannes Berg for the patch.
  2254     * changed formatter.attachment_link call (it is now more flexible,
  2255       because you can render the stuff between link start and link end yourself)
  2256     * Page.url() does not escape any more. You have to use wikiutil.escape()
  2257       yourself if you want to write the URL to HTML and it contains e.g. &.
  2258     * The testing wikiconfig moved to tests/wikiconfig.py, the testing wiki
  2259       is now created in tests/wiki/...
  2260     * HINT: Killed "processors" (finally), formatter method changed to:
  2261       formatter.parser(parsername, lines)
  2262     * Refactored some actions to use ActionBase base class.
  2263     * Moved "test" action from wikiaction to MoinMoin/action/
  2264       (and use ActionBase).
  2265     * Moved MoinMoin/config.py to MoinMoin/config/__init__.py.
  2266     * Moved MoinMoin/multiconfig.py to MoinMoin/config/multiconfig.py.
  2267     * Moved "SystemInfo" macro from wikimacro to MoinMoin/macro/.
  2268     * Moved wikiaction.py stuff to MoinMoin/action/__init__.py.
  2269     * Moved wikimacro.py stuff to MoinMoin/macro/__init__.py.
  2270     * Moved wikirpc.py stuff to MoinMoin/xmlrpc/__init__.py.
  2271     * Moved wikitest.py stuff to action/test.py (only used from there).
  2272     * Moved formatter/base.py to formatter/__init__.py (FormatterBase).
  2273     * Moved util/ParserBase.py to parser/ParserBase.py.
  2274     * Moved / splitted request.py into MoinMoin/request/*.
  2275       Most stuff will be broken, please help fixing it (usually some imports
  2276       will be missing and the adaptor script will need a change maybe):
  2277       Tested successfully: CGI, CLI, STANDALONE, FCGI, TWISTED
  2278     * Moved security.py to security/__init__.py.
  2279     * Moved wikiacl.py to security/__init__.py.
  2280     * Moved logfile/logfile.py to logfile/__init__.py.
  2281     * Moved mailimport.py to mail/mailimport.py.
  2282     * Moved util/mail.py to mail/sendmail.py.
  2283     * Moved auth.py to auth/__init__.py.
  2284       Moved util/sessionParser.py to auth/_PHPsessionParser.py.
  2285       teared auth code into single modules under auth/* - moin_session handling
  2286       and the builting moin_login method are in auth/__init__.py.
  2287     * Added wikiutil.MimeType class (works internally with sanitized mime
  2288       types because the official ones suck).
  2289     * Renamed parsers to module names representing sane mimetypes, e.g.:
  2290       parser.wiki -> parser.text_moin_wiki
  2291     * Added thread_monitor debugging aid. It can be activated using:
  2292       from MoinMoin.util import thread_monitor; thread_monitor.activate_hook()
  2293       and then triggered by requesting URL ...?action=thread_monitor - please
  2294       be aware that monitoring threads has a big performance impact on its own,
  2295       so you only want to temporarily enable this for debugging.
  2296       By default, it dumps its output to the data_dir as tm_<timestamp>.log,
  2297       you can change this at bottom of action/thread_monitor.py if you want to
  2298       see output in your browser.
  2299     * Introduced scope parameter to CacheEntry() - if you specify 'farm', it
  2300       will cache into a common directory for all wikis in the same farm, if you
  2301       specify 'wiki', it will use a cache directory per wiki and if you specify
  2302       'item', it will use a cache directory per item (== per page).
  2303       Creating a CacheEntry without explicit scope is DEPRECATED.
  2304     * Smileys moved from MoinMoin.config to MoinMoin.theme.
  2305     * Removed all _ magic in URLs and filenames.
  2306     * request.action now has the action requested, default: 'show'.
  2307     * Cleaned up duplicated http_headers code and DEPRECATED this function
  2308       call (it was sometimes confused with setHttpHeaders call) - it will
  2309       vanish with moin 1.7, so please fix your custom plugins!
  2310       The replacement is:
  2311           request.emit_http_headers(more_headers=[])
  2312       This call pre-processes the headers list (encoding from unicode, making
  2313       sure that there is exactly ONE content-type header, etc.) and then
  2314       calls a server specific helper _emit_http_headers to emit it.
  2315       Tested successfully: CGI, STANDALONE, FCGI, TWISTED
  2316     * setResponseCode request method DEPRECATED (it only worked for Twisted
  2317       anyway), just use emit_http_headers and include a Status: XXX header.
  2318       Method will vanish with moin 1.7.
  2319     * cfg.url_prefix is DEPRECATED, please use cfg.url_prefix_static.
  2320     * d['title_link'] is not supported any more. You can easily make that link
  2321       on your own in your theme, see example in MoinMoin/theme/__init__.py,
  2322       function "title".
  2323     * There is a new Page method called Page.get_raw_body_str that returns
  2324       the encoded page body. This is useful if you just deal with byte data
  2325       (e.g. while generating binary diffs).
  2326     * The TagStore/PickleTagStore system is used to store the syncronisation tags.
  2327     * XMLRPC functions may return Fault instances from now on
  2328     * Moin got multicall support, including a module that makes it usable on the
  2329       client-side without requiring Python 2.4
  2330     * Added no_magic to text_html formatter to disable tag autoclosing.
  2331     * MOIN_DEBUG can be set in the environment to let MoinMoin ignore exceptions
  2332       that would lead to a traceback in the browser. Thanks to Raphael Bossek.
  2333     * There is a new MoinMoin.Page.ItemCache class now with automatic cache
  2334       invalidation based on global edit-log. We currently use it to cache page
  2335       acls, speedup Page.get_rev and reading the page local edit-log.
  2336     * Added wikiutil.renderText parse and format raw wiki markup with all page elements.
  2337     * The user file format has changed, old files will be read correctly but
  2338       will silently be upgraded to the new format so old versions will not
  2339       read the new files correctly (this only affects 'subscribed_pages' and
  2340       'quicklinks' which will be lost when downgrading.)
  2341 
  2342 
  2343 Version 1.5.8:
  2344   New features:
  2345     * Added timing.log to help performance debugging. Use cfg.log_timing = True
  2346       to update <data_dir>/timing.log (default is False, meaning no logging).
  2347 
  2348       Example log entries:
  2349 
  2350 
  2351       Timestamp       PID   Timing Flag action     URL
  2352       -----------------------------------------------------------------------------
  2353       20070512 184401 22690 vvv         None       moinmoin.wikiwikiweb.de/RssFeeds
  2354       20070512 184401 22690 0.267s    - show       moinmoin.wikiwikiweb.de/RssFeeds
  2355 
  2356       Timestamp: YYYYMMDD HHMMSS (UTC)
  2357       PID: the process ID of the moin process
  2358       Timing: when action starts, it will be "vvv"
  2359               when it ends, it logs the total time it needed for execution
  2360       Flag (some are only logged at end of action):
  2361       +   Page exists
  2362       -   Page does not exist
  2363       B   user agent was recognized as bot / spider
  2364       !x! Action took rather long (the higher the x, the longer it took - this
  2365           makes it easy to grep for problematic stuff).
  2366       Action: action name (None is when no action was specified, moin assumes
  2367               "show" for that case)
  2368       URL: the requested URL
  2369 
  2370       For more information about tuning your moin setup, see:
  2371       http://moinmoin.wikiwikiweb.de/PerformanceTuning
  2372     * Added support for ircs, webcal, xmpp, ed2k and rootz protocols - we
  2373       moved all protocols to config.url_schemas, so this is not empty any more.
  2374       It is possible to use these protocols now on wiki pages and in the
  2375       navi_bar. We just generate the URLs, it is up to your browser what it
  2376       does when clicking on those links.
  2377     * cfg.traceback_show (default: 1) can be used to disable showing tracebacks.
  2378       cfg.traceback_log_dir (default: None) can be used to set a directory
  2379       that is used to dump traceback files to. Your users will get a notice to
  2380       which (random) file in that directory the traceback was been written.
  2381       NOTE: while you can feel free to set traceback_show = 0 and
  2382       traceback_log_dir = None, we will also feel free to reject bug reports
  2383       when you (or your site's users) don't give us enough information (like a
  2384       traceback file) to debug the problem. If you set traceback_show = 0,
  2385       we recommend pointing traceback_log_dir to a directory with reasonable
  2386       free space and putting a page onto your wiki that describes who has to
  2387       get contacted (usually the wiki server admin) in case a traceback happens.
  2388       The admin can then locate the traceback file and submit it to moin
  2389       development, if the bug is not already known (see MoinMoin:MoinMoinBugs).
  2390       Of course we will also need all the other details of a bug report, not
  2391       only the traceback file.
  2392 
  2393   Other changes:
  2394     * Updated spider agents list.
  2395     * Reduce bot/spider cpu usage for SystemInfo, OrphanedPages, WantedPages,
  2396       PageHits, PageSize, WordIndex macros (we just return nothing for bots).
  2397 
  2398   Bugfixes:
  2399     * XSS fixes, see http://secunia.com/advisories/24138/ (item 1 and 2).
  2400     * ACL security fixes:
  2401       * MonthCalendar respects ACLs of day pages now.
  2402       * Check the ACL for the rst markup include directive.
  2403     * Fixed cleaning of edit comments (control chars in there could damage
  2404       edit-log).
  2405     * Fixed in-process caching of antispam patterns (didn't update the cache
  2406       for multi-process, persistent servers).
  2407     * Correct encoding/decoding for surge-log data, fixes leftover
  2408       surge-logXXXXXXX.tmp files in data/cache/surgeprotect.
  2409     * Fixed mode of cache files (mkstemp creates them with 0600 mode).
  2410     * Symbolic entities with numbers (like &sup2;) did not work, fixed.
  2411     * We open data/error.log earlier now and we also use it for FastCGI.
  2412     * Fixed unicode cfg.page_group_regex.
  2413     * Fixed moin.spec to use english date format.
  2414     * GUI converter: fixed conversion of relative wiki links.
  2415     * Fixed NewPage macro button label to not be formatted as wiki text.
  2416 
  2417 Version 1.5.7:
  2418   New features:
  2419     * added url_prefix_local which is used for stuff that must be loaded from
  2420       same site as the wiki engine (e.g. FCKeditor GUI editor applet), while
  2421       url_prefix can be a remote server serving the static files (css/img).
  2422       If not set (or set to None), url_prefix_local will default to the value
  2423       of url_prefix.
  2424     * We save some CPU and disk I/O by having EditTemplates and LikePages macro
  2425       (both used on MissingPage) check whether the requesting entity was
  2426       identified as a spider (e.g. search engine bot) and do nothing in that
  2427       case. Normal users won't see any difference.
  2428     * For AttachFile, you can now choose to overwrite existing files of same
  2429       name (nice for updating files).
  2430 
  2431   Bugfixes:
  2432     * XSS Fixes:
  2433       * fixed unescaped page info display.
  2434       * fixed unescaped page name display in AttachFile, RenamePage and
  2435         LocalSiteMap actions
  2436     * WantedPages listed existing pages that are not readable for the user,
  2437       but are linked from pages that ARE readable for the user (so this is NOT
  2438       a privacy/security issue). We now don't list those pages any more as it
  2439       is pointless/confusing, the user can't read or edit there anyway.
  2440     * MoinMoin:MoinMoinBugs/TableOfContentsUsesNonExistingIncludeLinks
  2441     * MoinMoin:MoinMoinBugs/ActionsExcludedTriggerError
  2442     * GUI editor/converter:
  2443       * ignore <col>/<colgroup>/<meta> elements
  2444       * support <a> within blockquote
  2445     * Remove generated=... attribute from pagelink html output (this attr is
  2446       for internal use only). w3c validator is now happier again.
  2447     * Fixed css class "userpref" (not: "userprefs") of the Login form.
  2448     * Fixed the version number check in the xslt parser for 4suite >= 1.0.
  2449     * We reset the umask to the wanted value every request. This should fix
  2450       wrong file modes when used with Twisted (twistd uses a hardcoded 0077
  2451       umask in daemonize()).
  2452     * Avoid trouble when saving pages with antispam function when MoinMaster
  2453       wiki is having troubles (catch xmlrpc Fault).
  2454 
  2455   Other changes:
  2456     * Standalone server does not do reverse DNS lookups any more (this is a
  2457       standard feature of BaseHTTPServer stdlib module, but we override this
  2458       now and just print the IP).
  2459     * We moved the IE hacks to theme/css/msie.css that gets included after all
  2460       other css files (but before the user css file) using a conditional
  2461       comment with "if IE", so it gets only loaded for MSIE (no matter which
  2462       version). The file has some standard css inside (evaluated on all MSIE
  2463       versions) and some * html hacks that only IE < 7 will read.
  2464       HINT: if you use custom themes, you want to update them in the same way.
  2465     * Improved ldap auth:
  2466       * cfg.ldap_name_attribute was removed because of new cfg.ldap_filter.
  2467         If you had ldap_name_attribute = 'sAMAccountName' before, just use
  2468         ldap_filter = '(sAMAccountName=%(username)s)' now.
  2469       * New cfg.ldap_filter used for the ldap filter string used in the ldap
  2470         search instead of the rather limited, partly hardcoded filter we used
  2471         before. This is much more flexible:
  2472         ldap_filter = '(sAMAccountName=%(username)s)'
  2473         You can also do more complex filtering expressions like:
  2474         '(&(cn=%(username)s)(memberOf=CN=WikiUsers,OU=Groups,DC=example,DC=org))'
  2475       * Added some processing to filter out result entries with dn == None.
  2476       * We set REFERRALS option to 0 before initializing the ldap server
  2477         connection (this seems to be needed for Active Directory servers).
  2478       * We support self-signed ssl certs for ldaps - completely untested.
  2479       * New cfg.ldap_surname_attribute (usually 'sn'), was hardcoded before.
  2480       * New cfg.ldap_givenname_attribute (usually 'givenName'), hardcoded before.
  2481       * New cfg.ldap_aliasname_attribute (usually 'displayName') - if this
  2482         attribute is not there or empty (in the results of the ldap lookup for
  2483         the user), we just make up the aliasname from surname and givenname
  2484         attribute.
  2485       * We only request the attributes we need from ldap (was: all attrs).
  2486       * We deny user login (and break out of auth chain) for the following cases:
  2487         * if a user is not found by ldap lookup
  2488         * if we find more than one matching entry
  2489         * if the password is empty or incorrect
  2490         * if some exception happens
  2491       * Please note that there is an updated ldap sample config in directory
  2492         wiki/config/more_samples/.
  2493       * Added experimental LDAP SSL/TLS support (untested, please help testing),
  2494         see also the sample config.
  2495     * Work around a IE7 rendering problem with long pages getting more and
  2496       more narrow. We just applied the same "fix" as we used for IE6, using
  2497       "display: none" for span.anchor for IE browsers.
  2498     * RSS feed related:
  2499       * We used to emit a <link> tag for the action=rss_rc RSS feed on any
  2500         page. This was changed, we now emit that link only on RecentChanges and
  2501         the current user's language translation of RecentChanges.
  2502         This was changed because Google Toolbar requests the RSS feed linked
  2503         by such a link tag every time it sees one. Thus, if you used the wiki
  2504         normally, it requested the RSS feed every few seconds and caused
  2505         problems due to surge protection kicking in because of that.
  2506       * HINT for custom theme users: if your theme code calls
  2507         rsslink(), then you need to change that to rsslink(d) for 1.5.7+.
  2508 
  2509 
  2510 Version 1.5.6:
  2511   A general security notice:
  2512       Check your Python version, there was a buffer overflow issue in Python
  2513       recently! Details: http://moinmoin.wikiwikiweb.de/PythonUnicodeEscapeBug
  2514 
  2515   Bugfixes:
  2516     * Fix AttributeError traceback with Standalone server (if_modified_since)
  2517     * Fix AttachFile "304 not modified" and redirect status code for Twisted
  2518     * http auth: we now decode username and password to unicode (using
  2519       config.charset == utf-8). Same for SSL client cert auth and CN.
  2520     * Avoid infinite recursion in Page.parsePageLinks.
  2521     * Fixed standalone server failing to shutdown if interface == "".
  2522     * Now MoinMoin does not think anymore that every page links to various user
  2523       homepages.
  2524     * Made the irssi parser more tolerant (Thanks to "TheAnarcat").
  2525     * Now multiple formatters can be used per request, the send_page code was
  2526       not reentrant to this regard. Fixes "empty" search results.
  2527     * Fixed problem with "=" in ImageLink macro links.
  2528     * Not a moin bug, but a silly stdlib os.tempnam function made trouble to
  2529       some people because it lets you override the path given in the code
  2530       by setting the environment variable TMP(DIR). We now use a different
  2531       function to avoid renaming trouble when TMP(DIR) points to a different
  2532       file system.
  2533     * Fixed antispam update on every save (Thanks to "TheAnarcat").
  2534     * GUI converter: don't throw away rowclass for tables.
  2535     * GUI editor formatter: allow height for table cells.
  2536     * GUI editor formatter: comment texts are output using the formatter now. 
  2537 
  2538   New features:
  2539     * Mail notifications contain a link to the diff action so the user
  2540       can see the coloured difference more easily. Thanks to Tobias Polzin.
  2541     * FeatureRequests/MoveAttachments - you can move attachments from one
  2542       page to another (and also rename the attachment at the same time).
  2543       Thanks to Reimar Bauer.
  2544     * Added support for linking to attachment: and inline: URLs with ImageLink.
  2545     * Added UNIX socket support for FastCGI, just set the port to some (socket)
  2546       filename. Details see: MoinMoin:FeatureRequests/FastCgiUnixSocket
  2547     * [[Attachlist(pagename,mimetype)]] lists attachments of pagename (default:
  2548       current page) with optional mimetype restriction (default: all).
  2549       Thanks to Reimar Bauer.
  2550 
  2551   Other changes:
  2552     * Minor performance improvements (might be noticeable if you have many
  2553       custom navi_bar entries and high server load).
  2554     * Avoid usage of no-cache because it breaks attachment download on IE6.
  2555       This is a IE bug, not a moin bug.
  2556     * Added XHTML to the unsafe list.
  2557     * Changed the rst parser to be compatible to the new docutils interface
  2558       for directives.
  2559     * Updated EmbedObject macro.
  2560 
  2561 
  2562 Version 1.5.5a:
  2563   Bugfixes:
  2564     * fixed ticket creation to only use constant values
  2565 
  2566 Version 1.5.5:
  2567   HINT: read docs/README.migration.
  2568   HINT: there was NO change in the underlay/ pages since 1.5.4.
  2569   HINT: If you experience problems with the reStructured Text (rst) parser,
  2570         please downgrade docutils to "0.4" because there were major interface
  2571         breaking API refactorings on the docutils trunk.
  2572 
  2573   Bugfixes:
  2574     * GUI editor fixes:
  2575       * Fixed MoinMoinBugs/GuiEditorModifiesInterwikiPreferred.
  2576       * Fixed MoinMoinBugs/TableAlignmentProbsWithGUI.
  2577     * Not a moin bug, but it severely annoyed IE users and also was less
  2578       comfortable for users of other browser: since about 1.5.4, we served
  2579       attachments with Content-Disposition: attachment - so that the user has
  2580       to save them to disk. This was to fix a possible XSS attack using attached
  2581       HTML files with Javascript inside for stealing your moin cookie or doing
  2582       other nasty things. We improved this by using different behaviour depending
  2583       on the potential danger the attached file has when served inline:
  2584       mimetypes_xss_protect = ['text/html', 'application/x-shockwave-flash', ]
  2585       This is the default value. If you know more dangerous stuff, please just
  2586       add the mimetypes there to protect your users and file a bug report
  2587       telling us what we missed.
  2588     * Fixed MoinMoinBugs/ReStructuredTextRelativeLinksBroken, thanks to Stefan
  2589       Merten.
  2590     * Make tickets used for some actions more safe.
