2.0.1

What's Changed

• [2.x] chore: update JS tooling (flarum-webpack-config ^3.1.0, webpack-cli ^7.2.3, typescript ^5.9.3) by @imorland in #15

Full Changelog: 2.0.0...2.0.1

2.0.0

What's Changed

• fix: settings page js error by @imorland in #2
• [2.x] perf: serve plain excerpts as an attribute instead of including posts by @imorland in #5
• [2.x] fix: per-tag rich excerpt overrides never applied by @imorland in #6
• [2.x] chore: modernize phpunit configs to the PHPUnit 12 shape by @imorland in #7
• [2.x] fix: Don't fatal the discussion list on a textless first post by @imorland in #8
• [2.x] perf: read the excerpt configuration once per request, not once per discussion by @ernestdefoe in #10
• [2.x] fix: leave images out of plain excerpts by @ernestdefoe in #12
• [2.x] chore: require stable Flarum 2 by @imorland in #13
• [2.x] fix: don't leave already-loaded excerpt posts queued in the relationship buffer by @imorland in #14

New Contributors

• @imorland made their first contribution in #2
• @ernestdefoe made their first contribution in #10

Full Changelog: 1.0.1...2.0.0

2.0.0-rc.2

What's Changed

• [2.x] fix: Don't fatal the discussion list on a textless first post by @imorland in #8

Full Changelog: 2.0.0-rc.1...2.0.0-rc.2

2.0.0-rc.1

What's Changed

• [2.x] perf: serve plain excerpts as an attribute instead of including posts by @imorland in #5
• [2.x] fix: per-tag rich excerpt overrides never applied by @imorland in #6
• [2.x] chore: modernize phpunit configs to the PHPUnit 12 shape by @imorland in #7

Full Changelog: 2.0.0-beta.2...2.0.0-rc.1

2.0.0-beta.2

What's Changed

• fix: settings page js error by @imorland in #2

New Contributors

• @imorland made their first contribution in #2

Full Changelog: 2.0.0-beta.1...2.0.0-beta.2

2.0.0-beta.1

Full Changelog: 1.0.1...2.0.0-beta.1

1.0.1

⚠️ Security update

Version 1.0.0 (and the ianm/synopsis package before it) contains an HTML injection vulnerability in the plain content mode. You should update immediately.

A second issue with the rich content HTML truncation could also lead to security issues, though I have not been able to create an exploit for it.

If you cannot update immediately, you should disable the extension.

These problems were discovered through internal code review.

Version 1.0.1

• Fix HTML injection in plain content mode
• Implement proper HTML truncating in rich content mode

If you use rich content mode, the excerpt length now counts the number of printed characters and ignores the length of invisible HTML tags and attributes. This means the excerpt will probably be longer than before and actually reflect the value of the setting.

For extension developers, the signature of the javascript component Excerpt::getContent() had to be changed. It must now return a plain text or Vnode, and is no longer parsed as HTML. If you were returning an HTML string, the HTML will now be printed as text and no longer injected as HTML.

Full Changelog: 1.0.0...1.0.1

1.0.0

Full Changelog: https://github.com/FriendsOfFlarum/synopsis/commits/1.0.0