responsible disclosure by [Dejan Zelic](https://twitter.com/dejandayoff),
Justin Benjamin and others at [Offensive Security](https://twitter.com/offsectraining),
that follow standard 90 days before public disclosure.
Thanks to xet7.
- Fix webhook error that prevented some card etc deleting from web UI of board.
Thanks to xet7.
- Add some more Font Awesome icons.
Thanks to xet7.
- Remove autofocus from many form input boxes so that they would not cause warnings.
Thanks to xet7.
Card Settings / Show on Card: Description Title and Description Text.
Thanks to e-stoniauk, 2020product and xet7 !
Fixes https://github.com/wekan/wekan/pull/2922
and seeing board settings menu. Show non-editable Custom Fields to isCommentOnly user.
Thanks to xet7 !
Closes wekan/wekan-snap#97,
closes#2416,
closes#2255
- All Boards page [so it's possible to go back from subtask board](https://github.com/wekan/wekan/issues/2082)
- Board favorites
- New Sandstorm board first user is Admin and [has IFTTT Rules](https://github.com/wekan/wekan/issues/2125)
and Standalone Wekan Admin Panel. Probably some Admin Panel features do not work yet. Please keep backup of your grains before testig Admin Panel.
- Linked Cards and Linked Boards.
- Some not needed options like Logout etc have been hidden from top bar right menu.
- [Import board now works. "Board not found" is not problem anymore](https://github.com/wekan/wekan/issues/1430), because you can go to All Boards page to change to imported board.
and removes the following features:
- Remove Welcome Board from Standalone Wekan, [to fix Welcome board not translated](https://github.com/wekan/wekan/issues/1601).
Sandstorm Wekan does not have Welcome Board.
Thanks to xet7 !
Closes#2125,
closes#2082,
closes#1430,
closes#1601,
related #2205,
related #2070,
related #1695,
related #1192.
We now use the `preferredHandle` exposed by Sandstorm as source for
the username and append a number if the username is already taken
since we need to ensure username uniqueness (eg 'max', 'max1', 'max2')
Fixes#352
The removeMemberPopup was missing the required helper to get the user and board
information and the user profile field is called "fullname" and not "name".
We still miss some branding stuff, such as screenshots, icons, and a
description.
This commit also hides an option related to user permissions managment
in the sandstorm package.
The user is now able to upload an avatar, and pick one in a list.
This functionality should eventually be abstracted in a community
package but we still need to work on a great public API. We rely on
collectionFS to manage uploaded avatars. We also removed
bengott:avatar which was trying to solve the wrong problem (namely
displaying the avatar, which is as simple as displaying an image), and
not a avatar system as it should be.
Gravatar support is coming (back) soon. We may also want to have a
list of default fun avatars the user can choose instead of uploading
its own one.