X-Git-Url: http://sjero.net/git/?a=blobdiff_plain;f=NEWS;h=a6e7edb66de04c667ab18037eeead7d1809f3883;hb=4a08094db88011153adadbf995103770b20d2a31;hp=df2c7742bd3881e606b98c8f3f7221ba2726bbec;hpb=c784c334d3ddaeb6c628931eca87056e152181fe;p=wget diff --git a/NEWS b/NEWS index df2c7742..a6e7edb6 100644 --- a/NEWS +++ b/NEWS @@ -10,6 +10,11 @@ Please send GNU Wget bug reports to . ** Mailing list MOVED to bug-wget@gnu.org +** SECURITY FIX: It had been possible to trick Wget into accepting +SSL certificates that don't match the host name, through the trick of +embedding NUL characters into the certs' common name. Fixed by Joao +Ferreira . + ** Added support for CSS. This includes: - Parsing links from CSS files, and from CSS content found in HTML style tags and attributes. @@ -22,18 +27,20 @@ Please send GNU Wget bug reports to . . ** Added support for Internationalized Resource Identifiers (IRIs, RFC -3987). When support is enabled (default), links with non-ASCII bytes -are translated from their source encoding to UTF-8 before percent-encoding. +3987). When support is enabled (requires libidn and libiconv), links +with non-ASCII bytes are translated from their source encoding to UTF-8 +before percent-encoding. IRI support was added by Saint Xavier +, as his project for the Google Summer of Code. - IRI support was added by Saint Xavier , as his - project for the Google Summer of Code. +** Wget now provides more sensible exit status codes when downloads +don't proceed as expected (see the manual). ** --default-page option (and associated wgetrc command) added to support alternative default names for index.html. ** --ask-password option (and associated wgetrc command) added to support password prompts at the console. - + ** The --input-file option now also handles retrieving links from an external file. @@ -41,6 +48,10 @@ an external file. information on how it was built, and the set of configure-time options that were selected. +** --html-extension has been renamed to --adjust-extension, to reflect +the fact that it now also applies to CSS content. --html-extension is +still acceptable, but is now deprecated. + ** An "ascii" specifier is now accepted by --restrict-file-names, which forces the percent-encoding of all non-ASCII bytes @@ -478,7 +489,7 @@ passive_ftp is the only .wgetrc command which takes a lockable Boolean. ** A number of new translation files have been added. -** New --bind-address / bind_address =
option for people on hosts +** New --bind-address / bind_address =
option for people on hosts bound to multiple IP addresses. ** wget now accepts (illegal per HTTP spec) relative URLs in HTTP redirects.