Movable Type 8.4.0 Release Notes
This version includes several bug fixes and security updates of TinyMCE. The 8.4.0 includes updates of 8.1, 8.2 and 8.3 releases.
New and Improved Features
- The JavaScript Library in admin pages now be changed from Riot.js to Svelte. Set the Configuration Directive
UseRiot
to0
to change to Svelte (MTC-28944, MTC-29006, MTC-29919) - Smarty has been updated from 4.3.4 to 4.5.3 (MTC-29663)
- The MTBlockEditor plugin has been updated from 1.2.2 to 1.2.4
- MTBlockEditor: Table blocks now display borders when editing (MTC-29749)
- MTBlockEditor: When LWP::Protocol::https is not installed, an appropriate error message is displayed when using the oEmbed block (MTC-29698)
- MTBlockEditor: When specifying resources with relative paths in custom scripts, the resources on the public site are now loaded (MTC-29772)
- Added an option to prevent public file information (FileInfo) from being imported when importing a site. If the “Omit import” checkbox for public file information is enabled, it will not be imported (MTC-29773)
- Added the Configuration Directive
MTScript
andMTStylesheet
, which are used when loading JavaScript and stylesheets inmt-static
from the admin screen (MTC-25985) - Added the ability to output the value of any website by specifying the id attribute for the WebsiteURL and WebsitePath tags (MTC-29257)
- Added the Configuration Directive
SuperuserRespectsDataAPIDisableSite
to force system administrators to setDataAPIDisableSite
(MTC-29694) - Added the height attribute to the IMG element in the HTML output from the image block in the content type block editor (MTC-29728)
- When a site import is finished, whether it was successful or not, the fact that it has finished is now logged (MTC-29770
- Explicitly added
charset="utf-8"
to places where external scripts are called (MTC-28113) - Improved the method for detecting supported image types in the system check (MTC-29738)
Resolved issues
- Fixed an error would sometimes occur when trying to change the license key to a different one on the license confirmation screen if a license had already been registered (SUPPORT-438)
- Fixed the year character of local languages contained in the output of
MTArchiveTitle
tag would be output as a numeric character reference for some archive types (SUPPORT-369) - Fixed a warning would be displayed when using the categories field in the ContentField tag and specifying a positive lastn attribute when using Perl 5.26 or earlier (MTC-29788)
- Fixed the selected blog ID would remain after resetting the site after selecting it in the site export (MTC-29703)
- Fixed to be possible to make existing archive mappings take precedence when there were no priority archive mappings (MTC-29752)
- Fixed the asset mapping would sometimes disappear and URL conversion would not occur when importing a site that contained custom fields (MTC-29709)
- Fixed errors could occur when performing complex DOM operations when using MT::Builder::Fast (MTC-29775)
- Fixed an issue where some objects could not inherit old parameters due to a callback flaw when performing replacements (MTC-29697)
- Fixed an error occurred in the general settings when creating a dynamic template on a site that had not been configured for server-side includes (MTC-29746)
- Fixed the thumbnail display of article assets was in the way and prevented you from being able to move to the asset editing screen (MTC-29701)
- Fixed specifying an ID in
DataAPIDisableSite
would still allow you to displayblog_id
andIncludeBlogs
in data-api.cgi/v4/search (MTC-27069) - Fixed, in environments other than PSGI, an unnecessary phrase was displayed on the theme list screen after changing the theme (MTC-29732)
- Changed the lower limit of the Perl system requirements from 5.16.0 to 5.16.3 (MTC-29695)
- Fixed the mt-wizard.cgi cannot be advanced when the Perl version is outside the supported range (MTC-29693)
- Fixed the current Perl version displayed correctly when checking the version (MTC-29699)
- When a core module is missing in the system check, the message “This module is not available” is now displayed instead of “This module may cause unexpected behavior” (MTC-29692)
- Fixed errors could occur in the category content field (MTC-29661)
