EPrints 3.4.7 - Revision history

Drn@ecs.soton.ac.uk: /* Security and Privacy Improvements */

2025-09-04T13:47:36Z

Security and Privacy Improvements

← Older revision		Revision as of 13:47, 4 September 2025
Line 34:		Line 34:
	** Severity: Low \| Change is only intended to partially mitigate certain excessive search queries, which can sometimes be processor intensive.		** Severity: Low \| Change is only intended to partially mitigate certain excessive search queries, which can sometimes be processor intensive.
	* [https://github.com/eprints/eprints3.4/issues/502 Ups to latest versions of jQuery and JQuery UI available in jquery ingredient]		* [https://github.com/eprints/eprints3.4/issues/502 Ups to latest versions of jQuery and JQuery UI available in jquery ingredient]
	** Severity: Low \| jquery ingredient is not enabled by default. Minor upgrade of JQuery libraries is mainly ensure versions do not fall too far behind the latest, ~~which~~ may be ~~used in~~ a repository's branding imported from another website.		** Severity: Low \| jquery ingredient is not enabled by default. Minor upgrade of JQuery libraries is mainly to ensure versions do not fall too far behind the latest, as they may be needed to provide a repository's branding imported from another website.

	==== General Improvements ====		==== General Improvements ====

Drn@ecs.soton.ac.uk: /* Security and Privacy Improvements */

2025-09-04T13:46:48Z

Security and Privacy Improvements

← Older revision		Revision as of 13:46, 4 September 2025
Line 32:		Line 32:
	** Severity: Low \| By default EPrints does not make use of PrototypeJS in a way that actively exposes CVE-2020-27511. EPrints only allows an administrator to modify the JavaScript EPrints serves, such that the vulnerability could be exposed.		** Severity: Low \| By default EPrints does not make use of PrototypeJS in a way that actively exposes CVE-2020-27511. EPrints only allows an administrator to modify the JavaScript EPrints serves, such that the vulnerability could be exposed.
	* [https://github.com/eprints/eprints3.4/issues/465 Uses different identifier for recalling search result caches so it cannot be guessed]		* [https://github.com/eprints/eprints3.4/issues/465 Uses different identifier for recalling search result caches so it cannot be guessed]
	** Severity: Low \| Change is only intended to partially mitigate certain excessive search queries, which ~~are often~~ processor intensive.		** Severity: Low \| Change is only intended to partially mitigate certain excessive search queries, which can sometimes be processor intensive.
	* [https://github.com/eprints/eprints3.4/issues/502 Ups to latest versions of jQuery and JQuery UI available in jquery ingredient]		* [https://github.com/eprints/eprints3.4/issues/502 Ups to latest versions of jQuery and JQuery UI available in jquery ingredient]
	** Severity: Low \| jquery ingredient is not enabled by default. Minor upgrade of JQuery libraries is mainly ensure versions do not fall too far behind the latest, which may be used in a repository's branding imported from another website.		** Severity: Low \| jquery ingredient is not enabled by default. Minor upgrade of JQuery libraries is mainly ensure versions do not fall too far behind the latest, which may be used in a repository's branding imported from another website.

Drn@ecs.soton.ac.uk: /* Security and Privacy Improvements */ Added severity ratings/notes