  2591 
  2592   New features:
  2593     * edit_ticketing [True] - we protect page save by a ticket (same stuff we
  2594       already use for DeletePage and RenamePage action).
  2595       NOTE: If you don't use your browser for editing, but some tool like
  2596             "editmoin" or "MoinMoin plugin for jEdit", you'll need an update
  2597             of them supporting the ticket.
  2598             Alternatively, you can use edit_ticketing = False setting - this
  2599             is not recommended for internet wikis as it will make spamming them
  2600             easier.
  2601     * If we detect some spammer, we kick him out by triggering surge protection
  2602       (if surge protection is not disabled).
  2603 
  2604 Version 1.5.5rc1:
  2605   Bugfixes:
  2606     * Fixed MoinMoinBugs/XmlRpcBrokenForFastCgi - thanks to Johannes Berg.
  2607     * Fixed gui editor converter confusing of `` and {{{}}} markup.
  2608     * Fixed emission of HTTP headers (esp. Vary: Cache-Control:).
  2609     * Fixed a bad crash that happens (on ANY page!) when you put a *Dict
  2610       page's name as a member into a *Group page.
  2611     * Fix MyPages action title to use an unformatted string.
  2612     * Fix double quoted-printable encoding in generated emails (note: this is
  2613       not a moin bug - this just works around bugs in python stdlib).
  2614     * Fix mode of drawing files (use config.umask).
  2615     * Fix trouble with /?action= urls by dropping getPageNameFromQueryString
  2616       code. 
  2617     * Fixed sre unpickle issues seen on some machines by avoiding to pickle
  2618       the regex.
  2619     * Fix Clock code, add more timers.
  2620     * Worked around FastCGI problem on Lighttpd: empty lines in the error log.
  2621     * Fix (add) locking for caching's .remove() call, small fixes to lock code.
  2622     * Print error message when --target-dir=path is missing from moin export
  2623       dump command.
  2624 
  2625   New features:
  2626     * Added support for "304 not modified" response header for AttachFile get
  2627       and rss_rc actions - faster, less traffic, less load.
  2628     * Limit rss with full diffs to 5 items.
  2629     * Allow surge_action_limits = None to disable surge protection.
  2630     * moin.fcg improved - if you use FastCGI, you must use the new file:
  2631       * can self-terminate after some number of requests (default: -1, this
  2632         means "unlimited lifetime")
  2633       * the count of created threads is limited now (default: 5), you can use
  2634         1 to use non-threaded operation.
  2635       * configurable socket.listen() backlog (default: 5)
  2636     * Added indonesian i18n (id).
  2637     * Some measures against spammers trying to brute force their spam into moin.
  2638     * EmbedObject macro: added mov, mpg and midi support
  2639     * moin ... export dump --target-dir=PATH --page=PAGENAME_REGEX
  2640       You must specify --target-dir (where dump will write the html files to)
  2641       and you may specify --page and either a page name or a regex used to
  2642       match all pages you want to export. Default is to export all pages.
  2643 
  2644   Other changes:
  2645     * Tuning:
  2646       * more efficient locking code on POSIX platforms, we do much less I/O
  2647         for locking now
  2648       * removed most chmod calls in favour of a single os.umask call
  2649     * Improved Python 2.5 compatibility. Note: if you think that MoinMoin
  2650       is using too much RAM, you might want to look at Python 2.5 because
  2651       of its improved memory management.
  2652     * Throw away SAVE comments longer than 200 chars (you can't enter those by
  2653       the user interface, so only spammer using automatic POSTs do them).
  2654     * Updated spider user agent list.
  2655     * BadContent and LocalBadContent now get noindex,nofollow robots header,
  2656       same as POSTs.
  2657     * Standalone opens it logfile unbuffered from now on, thanks to
  2658       Carsten Grohmann.
  2659     * Avoid trouble when request.write() data contains None, just skip it -
  2660       thanks to Juergen Hermann.
  2661     * Instead of showing a ConfigurationError, moin now emits "404 Not found"
  2662       http headers and a hint about what could be wrong. This won't fill up
  2663       your logs just because of typos and spiders still trying old URLs.
  2664 
  2665  
  2666 Version 1.5.4:
  2667     HINT: read docs/README.migration.
  2668 Version 1.5.4-current:
  2669     * increased maxlength of some input fields from 80 to 200
  2670 
  2671 Version 1.5.current:
  2672   Developer notes:
  2673     * We switched to Mercurial SCM, see here for more infos:
  2674       http://moinmoin.wikiwikiweb.de/MoinDev/MercurialGuide
  2675 
  2676   Bugfixes:
  2677     * fix MonthCalendar macro for non-ASCII pagenames (thanks to Jonas Smedegaard)
  2678     * remove 'search' and 'google' from bot user agent list and add some more
  2679       specific terms
  2680     * Fix the forgotten password email login URL and also properly encode the
  2681       email body. Thanks to Robin Dunn for the patch.
  2682     * Applied a patch by Matthew Gilbert for increased compatiblity with
  2683       latest docutils.
  2684 
  2685 
  2686 Version 1.5.3:
  2687   New Features:
  2688     * Added CSS classes for TableOfContents macro.
  2689 
  2690   Bug Fixes:
  2691     * GUI editor / GUI editor converter:
  2692       * Fixed missing GUI editor link in edit bar.
  2693       * Fixed table/row/cell style spaces.
  2694       * Changed <p> generation for macros.
  2695       * Fixed handling of subpages.
  2696       * Fixed processing of complex list elements (thanks to Craig Markwardt).
  2697       * Fixed processing of html \n (thanks to Craig Markwardt).
  2698       * Fixed joining of comment lines with text below them.
  2699       * Fixed table height attribute crash.
  2700     * Fixed sslclientcert auth.
  2701     * Added some missing files to i18n processing, translatable strings more
  2702       complete now.
  2703     * Change <p> generation from self-closing (<p />) to auto-closing (only
  2704       emit <p>, let browser find place for </p>).
  2705     * Fix eating of newline before tables.
  2706     * Fixed incorrect login hint for not logged-in users trying a disallowed
  2707       action.
  2708     * Fixed nasty missing or double </a> formatter bug (mostly happening when
  2709       user has enabled questionmarks for nonexisting pages).
  2710 
  2711   Other Changes:
  2712     * We catch and ignore html to wiki conversion errors in case of hitting
  2713       the cancel button, so you can get out of the error screen.
  2714 
  2715 Version 1.5.3-rc2:
  2716   New Features:
  2717     * Modified SystemInfo macro to give human readable units and disk usage
  2718     * cfg.editor_quickhelp makes the quick help below the editor configurable
  2719       (at least as far as the default_markup is concerned). If set to None,
  2720       it doesn't display any quickhelp. Thanks to Seth Falcon for the patch.
  2721 
  2722   Bugfixes:
  2723     * Fixed double class attribute for nonexistent links
  2724     * Fixed double </a> with qm_noexist option
  2725     * Fixed table xxx="yyy" style attribute parsing
  2726     * If not (editor_force and editor_default == 'text') then display GUI mode
  2727       switch button (this is only a partial fix, but enough to deny the GUI
  2728       mode to your users completely)
  2729     * Fixed XSS issue which could lead to cookie theft etc.
  2730     * Fixed definition list "same level" indenting.
  2731     * Fixed pagename in log for PackagePages action.
  2732     * Made <p> self-closing and line-anchors more well-behaved, thanks to
  2733       Martin Wilck for the patch. I didn't apply the <ol> patch, because this
  2734       is no real problem, just a problem of a bad standard.
  2735     * Fixed gui editor *bgcolor crash.
  2736     * Support/Fix tableclass attr with gui editor.
  2737 
  2738   Other changes:
  2739     * Moved back UserPreferences action link from menu to top of page (renaming
  2740       it to "Preferences"), added "Cancel" button to make it possible to return
  2741       to the previous page without saving preferences.
  2742     * Removed formatter.url "attrs" keyword arg that took premade html, we use
  2743       separate kw args per attribute now.
  2744     * Moved broken tests to MoinMoin/_tests/broken (= disabling them).
  2745       All "active" tests run ok now.
  2746       If you want to compare, I included the output of this test run:
  2747       $ make test >tests/make_test.out
  2748 
  2749  
  2750 Version 1.5.3-rc1:
  2751 
  2752   New features:
  2753     * HINT: please read README.migration
  2754     * Login and Logout are actions now, therefore you stay on the page where
  2755       you were before.
  2756     * UserPreferences is also an action now and moved from top border (in
  2757       modern theme) to the "more actions" dropdown menu. You also stay on the
  2758       same page.
  2759     * There is also a [[Login]] macro now. You can put it on any page you want
  2760       and if the user is not logged in, it renders the login form. If the user
  2761       is logged in, it doesn't render anything.
  2762     * We check cfg.superuser to be a list of user names (as documented) and
  2763       deny superuser access if it is not. This avoids security issues by
  2764       wrong configuration.
  2765     * auth methods changed:
  2766       HINT: if you wrote own auth methods, please change them as you see in
  2767             MoinMoin/auth.py and test them again before relying on them.
  2768       * now get a user_obj kw argument that is either a user object returned
  2769         from a previous auth method or None (if no user has been made up yet).
  2770         The auth method should either return a user object (if it has
  2771         determined one) or what it got as user_obj (being "passive") or None
  2772         (if it wants to "veto" some user even if a previous method already has
  2773         made up some user object).
  2774       * return value of continue_flag is now True in most cases (except if
  2775         it wants to "veto" and abort).
  2776       * moin_cookie auth method now logs out a user by deleting the cookie and
  2777         setting user_obj.valid = 0. This makes it possible to still get the
  2778         user's name in subsequent auth method calls within the same request.
  2779       * added ldap_login and smb_mount auth methods, see MoinMoin/auth.py and
  2780         wiki/config/more_samples/ldap_smb_farmconfig.py
  2781     * MonthCalendar now takes an additional argument for specifying a template
  2782       to use to directly invoke the page editor when clicking on non-existing
  2783       day pages.
  2784     * Added ImageLink macro. Thanks to Jeff Kunce, Marcin Zalewski, Reimar
  2785       Bauer and Chong-Dae Park for working on it.
  2786     * Lupy stuff (still experimental, partly broken and disabled by default):
  2787       * Attachment search using lupy (lupy_search = 1 in your config)
  2788         Title search will also search attachment filenames.
  2789         Full text search will also search attachment contents.
  2790       * Indexing filter plugins, see MoinMoin:FiltersForIndexing
  2791         Some filters depend on external converters that might not be available
  2792         for any platform (see Depends: line in filter plugin).
  2793         Feel free to contribute more filter plugins, especially if you wrote
  2794         some nice platform independant filter in Python for some popular file
  2795         format! Filters implemented so far (depending on):
  2796         MS Word, RTF, MS Excel (antiword, catdoc)
  2797         PDF (pdftotext)
  2798         OpenOffice.org XML based data formats (-)
  2799         XML, HTML (-)
  2800         text/* (-)
  2801         JPEG's EXIF data (-)
  2802         Binary generic (-)
  2803       * As you might know, Lupy is "retired" (that means it isn't developped
  2804         by its authors any more). We are currently evaluating Xapian as new
  2805         indexing search engine in moin.
  2806         If we succeed, we will replace Lupy stuff by some Xapian interface
  2807         code in moin.
  2808         But: the filters will likely stay, as we also need them with Xapian.
  2809     
  2810     * A new MoinMoin script interface was introduced:
  2811       
  2812       Syntax: moin [options] <cmdmodule> <cmdname> [options]
  2813       
  2814       For example:
  2815       moin --config-dir=/my/cfgdir --wiki-url=wiki.example.org/ \
  2816            export dump --page=WikiSandBox
  2817       
  2818       This will call the "moin" script, which will use the --config-dir and
  2819       --wiki-url options to initialize, then it will go to MoinMoin.script
  2820       module, import the export.dump module from there and run it, providing
  2821       the additional --page value to it.
  2822 
  2823       The old scripts that have not been migrated to this new interface can
  2824       still be found in MoinMoin/script/old/ - including the old migration
  2825       scripts.
  2826     * moin ... account create --name=JoeDoe --email=joe@doe.org
  2827     * moin ... account disable --name=JoeDoe
  2828     * moin ... acount check     <-- this is what usercheck script was before
  2829     * moin ... maint cleancache <-- this is what cachecleaner script was
  2830     * moin ... maint cleanpage  <-- this is what pagescleaner script was
  2831 
  2832   Bugfixes:
  2833     * cookie_lifetime didn't work comfortable for low values. The cookie was
  2834       created once on login and never updated afterwards. So you got logged
  2835       out cookie_lifetime hours later, no matter whether you were active at
  2836       that time or not. This has been changed, we update the cookie expiry now
  2837       on every request, so it will expire cookie_lifetime after your last
  2838       request (not after login).
  2839     * Fixed logout problems when using cfg.cookie_path.
  2840     * Fixed cookie_path for root url wikis.
  2841     * Lupy search now behaves a bit less funky. Still no guarantees...
  2842     * We lowered the twisted server timeout to 2 minutes now (was: 10) because
  2843       it just used up too many files (open TCP connections until it timeouts)
  2844       on our farm.
  2845     * The algorithm used for processing the farmconfig.wikis list was changed
  2846       to work for big farms (>= 50 wikis), too. This works around the python
  2847       "re" module limitation of having a maximum of 100 named groups in a RE.
  2848     * Fixed a TypeError which occurred for formatters that dislike None values.
  2849       (cf. http://moinmoin.wikiwikiweb.de/MoinMoinBugs/PythonErrorEditingFrontPage)
  2850     * Fixed GUI editor converter error for https:... image URLs.
  2851     * ThemeBase (use by modern/rightsidebar): removed duplicate AttachFile from
  2852       actions menu (we already have it in editbar).
  2853     * Speedup group/dicts scanning for persistent servers.
  2854     * Implemented HEAD requests for standalone server, this should fix some of
  2855       the strange effects happening when using "Save as" on attachments.
  2856     * Not a moin bug, but rather a workaround for non-standard non-ASCII DNS
  2857       hostnames: we just use the IP instead of crashing now.
  2858     * Spurious cyclic usage error in i18n fixed.
  2859     * Fixed antispam for python 2.5a xmlrpclib.
  2860     * I18n for linenumber toggle in listings.
  2861     * All action menu entries are translatable now.
  2862 
  2863   Other:
  2864     * Added css classes for the rst admonitions. Thanks to TiagoMacambira!
  2865 
  2866 Version 1.5.2:
  2867 
  2868   New features:
  2869     * Added FullSearchCached macro which is statically cached.
  2870       Use it if you do not depend on fresh search results but prefer raw speed.
  2871     * Added surge protection, see HelpOnConfiguration/SurgeProtection.
  2872     * Allow hex and symbolic entities.
  2873     * If there is a user with empty password, we just generate a random one
  2874       when he requests it getting sent by mail. Thanks to Reimar Bauer.
  2875     * The superuser now can switch to another user using UserPreferences -
  2876       nice to help your users when they forgot their password or need other
  2877       help. You need to logout/relogin to use your own userid afterwards.
  2878       This function only works correctly if you use moin_cookie authentication.
  2879       Thanks to Reimar Bauer.
  2880     * Add new markup for bulletless lists: just use a "." instead of "*".
  2881 
  2882   Other changes:
  2883     * Added "voyager" to bot useragent list.
  2884     * Added locking for caching subsystem.
  2885     * Deron Meranda's formatter API cleanup.
  2886     * Added div and span to formatter API.
  2887     * Removed old unfinished form and export code.
  2888     * updated i18n
  2889 
  2890   Fixes:
  2891    * Fixed table attribute parsing.
  2892    * Fixed cookie handling wrt properties adherance.
  2893    * The new "." list markup makes it possible to have a bulletless list with
  2894      elements on the same level. Before this change and only using indentation
  2895      with blanks, that would get merged into a single paragraph.
  2896    * It is possible now to have multiple paragraphs in the same list element,
  2897      just leave an empty line in between the paragraphs.
  2898    * Fixed GAP processing for ordered lists.
  2899    * Fix text_gedit formatter's invalid list nesting.
  2900    * Fixed hr crash in blockquote (but needs more work).
  2901    * Fixed FootNote's formatter usage.
  2902    * Fixed rst's headline levels.
  2903    * Fixed MoinMoinBugs/WikiParserThinksItIsInsidePreWhenItIsNot
  2904    * Fixed MoinMoinBugs/ListItemGeneratedOutsideList
  2905    * Fixed that macros were followed by a wrong <p>.
  2906    * Added <blockquote> to the block elements in the text_html formatter,
  2907      so it does not close it erratically when you close a inner <p>.
  2908    * GUI editor converter now also accept http: urls without // (relative or
  2909      same server urls).
  2910    * Fixed the DocBook parser in cases where the pagename was non-ascii.
  2911    * Fixed MoinMoinBugs/ProcessInlineDontSupportUlElement
  2912 
  2913 
  2914 Version 1.5.1:
  2915 
  2916   Fixes:
  2917     * Fixed rst parser docutils version check
  2918     * Repaired attachment unzipping feature.
  2919     * Fixed the AddRevision command of the PackageInstaller.
  2920     * improved the migration scripts (used to migrate pre-1.3 wikis to 1.3+):
  2921       * do not crash on empty lines in event log
  2922       * fix edit log format for very old moin data (like 0.11)
  2923       * workaround for an ugly win32 operating system bug leading to wiki text
  2924         file mtime not matching edit logs timestamp values if there was some
  2925         timezone change since last edit (e.g. a daylight saving tz switch),
  2926         but differing 3600s.
  2927         This affected pre-1.3 moin wiki servers running on win32 OS only.
  2928         We now try to correct those inconsistencies in mig05 by fuzzy matching.
  2929     * fixed bracketed link scheme icon (css class)
  2930     * we included a modified copy of Python 2.4.2's copy.py as some previous
  2931       python versions seem to have problems (2.3.x, x < 5 and also 2.4[.0]),
  2932       see: http://moinmoin.wikiwikiweb.de/MoinMoinBugs/DeepCopyError
  2933       Our own copy.py was slightly modified to run on 2.3.x and 2.4.x.
  2934     * Fixed the problem of not being able to change the date/time format back
  2935       to "Default" (UserPreferences).
  2936     * We generate the GUI editor footer now the same way as the text editor
  2937       footer.
  2938     * Include a CSS workaround for yet another IE bug, see:
  2939       MoinMoinBugs:InternetExplorerPeekABooBugInRightSideBar
  2940     * classic theme: added GUI editor link
  2941     * classic theme: added pagename header to editor screen
  2942     * the "mail enabled" check now also checks whether mail_from is set
  2943 
  2944   Other changes:
  2945     * Updated FCKeditor to current CVS (2006-01-08 == 2.2+)
  2946     * Split up show_hosts into show_hosts and show_names
  2947     * attachment:file%20with%20spaces.txt in attachment list
  2948     * added support for file:// in GUI editor link dialogue, see also:
  2949       MoinMoin:FileLinks
  2950     * cfg.mail_smarthost now supports "server:port" syntax, the default port
  2951       is 25, of course.
  2952     * removed unused kwargs showpage/editable/form from wikiutil.send_footer
  2953     * updated i18n (translation texts, additional languages)
  2954     * removed interwiki:pagename from print view's top of page, added it to
  2955       the "lasted edited" line at bottom right.
  2956 
  2957 
  2958 Version 1.5.0:
  2959   HINT: 1.5.0 uses the same data/pages format as 1.3.x. The only thing you want
  2960         to check is whether the 1.5.x version you are upgrading to has NEW mig
  2961         scripts compared to the version you are running now (e.g. in 1.3.5 we
  2962         added some scripts that fixed some small problems).
