- Nothing changed yet.
- Replace "WHITELISTED" by "ALLOWLISTED" in all environment variables. The old spelling is still checked as well for backwards compatibility. Fixes issue 20. [maurits]
- Drop support for Python older than 3.8. [maurits]
- Add Plone 6.0 and 6.1 override for
plone.app.z3cform.templates.macros.pt
. [szakitibi, maurits]
- Add Spanish translations. [macagua]
- Add support for restapi POST. [cekk]
- Support Plone 5.2 on Py 2.7+3.7+3.8 and Plone 6.0 on Py 3.8+3.9+3.10. [maurits]
- Test on GitHub Actions instead of Travis. [maurits]
- Automatically load the fixes if package is loaded. No need to explicitly include the
fixes.zcml
anymore. [thet] - Secure collective.easyform with honeypot if available. [thet]
- Add a generic z3c.form honeypot extender module which can be configured via ZCML only and configure plone.app.discussion to use it. [thet]
- Add a dummy widget display view which renders empty - form renderings may expect it. [thet]
- Add data converter for z3c.form validation to not fail when multiple HoneyPot fields were injected. [thet]
- Update for support of Plone 5.2 and Python 3. Remove support for Plone 3 and 4. [thet, reinhardt]
- Fix adapter registration conflict. [rodfersou]
- Split honeypot_field and authenticator view. When @@authenticator` is called, return the view without rendering it. Fixes AttributeError: 'unicode' object has no attribute 'token', for example on PloneFormGen quickedit form. [maurits]
- Added Travis badge to readme. [maurits]
- Require POST for
send_feedback
script. This script can only be used by authenticated users, so there is little danger, but POST is still better. [maurits]
- First official public release.
- Add kssValidateField to the default ALLOWLISTED_ACTIONS to suppress kss inline validation being logged on Plone <= 4.2 . [fredvd]
- Add GenericSetup profile, which adds skin layers with our fixes.
This is recommended on Plone 3. The reason is that this technique
does not need
z3c.jbot
, which can have a few ugly side effects in Plone 3:Products.CacheSetup
does not like it and in other cases Zope does not even start up. [maurits]
- Allow edit forms by default. [maurits]
- Log when we load patches and add extra protected actions. [maurits]
- Support disallowing all posts. [maurits]
- Support checking start strings for allowed actions. [maurits]
- Allow configuring log levels. [maurits]
- Print less when logging the form. [maurits]
- Add fixes for
quintagroup.plonecomments
. [maurits] - Add fixes for Plone 3. [maurits]
- Remove
z3c.jbot
from the default dependencies so the last change actually works. [maurits]
- Make
z3c.jbot
an extra dependency ofcollective.honeypot[fixes]
. This way, you only getz3c.jbot
when you need it. [maurits]
- Initial release. [maurits]