2025-09-04T13:46:09Z

Security and Privacy Improvements: Added severity ratings/notes

← Older revision		Revision as of 13:46, 4 September 2025
Line 30:		Line 30:
	==== Security and Privacy Improvements ====		==== Security and Privacy Improvements ====
	* [https://github.com/eprints/eprints3.4/pull/429 Fixes vulnerability in PrototypeJS]		* [https://github.com/eprints/eprints3.4/pull/429 Fixes vulnerability in PrototypeJS]
			** Severity: Low \| By default EPrints does not make use of PrototypeJS in a way that actively exposes CVE-2020-27511. EPrints only allows an administrator to modify the JavaScript EPrints serves, such that the vulnerability could be exposed.
	* [https://github.com/eprints/eprints3.4/issues/465 Uses different identifier for recalling search result caches so it cannot be guessed]		* [https://github.com/eprints/eprints3.4/issues/465 Uses different identifier for recalling search result caches so it cannot be guessed]
			** Severity: Low \| Change is only intended to partially mitigate certain excessive search queries, which are often processor intensive.
	* [https://github.com/eprints/eprints3.4/issues/502 Ups to latest versions of jQuery and JQuery UI available in jquery ingredient]		* [https://github.com/eprints/eprints3.4/issues/502 Ups to latest versions of jQuery and JQuery UI available in jquery ingredient]
			** Severity: Low \| jquery ingredient is not enabled by default. Minor upgrade of JQuery libraries is mainly ensure versions do not fall too far behind the latest, which may be used in a repository's branding imported from another website.

	==== General Improvements ====		==== General Improvements ====

Drn@ecs.soton.ac.uk: /* Session Initialisation and Close Bespoke Configuration */

2025-09-02T11:08:32Z

Session Initialisation and Close Bespoke Configuration

← Older revision		Revision as of 11:08, 2 September 2025
Line 99:		Line 99:
	== Known Issues ==		== Known Issues ==
	=== Session Initialisation and Close Bespoke Configuration ===		=== Session Initialisation and Close Bespoke Configuration ===
	EPrints 3.4.7 replaces <code>$c->{session_init}</code> and <code>$c->{session_close}</code> configuration in '''lib/cfg.d/session.pl''' with <code>EP_TRIGGER_BEGIN</code> and <code>EP_TRIGGER_END</code> triggers. Although uncommon, if you have modified session_init in a later configuration file than session.pl and your session_init function requires the <code>EPrints::Repository</code>'s <code>offline</code> parameter then will not be sent to the function. Similarly, if you have modified the session_close function and this requires and EPrints::Repository object as a parameter, this will not be sent. These can be fixed with [https://github.com/eprints/eprints3.4/commit/cff8a57e643c230215279f187764fa6ec8d00a99.patch this patch].		EPrints 3.4.7 replaces <code>$c->{session_init}</code> and <code>$c->{session_close}</code> configuration in '''lib/cfg.d/session.pl''' with <code>EP_TRIGGER_BEGIN</code> and <code>EP_TRIGGER_END</code> triggers. Although uncommon, if you have modified <code>session_init</code> in a later configuration file than session.pl and your session_init function requires the <code>EPrints::Repository</code>'s <code>offline</code> parameter then will not be sent to the function. Similarly, if you have modified the <code>session_close</code> function and this requires and <code>EPrints::Repository</code> object as a parameter, this will not be sent. These can be fixed with '''[https://github.com/eprints/eprints3.4/commit/cff8a57e643c230215279f187764fa6ec8d00a99.patch this patch]'''.

	== Further Planned Features and Improvements ==		== Further Planned Features and Improvements ==

Drn@ecs.soton.ac.uk at 11:07, 2 September 2025

2025-09-02T11:07:14Z

← Older revision		Revision as of 11:07, 2 September 2025
Line 96:		Line 96:
	* Removes eprint rev_number from test data this cause odd behaviour when importing		* Removes eprint rev_number from test data this cause odd behaviour when importing
	* [https://github.com/eprints/eprints3.4/pull/495 Prevents double presses on search buttons sending multiple requests]		* [https://github.com/eprints/eprints3.4/pull/495 Prevents double presses on search buttons sending multiple requests]

			== Known Issues ==
			=== Session Initialisation and Close Bespoke Configuration ===
			EPrints 3.4.7 replaces <code>$c->{session_init}</code> and <code>$c->{session_close}</code> configuration in '''lib/cfg.d/session.pl''' with <code>EP_TRIGGER_BEGIN</code> and <code>EP_TRIGGER_END</code> triggers. Although uncommon, if you have modified session_init in a later configuration file than session.pl and your session_init function requires the <code>EPrints::Repository</code>'s <code>offline</code> parameter then will not be sent to the function. Similarly, if you have modified the session_close function and this requires and EPrints::Repository object as a parameter, this will not be sent. These can be fixed with [https://github.com/eprints/eprints3.4/commit/cff8a57e643c230215279f187764fa6ec8d00a99.patch this patch].