  2963         See the MoinMoin/scripts/migration/ directory.
  2964         You must run every mig script in sequence and only ONCE ever.
  2965   Fixes:
  2966     * Fix <x=y> table attributes parsing. Thanks to Reimar Bauer.
  2967     * Fixed a few bugs in the reStructured text parser. Note that you
  2968       need to install docutils 0.3.10 or newer (snapshot from December 2005
  2969       or newer) to make reStructuring parsing work:
  2970      * Case preservation for anonymous links
  2971      * MoinMoin links get the appropriate CSS class
  2972      * Images do not get special CSS markup anymore
  2973      Thanks to Matthew Gilbert.
  2974     * Fixed a bug in the WSGI code which led to incorrect exception handling.
  2975     * Removed all nationality flags. They used to be used for indicating some
  2976       specific language (NOT nationality) and this was simply wrong and a bad
  2977       idea.
  2978     * Fixed some header rendering issues (CSS).
  2979     * SystemAdmin macro now checks against cfg.superuser list.
  2980 
  2981   Other changes:
  2982     * Added turkish i18n. To be considered as alpha as it got in last minute.
  2983 
  2984 
  2985 Version 1.5.0rc1:
  2986   This is the first release candidate of MoinMoin 1.5.0.
  2987   
  2988   Fixes:
  2989     * fixed broken logs when a DeletePage (maybe also RenamePage) comment
  2990       contained CR/LF characters (could happen when using copy&paste)
  2991     * fixed GUI editor MoinEditorBackup page containing HTML instead of wiki
  2992       markup
  2993     * fixed invalid HTML in FootNotes
  2994     * fixed HTML source in EditorBackup after canceling GUI editor
  2995     * Footnotes of included pages are not shown at the bottom of the including page.
  2996     * Bug in Dict handling that often breaks first entry
  2997 
  2998 Version 1.5.0beta6:
  2999   Authentication:
  3000     * Added SSO module for PHP based apps. Currently supported: eGroupware 1.2.
  3001       No need to login in two systems anymore - MoinMoin will read the PHP session
  3002       files.
  3003 
  3004   Fixes:
  3005     * Improved rendering of bullet lists and external links in Restructured text.
  3006       Thanks to Matthew Gilbert.
  3007     * Fixed modern theme rendering, including some fixes and workarounds for
  3008       broken MS IE.
  3009     * When checking for email uniqueness, do not compare with disabled user
  3010       profiles.
  3011     * Fix sending of HTTP headers for Despam action.
  3012     * Add some margin left and right of the link icons.
  3013 
  3014   Other changes:
  3015     * Made it easier for auth methods needing a user interface (like ldap or
  3016       mysql stuff). Unlike http auth, they usually need some "login form".
  3017       We made UserPreferences login form values (name, password, login, logout)
  3018       available as kw args of the auth method, so it is easy and obvious now.
  3019     * Make login and logout show at the same place. Is only shown when
  3020       show_login is True (default).
  3021     * Disabled login using &uid=12345.67.8910 method. Please use name/password.
  3022     * Made builtin moin_cookie authentication more modular: the cookie is now
  3023       touched by MoinMoin.auth.moin_cookie only, with one minor discomfort:
  3024       When creating a user, you are not automatically logged in any more.
  3025     * We now use the packager for additional help and system pages in all other
  3026       languages except English. The packages are attached to SystemPagesSetup
  3027       page and can be installed from there after getting "superuser" powers.
  3028       The "extra" package contains a collection of orphan pages not listed on
  3029       some SystemPagesIn<Language>Group page.
  3030 
  3031 
  3032 Version 1.5.0beta5:
  3033   Fixes:
  3034     * Fixed a minor user interface bug: it showed RenamePage and DeletePage
  3035       actions in the menu if you only had write rights and then complained
  3036       when you really tried when you had no delete rights additionally.
  3037     * We don't remove RenamePage and DeletePage from menu any more if user is
  3038       unknown. This stuff is only driven by ACLs now.
  3039     * Some fixes to Despam action.
  3040     * Fixed moin_dump (broken by some recent theme init change).
  3041     * Fixed a few tests by moving the theme init from moin_dump to RequestCLI.
  3042     * removed old_onload reference from infobox.js
  3043     * Fixed MoinMoin logo for IE.
  3044     * search: fixed whitespace handling in linkto: search terms
  3045     * Increased stability of the tests system by outputting results to sys.stdout
  3046       instead of request. Note that this changes the semantics for e.g. mod_py or
  3047       mod_fcgi.
  3048     * Fixed packaging system in the case of AddRevision that does not alter the page.
  3049     * Fixed a few bugs in the XML formatters (dom_xml, text_xml, xml_docbook).
  3050     * Fixed link icons. We now just use a.xxx.before where xxx is the link scheme,
  3051       e.g. a.http.before. See theme's common.css.
  3052     * Hopefully fixed some issue with non-ASCII attachment filenames.
  3053     * Workaround for Opera 8.5 making silly "No addition" categories.
  3054     * Do not show GUI editor for non-wiki format pages, because we only have a
  3055       converter from html to wiki right now.
  3056     * Fix the modern CSS issues for editbar, when it shifted content far right.
  3057       Also removed the absolute height value that never was right.
  3058     * Fix mod_python adaptor bugs failing to handle Location correctly.
  3059       See: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=339543
  3060 
  3061   Other changes:
  3062     * Added irc:// to the builtin supported link schemas. You can remove it
  3063       from config.url_schemas in case you have patched it in there.
  3064     * Added cfg.user_autocreate (default: False). Use True to enable user
  3065       profile autocreation, e.g. when you use http authentication, so your
  3066       externally authenticated users don't need to create their moin profile
  3067       manually. The auth method (see cfg.auth list) must check this setting
  3068       if it supports auto creation.
  3069     * Added user_autocreate support for auth.http and auth.sslclientcert.
  3070     * Added "." and "@" to allowed characters in usernames. This is needed
  3071       e.g. when using mod_pubcookie for authentication. mod_pubcookie returns
  3072       userids like "geek@ANDREW.CMU.EDU" (e.g. the Kerberos domain is part of
  3073       the id). Thanks to Brian E. Gallew for his patch, which we used for
  3074       inspiration for user autocreation changes.
  3075     * Changed auth method to return a tuple (user_obj, continue_flag), see
  3076       comments in auth.py.
  3077     * auth methods now create user objects with kw args auth_method and
  3078       auth_attribs, so that moin knows later how the user was authenticated
  3079       and which user object attributes were determined by the auth method.
  3080     * Added MoinMoin/scripts/import/IrcLogImporter.py to import supybot's
  3081       IRC logs into a moin wiki. We use MonthCalendar compatible page names,
  3082       so you can use the calendar for showing / navigating the logs.
  3083     * Removed packager binary from FCKeditor (fixing a Debian policy problem).
  3084     * Worked around .png transparency bugs of IE with the new logo. We ship
  3085       two logos: moinmoin.png without an alpha channel (IE compatible) and
  3086       moinmoin_alpha.png which has an alpha channel and looks better on
  3087       browsers with full .png support.
  3088     * Allow a .zip file to have a directory in it if it is the only one.
  3089 
  3090 Version 1.5.0beta4:
  3091   Fixes:
  3092     * use <span class="anchor"> instead of <a> for line-xxx anchors, this
  3093       fixes some rendering problems on IE
  3094     * Fixed the ReStructured text parser when it was used with non-HTML
  3095       formatters. Increased compatiblity with new docutils code.
  3096       (Thanks to Matt Gilbert.)
  3097   Other changes:
  3098     * cfg.stylesheets = [] (default). You can use this on wiki or farm level
  3099       to emit stylesheets after the theme css and before the user prefs css.
  3100       The list entries must be ('screen', '/where/ever/is/my.css') style.
  3101     * Added sample code for auth using an external cookie made by some other
  3102       program. See contrib/auth_externalcookie/*. You need to edit it to
  3103       fit whatever cookie you want to use.
  3104 
  3105 Version 1.5.0beta3:
  3106   Fixes:
  3107     * fixed editor preview throwing away page content for new pages
  3108     * require POST for userform save and create* action
  3109     * use request.normalizePagename() while collecting pagelinks
  3110     * do not offer gui editor for safari
  3111   Other changes:
  3112     * tell user if account is disabled
  3113     * added support for linking to .ico and .bmp
  3114     * attachment methods for the text_xml and xml_docbook formatters
  3115     * new favicon
  3116     * updated i18n (fixed nl, did nobody notice this?) and underlay
  3117     * changed show_interwiki default to 0
  3118 
  3119 Version 1.5.0beta2:
  3120   Fixes:
  3121     * fix wrong _ in title links (MoinMoinBugs/AddSpaceWikiNameAtHead)
  3122     * fix gui editor (converter) crash on save
  3123     * MoinMoinBugs/PageHitsFails
  3124     * MoinMoinBugs/PackagePagesFailsBecauseAllowedActionsMissing
  3125     * Avoid destroying existing page content if editor is called with
  3126       template parameter for an existing page.
  3127     * fix countdown javascript for browser status line in editor
  3128     * added page title display for editor
  3129     * added header div for classic theme
  3130 
  3131   Authentication and related:
  3132     * Added a WhoAmI.py wiki xmlrpc plugin to check whether auth works
  3133       correctly for xmlrpc. There is a counterpart script WhoAmI.py that
  3134       uses http auth when calling the xmlrpc plugin, so you can use it to
  3135       check http auth.
  3136 
  3137 Version 1.5.0beta1:
  3138     * Requirements changed to require Python >= 2.3. We recommend that
  3139       you use the latest Python release you can get. The reason we
  3140       dropped 2.2.2 support is because no developer or tester uses this
  3141       old version any more, so incompatibilities crept in the code
  3142       without anybody noticing. Using some recent Python usually is no
  3143       real problem, see there for some hints in case you still run an
  3144       old python: http://moinmoin.wikiwikiweb.de/NewPythonOnOldLinux
  3145       The hint also does apply to other POSIX style operating systems,
  3146       not only Linux.
  3147     * We recommend you use MoinMoin/scripts/cachecleaner.py to clean the
  3148       wiki's cache (see comments at top of the script).
  3149       The cache will automatically be rebuilt (some operations may take
  3150       some time when first being used, e.g. linkto: search, so be patient!).
  3151 
  3152   Config Changes:
  3153      * there is a file CHANGES.config with just the recently changed stuff
  3154        from multiconfig.py
  3155      * new defaults:
  3156        * page_front_page old: u"FrontPage" new: u"HelpOnLanguages"
  3157          please just read the help page in case you see it :)
  3158        * bang_meta old: 0 new: 1
  3159        * show_section_numbers old: 1 new: 0
  3160        * some regexes that used to be [a-z]Uxxxx$ are now [a-z0-9]Uxxxx$
  3161        * navi_bar has no page_front_page as first element any more
  3162      * removed settings and code [new behaviour]:
  3163        * acl_enabled [1]
  3164        * allow_extended_names [1]
  3165        * allow_numeric_entities [1]
  3166        * backtick_meta [1]
  3167        * allow_subpages [1]
  3168      * new settings:
  3169       * cfg.mail_sendmail = "/usr/sbin/sendmail -t -i" can be used if sending
  3170         via SMTP doesn't work on your server. Default is None and that means
  3171         using SMTP.
  3172       * language_default replaces the old default_lang setting (just renamed).
  3173       * language_ignore_browser = True can be used to let moin ignore the
  3174         user's browser settings (e.g. if you run a local-language only wiki
  3175         and your users use misconfigured or buggy browsers often). Default is
  3176         False. Don't forget to set language_default when using this.
  3177  
  3178     * Wiki Editor changes / new WYSIWYG editor
  3179      * fully imported the javascript based LGPLed FCKeditor (many thanks
  3180       to Fred CK for his great work). See http://fckeditor.net/ for details.
  3181      * config for FCKeditor is at wiki/htdocs/applets/moinfckeditor.js
  3182      * added cfg.interwiki_preferred (default = []) to set a list of wikis to
  3183        show at the top of the wiki selection list when inserting an
  3184        interwiki link (just use the same wiki name as in interwiki
  3185        map). If the last list item is None, then the preferred wikis
  3186        will not be followed by the entries of the interwiki map.
  3187     * moved save/preview/... buttons to the top so that they can be
  3188       easily reached
  3189     * reduced edit_rows default to 20 lines
  3190     * Added support for edit by doubleclick in the diff view
  3191 
  3192     * Improved wiki farm support
  3193      * make user files sharable between several wikis in a farm
  3194       * allow/use interwiki subscriptions
  3195       * use interwiki links in page trail
  3196       * save bookmark per wiki name
  3197      * cfg.cookie_domain can be used to set a cookie valid for a complete
  3198        domain (default: None == only for this host). If you use '.domain.tld',
  3199        the cookie will be valid for all hosts *.domain.tld - good for host
  3200        based wiki farms.
  3201      * cfg.cookie_path can be used to set a cookie valid for a wiki farm under
  3202        some base path (default: None == only for this wiki's path). If you use
  3203        '/wikifarm',  the cookie will be valid for all wikis
  3204        server.tld/wikifarm/* - good for path based wiki farms.
  3205      * Interwiki user homepage (if you have MANY users)
  3206        Generated links for usernames are interwiki now, use cfg.user_homewiki
  3207        (default: 'Self') to specify in which wiki the user home pages are
  3208        located. Note: when pointing this to another wiki, the /MoinEditorBackup
  3209        functionality will be disabled.
  3210        @SIG@ also uses interwiki when needed.
  3211 
  3212     * Authentication, ACLs and related
  3213      * Modular authentication: cfg.auth is a list of functions that return a
  3214        valid user or None, use it like this:
  3215            from MoinMoin.auth import http, moin_cookie
  3216            auth = [http, moin_cookie]
  3217      * cfg.auth_http_enabled was removed, please use cfg.auth instead.
  3218      * http auth now supports "Negotiate" scheme, too
  3219      * Added sslclientcert auth method (Apache: untested, Twisted: not
  3220        implemented, IIS: no idea). See MoinMoin/auth.py for details.
  3221        Submit a patch if you have improvements.
  3222      * cfg.superuser is a list of unicode usernames. It is used by some
  3223        critical operations like despam action or PackageInstaller.
  3224      * removed allowed_actions, we now use actions_excluded only and it
  3225        defaults to [], that means, no action is excluded, everything is
  3226        allowed (limited by ACLs). In case of RenamePage and DeletePage,
  3227        this shouldn't be a problem as both can be reverted. In case you
  3228        did not allow attachments, you now have to use:
  3229        actions_excluded = ['AttachFile']
  3230      * special users (All, Known, Trusted) in Groups are now supported
  3231      * MoinMoin.security.autoadmin SecurityPolicy added
  3232        When using this security policy, a user will get admin rights on his
  3233        homepage (where pagename == username) and its sub pages. This is needed
  3234        for the MyPages action, but can also get used for manual ACL changes.
  3235        It can also be used for Project page auto admin functionality, see the
  3236        comments in the script for details.
  3237        Further it can automatically create the user's group pages when the
  3238        user saves his homepage.
  3239      * there is a UpdateGroup xmlrpc call, see MoinMoin/xmlrpc/UpdateGroup.py -
  3240        you can use this to update your *Group pages e.g. when generating them
  3241        from an external group database.
  3242 
  3243     * UserPreferences changes
  3244      * Alias name: is used for display purposes, when "name" is cryptic. It is
  3245        shown e.g. in the title attribute of userid links (displayed when
  3246        moving the mouse over it).
  3247      * "Publish my email (not my wiki homepage) in author info" - use this
  3248        if you don't have a wiki homepage, but if you want to be contactable
  3249        by email. When you edit a page, your email address will be published
  3250        as mailto: link on RecentChanges, at bottom of page (last editor) and
  3251        in page info. If the wiki runs publically on the internet, be careful
  3252        using this or your email address might be collected by spammers.
  3253      * Preferred Editor: whether you want to use the text editor (as in
  3254        previous moin versions), the gui editor (new!) or both (you will get
  3255        2 edit links in that case).
  3256      * a user can add/remove the current page to/from his quicklinks with an
  3257        appropriate action now
  3258      * if cfg.user_email_unique = False, we don't require user's email
  3259        addresses to be unique
  3260      * removed show_fancy_links user preferences setting to simplify code and
  3261        caching. Displaying those icons is now done by CSS styles (see
  3262        common.css). Maybe needs fixing for non-standard themes and RTL langs.
  3263 
  3264     * Markup
  3265      * added strikethrough markup: --(striked through text here)--
  3266      * @ME@ expands to just the plain username (no markup added) on save
  3267     
  3268     * User homepages
  3269      * when a user accesses his own non-existing homepage (pagename ==
  3270        username), the wiki will present the MissingHomePage system page
  3271        content, explaining what a user homepage is good for and offer
  3272        one-click editing it with content loaded from HomepageTemplate
  3273      * creation of homepage subpages is assisted by the MyPages action, which
  3274        offers rw, ro page creation (and a related group) or creation of private
  3275        pages. If you are not in the user_homewiki, you will get redirected
  3276        there first.
  3277 
  3278   Other changes/new features:
  3279     * Added PackageInstaller and unzipping support (see wiki page
  3280       HelpOnActions/AttachFile for further details).  PackageInstaller requires
  3281       the user to be in cfg.superuser list.
  3282      * Added an PackagePages action to simplify the package creation.
  3283     * Added location breadcrumbs - when you are on some subpage, the page
  3284       title parts link to the corresponding parent pages, the last part does
  3285       the usual reverse linking.
  3286     * added WSGI server support, thanks to Anakim Border, see:
  3287       wiki/server/moinwsgi.py (moin as WSGI app, uses the flup WSGI server,
  3288                                see http://www.saddi.com/software/flup/)
  3289       MoinMoin/server/wsgi.py (adaptor code)
  3290     * added a "Despam" action to make de-spamming a wiki easy (mass revert
  3291       bad changes done by a single author or bot). You need to be in
  3292       cfg.superuser to use it.
  3293     * Better diffs with links to anchors to the changed places
  3294     * Enhanced table support in the DocBook formatter.
  3295     * Added 'moin' daemon script, that let you run moin standalone
  3296       server as daemon and control the server with simple command line
  3297       intreface: moin start | stop | restart | kill
  3298     * Add 'restart' option to mointwisted script
  3299     * Add properties option to standalone server config. Allow
  3300       overriding any request property like in other server types.
  3301     * Add support for running behind proxy out of the box with out
  3302       manual url mapping.
  3303       See HelpOnConfiguration/IntegratingWithApache
  3304     * added a WikiBackup action, configure it similar to this:
  3305       data_dir = "/path/to/data"
  3306       backup_include = [data_dir, ] # you can add other dirs here
  3307       backup_users = ["BackupUserName", ] # only TRUSTED users!
  3308       You usually don't need to change the default backup_exclude setting.
  3309       The default backup_include list is EMPTY and so will be your
  3310       backup in case you don't configure it correctly.
  3311       If you put your data_dir there, the backup will contain private
  3312       user data like email addresses and encrypted passwords.
  3313     * Added a SubscribeUser action which allows the administrator to subscribe users to the
  3314       current page.
  3315     * Added thread count to SystemInfo macro.
  3316     * Added Petr's newest patch against the DocBook code. It allows you to use macros (esp. the include macro) in DocBook pages in order to build larger documents.
  3317     * Added a RenderAsDocbook action which redirects to the DocBook formatter.
  3318     * Added searching for wiki-local words lists under <data_dir>/dict/.
  3319       They are used additionally to the global lists in MoinMoin/dict/.
  3320     * moin_dump now also dumps attachments referenced from the page.
  3321       It doesn't dump stuff that is just attached, but not referenced!
  3322     * On RecentChanges we now force the comment to be breakable, this improves
  3323       rendering of over-long words or on narrow browser windows - especially
  3324       for themes with limited content width like rightsidebar.
  3325     * We now have the "new" icon on RecentChanges clickable, just links to the
  3326       page.