- Fixed the display of cache items broken on the template module editing screen (MTC-29700)
- Improved the performace of the new role creation screen and editing screen when there are many content types (MTC-29713, MTC-29680)
- Fixed the warning about the plugin being disabled due to an error occurring during loading does not continue to appear (MTC-29706)
- Fixed to enable to skip the required fields when creating a new site (MTC-29708)
- Fixed the content of log to display when using the Safari browser (MTC-29153)
- Removed the site duplication menu from the system site list actions (MTC-29248)
- Fixed the mt-wizard.cgi to display database settings of advanced hints (MTC-29624)
- Fixed the mt-wizard.cgi to display email-related warnings (MTC-29689)
- Added support for SMTPS settings in the mt-wizard.cgi (MTC-29640)
- Added
UnpublishedDate
tag to articles and web pages (MTC-27309) - Changed the image width/height information to be stored in the asset table instead of the meta table (MTC-29656)
Movabe Type Advanced
- Fixed so that you can specify the certificate validation settings when connecting to SQL Server (MTC-29586)
- Updated the ODBC driver-related text and default values displayed in the wizard’s database settings (MTC-29625)
Dynamic Publishing
- Improved the compilation process of MT tags to Smarty in dynamic publishing (MTC-29308)
- Reduced the number of temporary variables in PHP for the
inside_archive_list
stash (MTC-29662) - Improved loading mechanism from database in PHP (MTC-28145, MTC-28145, MTC-29660)
- Fixed specifying
sort_by="score"
andmin_comment="1"
at the same time in PHP would cause a SQL error (MTC-29655) - Added comments such as “unreachable” to unused methods and unreachable implementations in PHP (MTC-29659)
- Fixed an issue where the
MTArchiveList
of Weekly Archives placed inside a nested dynamic template would not work correctly (MTC-29654) - PHP’s ifarchivetypeenabled now avoids double escaping (MTC-29683)
- Fixed an issue where ORA-00904 would occur when searching for users using
get_latest_touch
with oracle+php (MTC-29696) - The incorrect field was declared in PHP’s
class.mt_content_field.php
, so it was deleted (MTC-29658) - Fixed an issue where the cache expiration time for
MTInclude
was sometimes too short when using PHP+memcache (MTC-29722)
JavaScript Libraries
- Updated the JavaScript SDK for the Movable Type Chart API (MTC-29754)
- Resolved the issue by examining the dependencies in package.json (MTC-27286)
- The changes that were applied only to the movabletype repository were also applied to mt-chart-api-sdk-js (MTC-29740)
- Resolved the differences between mt-static and package.json (MTC-29734)
- Removed unnecessary modules and code from package.json (MTC-29785)
- Sort the output of
mt_ja.js
andmt_en_us.js
(MTC-29743) - Removed mt-static/js/admin2023/jquery/jquery.mt.min.js (MTC-29744)
- yarn has been replaced with npm run (MTC-29673)
- Fixed an issue where the version of Bootstrap 5 differed between the one specified in package.json and the one bundled with mt-static (MTC-29666)
- Fixed the copyright notation in mt-data-api-sdk-js (MTC-29719)
AMI Edition
- Add an alias for /mt-static/plugins to the AMI Edition (MTC-29612)
- Fixed an issue where the query string was not passed in dynamic publishing when the web server was nginx (MTC-9414)
Sync.pack (Movable Type Advanced)
- Changed the item name of the “Serve all files” checkbox in server delivery to “Serve files that have not been updated” (MTC-29751)
- Server distribution to S3 / R2 has been disabled by default. Unlike FTP distribution, server distribution to S3 / R2 reflects the file structure of the distribution source to the distribution destination, so when there are no files in the distribution source and only files exist in the distribution destination, files may be deleted. Setting the environment variable
S3SyncVersion
tov1
will enable server distribution to S3 / R2 with the current specification (MTC-29657)
Security fixes and improvements
- Updated TinyMCE in the TinyMCE6 plugin to 6.8.4 (MTC-29710)
- Disabled insertion of
noscript
elements in the TinyMCE5 plugin (MTC-29711) - Prevented XSS by embedding TinyMCE5 plugin and TinyMCE6 plugin objects (MTC-29712)
Deprecated features
- The step for separating content from mt-wizard.cgi has been removed (MTC-29750)