	== Further Planned Features and Improvements ==		== Further Planned Features and Improvements ==

Drn@ecs.soton.ac.uk: Added release notes and future planned features and improvements section

2025-08-29T13:11:06Z

Added release notes and future planned features and improvements section

← Older revision		Revision as of 13:11, 29 August 2025
Line 1:		Line 1:
			{{releasenotes}}

	This page contains information about the EPrints v3.4.7 tag and release on GitHub.		This page contains information about the EPrints v3.4.7 tag and release on GitHub.

Line 94:		Line 96:
	* Removes eprint rev_number from test data this cause odd behaviour when importing		* Removes eprint rev_number from test data this cause odd behaviour when importing
	* [https://github.com/eprints/eprints3.4/pull/495 Prevents double presses on search buttons sending multiple requests]		* [https://github.com/eprints/eprints3.4/pull/495 Prevents double presses on search buttons sending multiple requests]

			== Further Planned Features and Improvements ==
			See [https://github.com/eprints/eprints3.4/milestone/9 3.4.8 milestone on GitHub] for more details.

	[[Category:Eprints3.4]]		[[Category:Eprints3.4]]
	[[Category:Releases]]		[[Category:Releases]]

Drn@ecs.soton.ac.uk at 13:07, 29 August 2025

2025-08-29T13:07:03Z

← Older revision		Revision as of 13:07, 29 August 2025
Line 1:		Line 1:
	This page contains information about the ~~provisional~~ EPrints v3.4.7 tag and release on GitHub~~. A full release of EPrints 3.4.7 will be made on 29th August 2025~~.		This page contains information about the EPrints v3.4.7 tag and release on GitHub.

	== Release Notes ~~(Provisional)~~ ==		== Release Notes ==
	~~First release candidate of~~ EPrints 3.4.7 is now available on [https://github.com/eprints/eprints3.4/releases/tag/v3.4.7~~-rc1~~ GitHub].		EPrints 3.4.7 is now available on [https://github.com/eprints/eprints3.4/releases/tag/v3.4.7 GitHub].
	* '''Zero codename:''' ''Granita Gregale''		* '''Zero codename:''' ''Granita Gregale''
	* '''Publications flavour codename:''' ''Tiramisu Tramontane''		* '''Publications flavour codename:''' ''Tiramisu Tramontane''
Line 96:		Line 96:

	[[Category:Eprints3.4]]		[[Category:Eprints3.4]]
	[[Category:~~Planned~~ Releases]]		[[Category:Releases]]

Drn@ecs.soton.ac.uk: /* Changes Since 3.4.6 */ Added changes up to 29th August 2025

2025-08-29T13:02:53Z

Changes Since 3.4.6: Added changes up to 29th August 2025

← Older revision		Revision as of 13:02, 29 August 2025
Line 28:		Line 28:
	==== Security and Privacy Improvements ====		==== Security and Privacy Improvements ====
	* [https://github.com/eprints/eprints3.4/pull/429 Fixes vulnerability in PrototypeJS]		* [https://github.com/eprints/eprints3.4/pull/429 Fixes vulnerability in PrototypeJS]
	* [https://github.com/eprints/eprints3.4/issues/465 ~~Use~~ different identifier for recalling search result caches so it cannot be guessed]		* [https://github.com/eprints/eprints3.4/issues/465 Uses different identifier for recalling search result caches so it cannot be guessed]
			* [https://github.com/eprints/eprints3.4/issues/502 Ups to latest versions of jQuery and JQuery UI available in jquery ingredient]

