Misago 0.19.2 is a maintenance release focused on fixing issues and improving different areas of project.
Security improvement: added
rel=noopener to user-posted links
In response to heads up posted on Misago's GitHub (thank you for that!) 0.19.2 changes our message parser to set
rel="nofollow noopener" on user-posted links, which should make it safer for site users to open posted links.
Streamlining the dev experience
Misago 0.17 was first Misago to standardize the process of creating development instances with inclusion of Docker. Misago 0.19.2 builds on this by providing the
dev bash script providing shortcuts for common development actions, as well as place for us to run some basic checks and communicate possible issues to developers.
Assuming you already have docker installed on your machine, it now takes 4 commands from nothing to running Misago instance on your machine:
git clone https://github.com/rafalp/Misago.git cd Misago ./dev start docker-compose up
./dev also gives us single place for packing other shortcut actions, such as
./dev reset that performs hard reset of development instance or
./dev txpull that pulls and compiles latest versions of translations from Transifex.
Version check utility
Misago Admin Panel has "Misago version" section that in plan should've displayed the button that administrator could click to learn if they need to update their site to new version. This was ruined however by Misago requiring site administrator to install additional package in their python environment in order to be able to use it.
Misago 0.19.2 brings updated version check logic that no longer requires any custom action for this option to be available.
To update Misago from 0.19.1 to 0.19.2 use PIP to uninstall old Misago and install new one:
pip uninstall misago pip install misago
Next, run following commands to make sure your forum database and static files are up to date with latest changes:
python manage.py migrate python manage.py collectstatic
- 1051 - Debug Toolbar was not being displayed inside development docker container.
- 1100 -
createfakeuserscould run out of usernames.
Implementation and API changes
- 993 - Removed dependency on “packaging" module in "check version" admin tool.
- 1061 - Moved requirements management to
- 1079 - Consolidated all bash dev scripts into single file.
- 1084 -
createsuperuserwill no longer require password to pass validation. This change is to bring its behavior in line with Django 2.0 implementation, and make it easier to create throwaway super user accounts in development.
- 1088 - Misago will now add
rel=noopenerto outgoing links posted by users.
- 1091 - Replaced GitHub API with PyPi in "check version" admin tool.
- 1100 - Progress bar displayed by bulk-processing commands now also displays number of completed items.
- 1101 -
buildactivepostersrankingmanagement command will now display time it took to complete. It should also be little faster than it used to be.
- 1104 - Updated default
cron.txtto have 5 minute delays between each maintenance task run, conserving host's memory better.
- 1082 - Translation source for
django.pohas changed. Transifex has been updated.