  3327     * Print view now shows "interwikiname: pagename" (for show_interwiki = 1).
  3328 
  3329   International support:    
  3330     * mail_from can be now a unicode name-address 
  3331       e.g u'Jürgen wiki <noreply@jhwiki.org>'
  3332 
  3333   Theme changes:
  3334     * logo_string is now should be really only the logo (img).
  3335       If you included your wiki's name in logo_string you maybe want to remove
  3336       it now as it is shown as part of the location display now anyway (if
  3337       you set show_interwiki = 1).
  3338     * You maybe want to remove page_front_page from your navi_bar - we link to
  3339       that page now from the logo and (new, if you set show_interwiki = 1) from
  3340       the interwiki name displayed in location display, so you maybe don't need
  3341       it in navi_bar, too.
  3342     * If you have a custom theme, you should / may:
  3343      * sync modern/css/screen.css #pagelocation #pagetrail stuff to your
  3344        screen.css or pagelocation display (title()) will look strange (like a
  3345        list).
  3346      * remove "#title h1 ..." CSS (or any other CSS assuming h1 is a page
  3347        title and not just a first level heading), it is not used any more.
  3348      * we now render = heading = as <h1> (was <h2> before 1.5),
  3349        == heading == as <h2> (was <h3>), etc.
  3350      * maybe move both title() and trail() to header area, like the builtin
  3351        themes do it.
  3352      * there is a new interwiki() base theme method that optionally (if
  3353        show_interwiki = 1) shows the interwiki name of this wiki and links to
  3354        page_front_page. The css for it is #interwiki.
  3355 
  3356   Developer notes:    
  3357     * Plugin API was improved. When plugin module is missing,
  3358       wikiutil.PluginMissingError is raised. When trying to import a
  3359       missing name from a plugin module, wikiutil.PluginMissingError is
  3360       raised. You must update any code that use wikiutil.importPlugin.
  3361       Errors in your plugin should raise now correct tracebacks. See
  3362       http://moinmoin.wikiwikiweb.de/ErrorHandlingInPlugins
  3363     * pysupport.importName was changed, it does not check for any
  3364       errors when trying to import a name from a module. The calling
  3365       code should check for ImportError or AttributeError. Previous
  3366       code used to hide all errors behind None.
  3367     * Its easier now to customize the editbar by overriding
  3368       editbarItems() in your theme, and returning a list of items to
  3369       display in the editbar. To change a single editbar link, override
  3370       one of the xxxLink methods in your theme.
  3371 
  3372   Internal Changes:
  3373     * request.formatter (html) is available for actions now
  3374     * theme API's d['page_home_page'] is gone (sorry) and replaced by
  3375       d['home_page'] which is either None or tuple (wikiname,pagename).
  3376       It is better to use the base classes function for username/prefs anyway.
  3377     * introduced cfg.hacks for internal use by development, see comment in
  3378       multiconfig.py and file HACKS.
  3379     * added IE7 (v0.9) from Dean Edwards (see http://dean.edwards.name/IE7/) -
  3380       that should fix quite some IE bugs and annoyances (on Win32).
  3381       * for enabling IE7, use cfg.hacks = { 'ie7': True }
  3382     * reducewiki now also copies all attachments (we use that to make underlay
  3383       directory from moinmaster wiki's data_dir)
  3384 
  3385   Fixes:  
  3386     * Fixed a typo in xslt.py which led to a traceback instead of an
  3387       error message in case of disabled XSLT support.
  3388     * Fixed crash in twisted server if twisted.internet.ssl is not
  3389       available.
  3390     * Fixed wrong decoding of query string, enable wiki/?page_name urls
  3391       with non ascii page names.
  3392     * Fixed wrong display of non ascii attachments names in
  3393       RecentChanges and page revision history.
  3394     * Fixed a crash when trying to run standalone server on non posix os.
  3395     * Fixed highlight of misspelled words in Check Spelling action.
  3396     * Fixed case insensitivity problems on darwin (Mac OS X). See
  3397       MoinMoinBugs/MacHfsPlusCaseInsensitive
  3398     * Added RecentChanges (only the english one) to the pages getting
  3399       html_head_index headers
  3400     * text_html cache files written with this code will invalidate themselves
  3401       if they detect to be older than the wikiconfig. Note: you should remove
  3402       all old text_html cache files once after upgrading, they will then be
  3403       rebuilt automatically with the new code.
  3404     * Fixed MoinMoinBugs/12_to_13_mig10_Walk
  3405     * Fixed the word_rule: a word like AAAbbAbb isn't teared into two parts
  3406       any more (was: AA<link>AbbAbb</link>)
  3407     * Fixed false positive InterWiki markup for languages like Finnish.
  3408       InterWiki links are only rendered if the left side has an appropriate
  3409       entry in the interwiki map, otherwise it is rendered as simple text.
  3410     * Fixed unicode error when uploding non-ascii file name using mod
  3411       python.
  3412     * Fixed error handling of wikirpc requests, should give more
  3413       correct errors and prevent no error output and blocking the
  3414       client in some cases.
  3415     * Fixed the "lost password" mail processing. If a user entered some email
  3416       address unknown to the system, he was not notified of this, but just got
  3417       a useless mail with no account data in it. Now the system directly tells
  3418       the user that he entered an unknown email address.
  3419     * Fixed SystemInfo, it now also lists parsers in data/plugin/parser dir.
  3420     * Fix error handling on failure, improved error display
  3421     * Fix error handling when importing plugins or importing modules
  3422       dynamically. The fix is not backward compatible with older plugins.
  3423     * Fix chart action, returns a page with error message when chart
  3424       can not be created.
  3425     * Fixed formatter usage in the ShowSmileys macro.
  3426     * Fixed updating pagelinks cache for [:page:text] or [wiki:Self:page text],
  3427       fixes display of LocalSiteMap and rendering of such links.
  3428     * Hopefully fixed urllib problems (esp. with py 2.4.2, but also before) by
  3429       using our own urllib wrapper that handles encoding/decoding to/from
  3430       unicode, see wikiutil.py. Also made a similar fix for making and parsing
  3431       query strings.
  3432     * Fixed MonthCalendar tooltips when containing special chars like quotes.
  3433     * Added html escaping for diff text for RSS feed with diff=1.
  3434     * The distance between page content beginning and the first = heading =
  3435       was much too much. Fixed.
  3436     
  3437 Version 1.4:
  3438 
  3439     We used that version number for an internal and early development version
  3440     for what will be called moin 2.0 at some time in the future.
  3441     There will never be a 1.4.x release.
  3442 
  3443 
  3444 Version 1.3.5 (2005-08-04, Revision moin--main--1.3--patch-883)
  3445 
  3446 Fixes:
  3447     * small CSS fix for rightsidebar theme
  3448     * applied some Debian patches (thanks to Jonas!):
  3449       * de i18n spelling fixes
  3450       * AttachFile fix, we strip CR in .draw files now
  3451       * when loading spellcheck dictionaries, we want utf-8, but we make
  3452         a 2nd try with iso-8859-1 encoding.
  3453 
  3454 New Features:
  3455 
  3456     * enabled using https with the Twisted server:
  3457       You need to use port 443, have PyOpenSSL (+ ssl libs it depends on)
  3458       installed and have some site key and certificate PEM files configured in
  3459       your twistedmoin.py file:
  3460       sslcert = ('/whereever/cert/sitekey.pem', '/whereever/cert/sitecert.pem')
  3461 
  3462 
  3463 Version 1.3.5rc1 (2005-07-31, Revision moin--main--1.3--patch-865)
  3464 
  3465 Fixes:
  3466 
  3467     * Fixed security bug when acl of deleted page was ignored. See:
  3468       http://moinmoin.wikiwikiweb.de/MoinMoinBugs/ACLIgnoredAfterDelete
  3469     * AttachFile did not display the original filename plus there
  3470       was a confusion in input field labelling ('Rename to').
  3471     * Fixed shortcut link non-existent page detection.
  3472     * Fixed non-working bookmark function on python 2.2.x.
  3473     * Fixed wikirpc getPageInfo call on python 2.2.x.
  3474     * Fixed the failing import of plugins from the data/plugin/
  3475       directories if run in zipimport environments.
  3476     * Fixed traceback which occurred on negated searches.
  3477     * Fixed crash when trying to render error message on twisted, fast
  3478       cgi and modpy.
  3479     * Fixed error message with modpy, used to show wrong errors below
  3480       the real message.
  3481     * Fixed search and goto text fields for better compatibility with
  3482       dark themes and better control through css.
  3483     * Show an edit link if MissingPage is missing and a warning in the
  3484       server log.
  3485     * Fixed missing footer in the editor.
  3486     * Fixed indented (invalid) headings with broken links in table of
  3487       contents.
  3488     * Fixed crash when file name is too long, show standard error message.
  3489     * Save trail file in a safe way, should be enough for normal use.
  3490     * Fixed remember_last_visit user preferences option when show_trail
  3491       is not selected.
  3492     * Fixed the tests for Standalone, Twisted, FastCGI and Mod_Python.
  3493       Run with ?action=test from any page.
  3494     * Fixed rare bug when wrong search type was performed when pasting
  3495       search term in Safari.
  3496     * Fixed crash for custom formatters and dom_xml (which occurred if
  3497       smileys were in the page).
  3498     * Editor opens on double click in pages with single quote in the
  3499       name, like "Ben's Wiki".
  3500     * '/.' in page names are not replaced any more by '/(2e)'
  3501     * Fixed the long delays while saving pages using RequestCLI.
  3502     * Fixed variable expanding for users with non WikiName.
  3503     * Fixed MonthCalendar's calculation of "today" to use the user's
  3504       time zone setting.
  3505     * Fixed moin_dump script, use same configuration options as other
  3506       scripts.
  3507     * Fixed url_mappings to work in proxied setups and sent mails
  3508       again. Also fixed for image links. Thanks to JohannesBerg.
  3509     * Fixed page shown after saving a drawing (esp. when saved from a
  3510       sub page). Fixed help link for drawings.
  3511     * Fixed mig10 script to run on Python < 2.3.
  3512     * The twisted server defaulted to a socket timeout of 12 hours!
  3513       We reduced that to a more sane 10 minutes, that should still be more
  3514       than enough. This fixed the "too many open files" problem we
  3515       encountered quite often recently. Thanks to Helmut Grohne!
  3516 
  3517 Other Changes:
  3518 
  3519     * Added {hu} flag.
  3520     * Added cz, pt and pt-br i18n.
  3521     * We send a 404 http status code for nonexisting wiki pages now,
  3522       maybe this will repell some search engines from requesting gone
  3523       pages again and again. The wiki user still sees the MissingPage
  3524       wiki stuff, so a user usually won't notice this change.
  3525     * Return 500 error code on failure and exceptions.
  3526     * Added some more bot / leech tool user agent strings.
  3527     * Prevent page floating elements from floating out of the page over
  3528       the footer, in modern, rightsidebar and classic themes.
  3529     * Encode URLs in a safer way
  3530     * We allow usernames with ' character in them now (like Tim O'Brian).
  3531     * Added support for the new security flags in docutils 0.3.9.
  3532     * @MAILTO@ expands now to safer [[MailTo()]] macro.
  3533     * Clarified and i18ned lost password mails.
  3534     * Added 'TitleIndex' and 'SiteNavigation' (+ translation) to the
  3535       list of pages that use html_head_index (so that robots
  3536       "index,follow").  Please make sure to have either FindPage,
  3537       TitleIndex or SiteNavigation in your navi_bar or in your
  3538       page_front_page content if you want search engines to find all
  3539       your pages.
  3540     * Make it possible to send account data when being logged in (for
  3541       future reference or whatever purpose).
  3542     * Speed up when running with persistent servers, the wiki config
  3543       does only get loaded once and misc. stuff is being cached between
  3544       requests now.
  3545     * The unit tests are disabled when using multi threading, because
  3546       the wiki configuration is shared between diffrent threads.
  3547     * The main code path (using standalone server) of MoinMoin runs on
  3548       PyPy now.
  3549     * Formatters do automatically transform HTML to plain text if they are
  3550       called with raw HTML code.
  3551     * Using larger socket backlog on Standalone and FastCGI servers
  3552       should be more reliable on high load.
  3553     * We now strip leading path from attachments uploaded by IE (this is
  3554       a bug in IE, not in MoinMoin). Better use a sane browser, like Firefox.
  3555     * added "teleport" to the user agent blacklist
  3556 
  3557 New Features:
  3558 
  3559     * Integrated Lupy indexer for better search performance. It is disabled
  3560       by default as of 1.3.5 as it still has known issues.
  3561       See multiconfig.py if you want to test it.
  3562     * Integrated MonthCalendar 2.1, with some new features:
  3563       * a mouseover bubble that shows first level headlines of the linked
  3564         day page
  3565       * all calendars with same pagename move when using cal navigation,
  3566         thanks to Oliver Graf
  3567       * included AnnualMonthlyCalendar patch of Jonathan Dietrich
  3568         (use [[MonthCalendar(Yearly,,,+1,,6,1)]] syntax for birthdays and
  3569         other annually repeating stuff)
  3570       Make sure you remove old MonthCalendar.* from data/plugin/macro so that
  3571       moin will use the new code in MoinMoin/macro/MonthCalendar.py.
  3572       Maybe also clear the text_html cache.
  3573     * Added the new XSLT parser and the DocBook parser. This should increase
  3574       the 4suite compatiblity. See HelpOnXmlPages for details.
  3575       It now should run on 4suite 1.0a4 and 1.0b1. Thanks to Henry Ho!
  3576     * Added the DocBook formatter. This will let you generate DocBook markup
  3577       by writing simple wiki pages. It needs PyXML.
  3578     * It is now possible to customize parts of the UserPreferences page in
  3579       your wikiconfig (changing defaults, disabling fields, removing fields):
  3580       * Use user_checkbox_* for the checkboxes.
  3581       * Use user_form_* for other fields.
  3582       * See MoinMoin/multiconfig.py for the built-in defaults.
  3583     * New standalone server classes: ThreadPoolServer using pool of
  3584       threads, ThreadingServer with thread limit and ForkingServer.
  3585     * New standalone server configuration options: serverClass,
  3586       threadLimit, requestQueueSize.
  3587     * Use "PythonOption Location" in mod_python setup to solve script_name
  3588       problems.
  3589 
  3590 Developer notes:
  3591     
  3592     * Theme can now override maxPagenameLength() method to control page
  3593       name shortening.
  3594     * A search Match now provides access to the full re match via
  3595       the re_match attribute (use to access groups of the match)
  3596     * Underlay is not managed by arch any more. The tree contains an
  3597       underlay tarball, and you should untar after you update from main.
  3598     * "make update-underlay" will untar underlay
  3599     * "make merge" will star-merge main into your tree
  3600     * "make test" will now create and run in a fresh testwiki instace
  3601     * "make clean" options added
  3602     * _tests module does not have a global request any more. To refer to
  3603       the current request in a test, use self.request.
  3604     * _tests.TestConfig class require a request in the constructor.
  3605     * "python tests/runtests.py test_module" will run only test_module
  3606     * request.cfg stays between requests (for persistent servers).
  3607 
  3608 
  3609 Version 1.3.4 (2005-03-13, Revision moin--main--1.3--patch-666)
  3610 
  3611 Fixes:
  3612 
  3613     * Fixed ACL check in LikePages macro that caused links to unreadable 
  3614       pages to show.
  3615     * Fixed ACL check in newpage action.
  3616     * Fixed a security problem when admin policy defined in a custom
  3617       SecurityPolicy class was ignored.
  3618     * Fixed ACL check in action=show so that a user who may not read a page
  3619       also can't find out WHEN the protected page was updated.
  3620     * Workaround on Windows 95, 98, ME in order to clear the dircache.
  3621       This fixes some bugs related to an outdated page list and newly created
  3622       pages that did not appear immediately.
  3623     * Fixed decoding issues of page names on Windows, finally.
  3624       http://moinmoin.wikiwikiweb.de/MoinMoinBugs/BrokenUmlautsInLinksIn131
  3625     * Fixed traceback on IIS.
  3626       http://moinmoin.wikiwikiweb.de/MoinMoinBugs/request%2epy_broken_on_IIS
  3627     * Fixed wikirpc for standalone server.
  3628     * Other fixes (encoding and str/unicode data type related) to wikirpc
  3629       server, fixing some non-ascii issues hopefully.
  3630     * Fixed broken query strings for Standalone installations.
  3631     * Fixed backlinks - the result did not always show all links, often it 
  3632       showed too many irrelevant matches (MoinMoinBugs/BacklinksAreBroken).
  3633     * Fixed the acceptance of the show_hosts setting. Now you should be able
  3634       to hide any IP or host name from being published by MoinMoin by enabling
  3635       this option.
  3636     * Fixed wrong line endings on email messages.
  3637     * Fixed MoinMoinBugs/StandaloneUnquotesTooMuch.
  3638     * Fixed crash when trail file is missing.
  3639     * Fixed a traceback when searching for single ( or ).
  3640     * Added mig10 script to fix crashes with uncoverted edit-locks and file
  3641       attachments. Just use it as you did with mig1..mig9 before.
  3642     * Added mig11 script to add __init__.py files to data/plugin (and below).
  3643     * added some fixes for the xslt parser (thanks to fanbanlo), it might be
  3644       still broken, but someone with deeper knowledge about xslt should fix it.
  3645     * Replaced image link with W3C's "html 4.01 compliance" icon by a simple
  3646       text link to avoid https: or config trouble.
  3647     * Catch OverflowError backtrace when illegal date strings (e.g. <1970 or
  3648       >2038) are fed to moinmoin's time routines. It will just output current
  3649       date / time in those cases.
  3650     * UserPreferences now also set a date_fmt preference and Date macro
  3651       honours it. You may have to reset your UserPreferences value for that.
  3652     * Fixed free parent and subpage links in interwiki notation.
  3653       http://moinmoin.wikiwikiweb.de/MoinMoinBugs/FreeParentLinksAreBroken
  3654     * Fixed a traceback for invalid ReST markup.
  3655     * Fixed UnicodeError in SystemAdmin's Attachment Browser.
  3656 
  3657 Other Changes:
  3658 
  3659     * Optimized the IRC parser.
  3660     * Support for zipimport of the MoinMoin package. This allows you to use
  3661       py2exe and similar programs.
  3662     * Show the editor's name in the mail subject.
  3663     * Added the pragmas description and keywords. They will add <meta> headers
  3664       if used.
  3665     * Added MoinMoin/scripts/xmlrpc-tools/putPageTest.py example script, useful
  3666       as a starting point for importing data using wiki xmlrpc.
  3667     * Optimised display on Opera browser.
  3668 
  3669 New features:
  3670 
  3671     * The search modifier "linkto:" was introduced. You can use it to search
  3672       for links.
  3673     * The NewPage macro now can take a PageTemplate parameter, see HelpOnMacros.
  3674     * New config settings (so you don't need to edit wikirpc.py any more):
  3675       xmlrpc_putpage_enabled = 0 (if 1, enables writing to arbitrary page names)
  3676       xmlrpc_putpage_trusted_only = 1 (if 0, doesn't require users to be
  3677        authenticated by http auth - DANGEROUS, DO NOT SET TO 0!!!)
  3678     * Added support for Digest and NTLM authentication with CGI (e.g. if you
  3679       use those Apache modules)
  3680     * The datetime string accepted by Date and DateTime macros was extended to
  3681       accept a timezone specification, so now +/-HHMM is also valid, e.g.:
  3682       2005-03-06T15:15:57Z (UTC, same as +0000)
  3683       2005-03-06T15:15:57+0000 (UTC)
  3684       2005-03-06T16:15:57+0100 (same time given as local time for time zone
  3685                                 with offset +0100, that is CET, e.g. Germany)
  3686       2005-03-06T10:15:57-0500 (same time given as local time for time zone
  3687                                 with offset -0500, EST, US Eastern Std. Time)
  3688       The values given as macro argument will be transformed to UTC internally
  3689       and then adapted again according to viewing user's UserPreferences, so
  3690       the user will see the same moment in time but shown in his local time
  3691       zone's time (at least if he set his UserPreferences correctly and didn't
  3692       forget changing them twice a year for DST and non-DST).