	==== General Improvements ====		==== General Improvements ====
Line 49:		Line 50:
	* [https://github.com/eprints/eprints3.4/issues/492 Supports plugins exporting as attachment rather that in-browser]		* [https://github.com/eprints/eprints3.4/issues/492 Supports plugins exporting as attachment rather that in-browser]
	* [https://github.com/eprints/eprints3.4/pull/493 Adds 'export_file_as_attachment' option to force exports to be downloaded]		* [https://github.com/eprints/eprints3.4/pull/493 Adds 'export_file_as_attachment' option to force exports to be downloaded]
			* [https://github.com/eprints/eprints3.4/pull/500 Add view option to suppress 'feeds']

	==== Bug Fixes ====		==== Bug Fixes ====
Line 88:		Line 90:
	* Fixes logic support complex page ranges (e.g. A-2-B-4)		* Fixes logic support complex page ranges (e.g. A-2-B-4)
	* Removes <code>rev_number</code> from eprints in test import data to prevent missing revisions when imported.		* Removes <code>rev_number</code> from eprints in test import data to prevent missing revisions when imported.
			* Fixes [https://github.com/eprints/eprints3.4/issues/60 issues when splitting complex page ranges originally implemented for 3.4.2]
			* Fixes [https://github.com/eprints/eprints3.4/issues/479 historic cache param causing excessive new cache tables]
			* Removes eprint rev_number from test data this cause odd behaviour when importing
			* [https://github.com/eprints/eprints3.4/pull/495 Prevents double presses on search buttons sending multiple requests]

	[[Category:Eprints3.4]]		[[Category:Eprints3.4]]
	[[Category:Planned Releases]]		[[Category:Planned Releases]]

Drn@ecs.soton.ac.uk: /* General Improvements */

2025-08-29T12:52:25Z

General Improvements

← Older revision		Revision as of 12:52, 29 August 2025
Line 48:		Line 48:
	* [https://github.com/eprints/eprints3.4/issues/479 Supports disabling of auto re-searching of cache ID for search has expired]		* [https://github.com/eprints/eprints3.4/issues/479 Supports disabling of auto re-searching of cache ID for search has expired]
	* [https://github.com/eprints/eprints3.4/issues/492 Supports plugins exporting as attachment rather that in-browser]		* [https://github.com/eprints/eprints3.4/issues/492 Supports plugins exporting as attachment rather that in-browser]
			* [https://github.com/eprints/eprints3.4/pull/493 Adds 'export_file_as_attachment' option to force exports to be downloaded]

	==== Bug Fixes ====		==== Bug Fixes ====

Drn@ecs.soton.ac.uk: /* Release Notes (Provisional) */ Added note about metatags

2025-08-13T10:45:30Z

Release Notes (Provisional): Added note about metatags

← Older revision		Revision as of 10:45, 13 August 2025
Line 8:		Line 8:
	=== New Dependencies ===		=== New Dependencies ===
	Check earlier dependencies for [[EPrints 3.4.6]] and before.		Check earlier dependencies for [[EPrints 3.4.6]] and before.

			=== Upgrade Considerations ===
			* If you are upgrading from an earlier version of EPrints 3.4.x and have the the [https://github.com/eprints/metatags metatags] ingredient enabled, as well as disabling this by removing it from your flavour's inc file, if your archive has its own '''cfg/cfg.d/eprint_render.pl''' file, you will need to make sure that the following lines are added to it after similar lines for <code>Export::Simple</code> and <code>Export::DC</code>:
			$links->appendChild( $repository->plugin( "Export::HighwirePress" )->dataobj_to_html_header( $eprint ) );
			$links->appendChild( $repository->plugin( "Export::Prism" )->dataobj_to_html_header( $eprint ) );

	=== Changes Since 3.4.6 ===		=== Changes Since 3.4.6 ===