https://community.jforum.net/posts/list/1.page JForum - http://www.jforum.net
[list][b]Breaking change[/b]: JForum 2.9.0 requires a [b]Servlet 6.0 compatible container[/b] like Tomcat 10.1 or Jetty 12 running on [b]Java 11[/b]. The previous baseline of Tomcat 9 and Java 8 will no longer work.[/list]
[list]During password recovery, JForum no longer says whether the account exists or not; this is in line with current security practices.[/list]
[list]Fixed some potential XSS vulnerabilities (which would have been hard to exploit in practice)[/list]
[list]Languages that haven't been updated for many years, and are now missing many translations, have been deactivated: NO, JP, HU, TR. All other languages have been brought up-to-date if they were missing translations.[/list]
[list]removed ICQ and Skype (which have been turned off) from user profile[/list]
[list][b]new feature:[/b] the POP3 mail integration can now import attachments from mails and save those along with the newly created posts (development sponsored by https://captaincasa.org/)[/list]
[list]Attachments can be added by *Drag & Drop*, in addition to being uploaded explicitly[/list]
[list][url=https://community.jforum.net/posts/list/297.page]set Secure and HttpOnly flags on cookies[/url][/list]

A full list of new features is at https://sourceforge.net/p/jforum2/wiki2/NewFeatures290/, upgrade instructions are at https://sourceforge.net/p/jforum2/wiki2/UpgradingFrom283to290/ and you can download it from https://sourceforge.net/projects/jforum2/files/. The documentation is at https://sourceforge.net/p/jforum2/wiki2/Documentation/

All feedback is welcome.]]> https://community.jforum.net/posts/preList/299/1290.page https://community.jforum.net/posts/preList/299/1290.page GMT