  3693     * Readded (now optional) editlink footer to Include macro. Add
  3694       ',editlink' to call to enable this.
  3695     * star "smileys" e.g. {*}{*}{*}{o}{o}
  3696 
  3697 
  3698 Version 1.3.3 (2005-01-24, Revision moin--main--1.3--patch-595)
  3699 
  3700 Fixes:
  3701 
  3702     * fixed ACL security problem in search
  3703     * fix for IIS with CGI allowing page names that contain chars
  3704       that are not in the system code page
  3705     * fixed MoinEditorBackup revisions to start with 1 now
  3706     * improved page locking ('current' file)
  3707     * Unittests (normally shown at end of action=test output) are currently
  3708       disabled for everything except CGI, because they only work reliably with
  3709       CGI, giving wrong results for other request methods.
  3710 
  3711 
  3712 Version 1.3.2 (2005-01-23, Revision moin--main--1.3--patch-587)
  3713 
  3714 Fixes:
  3715 
  3716     * ACL bugfix for deleted pages with ACL protection.
  3717     * ACL bugfix for "Default" acl.
  3718     * Fixed updating of groups and dicts
  3719     * Python 2.2.x related fixes (worked on 2.3+)
  3720       * Fixed traceback in RecentChanges.
  3721       * Fixed traceback with links browser.
  3722     * Fixed 0 revision display in 'Show changes'.
  3723     * Fixed traceback in Antispam which occurred when it could not connect
  3724       to MoinMaster. Log the errors to stderr or error.log.
  3725     * Fixed bug in Page init (no date, use rev). Fixes problem with
  3726       #deprecated PI.
  3727     * Fixed empty lists in empty search results.
  3728     * Cosmetic fix for modern theme (when viewed with Internet Explorer).
  3729     * Fixed migration 9 script, do not drop newline, do not drop error.log, 
  3730       note about missing error.log.
  3731     * Fixed repair_language.py script, keep ending newline on revisions.
  3732     * Show headings and macro content in correct direction when mixing content 
  3733       in several directions in the same page and using caching.
  3734     * Fixed bug in standalone re farmconfig.
  3735     * Fixed DOS condition in antispam code.
  3736     * Use smaller margin in print mode to get better results with 
  3737       Mozilla/Firefox.
  3738     * Fixed some user input escaping issues.
  3739     * Fixed a problem when one wiki plugin override other wikis plugins in 
  3740       same farm.
  3741     * Fixed some broken tests.
  3742     * Fixed recursive include in pstats.
  3743     * Fixed bug in standalone - HTTP result code was 200 even when the access
  3744       was forbidden.
  3745     * Fixed traceback when trying to login with non-ascii password.
  3746     * Fixed traceback when xml is not available, reported on Python 2.2.?
  3747     * Fixed slideshow to show slides in sorted order again.
  3748     * Fixed serving multiple wikis on same IP/different ports with twisted and
  3749       farmconfig.
  3750     * It is possible to run with data_underlay_dir = None for special
  3751       application, but be aware that the wiki won't be usable unless you have
  3752       at least some of the system pages from underlay/ available.
  3753     * Files with Unicode characters in their filename are possible now.
  3754     * Bugfix for broken [:page#anchor:text] links.
  3755     * Workaround an instability of the gdchart module leading to
  3756       stalled servers etc.
  3757     * Fixed some event-log decoding issues that affect charts rendering.
  3758 
  3759 Other changes:
  3760 
  3761     * Major speed improvement over 1.3.1. Many times faster title search,
  3762       creating new page, opening page editor and any operation that list pages.
  3763       See http://moinmoin.wikiwikiweb.de/MoinBenchmarks
  3764     * Improved README.migration.
  3765     * Cleaner design for login/register interface, login is always the default
  3766       button when the user click Enter.
  3767     * If there are problems found in the configuration, log the error
  3768       and display helpful error messages in the browser.
  3769     * More forgiving unicode configuration policy, you must use the u'string' 
  3770       format only for unicode values.
  3771     * Added profiling to CGI.
  3772     * The content of farmconfig.py is similar to wikiconfig.py now.
  3773     * Unexpected errors while loading cache files are logged.
  3774     * i18n for icon ALT tags.
  3775     * Include request initialization code in the profile in standalone server.
  3776     * When creating new theme, style sheets are inherited correctly, no need
  3777       to override style sheets just to get them working.
  3778     * Many times faster plugin system. Typical pages are about 35% faster, 
  3779       pages with many plugins can be many times faster. 
  3780     * Spiders are allowed to fetch attachments.
  3781     * Old user files containing password hash encoded in pre 1.3 charset
  3782       are auto repaired on first login.
  3783     * data_dir defaults to './data', underlay_data_dir to './underlay' now.
  3784       It is a good idea to replace those by absolute pathes in wikiconfig.py.
  3785     * Renamed "Refresh" to "Delete Cache" - it was misused by users. The action 
  3786       was also moved into the action menu in the modern and rightsidebar themes.
  3787     * Added a workaround for TableOfContents missing some links by making it
  3788       uncacheable via a "time" dependency.
  3789     * Removed interwiki icon and title attribute for wiki:Self:... links.
  3790     * Unittests (normally shown at end of action=test output) are currently
  3791       disabled because they worked unreliably, giving wrong results sometimes.
  3792 
  3793 New features:
  3794 
  3795     * Create new pages easily using configurable interface and page templates 
  3796       with the new NewPage macro.
  3797     * ReStructuredText (rst) support is built-in now. See HelpOnParsers.
  3798     * New experimental feature in mointwisted.py - each interface may 
  3799       specify a port: '12.34.56.78:80'. Without a port, the port option
  3800       is used.
  3801 
  3802 API changes:
  3803 
  3804     * For a complete list of changes, see MoinMoin:ApiChanges.
  3805     * wikiutil.importPlugin's first argument is now a wiki config instance 
  3806       (request.cfg) and there is no path keyword.
  3807     * Wiki plugins always override MoinMoin plugins. wikiutil.importPlugin
  3808       implements this override.
  3809     * util.pysupport.importName does not accept path - you should call 
  3810       it with correct module name, e.g 'wikiconfig.plugin.parser.wiki' for 
  3811       wiki plugins, or 'MoinMoin.parser.wiki'. 
  3812     * wikiutil.extensionPlugin was renamed to wikiPlugins and it gets config 
  3813       instance instead of path.
  3814     * New function wikiutil.importWikiPlugin used to import wiki plugins 
  3815       using a cache in a thread safe way.
  3816     * New config option config.use_threads is used to activate thread 
  3817       safe code.
  3818     * New keyword arguments for getPageList, enable 10X faster operation
  3819       for common cases by controlling page filtering.
  3820     * New up to 100X times faster getPageCount
  3821 
  3822 
  3823 Version 1.3.1 (2004-12-13, Revision moin--main--1.3--patch-434)
  3824 
  3825 Fixes:
  3826 
  3827     * Fixed "Error Cyclic usage" crash when user had Italian (it), Korean
  3828       (ko), Serbian (sr) or Vietnamese (vi) as user interface language.
  3829     * Fall back to en (instead of crashing) when user uses a language moin
  3830       does not support / does not support any more (like pt,sv,fi,sr).
  3831     * In 1.3.0, people accidentally put iso-8859-1 chars into wiki configs,
  3832       but those where expected to be pure utf-8 and thus it crashed.
  3833       Fixed by using unicode strings (varname = u'whatever'), a matching
  3834       encoding setting (see top of script comment) and, when decoding strings,
  3835       using decode to ASCII with replace mode (this replaces non-ASCII chars,
  3836       but at least it won't crash - and you get a warning to better use
  3837       Unicode strings).
  3838     * Fixed long time broken table formatting. ||<style="see css spec" a||b||
  3839       Now even generates valid HTML! The old markup for align, valign, width,
  3840       bgcolor still works, but synthesizes style attribute data.
  3841     * SystemAdmin macro shows attachments of ALL pages now.
  3842     * Users without write acl rights will be able to see attachments again and
  3843       also have AttachFile action in menu.
  3844     * Fixed wrong match count in search results, find all matches in page 
  3845       titles, show all matches in contents in some rare cases.
  3846     * Run about 200% faster with long running processes (standalone, Twisted), 
  3847       about 20% faster with cgi, by better internal data handling in wikidicts.
  3848     * On SF, the dict files use utf-8 encoding now. We included them also in
  3849       distribution, see contrib/dict/.
  3850     * Fixed permissions to shared template stuff.
  3851     * Speeded up search, fixed wrong match counts.
  3852     * Speeded up internal data handling (wikidicts).
  3853     * Fixed rare unicode error after deleting a page (reported only on SuSE
  3854       Linux 9.0 / Python 2.3.0).
  3855     * Fixed file permissions of files in the data dir.  
  3856     * Fixed some cosmetic problems in migration scripts and use sys.path.insert
  3857       to get latest moin code when executing them.
  3858 
  3859 Other Changes:
  3860 
  3861     * Improved docs, system and help pages.
  3862     * Updated translation files.
  3863 
  3864 Known Bugs:
  3865 
  3866     * Internet Explorer renders our HTML/CSS in a suboptimal way.
  3867       (MoinMoin:MoinMoinBugs/InternetExplorer)
  3868       Workaround: use a non-broken browser like FireFox / Mozilla.
  3869       Fixed in MoinMoin 1.3.2.
  3870     * Passwords using non-ascii do not work.
  3871       (MoinMoin:MoinMoinBugs/NonAsciiPasswordsBroken)
  3872     * The TOC macro is broken partly.
  3873       (MoinMoinBugs/TableOfContentsBrokenForIncludedPages,
  3874        MoinMoinBugs/TableOfContentsLacksLinks)
  3875     * See also: http://moinmoin.wikiwikiweb.de/MoinMoinBugs
  3876       
  3877 
  3878 Version 1.3.0 (2004-12-06, Revision moin--main--1.3--patch-400)
  3879 
  3880     As you see from the length of the 1.3 changes below, 1.3 is a major(!)
  3881     upgrade. We could have also named it "2.0", but we decided against.
  3882     So take the time for reading the informations thoroughly and do the
  3883     migration exactly as we tell you - this is no 5 minutes upgrade!
  3884 
  3885     !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3886     !!! We heavily changed configuration, data encoding, dir layout:    !!!
  3887     !!!  * the default encoding changed to utf-8.                       !!!
  3888     !!!  * also, we changed the escaping for special chars to %XX%YY in !!!
  3889     !!!    URL and (xxyy) in file system.                               !!!
  3890     !!!  * layout of data dir changed completely                        !!!
  3891     !!! If you upgrade an existing wiki, you must run the migration     !!!
  3892     !!! scripts or you will get data corruption or other problems.      !!!
  3893     !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3894 
  3895     HINT: Upgrading your wiki - critical information
  3896 
  3897       If you are NOT starting from scratch, you MUST convert your existing
  3898       data - see README.migration for details.
  3899 
  3900       If you use ##language: xx comments on your OWN pages, you should also run
  3901       repair_language script. Not needed for help/system pages as we already
  3902       have done that for you.
  3903 
  3904       MoinMoin uses Unicode internally now (UCS-2 with 16 bits or UCS-4 with
  3905       32 bits, depending on your Python installation). The encoding used
  3906       for page files and html output is set by config.charset.
  3907 
  3908       Moin 1.3 uses utf-8 encoding only, there is NO SUPPORT for using a
  3909       charset different from utf-8 with 1.3. If you try, you are on your own.
  3910 
  3911     Directory layout
  3912 
  3913       Directory layout was heavily changed. Each page now is a directory,
  3914       containing page revisions, attachments, cache files and edit-log.
  3915       
  3916       You can delete a page or move a page from one wiki to another
  3917       easily. Look at the wiki/data directory to see.
  3918       
  3919       Example:
  3920         old: data/text/FrontPage
  3921         new: data/pages/FrontPage/revisions/00000042
  3922              data/pages/FrontPage/current (contains: 00000042)
  3923         old: data/backup/FrontPage.xxxxxxxx
  3924         new: data/pages/FrontPage/revisions/00000023
  3925 
  3926       For cleaning up cache files, use MoinMoin/scripts/cachecleaner.py 
  3927       (see comments in script).
  3928 
  3929    Python / Libs
  3930       
  3931       * For using RSS, you need to have PyXML installed:
  3932         Python 2.4*   -> PyXML 0.8.4 (cvs version)
  3933         Python 2.3.x  -> PyXML 0.8.3
  3934         Python 2.2.2+ -> ???
  3935         This will also make "Live Bookmarks" of Mozilla Firefox working.
  3936         New: if you don't have PyXML installed, the RSS icon on RecentChanges
  3937         will not be displayed any more. Python with no PyXML installed
  3938         generates invalid RSS XML.
  3939 
  3940    Page names handling
  3941 
  3942       * Handling of special characters in file names changed from _xx format
  3943         to (xx...) format.
  3944       * In URLs, moin now uses %xx%yy quoting, (because this is supported by 
  3945         browsers), and sub pages use "/" instead of the ugly "_2f".
  3946       * Underscore character "_" is used now as a space character " " both 
  3947         in file names and URLs. " " and "_" will be handled equivalent at most
  3948         places in the future (represented as "_", rendered as " ").
  3949       * To prevent wiki abuse and user typing errors, page names are normalized 
  3950         in URLs, query strings, the "go" box and when renaming pages. This 
  3951         include leading, trailing and multiple slashes and white space. Certain 
  3952         invisible unicode characters are removed from page names.
  3953       * Group page names are restricted even more, any non unicode alpha-numeric
  3954         character is removed. This is done to enable changing acl syntax in 
  3955         the future. The restriction might be loosen on future versions.
  3956       * You can edit config.page_invalid_chars_regex to control which characters
  3957         are allowed in page names (Changing it is not supported).
  3958       * When you enter page name, it is normalized and you are redirected to
  3959         the normalized page, or if nothing left (e.g '/////'), to FrontPage.
  3960       * When renaming a page to a name that can be normalized to an empty string,
  3961         the new page name will be "EmptyName" and the user will not get an
  3962         error message.
  3963        
  3964    Underlay directory
  3965 
  3966      * Pages (especially system and help pages) are now located in an underlay
  3967        directory (data_underlay_dir). You will see the pages there if they are
  3968        NOT covered (overlayed) by a page in the normal pages directory
  3969        (as set using data_dir).
  3970        MAKE SURE THAT data_underlay_dir IS CORRECT OR YOU WILL SEE MANY EMPTY
  3971        PAGES ONLY IN A NEW WIKI.
  3972      * If you edit a page that is shown from underlay directory, it will be
  3973        copied to the normal page directory on save (copy-on-write).
  3974      * You can use one copy of the underlay directory shared by many
  3975        wiki instances. Each wiki will then have only your local, self-made
  3976        wiki pages in its data directory, and only system and help pages in the
  3977        single, shared underlay directory - this simplifies upgrades a lot.
  3978      * It is recommended to keep your underlay system and help pages immutable
  3979        using acl, so you can upgrade your wiki easily. The default help and
  3980        system pages already have those ACLs (using MoinPagesEditorGroup).
  3981      * Do not forget to remove your old help and system pages after migrating
  3982        your wiki. We don't provide a script for that as that would be
  3983        dangerous for edited pages. Just use some file manager (e.g. mc) to
  3984        clean the data/pages/ directory. As soon as you have removed the
  3985        system pages there, you will see the new pages in the underlay dir.
  3986        See the EditedSystemPages page for a list of pages that exist in both
  3987        data and underlay directory (use this page as admin!).
  3988 
  3989        When updating from 1.2 or lower to 1.3 or higher, you will want to
  3990        clean out the copies of the system pages in your {{{wiki/data}}}
  3991        directory. All of these pages will now reside in the underlay
  3992        directory. If you have system pages from 1.2 or lower in your
  3993        wiki/data/ directory, they will overshadow the more up-to-date
  3994        documentation. This can be done using the following manual procedure:
  3995        1. You have just converted from 1.2 or lower to post-1.3.
  3996        2. Go to your wiki's EditedSystemPages.
  3997        3. Find all the pages that are MoinMoin system or help pages. You will
  3998           know if it is one of those pages because it is not your page.
  3999        4. Check if it is okay to delete by either:
  4000           1. Using the this page "info" link and check the Revision History to
  4001              see if it is greater than 1. If so, there are modifications, so do
  4002              not delete the page and evaluate the modifications to see if they
  4003              are necessary.
  4004           2. Using your file browser (Windows Explorer, etc) to go to your
  4005              wiki/data/<<systemPage>>/revisions/ directory and to see if there
  4006              are no modifications. If there are, do not delete the page and
  4007              evaluate the modifications to see if they are necessary.
  4008        5. Delete that wiki/data/<<systemPage>> using your file browser.
  4009 
  4010     Multiple languages
  4011 
  4012       * New file name quoting method allow 50% longer page names in languages
  4013         that use more than one byte per character, like Hebrew, Korean etc.
  4014       * Configuration file uses 'utf-8' encoding now. Certain values that are
  4015         marked with [Unicode] can use any character in your language. Examples 
  4016         are page names in navi_bar, page types regular expressions and site name.
  4017       * For configuration examples adopted to your language, check ConfigMarket 
  4018         in the MoinMoin wiki.
  4019       * The system and help pages that come with moin are now in utf-8.
  4020       * MissingPage system page localized, should display in your language.
  4021       * We did many i18n (translation) updates.
  4022       * CSS file use utf-8 encoding. User css is also expected to be utf-8.
  4023         This is relevant only if you use non-ASCII values in the CSS file.
  4024       * config.upperletters and config.lowerletters were removed.
  4025         We now use a pre-made ucs-2 spanning set and you usually don't have to
  4026         change it. See MoinMoin/util/chartypes.py if you're interested.
  4027       * ACL works with any user name or group name in any language, even names 
  4028         with spaces.
  4029       * Now you can use any charset in config.charset. Note: only utf-8 is 
  4030         a supported configuration!
  4031       * Improved url handling, now creating pages directly from the browser 
  4032         url box with non-ascii names works in most cases, even when 
  4033         config.charset is not utf-8.
  4034       * When using non-utf-8 config.charset, characters in URLs that does
  4035         fit in the charsets are replaced with "?" (instead of crashing).
  4036       * All themes and most macros and actions are Right to Left friendly.
  4037         Full RTL support planned for 1.3 release.
  4038       * If page language is specified with #language processing instruction
  4039         the page is displayed in the correct direction. Pages without
  4040         language are displayed using the wiki default_lang.
  4041 
  4042     Multiple configurations
  4043 
  4044       * You can run multiple wikis from the same wiki directory or server. 
  4045         For example, you can run one Twisted server that serve multiple wikis, 
  4046         instead of running multiple servers. Samples of the new configuration
  4047         are supplied in wiki/config/*.
  4048       * You can't just use your old moin_config.py file. It is now called
  4049         wikiconfig.py and the config variables now have to be in a class
  4050         "Config" and that class must inherit from
  4051         MoinMoin.multiconfig.DefaultConfig - see the provided wikiconfig.py
  4052         sample for details.
  4053         This is very useful, e.g. you could derive a GermanConfig from
  4054         DefaultConfig. After that, you can derive configs for wikiA and wikiB
  4055         from that GermanConfig.
  4056       * farmconfig.py contains a mapping attribute called "wikis" with pairs of
  4057         wikiconfig module name and regular expression. The regular expression
  4058         is matched against the URL of the request and the first matching entry
  4059         determines the config module to be imported by MoinMoin.
