[BUGFIX] Add CSRF protection for admin

[jirafeau_mojo42.git] / README.md

diff --git a/README.md b/README.md
index d4b3f956bb9f44c5e51e917c415c005ef1eb3b66..87a7df374a113e235f2803eeaa288c23767e7af9 100644 (file)
--- a/README.md
+++ b/README.md
@@ -1,3 +1,13 @@
+# SECURITY ANNOUNCEMENT
+
+## 3th Mai 2018
+
+Multiple security vulnerabilities has been reported by [Bishopfox team](https://www.bishopfox.com/) on Jirafeau project.
+
+The next release of Jirafeau (3.4.1) will include security fixes and is planned 12th Mai 2018.
+
+Upgrading Jirafeau is recommended.
+

 # Jirafeau
 
 Welcome to the official Jirafeau project, an [Open-Source software](https://en.wikipedia.org/wiki/Open-source_software).
 # Jirafeau
 
 Welcome to the official Jirafeau project, an [Open-Source software](https://en.wikipedia.org/wiki/Open-source_software).


@@ -98,7 +108,7 @@ Installation steps:
 1. The "Terms of Service" text file changed
    * To reuse previous changes to the ToS, move the old ```/tos_text.php``` file to ```/lib/tos.local.txt``` and remove all HTML und PHP Tags, leaving a regular text file
 
 1. The "Terms of Service" text file changed
    * To reuse previous changes to the ToS, move the old ```/tos_text.php``` file to ```/lib/tos.local.txt``` and remove all HTML und PHP Tags, leaving a regular text file
 

-### from version 2.0.0 to 3.3.0
+### from version 2.0.0 to 3.4.0

 
 There is nothing special to do to update from/to the following versions:
 - 2.0.0 -> 3.0.0
 
 There is nothing special to do to update from/to the following versions:
 - 2.0.0 -> 3.0.0


@@ -106,6 +116,7 @@ There is nothing special to do to update from/to the following versions:
 - 3.1.0 -> 3.2.0
 - 3.2.0 -> 3.2.1
 - 3.2.1 -> 3.3.0
 - 3.1.0 -> 3.2.0
 - 3.2.0 -> 3.2.1
 - 3.2.1 -> 3.3.0

+- 3.3.0 -> 3.4.0

 
 ### Troubleshooting
 
 
 ### Troubleshooting
 


@@ -413,3 +424,11 @@ The very first version of Jirafeau after the fork of Jyraphe.
 - More translations
 - Style fixes
 - Removed useless alias API support (some old toy)
 - More translations
 - Style fixes
 - Removed useless alias API support (some old toy)

+
+## Version 3.4.0
+
+- Add encryption support in bash script
+- Refactoring of lang system for simpler management
+- Removed installation step asking for language
+- Merged weblate contributions
+- Fixed some spelling issues