Releases/Release announcements/Release 2.2 - Revision history

Dan: Update installation admonition

2015-07-10T21:48:20Z

Update installation admonition

Dan: Add download link

2015-07-10T21:46:21Z

Add download link

Dan: Add a spot for a release date at the top of the page

2015-07-02T19:12:38Z

Add a spot for a release date at the top of the page

Dan: /* Security enhancement: HTML escaping to prevent XSS exploits */ Fix formatting typo

2015-07-02T19:11:22Z

‎Security enhancement: HTML escaping to prevent XSS exploits: Fix formatting typo

Dan: Add section about XSS escaping

2015-07-02T19:09:13Z

Add section about XSS escaping

Dan: insert hr at bottom of page

2015-06-25T23:14:02Z

insert hr at bottom of page

Dan: fix link

2015-06-25T23:12:42Z

fix link

Dan at 23:11, 25 June 2015

2015-06-25T23:11:58Z

Dan: /* OAI-PMH exposure - returned! */ Add another OAI issue, fix wording

2015-06-25T22:59:39Z

‎OAI-PMH exposure - returned!: Add another OAI issue, fix wording

Dan: /* Usability enhancements */ shorten some issue descriptions to better fit on 1 line

2015-06-25T22:25:15Z

‎Usability enhancements: shorten some issue descriptions to better fit on 1 line

@@ Line 3: / Line 3: @@
 '''Release date''': July 10, 2015
 '''Download link''' [http://storage.accesstomemory.org/releases/atom-2.2.0.tar.gz atom-2.2.0.tar.gz] (TAR)
@@ Line 14: / Line 15: @@
 <admonition type="important">
-There are new dependencies in the AtoM 2.2 release - please follow the upgrade and installation guides carefully. If you have questions, why not make a post in our AtoM [https://groups.google.com/forum/#!forum/ica-atom-users User Forum]?
+There are new dependencies in the AtoM 2.2 release - please follow the upgrade and installation guides carefully. Note especially the new section on [https://www.accesstomemory.org/en/docs/2.2/admin-manual/installation/asynchronous-jobs/ asynchronous jobs], which is required for the new Finding Aid generation and PREMIS rights inheritance features in 2.2. If you have questions, why not make a post in our AtoM [https://groups.google.com/forum/#!forum/ica-atom-users User Forum]?
 </admonition>

@@ Line 2: / Line 2: @@
 [[Main Page]] > [[Releases]] > [[Releases/Release announcements]] > Releases/Release announcements/Release 2.2
-'''Release date''': (upcoming; July 2015)
+'''Release date''': July 10, 2015
 '''Release 2.2''' is the first major release since September 2014, and includes a number of new features, usability enhancements, and bug fixes. We've closed well over 150 issue tickets as part of this release - you can view more details on each ticket in our issue tracker at the following links:

@@ Line 1: / Line 1: @@
 {{#pagetitle:Release 2.2}}
 [[Main Page]] > [[Releases]] > [[Releases/Release announcements]] > Releases/Release announcements/Release 2.2
 '''Release 2.2''' is the first major release since September 2014, and includes a number of new features, usability enhancements, and bug fixes. We've closed well over 150 issue tickets as part of this release - you can view more details on each ticket in our issue tracker at the following links:

@@ Line 19: / Line 19: @@
 ===Security enhancement: HTML escaping to prevent XSS exploits===
-''Sponsored by the World Bank Group Archives'''
+''Sponsored by the World Bank Group Archives''
 Comprehensive penetration testing has been done on AtoM, and various security improvements have been made to the application, including automatic HTML escaping within form fields, to prevent cross-site scripting (XSS) vulnerabilities (learn more about them on [https://en.wikipedia.org/wiki/Cross-site_scripting Wikipedia]). Additionally, a configurable option to enable escaping of potentially risky elements on static pages, using a tool called [http://htmlpurifier.org/ htmlpurifier], has been included (and is turned OFF by default, to avoid affecting existing static pages).
@@ Line 31: / Line 31: @@
 Artefactual will be sharing a script that users can run, to remove HTML content from the database (except in static pages). Note that unless users turn on htmlpurifier, static pages will not be affected by the HTML escaping - it is limited to edit forms where users input content.
 </admonition>
 ===New feature: Generate PDF or RTF finding aids from archival descriptions===

← Older revision		Revision as of 19:09, 2 July 2015
Line 16:		Line 16:
	An overview of some of the major changes is included below.		An overview of some of the major changes is included below.