  4060       * If you use farmconfig.py's "wikis" mapping, then any wiki has a private
  4061         config module, named after the wiki - e.g. wiki named moinmoin would
  4062         use moinmoin.py.
  4063       * If you only have a single wiki, you do not need farmconfig.py. just make 
  4064         a wikiconfig.py and it will be used no matter what URL is requested. 
  4065       * There is one common global "config" that holds sitewide settings (like
  4066         umask or charset) - you do not need to change settings there.
  4067         This file is located in the MoinMoin code: MoinMoin/config.py.
  4068       
  4069     General configuration
  4070 
  4071       * SecurityPolicy now uses "write" instead of "edit" (so it is may.write
  4072         now). This is to get it in sync with ACLs.
  4073       * SecurityPolicy now automatically can use everything in acl_rights_valid.
  4074       * There is a new config option "config_check_enabled". It will warn about
  4075         any unknown variable name (probably typo) to stderr or error.log. 
  4076         If something doesn't work at all and changing the config does no 
  4077         difference, switch it on and look at the error message. 
  4078       * The sample config file comes with config_check_enabled = 1. If you 
  4079         introduce additional variables yourself, you definitely want to switch 
  4080         that check off or it will fill your log.
  4081       * If you define "page_front_page" variable, this name will show in the 
  4082         navigation bar now, instead of the default "FrontPage".
  4083 
  4084     New search engine
  4085 
  4086      * Full text and title search do support multiple search terms now - 
  4087        see HelpOnSearching for details.
  4088      * Regular expressions are still supported but have to be turned on per
  4089        search term. Search terms in macros using regular expressions will have
  4090        to be fixed.
  4091      * The URL interface of the search engine has also changed. Links that 
  4092        point directly to search actions may be broken.
  4093 
  4094     User names
  4095 
  4096       * User names can not use group names, even if ACLs are not enabled.
  4097         This will prevent error later, if you start to use acl in the future
  4098         (acl is going to be mandatory in 1.5).
  4099       * User names are not restricted any more to only CamelCase. 
  4100       * To prevent imposing as other users, leading, trailing and multiple 
  4101         whitespace in user names is not allowed. Only Unicode alpha numeric 
  4102         characters are allowed, with optional one space character between 
  4103         words.
  4104       * When a user name with a group name or "bad" name is trying to 
  4105         access the wiki, he is redirected to the UserPreferences page and 
  4106         asked to create a new account.
  4107       * When trying to login or create a new account with a bad name, 
  4108         correct error message is displayed in all cases.   
  4109 
  4110     CGI
  4111 
  4112       * You can not use your old moin.cgi file, as we removed cgimain.py 
  4113         (was deprecated since 1.2). Copy the new file from the server dir.     
  4114 
  4115     Moin servers - Twisted and standalone
  4116 
  4117       * Configuration self checking on startup. Will raise an error in case
  4118         of bad configuration or non-accessible directories.
  4119       * Both use shorter and identical configuration options.
  4120       * Server scripts contain detailed comments and examples.
  4121       * Configuration defaults changed to fit most users.
  4122       * There is memory profiler option for debugging, switched off by default.
  4123       * If you perform a standard install, server scripts should run out
  4124         of the box or with minimal change.
  4125 
  4126     Twisted server
  4127 
  4128       * All code moved into the new server package, the server script
  4129         contains only configuration options.
  4130       * Listen to more than one interface with "interfaces" list.
  4131       * Code updated to new Twisted API.
  4132       * Use mointwisted script to start and stop the server, using 
  4133         "mointwisted start" and "mointwisted stop".
  4134       * The Twisted server runs as daemon by default.
  4135       * All moin Twisted files are called now mointwisted instead of 
  4136         moin_twisted.
  4137       * Fixed getting username from Twisted request (http auth)
  4138 
  4139     Standalone server
  4140 
  4141       * Configuration moved from moin_config.py to moin.py.
  4142       * If run as root, you can set both user and group for the server.
  4143       * Can use logfile instead of logging to stderr.
  4144       * Fixed missing unquoting of query string (caused problems in rare cases).
  4145 
  4146     mod_python server
  4147 
  4148      * moin_modpy server files renamed to moinmodpy.
  4149 
  4150     Wiki Markup
  4151 
  4152      * '''strong''', ''em'' and __underline__ have now paragraph scope. You can
  4153        set these attributes on words level. For multiple paragraphs, wrap each 
  4154        with needed markup.
  4155      * If you leave unclosed ''', '' and __  markup, its is closed when the 
  4156        paragraph ends.
  4157 
  4158     User interface
  4159 
  4160      * Due to many changes in CSS files, the wiki may look "broken" until
  4161        your reload once or twice, or empty your browser cache.
  4162      * The "Send mail notification" checkbox is replaced by "Trivial change"
  4163        checkbox. The default behavior did not change - regular edit is not
  4164        a trivial change, and mail will be sent to subscribes. If you check
  4165        trivial change, mail will be sent only to users who selected to 
  4166        get trivial changes in their user preferences.
  4167      * New theme "modern" has been added, and used as default theme. 
  4168      * classic and rightsidebar improved.
  4169      * viewonly theme removed, as any theme can be use now as viewonly
  4170        by using #acl All:read in the wikiconfig.
  4171      * All themes use new navibar, displaying both wiki links, user links
  4172        and the current page.
  4173      * navibar and pagetrail use now shortened page names, so very long
  4174        names does not break the interface visually.
  4175      * All themes have improved search interface at the top of the window.
  4176      * Only avaiable actions are displayed, so most situations when a user
  4177        try to do something he can't do are prevented.
  4178      * When creating a new page, no action is available until the page 
  4179        is created. You can't attach files to non-existing page any more.
  4180      * Non registered users get a "login" link. Registered uses get
  4181        "username" link to their home page, and "user preferences" link.
  4182      * Messages more clear using bold type, designed by css.
  4183      * Few useless messages removed (but there are many more)
  4184      * Default wiki logo uses the wiki name instead of the MoinMoin troll 
  4185        logo.
  4186 
  4187     Other fixes and changes
  4188     
  4189      * Most generated html code is valid "html 4 strict". There are still
  4190        some problems that still have to be fixed, mainly macros, table
  4191        attributes, and inline markup crossing (<a><b></a></b>).
  4192      * WantedPages can include and exclude system pages, which makes it 
  4193        much more useful.
  4194      * Fixed a bug in TitleIndex where not all system pages are excluded.    
  4195      * RenamePage action now renames everything, including backups, page
  4196        history, attachments. It does not change toplevel editlog, though.
  4197        After you rename a page, you are redirected to the new page.
  4198      * Syntax colorization supports more languages (Java, C++, Pascal)
  4199      * Inline: display of attachments was extended. A Parser now knows which
  4200        extensions it can handle.
  4201      * TableOfContents and Include macros now cooperate a bit better. There
  4202        are still problems with multiple Includes of the same page.
  4203      * Excluded actions at bottom of page are not displayed any more.   
  4204      * Editor: removed the columns size setting, just using 100% of browser
  4205        window width (it didn't work because of that anyway). Also removed that
  4206        "reduce editor size" link at top of editor as you would lose your
  4207        changes when using it.
  4208      * Removed the option to choose text smileys instead of images, this made
  4209        more trouble than it was worth. The text version is still given in ALT
  4210        attribute.
  4211      * Moved stuff from contribution/ to MacroMarket page on MoinMoin wiki
  4212      * Some nasty people try to use a running moin as a proxy (at least they
  4213        did on moinmaster.wikiwikiweb.de:8000, maybe due to the magic port
  4214        number). We changed the code to check for that and just return 403
  4215        in that case. Moin can not be used as a proxy anyway.
  4216      * moin.cgi?test was removed in favor of a new buildin test
  4217        action. It works for all deployments, just use ?action=test.
  4218      * Sending mail does use tls if server supports it.
  4219 
  4220     3rd party developer notes
  4221 
  4222      * Themes should be now sub class of MoinMoin.theme.ThemeBase. Sub
  4223        classes will get automatically all new improved user interface
  4224        elements for free.
  4225      * Theme authors should update their theme for 1.3. Some keys removed
  4226        from them dict. See ThemeBase class in MoinMoin/theme/__init__.py. 
  4227      * Actions writers should call request.setContentLangauge with the 
  4228        correct language used by the action. This enable themes and other
  4229        code to use correct direction.
  4230      * The Formatter interface was changed. Formatters and parsers using 
  4231        the formatter interface have to be adjusted.
  4232      * started deprecation of Processors: they are still recognized, but
  4233        implementors should start to rewrite their Processors as Parsers.
  4234        A processor with the same name as a parser in a pre #! section is
  4235        currently preferred. This will change in the next release.
  4236 
  4237     Deprecation notes
  4238 
  4239      * Processors are deprecated, see section above.
  4240 
  4241      * Using the cookie (or the login url with ID) only and not setting (or
  4242        setting and not remembering) your email/password in UserPreferences
  4243        is DEPRECATED. Those quite unsecure methods will likely be dropped
  4244        in next moin version.
  4245 
  4246      * Operating with acl_enabled = 0 is also DEPRECATED. Due to some other
  4247        improvements planned, we will have to operate with ACLs enabled ONLY
  4248        in a future moin version, so this setting will likely be dropped.
  4249        So clean up your user accounts (see moin_usercheck.py) and switch ACLs
  4250        on NOW.
  4251        There are no drawbacks, so you will like it. Having ACLs enabled
  4252        doesn't mean you really have to USE them on wiki pages...
  4253 
  4254      * allow_extended_names = 0 is deprecated (default was/is 1).
  4255        Future versions will be able to use extended names (aka free links) in
  4256        any case and the config setting will be removed.
  4257 
  4258      * allow_subpages = 0 is deprecated (default was/is 1).
  4259        Future versions will be able to use subpages in any case and the config
  4260        setting will be removed.
  4261 
  4262      * attachments = {...} - we would like to remove that setting because of
  4263        several reasons:
  4264        * when not being extremely careful, this can easily lead to security
  4265          problems (like when uploading a .php exploit and then executing it
  4266          by accessing it directly via web server)
  4267        * makes code more complicated - code that we want to change completely
  4268          in next version
  4269        If you need that feature, speak up now and tell us your reasons WHY you
  4270        need it.
  4271 
  4272 
  4273 Version 1.2.4 (2004-10-23, Revision 1.187)
  4274 
  4275 This will probably be the last 1.2.x release as we are soon doing release
  4276 candidates for 1.3 release (with big internal changes) and are expecting
  4277 release 1.3 in december 2004.
  4278 
  4279 Fixes:
  4280     * fixed "None" pagename bug in fullsearch/titlesearch
  4281     * fixed projection CSS usage
  4282     * the compiled page is removed when a page is deleted, so no ghost page
  4283       appears after deletion
  4284     * fixed AbandonedPages day-break problem
  4285     * fixed [[GetVal(WikiDict,key)]]
  4286     * the msg box is now outside content div on PageEditor, too
  4287     * privacy fix for email notifications: you don't see other email addresses
  4288       in To: any more. mail_from is now also used for To: header field, but
  4289       we don't really send email to that address.
  4290     * privacy fix for /MoinEditorBackup pages that were made on previews of
  4291       pages that were not saved in the end
  4292     * fix double content div on PageEditor preview
  4293 
  4294 Other changes:
  4295     * workaround for broken Microsoft Internet Explorer, the page editor now
  4296       stops expanding to the right (e.g. with rightsidebar theme).
  4297       Nevertheless it is a very good idea to use a non-broken and more secure
  4298       browser like Mozilla, Firefox or Opera!
  4299 
  4300     * from MoinMoin.security.antispam import SecurityPolicy in your
  4301       moin_config.py will protect your wiki from at least the known spammers.
  4302       See MoinMoin:AntiSpamGlobalSolution for details.
  4303 
  4304     * xmlrpc plugin for usage logging, currently used for antispam accesses
  4305 
  4306     * (re-)added configurable meta tags:
  4307         * html_head_queries = '''<meta name="robots" content="noindex,nofollow">\n'''
  4308         * html_head_posts   = '''<meta name="robots" content="noindex,nofollow">\n'''
  4309         * html_head_index   = '''<meta name="robots" content="index,follow">\n'''
  4310         * html_head_normal  = '''<meta name="robots" content="index,nofollow">\n'''
  4311 
  4312     * i18n updates/fixes
  4313 
  4314     * New UserPreferences switch:
  4315       you may subscribe to trivial changes (when you want to be notified about ALL
  4316       changes to pages, even if the author deselected to send notifications).
  4317 
  4318     * New AttachList and AttachInfo macros - thanks to Nigel Metheringham and
  4319       Jacob Cohen.
  4320 
  4321 Version 1.2.3 (2004-07-21, Revision 1.186)
  4322 
  4323 Fixes:
  4324     * fixed NameError "UnpicklingError" in user.py
  4325     * fixed version number in moin.spec
  4326     * reverts done by bots or leechers
  4327       There was a bad, old bug that triggered if you did not use ACLs. In that
  4328       case, moin used some simple (but wrong and incomplete) function to
  4329       determine what a user (or bot) may do or may not do. The function is now
  4330       fixed to allow only read and write to anon users, and only delete and
  4331       revert to known users additionally - and disallow everything else.
  4332     * avoid creation of unneccessary pages/* directories
  4333     * removed double content divs in general info and history info pages
  4334     * fixed wiki xmlrpc getPageHTML
  4335     * fixed rightsidebar logout URL, also fixed top banner to link to FrontPage
  4336     * use config.page_front_page and .page_title_index for robots meta tag
  4337       (whether it uses index,follow or index,nofollow), not hardcoded english
  4338       page names
  4339     * ACL security fix for PageEditor, thanks to Dr. Pleger for reporting
  4340     * default options for new users are same as for anon users
  4341 
  4342 Version 1.2.2 (2004-06-06, Revision 1.185)
  4343 
  4344 Fixes:
  4345     * python related:
  4346      * own copy of difflib removed
  4347        Until moin 1.2.1 we had our own copy of python 2.2.3's difflib coming
  4348        with moin. This was to work around some problems with broken older 2.2
  4349        python installations. We removed this now because if you have py 2.3,
  4350        there is even a better difflib coming with python (and that fixes an
  4351        extremely slow diff calculation happening in some rare cases).
  4352        So the good news is that when you run python 2.3, you don't need to do
  4353        anything and it will run great. If you run python 2.2.3, it will mostly
  4354        work good and you also don't need to do anything. The bad news is that
  4355        if you run an old and broken 2.2 installation (2.2.1, maybe 2.2.2) you
  4356        will have to fix it on your own (just copy difflib.py from python 2.2.3
  4357        over to your python 2.2.x installation).
  4358        But better upgrade to python 2.3 (for debian woody, there's a backport),
  4359        as 2.3 generally runs better and faster than 2.2.
  4360      * scripts changed to use #!/usr/bin/env python (not /usr/bin/python2.2)
  4361 
  4362     * user accounts and ACLs:
  4363      * we now require the user to specify a password for a new account (you
  4364        were not able to login without a password anyway)
  4365      * it is not allowed any more to create user accounts with user names
  4366        matching config.page_group_regex - please check manually that you do
  4367        not already have such users existing (like a user named "AdminGroup"):
  4368        cd data/user ; grep name=.*Group *  # there should be no output!
  4369      * subscription email sending now honours ACLs correctly
  4370 
  4371     * markup / rendering / user interface fixes:
  4372      * fixed merging multiple lines indented by the same amount of blanks
  4373      * ## comments don't break tables in two parts
  4374      * added a "remove bookmark" link to RecentChanges
  4375      * fixed action=titleindex (added \n after each entry)
  4376 
  4377     * RSS fixes:
  4378      * non-ASCII characters should work now
  4379      * RSS feed (Recentchanges?action=rss_rc) gives UTC timestamps now
  4380      * removed attribute breaking RSS feed on RecentChanges
  4381 
  4382     * better email generation:
  4383      * if you use python >=2.2.2, we add a Message-ID header to emails
  4384      * if you use python 2.2.1, there is no email.Header. Instead of crashing
  4385        (like previous moin 1.2.x releases), we just use the subject "as is" in
  4386        that case. If it is not ASCII, this is not standards compliant.
  4387      * If you have >=2.2.2 it will use email.Header to make standards compliant
  4388        subject lines.
  4389      * use config.mail_from as sender address when sending "lost my password"
  4390        emails
  4391 
  4392     * file attachments:
  4393      * fixed for standalone server
  4394      * attachment URLs (when handled by moin) don't include server name
  4395      * fixed some wrong &amp;amp; in html src
  4396     
  4397     * better themeability:
  4398      * some entries in dict "d" where only present in header theme calls, some
  4399        only in footer theme calls. Now almost all is present in both calls.
  4400      * added some missing "content" divs so sidebar themes look better
  4401 
  4402     * fixed some crashes producing backtraces:
  4403      * no IOError when diffing against deleted page
  4404      * no backtrace in xml footnote generation
  4405      * no SystemInfo crash when no editlog exists in new wikis
  4406      * xmlrpc.getRecentChanges fixed
  4407 
  4408     * MoinMoin.util.filesys.rename is now a wrapper around os.rename that
  4409       fixes os.rename on broken win32 api semantics
  4410 
  4411 Other Changes:
  4412     * saving traffic and load by improved robot meta tag generation:
  4413      * "noindex,nofollow" on queries and POSTs
  4414      * "index,follow" on FrontPage and TitleIndex (give robots a chance ;))
  4415      * "index,nofollow" on all other pages (hopefully saving lots of senseless
  4416        requests for page?action=...) 
  4417      * removed config.html_head_queries (was used for same stuff)
  4418     * added russian i18n (utf-8)
  4419     * misc. other translation updates / fixes
  4420     * added rightsidebar theme
  4421     * TitleIndex now folds case, so "APage" and "anotherPage" are both under
  4422       letter "A".
  4423     * added macro/PageHits.py - it calculates the hits each page gets since
  4424       beginning of logging
  4425 
  4426 
  4427     * Full text and title search do now support multiple search terms - 
  4428       see HelpOnSearching for details
  4429  
  4430     * The Formatter interface was changed. Formatter and parser using 
  4431       the formatter interface have to be adjusted.
  4432 
  4433 Version 1.2.1 (2004-03-08, Revision 1.184)
  4434 
  4435 Fixes:
  4436     * minimum requirement to run moin 1.2/1.2.1 is python 2.2.2
  4437      * not: 2.2(.0), as this does not have True/False
  4438      * not: 2.2.1, as this does not have email.Header. You maybe can work
  4439        around that one by:
  4440       * getting the python 2.2.x (x>=2) /usr/lib/python2.2/email directory
  4441       * putting it into directory 'x' (whereever you like)
  4442       * doing a sys.path[0:0] = ['x'] in moin.cgi [or other appropriate place]
  4443       No guarantee, this is untested.
  4444     * Twisted: the http headers missed the charset data, fixed
  4445     * mod_python: fixes for mod_python 2.7
  4446     * wiki/data/plugin/__init__.py added - fixes not working plugin modules
  4447     * plugin processors work now, too
  4448     * fixed displaying non-existent translations of SiteNavigation in footer
  4449     * fixed zh-tw iso name (wrong zh_tw -> correct zh-tw)
  4450     * fixed reversed diffs in RecentChanges RSS
  4451     * fixed "last change" info in footer (wasn't updated)
  4452     * fixed event.log missing pagename (and other) information
  4453     * fixed horizontal line thickness >1
  4454     * fixed setup.py running from CVS workdir
  4455     * fixed crash when doing action=info on first revision of a page
  4456     * fixed hostname truncation in footer
  4457     * minor css fixes
  4458     * fixed clear msg links (they missed quoting, leading to strange page
  4459       names when you click on some of them)
  4460     * fixed python colorizer processor
  4461     * fixed quoting of stats cache filenames
  4462     * catched "bad marshal data" error when switching python versions
  4463 
  4464 Other changes:
  4465     * updated danish (da) i18n
  4466     * updated japanese (ja) i18n
  4467     * added serbian (sr) i18n
  4468     * added chinese (zh) i18n
  4469     * added a simple "viewonly" theme based on classic theme - you can use
  4470       this as default theme, so anonymous users won't get the usual wiki stuff,
  4471       but a far simpler (and less powerful) user interface.
