<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
Folks,<br>
<br>
To give you something to do while self-isolating from Covid-19, I
have just released a new version of ZendTo, version 5.23-1.<br>
<br>
It's been some time since the last production release (sorry, I got
stuck in hospital), so there are quite a few new features and
updates. Don't forget to run <tt>/opt/zendto/bin/upgrade</tt> after
you yum/apt upgrade to the new version.<br>
<br>
Here are the major changes and new options/features:<br>
<br>
<b>- New preferences.php settings</b> (more details in <tt>preferences.php</tt>)<b>:</b><br>
* '<b><tt>allowExternalRecipients</tt></b>' (default=TRUE). If set
to FALSE, only recipients listed in internaldomains.conf may be
used. Creates an entirely closed system where files cannot be sent
to external users at all.<br>
* '<b><tt>showRecipientsWaiverCheckbox</tt></b>' (default=TRUE)
and '<b><tt>defaultRecipientsWaiver</tt></b>' (default=FALSE). A new
"terms and conditions waiver" feature. If used, this forces
recipients to read some text (could be legal stuff, could be
instructions) and tick a check box to say they have read and agreed
to it. Until they have ticked the box, they cannot see any of the
download links. The default "terms and conditions" text just
contains instructions on how you change that text, and how to
disable the feature completely.<br>
* '<b><tt>behindLoadBalancer</tt></b>' (default=FALSE). Set this
to TRUE if your ZendTo log says all users are coming from the same
IP address (that of your load balancer/firewall). This used to be
automatic, but doing it that way introduces a potential security
vulnerability when there is no load balancer.<br>
* '<b><tt>requestSenderOrgIsEditable</tt></b>' (default=TRUE). In
the "request a drop-off" form, should the organisation name be
editable or not. In small / simple organisations you probably want
this FALSE, but in complex ones such as large universities with
multiple brands and spin-offs you may well want this to be editable
and hence TRUE.<br>
* '<b><tt>indexAddressbookByEmail</tt></b>' (default=FALSE). If
your users login to ZendTo with a random (and continually changing)
username, due to you using hardware authentication keys such as
Yubikeys, setting this TRUE will make the "address book" feature
work properly. Changing this from FALSE to TRUE on an existing
installation will effectively wipe the address book contents, so
don't change it unless you actually need to.<br>
* '<b><tt>allowExternalPickups</tt></b>' (default=TRUE). If set to
FALSE, users who are not logged in will not see the "Pick-up files"
button in the main menu,<br>
<br>
- <tt>internaldomains.conf</tt> file can now list individual email
addresses as well as domain names. This allows you to add a few
GMail users as "internal users", for example.<br>
- Changed method of calling Google ReCaptcha to improve reliability,
and to make it work from China. If you use the
"Content-Security-Policy" HTTP header, you will need to add
recaptcha.net to the items that list google.com as valid sources.<br>
<br>
- Removed vulnerabilities from admin "unlock users" page.<br>
- Improved security of session cookie. Installing this update will
logout any current ZendTo users, so do this at a quiet time or a
scheduled maintenance window.<br>
- Updated supplied copies of all external Javascript libraries.<br>
<br>
- Added new Hungarian, Russian and Polish translations.<br>
- Improved French, Italian and Dutch translations.<br>
<br>
- Added support for CentOS 8, Ubuntu 19 and Debian 10 (Buster) to
the Installer.<br>
- Fixed self-signed certs generated by the Installer so they work in
MacOS 10.15 Catalina. Apple have added a bunch of constraints, see
<a class="moz-txt-link-freetext" href="https://support.apple.com/en-us/HT210176">https://support.apple.com/en-us/HT210176</a>.<br>
- Various other minor bug fixes. See the ChangeLog entries for the
preceding beta releases for details.<br>
<br>
<br>
As usual, please get in contact with me if you have any problems
with the new version.<br>
<br>
Cheers,<br>
<pre class="moz-signature" cols="72">Jules
--
Julian Field MEng CEng CITP MBCS MIEEE MACM
'Talent is God-given ... be humble;
fame is man-given ... be grateful;
conceit is self-given ... be careful.' - John Wooden
<a class="moz-txt-link-abbreviated" href="http://www.Zend.To">www.Zend.To</a>
Twitter: @JulesFM
</pre>
</body>
</html>