X-Git-Url: http://sjero.net/git/?p=wget;a=blobdiff_plain;f=NEWS;h=a6e7edb66de04c667ab18037eeead7d1809f3883;hp=a570318b426dbd39dbfdf7a661d99e4fc307f798;hb=df804c69d98920e25a8c3bdec661613227524474;hpb=1228f812fa6dfb3f63f20fe82113ced88e558fd1

diff --git a/NEWS b/NEWS
index a570318b..a6e7edb6 100644
--- a/NEWS
+++ b/NEWS
@@ -1,15 +1,19 @@
 GNU Wget NEWS -- history of user-visible changes.
 
 Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005,
-2006, 2007, 2008 Free Software Foundation, Inc.
+2006, 2007, 2008, 2009 Free Software Foundation, Inc.
 See the end for copying conditions.
 
 Please send GNU Wget bug reports to <bug-wget@gnu.org>.
 
-* Changes in Wget 1.12 (MAINLINE)
+* Changes in Wget 1.12
 
-** --default-page option added to support alternative default names for
-index.html.
+** Mailing list MOVED to bug-wget@gnu.org
+
+** SECURITY FIX: It had been possible to trick Wget into accepting
+SSL certificates that don't match the host name, through the trick of
+embedding NUL characters into the certs' common name. Fixed by Joao
+Ferreira <joao@joaoff.com>.
 
 ** Added support for CSS. This includes:
      - Parsing links from CSS files, and from CSS content found in HTML
@@ -22,14 +26,39 @@ index.html.
    CSS support in Wget is thanks to Ted Mielczarek
    <ted.mielczarek@gmail.com>.
 
+** Added support for Internationalized Resource Identifiers (IRIs, RFC
+3987). When support is enabled (requires libidn and libiconv), links
+with non-ASCII bytes are translated from their source encoding to UTF-8
+before percent-encoding.  IRI support was added by Saint Xavier
+<wget@sxav.eu>, as his project for the Google Summer of Code.
+
+** Wget now provides more sensible exit status codes when downloads
+don't proceed as expected (see the manual).
+
+** --default-page option (and associated wgetrc command) added to
+support alternative default names for index.html.
+
 ** --ask-password option (and associated wgetrc command) added to
 support password prompts at the console.
- 
+
 ** The --input-file option now also handles retrieving links from
 an external file.
 
-** Several previously existing, but undocumented .wgetrc options
-are now documented: save_headers, spider, and user_agent.
+** The output generated by the --version option now includes
+information on how it was built, and the set of configure-time options
+that were selected.
+
+** --html-extension has been renamed to --adjust-extension, to reflect
+the fact that it now also applies to CSS content. --html-extension is
+still acceptable, but is now deprecated.
+
+** An "ascii" specifier is now accepted by --restrict-file-names, which
+forces the percent-encoding of all non-ASCII bytes
+
+** Several previously existing, but undocumented .wgetrc options are
+now documented: save_headers, spider, and user_agent,
+auth_no_challenge, and keep_session_cookies. Also added documentation
+for the "lowercase" and "uppercase" values for --restrict-file-names, which had been present since Wget 1.11.
 
 * Changes in Wget 1.11.4
 
@@ -460,7 +489,7 @@ passive_ftp is the only .wgetrc command which takes a lockable Boolean.
 
 ** A number of new translation files have been added.
 
-** New --bind-address / bind_address = <address> option for people on hosts 
+** New --bind-address / bind_address = <address> option for people on hosts
 bound to multiple IP addresses.
 
 ** wget now accepts (illegal per HTTP spec) relative URLs in HTTP redirects.