		+
		+
		+	===Security enhancement: HTML escaping to prevent XSS exploits===
		+	''Sponsored by the World Bank Group Archives'''
		+
		+	Comprehensive penetration testing has been done on AtoM, and various security improvements have been made to the application, including automatic HTML escaping within form fields, to prevent cross-site scripting (XSS) vulnerabilities (learn more about them on [https://en.wikipedia.org/wiki/Cross-site_scripting Wikipedia]). Additionally, a configurable option to enable escaping of potentially risky elements on static pages, using a tool called [http://htmlpurifier.org/ htmlpurifier], has been included (and is turned OFF by default, to avoid affecting existing static pages).
		+
		+	* '''Related issue ticket''': #7647
		+	* '''Related documentation:''' [https://www.accesstomemory.org/en/docs/2.2/user-manual/administer/static-pages/#security-static-pages Static pages and security configuration]
		+
		+	<admonition type="important">
		+	'''This will affect all edit and view pages in AtoM'''. We have long urged our users not to be adding HTML content into form fields. Now, that content will be escaped, and will '''not''' render as HTML:
		+	[[File:escaped-content.png\|center\|500px\|thumb\|An example of HTML content in a form field, seen in the view page]]
		+	Artefactual will be sharing a script that users can run, to remove HTML content from the database (except in static pages). Note that unless users turn on htmlpurifier, static pages will not be affected by the HTML escaping - it is limited to edit forms where users input content.
		+	</admonition>

← Older revision		Revision as of 23:14, 25 June 2015
Line 110:		Line 110:

	And more!		And more!
		+
		+	----

	For users curious to see the 2.2 features in action, we have a webinar recording available:		For users curious to see the 2.2 features in action, we have a webinar recording available:

← Older revision		Revision as of 23:12, 25 June 2015
Line 8:		Line 8:


−	Visit the [ Downloads page] to download the most recent release, and consult the 2.2 [https://www.accesstomemory.org/docs/2.2/admin-manual/installation/upgrading/ Upgrade] and [https://www.accesstomemory.org/docs/2.2/admin-manual/installation/linux/ Installation] guides for further information.	+	Visit the [https://www.accesstomemory.org/download/ Downloads page] to download the most recent release, and consult the 2.2 [https://www.accesstomemory.org/docs/2.2/admin-manual/installation/upgrading/ Upgrade] and [https://www.accesstomemory.org/docs/2.2/admin-manual/installation/linux/ Installation] guides for further information.

	<admonition type="important">		<admonition type="important">

@@ Line 6: / Line 6: @@
 * [https://projects.artefactual.com/versions/58 Release 2.2 Roadmap / Overview]
 * [https://goo.gl/ihn3Ax Verifed 2.2 issues organized by category]
@@ Line 95: / Line 105: @@
 * #8223 - Improve sort options for Accessions browse
 ** ''Sponsored by the City of Vancouver Archives''
 And more!
+* [https://youtu.be/WBBeECajcC8 AtoM 2.2 release sneak peek (YouTube)]

@@ Line 52: / Line 52: @@
 ===OAI-PMH exposure - returned!===
-In an early version of ICA-AtoM, the ability to expose Dublin Core metadata via [http://www.openarchives.org/pmh/ OAI-PMH] was introduced, but not maintained. Thanks to a  combination of sponsored and Artefactual-contributed development, community pull requests, and public participation, the OAI exposure module is back and better than ever!
+In an early version of ICA-AtoM, the ability to expose Dublin Core metadata via [http://www.openarchives.org/pmh/ OAI-PMH] was introduced, but not maintained. Thanks to a  combination of sponsored development, community pull requests, and public participation, the OAI exposure module is back and better than ever!
 '''Related issue tickets:'''
@@ Line 63: / Line 63: @@
 ** ''Submitted via community pull request from Teaspoon Consulting''
 * #8159 - Improve OAI-PMH implementation of dublin core (oai_dc)
 ** ''Submitted via community pull request from Teaspoon Consulting''

@@ Line 81: / Line 81: @@
 * #5614 - Improve Institution holdings browse on the Archival institution page
 ** ''Sponsored by the University of Witswatersrand''
-* #7651 - Include "Part of" information with hyperlink to top-level parent description in search and browse results
+* #7651 - Include "Part of" information with hyperlink to top-level parent description in results stubs
 ** ''Sponsored by the United Nations Archives and Records Management Section''
-* #5966 - Add "Top-level descriptions" filter to "Level of description" facet and make default for Browse > Archival descriptions page
+* #5966 - Add "Top-level descriptions" filter and make default for Browse > Archival descriptions page
 ** ''Sponsored by the Council of Nova Scotia Archives''
 * #7644 - Add an approximate count of records below to treeview when results are truncated by " ... "