  4472       It also displays the navibar at the left side.
  4473     * added moin.spec for building RPMs
  4474     * included MoinMoin/i18n/* into distribution archive (nice for translators)
  4475     * included some stuff under MoinMoin/scripts - xmlrpc-tools and account
  4476       checking stuff. removed some version control clutter from the dist
  4477       archive, too.
  4478 
  4479     * code colorization was refactored and some new languages (Java, C++,
  4480       Pascal) where added.
  4481     * inline: display of attachments was extended. A Parser now knows which
  4482       extensions it can handle.
  4483 
  4484 Version 1.2 (2004-02-20, Revision 1.183)
  4485 
  4486 New features:
  4487     * MoinMoin now requires Python >=2.2.2., we recommend to use Python >=2.3.2
  4488       (with 2.3.x, MoinMoin runs about 20-30% faster).
  4489     * by refactoring request processing, we made it possible to run moin under
  4490       persistent environments:
  4491         * twisted-web (http://twistedmatrix.com)
  4492         * httpdmain.py (use moin.py for starting this mini server)
  4493         * mod_python
  4494         * FastCGI
  4495       Of course, CGI is still possible.
  4496     * wiki pages will be compiled to bytecode now (by default), so no need for
  4497       slow parsing/formatting on every view ("WASP", see caching_formats)
  4498     * when using a persistent environment (like twisted) and WASP, you get up
  4499       to 20x speed - compared to CGI and moin 1.1
  4500     * added support for diffs between arbitrary revisions.
  4501     * removed requirement of the external diff utility
  4502     * config.auth_http_enabled (defaults to 0) - use this to enable moin
  4503       getting your authenticated user name from apache (http basic auth,
  4504       htpasswd) - if you enable this, your basic auth username has to be the
  4505       same as your wiki username.
  4506       Should work with CGI, FCGI and maybe even with mod_python.
  4507       Does not change behaviour of moin under twisted or standalone server.
  4508     * config.tz_offset = 0.0 sets a default timezone offset (in hours
  4509       from UTC)
  4510     * config.cookie_lifetime (int, in hours, default 12) sets the lifetime of
  4511       the MOIN_ID cookie:
  4512         == 0  --> cookie will live forever (no matter what user has configured!)
  4513         > 0   --> cookie will live for n hours (or forever when "remember_me")
  4514         < 0   --> cookie will live for -n hours (forced, ignore "remember_me"!)
  4515     * added themeing and some themes (if you improve the existing themes or
  4516       make nice new ones, please contribute your stuff!). The default theme is
  4517       set by config.theme_default (and defaults to 'classic').
  4518     * now supporting plugin directory for parsers, processors, themes, xmlrpc.
  4519     * action=info now defaults to showing page revision history again
  4520     * all actions accessing the logfile (as RecentChanges or history) are now
  4521       much faster
  4522     * #refresh processing instruction, config.refresh
  4523         * config.refresh = (minimum_delay, target_allowed)
  4524             * minimum delay is the minimum waiting time (in seconds) allowed
  4525             * target_allowed is either 'internal' or 'external', depending on
  4526               whether you want to allow only internal redirects or also
  4527               external ones. For internal redirects, just use the Wiki pagename,
  4528               for external, use http://... url.
  4529         * #refresh 3                    == refresh this page every 3 seconds
  4530         * #refresh 5 FrontPage          == internal redirect to FrontPage in 5s
  4531         * #refresh 5 http://google.com/ == redirect to google in 5s
  4532       Use very carefully! Allowing a low minimum_delay and putting a #refresh
  4533       on RecentChanges might slow down your wiki significantly, when some
  4534       people just let their browser refresh and refresh again. Also, it does
  4535       cause quite some traffic long-term. So better do not use this without
  4536       good reason! Default is None (switched off).
  4537     * hide most UserPreferences options before user has logged in, less
  4538       confusing for new users
  4539     * "config.page_dict_regex" defines what pages are dictionary definitions
  4540       Currently dictionaries are used for UserHomePage/MyDict where you can
  4541       define key:: value pairs that get processed like @DATE@ expansion when
  4542       saving a page. The 2 "@" will be added to your keys automatically.
  4543       Please do not use @xxx@ strings on the right side (value), results may
  4544       vary if you do.
  4545       You can also access wiki dictionaries by using the internal macro
  4546       [[GetVal(page,key)]]" - that will go to page "page" and return the
  4547       value (right side) corresponding to "key".
  4548       Implementation note: groups are a subset of the dictionary functionality.
  4549     * standalone server should work now (see server/moin.py), so you don't
  4550       need to setup apache or twisted for a local personal wiki, you only need
  4551       python and moin for that now, no additional stuff any more!
  4552     * if you run your wiki with charset = "utf-8" (the default is still
  4553       iso8859-1), you might want to have a look at contributions/utf8-pages/
  4554       to see if there are already translated system pages for your language.
  4555 
  4556 Fixes:
  4557     * new importPlugin routine (the old one didn't work correctly)
  4558     * removed 0xA0 characters breaking utf-8
  4559     * system page recognition now uses wiki groups (see AllSystemPagesGroup),
  4560       fixing the long-time broken system page exclusion on TitleIndex.
  4561     * mostly HTML 4.01 Strict compliant HTML
  4562     * design is done by CSS now, HTML is semantic markup only 
  4563     * removed target attribute from links, also [^NewWindow] markup - this
  4564       is a HTML 3.2 feature and not valid in HTML 4.01
  4565     * updated TWikiDrawPlugin to 20021003 version, with further modifications
  4566       including source. It can draw imagemaps now and saves PNG. On display a
  4567       GIF will be searched if no PNG is found. We recommend changing all GIFs
  4568       to indexed PNGs cause this fallback might disappear in later versions.
  4569 
  4570       Sample code using bash and ImageMagick (be sure you know what you do):
  4571       for draw in `find /path/to/wiki/data -name \*.draw`; do
  4572         file=`dirname $draw`/`basename $draw .draw`
  4573         if [ -e "${file}.gif" ]; then
  4574           echo "Converting ${file}.gif to ${file}.png"
  4575           convert "${file}.gif" "${file}.png"
  4576         fi
  4577       done
  4578 
  4579     * fixed email headers and encoding
  4580     * Changed moin-usercheck to adhere to scripting standards; no
  4581       proprietary config changes needed any more (added --config);
  4582       --wikinames is now part of the usage message.
  4583     * config.umask now defaults to 0770 - if you give world r/w access, ACLs
  4584       could be rather pointless...
  4585 
  4586 Removed config variables:
  4587     * external_diff (not needed any more, we have internal diff now)
  4588     * shared_metadb (wasn't implemented for long - we will re-add it, when it is)
  4589     * title1/2 (please use page_header1/2)
  4590     * page_icons_up
  4591 
  4592 Changed config variables:
  4593     * changed_time_fmt (removed some html and brackets around time from default)
  4594     * html_head (default is empty string now)
  4595     * page_footer1/2 (default is empty string now)
  4596     * page_icons (is now a list of icon names, not html any more)
  4597     * umask (default is 0770 now, not world r/w any more == more secure)
  4598 
  4599 New config variables (see MoinMaster:HelpOnConfiguration):
  4600     * cookie_lifetime
  4601     * mail_login
  4602     * page_credits
  4603     * page_dict_regex
  4604     * page_group_regex
  4605     * page_header1/2
  4606     * page_iconbar 
  4607     * page_icons_table
  4608     * page_license_enabled
  4609     * page_license_page
  4610     * theme_default
  4611     * theme_force
  4612     * tz_offset 
  4613 
  4614 Other:
  4615     * lots of internal code refactoring and optimization
  4616     * began moving src code documentation to epydoc, see "make epydoc"
  4617     * the URL for the RecentChanges RSS feed changed. It now only works with
  4618       ...?action=rss_rc.
  4619 
  4620 Known problems:
  4621     * theme support is neither complete (although covering most important
  4622       stuff) nor perfect - work on that will continue...
  4623     * we removed some html from system messages (the boxes at top of page you
  4624       get after some actions), so it currently looks less nice than before.
  4625     * html is not completely validating and it is not xhtml - this will be
  4626       fixed as soon as we have the infrastructure for that (other parser, DOM)
  4627     * problems with rtl (right-to-left) languages, will be fixed in 1.3
  4628     * if you change moin_config or switch themes, moin will still use already
  4629       cached page content. For the config this can be fixed by touching
  4630       MoinMoin/version.py (or simply deleting everything in
  4631       data/cache/Page.py). If you get more annoyed by this than pleased by
  4632       caching speedup, you can also switch off caching (see docs on
  4633       caching_formats).
  4634 
  4635 Themeing and HTML/CSS cleanup:
  4636     * Browsers with completely broken CSS support (like e.g. Netscape 4.x) are
  4637       no longer supported. If you still need to support them, do not upgrade to
  4638       moin 1.2. If you still use these browsers, we recommend that you upgrade
  4639       your browser first (Mozilla 1.5 has nice and standards compliant HTML and
  4640       CSS support and is available as Free Software for Windows, Linux and Mac).
  4641     * If you changed any html in code or by config you will have to check if it
  4642       still works. For the usual stuff, look into `MoinMoin/theme/classic.py`
  4643       and `classic/css/screen.css`. For config defaults of the html fragments,
  4644       read `MoinMoin/config.py`. If you want to modify a theme, don't simply
  4645       change classic, but copy or subclass it under a new theme name.
  4646     * because of the new theme support the layout of the `htdocs` directory
  4647       changed:
  4648       * Instead of using icons under `img/` and css under `css/`, there will
  4649         be an additional `themename/` directory in between, e.g. `classic/img/`
  4650         and `classic/css/`. If you added own icons, you may have to copy them
  4651         to the themes directory.
  4652       * The filename of the CSS file has changed to the media type, so the
  4653         normal one used for screen output has changed name from `moinmoin.css`
  4654         to `screen.css`. There also were quite some changes and enhancements to
  4655         the CSS files, so better use the new ones.
  4656     * config.css_url was removed
  4657 
  4658 Plugins:
  4659   * we use a new plugin loader that requires a correct `__init__.py` file in
  4660     the plugin directories. See the directory `wiki/data/plugin/` in the
  4661     distribution archive and just copy it over to your wiki's plugin directory.
  4662 
  4663 
  4664 Version 1.1 (2003-11-29, Revision 1.178)
  4665 
  4666 Version 1.1 requires Python 2.0 or higher, we recommend to use Python 2.2
  4667 (version 2.2.2 if that is available on your host) or even better >= 2.3.2
  4668 (with 2.3.x, MoinMoin runs about 20-30% faster).
  4669 
  4670 New features:
  4671   Configuration:
  4672     * config.default_lang lets you set a default language for users not
  4673       having specified language in their browser or UserPreferences
  4674     * "config.page_category_regex" defines what pages are categories
  4675     * replaced `config.page_template_ending` by a more flexible setting
  4676       named `config.page_template_regex`
  4677     * the same with config.page_form_regex (was: page_form_ending)
  4678     * "config.page_group_regex" defines what pages are group definitions
  4679       Currently groups are used for "user groups" (see ACLs) and "page
  4680       groups" (see AllSystemPagesGroup).
  4681     * robot exclusion from all pages except the standard view action,
  4682       via the config.ua_spiders regex (reduces server load)
  4683     * "maxdepth" argument for the TableOfContents macro
  4684     * config.title1, config.title2, config.page_footer1,
  4685       config.page_footer2 can now be callables and will be called with
  4686       the "request" object as a single argument (note that you should
  4687       accept any keyword arguments in order to be compatible to future
  4688       changes)
  4689     * "config.html_pagetitle" allows you to set a specific HTML page
  4690       title (if not set, it defaults to "config.sitename")
  4691     * navi_bar / quicklinks can now contain free-form links, i.e.
  4692       entries of the form "[url linktext]" just like in wiki pages
  4693     * if a quick link starts with '^', it opens in a new window; help
  4694       now opens in a new window also
  4695     * `config.smileys` for user-defined smileys (default: `{}`) - a dict
  4696       with the markup as the key and a tuple of width, height, border, image
  4697       name as the value).
  4698     * `config.hosts_deny` to forbid access based on IP address
  4699     * `config.mail_login` can be set to username and password separated by
  4700       a space, e.g. "username userpass", if you need to use SMTP AUTH
  4701     * `config.edit_locking` can be set to None (old behaviour, no
  4702       locking), 'warn <timeout mins>' (warn about concurrent edits, but
  4703       do not enforce anything), or 'lock <timeout mins>' (strict locking)
  4704     * optionally showing a license text on editor page, use:
  4705       config.page_license_enabled = 1
  4706       Optionally use these to customize what is shown there:
  4707       config.page_license_text = "... your text ..."
  4708       config.page_license_page = "MyLicensePage"
  4709       See the default values in MoinMoin/config.py for details and
  4710       override them in moin_config.py, if needed.
  4711     * `config.shared_intermap` can be a list of filenames (instead of a
  4712       single string)
  4713     * If you have added your own `SecurityPolicy`, the class interface for
  4714       that has changed (see `security.py`).
  4715 
  4716   Authenticaton / Authorization:
  4717     * added ACL support, written by Gustavo Niemeyer of Conectiva and
  4718       Thomas Waldmann. See HelpOnAccessControlLists for more infos.
  4719       You should use MoinMoin/scripts/moin_usercheck.py before activating
  4720       ACLs or some users with bad or duplicate accounts might get into
  4721       trouble.
  4722     * A user account can be disabled using moin_usercheck.py or
  4723       UserPreferences page. Disabling, but keeping it is good for edit
  4724       history.
  4725     * changed security default: deletion only available to known users
  4726     * support for Basic authentication (Apache style: AUTH_TYPE="Basic",
  4727       REMOTE_USER="WikiUserName"). If authentication is there, user
  4728       will be in ACL class "Trusted".
  4729     * support for username / password login
  4730       The username / password login will ONLY work, if you define a
  4731       password. With an empty password, username / password login is not
  4732       allowed due to security reasons. Passwords are stored encrypted
  4733       (format similar to Apache SHA) and can also be entered in the
  4734       UserPreferences form in this format. When requesting login
  4735       information by email, the password is also sent in this encrypted
  4736       format (use copy&paste to fill it in the form).
  4737       ...?action=userform?uid=<userid> is still possible, so if you have
  4738       bookmarks, they will still work). The input field for the ID was
  4739       dropped.
  4740       NOTE: using the userid for login purposes is DEPRECATED and might
  4741             be removed for better security soon.
  4742     * after logging in, you will get a cookie valid until midnight.
  4743       The next day, the cookie will expire and you will have to login
  4744       again. If you don't want this, you can check the "remember me
  4745       forever" option in UserPreferences.
  4746     * if the page file is read-only, you get a message (i.e. you can now
  4747       protect pages against changes if you're the wiki admin).
  4748       Note: you can do that easier using ACLs.
  4749 
  4750   Markup / Macros / Actions:
  4751     * RandomQuote macro (and even parses Wiki markup now)
  4752     * `[[Navigation]]` macro for slides and subpage navigation
  4753     * [[ShowSmileys]] displays ALL smileys, including user-defined ones
  4754     * the Include macro has new parameters (from, to, sort, items) and
  4755       is able to include more than one page (via a regex pattern)
  4756     * `MailTo` macro for adding spam-safe email links to a page
  4757     * if a fancy link starts with '^' (i.e. if it has the form
  4758       "[^http:... ...]"), it's opened in a new window
  4759      * because of that, the NewWindow macro was removed from contrib
  4760     * "#pragma section-numbers 2" only displays section numbers for
  4761       headings of level 2 and up (similarly for 3 to 6)
  4762     * ../SubPageOfParent links
  4763 
  4764   User interface:
  4765     * new fancy diffs
  4766     * Page creation shows LikePages that already exist
  4767     * editor shows the current size of the page
  4768     * editor returns to including page when editing an included page
  4769     * Visual indication we're on the editor page (new CSS style)
  4770     * selection to add categories to a page in the editor (use preview
  4771       button to add more than one category)
  4772     * if user has a homepage, a backup of save/preview text is saved as
  4773       a subpage UsersHomePage/MoinEditorBackup
  4774     * added "revert" link to PageInfo view (which makes DeletePage more
  4775       safe in public wikis, since you can easily revive deleted pages
  4776       via revert)
  4777     * Selection for logged in users (i.e. no bots) to extend the listing
  4778       of recent changes beyond the default limits
  4779     * Activated display of context for backlinks search
  4780     * Subscriber list shown on page info
  4781     * LikePages shows similar pages (using difflib.get_close_matches)
  4782     * last edit action is stored into "last-edited" file, and
  4783       displayed in the page footer
  4784     * reciprocal footnote linking (definition refers back to reference)
  4785     * "Ex-/Include system pages" link for title index
  4786       Note: system/help pages algorithm is still mostly broken.
  4787     * list items set apart by empty lines are now also set apart
  4788       visually (by adding the CSS class "gap" to <li>)
  4789     * "save" check for security.Permissions
  4790     * Added Spanish, Croatian and Danish system texts
  4791     * Added flag icons for the languages supported in "i18n"
  4792     * updated help and system pages, more translations, see also
  4793       AllSystemPagesGroup
  4794     * there was quite some work done on wiki xmlrpc v1 and v2 - it
  4795       basically works now.
  4796 
  4797   Tools and other changes:
  4798     * moin-dump: New option "--page"
  4799     * there are some scripts MoinMoin/scripts/* using wiki xmlrpc for
  4800       backup and wiki page copying applications
  4801     * Updated the XSLT parser to work with 4Suite 1.0a1
  4802     * more infos in cgi tracebacks
  4803     * UPDATE.html is a HTML version of MoinMaster:HelpOnUpdating
  4804 
  4805 Unfinished or experimental features:
  4806     * user defined forms
  4807     * XML export of all data in the wiki
  4808     * RST parser (you need to install docutils to use this)
  4809     * SystemAdmin macro
  4810 
  4811 Privacy fixes:
  4812     * do not use / display user's email address in public places
  4813 
  4814 SECURITY FIXES:
  4815     * Removed two cross-site scripting vulnerabilities reported by "office"
  4816 
  4817 Bugfixes:
  4818     * Bugfix for PageList when no arguments are given
  4819     * Disallow full-text searches with too short search terms
  4820     * [ 566094 ] TitleIndex now supports grouping by Hangul Syllables
  4821      * fix for multibyte first char in TitleIndex
  4822     * Footnotes were not HTML escaped
  4823     * Numbered code displays are now in a table so that you can cut the
  4824       code w/o the numbers
  4825     * Bugfix for wrong mail notifications
  4826     * Create unique anchors for repeated titles
  4827     * [ 522246 ] Transparently recode localized messages
  4828     * [ 685003 ] Using "preview" button when editing can lose data
  4829     * use gmtime() for time handling
  4830     * fixed negative gmtime() arguments
  4831     * [[Include]] accepts relative page names
  4832     * fixed ||NotInterWiki:||...||
  4833 
  4834 -----------------------------------------------------------------------------
  4835 Version 1.0 (2002-05-10, Revision 1.159)
  4836 
  4837 THIS IS THE LAST RELEASE WITH PYTHON 1.5.2 SUPPORT! If severe bugs
  4838 should occur, a maintenance release will fix them.
