X-Git-Url: http://sjero.net/git/?p=wget;a=blobdiff_plain;f=NEWS;h=488c9a50e869eb1b4f25859469199cb98363a5ba;hp=2d0092f47932591220450654fcd6abedba6ddb0e;hb=1e5a791a224db14719e19e33ffa007ab8d8e8adf;hpb=d5e283b1a75c5f8249300b465b4e7b55130bec49 diff --git a/NEWS b/NEWS index 2d0092f4..488c9a50 100644 --- a/NEWS +++ b/NEWS @@ -1,7 +1,7 @@ GNU Wget NEWS -- history of user-visible changes. Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, -2006, 2007, 2008 Free Software Foundation, Inc. +2006, 2007, 2008, 2009 Free Software Foundation, Inc. See the end for copying conditions. Please send GNU Wget bug reports to . @@ -10,6 +10,11 @@ Please send GNU Wget bug reports to . ** Mailing list MOVED to bug-wget@gnu.org +** SECURITY FIX: It had been possible to trick Wget into accepting +SSL certificates that don't match the host name, through the trick of +embedding NUL characters into the certs' common name. Fixed by Joao +Ferreira . + ** Added support for CSS. This includes: - Parsing links from CSS files, and from CSS content found in HTML style tags and attributes. @@ -22,11 +27,13 @@ Please send GNU Wget bug reports to . . ** Added support for Internationalized Resource Identifiers (IRIs, RFC -3987). When support is enabled (default), links with non-ASCII bytes -are translated from their source encoding to UTF-8 before percent-encoding. +3987). When support is enabled (requires libidn and libiconv), links +with non-ASCII bytes are translated from their source encoding to UTF-8 +before percent-encoding. IRI support was added by Saint Xavier +, as his project for the Google Summer of Code. - IRI support was added by Saint Xavier , as his - project for the Google Summer of Code. +** Wget now provides more sensible exit status codes when downloads +don't proceed as expected (see the manual). ** --default-page option (and associated wgetrc command) added to support alternative default names for index.html. @@ -41,8 +48,17 @@ an external file. information on how it was built, and the set of configure-time options that were selected. -** Several previously existing, but undocumented .wgetrc options -are now documented: save_headers, spider, and user_agent. +** --html-extension has been renamed to --adjust-extension, to reflect +the fact that it now also applies to CSS content. --html-extension is +still acceptable, but is now deprecated. + +** An "ascii" specifier is now accepted by --restrict-file-names, which +forces the percent-encoding of all non-ASCII bytes + +** Several previously existing, but undocumented .wgetrc options are +now documented: save_headers, spider, and user_agent, +auth_no_challenge, and keep_session_cookies. Also added documentation +for the "lowercase" and "uppercase" values for --restrict-file-names, which had been present since Wget 1.11. * Changes in Wget 1.11.4