  4839 
  4840 Some optional features (like statistics) already require Python 2.0.
  4841 
  4842 New features:
  4843     * security fix: "allow_xslt" has to be set to 1 in order to enable
  4844       XSLT processing; note that this defaults to 0 because XSLT is able
  4845       to insert arbitrary HTML into a wiki
  4846     * "action=content" for transclusion into static web pages; emits the
  4847       pure page content, without any <html>, <head>, or <body> tags
  4848     * "?action=links&mimetype=text/plain" works like MeatBall:LinkDatabase
  4849     * "Preferred language" and "Quick links" user settings
  4850     * Added "processor" concept, processors work on the data in "code
  4851       displays" and are called by a bangpath in the first line of data
  4852     * Processors: Colorize, CSV (see HelpOnProcessors)
  4853     * New icons: "{OK}", "(./)", "{X}", "{i}", "{1}", "{2}" and "{}"
  4854       (see HelpOnSmileys)
  4855     * FullSearch now displays context information for search hits
  4856     * DeletePage offers a textentry field for an optional comment
  4857     * Email notifications are sent in the user's language, if known from
  4858       the preferences
  4859     * @PAGE@ is substituted by the name of the current page (useful
  4860       for template pages)
  4861 
  4862 Unfinished features:
  4863     * user defined forms
  4864     * XML export of all data in the wiki
  4865     * RST parser (you need to install docutils to use this)
  4866     * XMLRPC interface
  4867 
  4868 Bugfixes:
  4869     * Syntax warning with Python 2.2 fixed
  4870     * Macro-generated pagelinks are no longer added to the list of links
  4871     * error codes returned by "diff" are reported
  4872     * fix for attachments on pages with non-USASCII names
  4873     * correct handling of spaces in attachment filenames and URLs
  4874 
  4875 -----------------------------------------------------------------------------
  4876 Version 0.11 (2002-03-11, Revision 1.151)
  4877 
  4878 Most important new features: file attachments, definition list markup
  4879 (glossaries), change notification via email, variable substitution when
  4880 saving pages, edit preview, and improved documentation.
  4881 
  4882 Note that the RSS features require a recent PyXML (CVS or 0.7) due to
  4883 bugs in the namespace handling of xml.sax.saxutils in earlier versions.
  4884 This is (hopefully) automatically detected on every installation.
  4885 
  4886 Statistical features are NOT designed to work with Python 1.5.2 and
  4887 require Python 2.0 or higher. Overall, MoinMoin 0.11 is not explicitely
  4888 tested for 1.5.2 compatibility.
  4889 
  4890 New features:
  4891     * XML formatting now (most often) produces well-formed, and, depending
  4892       on proper layout of the wiki page, valid StyleBook XML
  4893     * Headers are now automatically numbered, unless you set the config
  4894       item 'show_section_numbers' to 0
  4895     * "#pragma section-numbers off" (or "0") switches that off explicitely,
  4896       and "on" or "1" enables numbering 
  4897     * Added a "contributions" directory for 3rd party extensions
  4898     * AttachFile action, contributed by Ken Sugino; note that you have
  4899       to enable this action because of the possibility of DoS attacks
  4900       (malicious uploads), by adding this to your moin_config:
  4901             allowed_actions = ['AttachFile']
  4902     * "attachment:" URL scheme allows access to attachments, to get files
  4903        from other pages use "attachment:WikiName/filename.ext".
  4904     * New macros: Date(unixtimestamp) and DateTime(unixtimestamp) to
  4905       display a timestamp according to system/user settings
  4906     * Variable substitution when a page is saved, note that saving
  4907       template pages does NOT expand variables. Supported are:
  4908         @DATE@      Current date in the system's format
  4909         @TIME@      Current date and time in the user's format
  4910         @USERNAME@  Just the user's name (or his domain/IP)
  4911         @USER@      Signature "-- loginname"
  4912         @SIG@       Dated Signature "-- loginname date time"
  4913         @MAILTO@    A fancy mailto: link with the user's data  
  4914     * Copied some new emoticons from PikiePikie
  4915         || {{{ :-? }}} || :-? || tongue.gif ||
  4916         || {{{ :\  }}} || :\  || ohwell.gif ||
  4917         || {{{ >:> }}} || >:> || devil.gif  ||
  4918         || {{{ %)  }}} || %)  || eyes.gif   ||
  4919         || {{{ @)  }}} || @)  || eek.gif    ||
  4920         || {{{ |)  }}} || |)  || tired.gif  ||
  4921         || {{{ ;)) }}} || ;)) || lol.gif    ||
  4922     * AbandonedPages macro
  4923     * Added definition list markup: {{{<whitespace>term:: definition}}}
  4924     * Added email notification features contributed by Daniel Sa�    * SystemInfo: show "Entries in edit log"
  4925     * Added "RSS" icon to RecentChanges macro and code to generate a
  4926       RecentChanges RSS channel, see
  4927           http://www.usemod.com/cgi-bin/mb.pl?UnifiedRecentChanges
  4928       for details
  4929     * Added config.sitename and config.interwikiname parameter
  4930     * Better WikiFarm support:
  4931       * <datadir>/plugin/macro and <datadir>/plugin/action can be used
  4932         to store macros and actions local to a specific wiki instance
  4933       * config.shared_intermap can contain a pathname to a shared
  4934         "intermap.txt" file (i.e. one stored outside the datadir)
  4935     * added `backtick` shortcut for {{{inline literal}}} (has to be
  4936       enabled by "backtick_meta=1" in the config file); note that ``
  4937       is then a shorter replacement for '''''' escaping
  4938     * added inline search fields (at the bottom of each page)
  4939     * Added preview to the editor, including spell checking
  4940     * New languages: Chinese (Changzhe Han) and Portuguese (Jorge
  4941       Godoy), updated French (Lucas Bruand), added Korean (Hye-Shik
  4942       Chang) and Italian (Lele Gaifax)
  4943     * New SystemAdmin macro
  4944     * `[[Anchor(anchorname)]]` macro to insert anchors into a page,
  4945       and [#anchorname Anchor Links].
  4946     * User option to open editor view via a double-click
  4947     * Added commentary field to editor, recent changes and page info
  4948     * Page trails (user option)
  4949     * UserPreferences: checkboxes for double-click edit, page trail,
  4950       fancy links, emoticons, jump to last page visited, and some
  4951       other yes/no options
  4952     * "config.nonexist_qm" is now the default for a user setting
  4953     * `[[GetText(text)]]` macro loads I18N texts (mainly intended
  4954       for use on Help pages)
  4955     * table attributes via "||<attrlist> ... ||", more details on
  4956       http://purl.net/wiki/moin/HelpOnTables
  4957     * PythonFaq interwiki tag and support for $PAGE placeholder
  4958     * event logging, as the basis for future statistics
  4959     * "moin-dump" command line tool to create a static copy of
  4960       the wiki content
  4961     * "config.external_diff" allows to set an exact path to the
  4962       command, or change the name to for example "gdiff" if GNU
  4963       diff is not a native command in your UNIX flavour
  4964     * `[[PageSize]]` macro
  4965     * the interwiki name "Self" now always points to the own wiki
  4966     * config.title1 and config.title2 are inserted into the output
  4967       right before and after the system title html code (title1
  4968       is right after the <body> tag and normally undefined, title2
  4969       defaults to the "<hr>" above the page contents)
  4970     * Additional link on diff pages to ignore whitespace changes
  4971     * Subpages (config.allow_subpages, config.page_icons_up)
  4972     * super^script^, sub,,script,, and __underline__ markup
  4973     * `[[FootNote]]` macro
  4974     * many other new config options, see HelpOnConfiguration for
  4975       a complete list
  4976     * [[StatsChart(type)]] shows statistical charts (currently
  4977       defined types: hitcounts, pagesize, useragents)
  4978     * 'inline:' scheme works like 'attachment:', but tries to
  4979       inline the content of the attachment into the page;
  4980       currently knows about "*.py" sources and colorizes them
  4981     * support for Java applet "TWikiDrawPlugin" via
  4982       drawing:<drawingname> URL scheme (you need to activate
  4983       the AttachFile action if you want drawings)
  4984     * numeric entities (&#nnnnn;) are now optionally NOT escaped,
  4985       which allows you to insert more characters into a Latin-1
  4986       page, especially the Euro symbol
  4987     * navi_bar is now a list of page names which should be linked
  4988       on every page
  4989     * test.cgi is now rolled into moin.cgi, and can be called
  4990       by adding "?test" to the wiki base URL. Also, as a security
  4991       feature, the server's environment is only shown for requests
  4992       local to the web server.
  4993 
  4994 Unfinished features:
  4995     * user defined forms
  4996     * XML export of all data in the wiki
  4997 
  4998 Documentation:
  4999     * extended the online help ("Help*" pages)
  5000     * German help pages (thanks to Thomas Waldmann)
  5001 
  5002 Bugfixes:
  5003     * #425857: python Parser bug on the second call
  5004     * #424917: Caching control
  5005     * #465499: Two HTTPS problems
  5006     * #491155: FrontPage hardcoded
  5007     * Handling of inbound UTF-8 encoded URIs (only with Python >= 2.0)
  5008     * Fix for subtle changes in "re" of Python 2.2
  5009     * User-provided URLs are now never URL-escaped, which allows appending
  5010       #anchors and using %20 for spaces in InterWiki links
  5011 
  5012 -----------------------------------------------------------------------------
  5013 Version 0.10 (2001-10-28, Revision 1.134)
  5014 
  5015 This version is still Python 1.5.2 compatible, but it's not extensively
  5016 tested for that version and some parts of the system might not work
  5017 there, especially seldom used macros and actions. Bug reports welcome!
  5018 
  5019 New features:
  5020     * "#deprecated" processing instruction
  5021     * config entry "SecurityPolicy" to allow for customized permissions
  5022       (see "security.py" for more)
  5023     * added distutils support
  5024     * though not extensively tested, the standalone server now does POST
  5025       requests, i.e. you can save pages; there are still problems with
  5026       persistent global variables! It only works for Python >= 2.0.
  5027     * "bang_meta" config variable and "!NotWikiWord" markup
  5028     * "url_mappings" config variable to dynamically change URL prefixes
  5029       (especially useful in intranets, when whole trees of externally
  5030       hosted documents move around)
  5031     * setting "mail_smarthost" and "mail_from" activates mailing
  5032       features (sending login data on the UserPreferences page)
  5033     * very useful for intranet developer wikis, a means to view pydoc
  5034       documentation, formatted via a XSLT stylesheet, for details see
  5035       http://purl.net/wiki/python/TeudViewer?module=MoinMoin.macro.TeudView
  5036       or MoinMoin/macro/TeudView.py
  5037     * "LocalSiteMap" action by Steve Howell <showell@zipcon.com>
  5038     * Added FOLDOC to intermap.txt
  5039 
  5040 Bugfixes:
  5041     * Full config defaults, import MoinMoin now works w/o moin_config.py
  5042     * Better control over permissions with config.umask
  5043     * Bugfix for a UNIX time billenium bug (affecting RecentChanges
  5044       sorting and page diffs)
  5045     * data paths with directory names containing dots caused problems
  5046 
  5047 -----------------------------------------------------------------------------
  5048 Version 0.9 (2001-05-07)
  5049 
  5050 New features:
  5051     * XML page input (pages that start with "<?xml") and XSLT formatting
  5052     * Page caching, for now limited to XSLT processing (where it's
  5053       absolutely needed); new code & API to add the "RefreshCache" link
  5054     * Selection of common date/time formats in UserPreferences
  5055     * New action "titleindex" to support wiki introspection (MetaWiki);
  5056       see the new links below the index bar in "TitleIndex"
  5057     * UserPreferences: editable CSS URL for personal styles
  5058     * PageInfo: the editor's name or IP is shown for each change
  5059     * WantedPages: a new macro that lists links to non-existent pages
  5060     * OrphanedPages: a new macro that lists pages no other page links to
  5061     * Extensions to the FullSearch macro (see HelpOnMacros)
  5062     * Python syntax highlighting
  5063     * "DeletePage" action (has to be activated, see MoinMoinFaq)
  5064     * "Remove trailing whitespace from each line" option in the editor
  5065     * I18N (currently German and Swedish)
  5066     * Config option "url_schemas" to extend the supported URL types
  5067     * Improved tracebacks by using Ka-Ping's "cgitb"
  5068 
  5069 Bugfixes:
  5070     * The editor now sends a "no-cache" HTTP header
  5071     * "PageList" results are now sorted
  5072     * New config parameter "html_head_queries": send additional header
  5073       for all pages EXCEPT the "normal" view; main usage is to have
  5074       only the normal pages indexed by a spider, not the edit, print,
  5075       etc. views (which cause multiple hits on the same information)
  5076     * Store the modification time of the page file in the editlog, not
  5077       the current time when the log entry is created
  5078 
  5079 -----------------------------------------------------------------------------
  5080 Version 0.8 (2001-01-23)
  5081 
  5082 New features:
  5083     * Page templates (create a new page using a template page, by Richard)
  5084     * Pluggable actions (by Richard)
  5085     * Added "diff since bookmark"
  5086     * Only "normal" URLs (outside of brackets) are converted to inline images
  5087     * Show number of backups in SystemInfo macro
  5088     * Show info on installed extension macros and actions
  5089     * New macro: [[BR]] for line breaks
  5090     * New action "LikePages" (again, Richard)
  5091     * Highlighting of search results, and of bad words when spellchecking
  5092     * Support for "file:" URLS
  5093     * "SpellCheck" action (Richard, me, and Christian)
  5094     * [[Include]] macro (you guessed it, Richard)
  5095 
  5096 Bugfixes:
  5097     * Update bookmark with load time, not click time
  5098     * Changed CSS styles to better suit Netscape's broken handling of CSS
  5099 
  5100 -----------------------------------------------------------------------------
  5101 Version 0.7 (2000-12-06)
  5102 
  5103 New features:
  5104     * RecentChanges bookmarking
  5105 
  5106 Bugfixes:
  5107     * SECURITY FIX
  5108     * Non-greedy extended WikiNames
  5109 
  5110 -----------------------------------------------------------------------------
  5111 Version 0.6 (2000-12-04)
  5112 
  5113 New features:
  5114     * [[UserPreferences]] macro and associated functions
  5115     * [[TableOfContents]] macro
  5116     * Mechanism for external macros (user extensions)
  5117     * Numbered list types and start offsets
  5118 
  5119 Bugfixes:
  5120     * Search dialogs did not work on the FrontPage
  5121     * Add newline to text if last line has none (better diffs)
  5122 
  5123 -----------------------------------------------------------------------------
  5124 Version 0.5 (2000-11-17)
  5125 
  5126 New features:
  5127     * Major refactoring: code is now broken up into modules within the
  5128       "MoinMoin" package
  5129     * Diagnosis of installation via a "test.cgi" script
  5130     * Smileys
  5131     * "#format" processing instruction
  5132     * "##comment"
  5133     * [[RandomPage]] and [[RandomPage(number)]] macro
  5134     * configurable footer ("page_footer1" and "page_footer2")
  5135     * "#redirect" processing instruction
  5136 
  5137 Bugfixes:
  5138     * Bugfix for broken CGI environment of IIS/4.0
  5139     * URLs and InterWiki links are now less greedy (punctuation at the end
  5140       is excluded, and "<" ends them, too)
  5141 
  5142 -----------------------------------------------------------------------------
  5143 Version 0.4 (2000-11-01)
  5144 
  5145 New features:
  5146     * Table markup "||a||b||c||"
  5147     * Headlines "= H1 =", "== H2 ==", and so on up to H5
  5148     * [[PageCount]] macro
  5149     * Added [[Icon(image)]] macro and macro arguments
  5150     * [[PageList(title-regex)]] macro
  5151     * New help system (set of help pages describing all features)
  5152 
  5153 Bugfixes:
  5154     * Create complete URL for "Clear message" link
  5155     * Inline code spans needed cgi.escape
  5156     * Better fix for Python 1.6 "re" problems
  5157     * Fix for uppercase extensions in inline images ("foo.JPG")
  5158     * Fixed colspan in RecentChanges
  5159     * HR size is now limited to 8
  5160     * "}" ends an URL pattern (fixes URLs right at the end of code displays)
  5161 
  5162 -----------------------------------------------------------------------------
  5163 Version 0.3 (2000-10-25)
  5164 
  5165 New features:
  5166     * Check for inline images with InterWiki links (Spam:eggs.gif)
  5167     * New config variable "allow_extended_names", which enables markup for
  5168       wiki names containing ANY character like this: ["any chars"] 
  5169     * New config variable "html_head"
  5170     * New macro [[SystemInfo]]
  5171     * Added inline code ("{{{" and "}}}" on the same line)
  5172     * Support for new config variable "max_macro_size"
  5173 
  5174 Bugfixes:
  5175     * Don't treat sequences with a double colon (CPP::Namespace) as an
  5176       InterWiki link
  5177     * The local part of InterWiki links is now correctly URL-escaped
  5178     * Quickfix for a bug in 1.6's regular expressions
  5179     * Fixed "SpamSpamSpam" bug (multiple entries in word list)
  5180     * Anchor names get quoted in WordIndex and TitleIndex
  5181     * Filtering of filenames in page_list() corrected
  5182     * Escape &, <, > when sending the editor
  5183     * Final(?) fix for japanese wiki names
  5184 
  5185 -----------------------------------------------------------------------------
  5186 Version 0.2 (2000-08-26)
  5187 
  5188 New features:
  5189     * When saving, a datestamp saved in the form and that of the file are
  5190       compared now; so, accidently saving over changes of other people is
  5191       not possible anymore (saving still needs file locking though, for
  5192       race conditions)
  5193     * if the directory "backup" exists in the data dir, pages are saved
  5194       there before a new version is written to disk
  5195     * Removed the "Reset" button from EditPage
  5196     * Added "Reduce editor size" link
  5197     * Added Latin-1 WikiNames (JürgenHermann ;)
  5198     * Speeded up RecentChanges by looking up hostnames ONCE while saving
  5199     * Show at most 14 (distinct) days in RecentChanges
  5200     * Added icons for common functions, at the top of the page
  5201     * Added a printing preview (no icons, etc.)
  5202     * Added bracketed (external) URLs
  5203     * Added support for quoted URLs ("http://...")
  5204     * Added styles for :visited links to CSS
  5205     * Embed image if an URL ends in .gif/.jpg/.png
  5206     * No markup detection in code sections
  5207     * Grey background for code sections
  5208     * Added handling for numbered lists
  5209     * the edit textarea now grows in width with the browser window
  5210       (thanks to Sebastian Dau�for that idea)
  5211     * Added page info (revision history) and viewing of old revisions
  5212     * Added page diff, and diff links on page info
  5213     * Added InterWiki support (use "wiki:WikiServer/theirlocalname"; the list
  5214       of WikiServers is read from "data/intermap.txt")
  5215     * Added "normal" InterWiki links
  5216     * Added "action=raw" to send the raw wiki markup as text/plain (e.g. for
  5217       backup purposes via wget) 
  5218 
  5219 Bugfixes:
  5220     * Removed an exception when saving empty pages
  5221     * Fixed bold nested into emphasis ('''''Bold''' Italic'')
  5222 
  5223 -----------------------------------------------------------------------------
  5224 Version 0.1 (2000-07-29)
  5225 
  5226 Improvements over PikiPiki 1.62:
  5227     * Moved configuration to "moin_config.py"
  5228     * Added "edit_rows" setting
  5229     * Added navigation bar
  5230     * Improved HTML formatting
  5231     * Added timing comment (page created in xx secs)
  5232     * ISO date and time formats by default
  5233     * Formatted RecentChanges with HTML tables
  5234     * Uppercase letters for the index pages
  5235     * Added PythonPowered logo
  5236 
  5237 Bugfixes:
  5238     * Javadoc comments now get formatted properly in {{{ }}} sections
  5239     * Remove \r from submitted pages (so we get PORTABLE wiki files)
  5240     * chmod(0666) eases manual changes to the data dir
  5241 
  5242 -----------------------------------------------------------------------------