Release Lizmap Web Client 3.8.18

Use only the ZIP file provided in this release called lizmap-web-client-3.8.18.zip ⚠
If you are using Docker, images are available on Docker Hub 🐋:

• docker pull 3liz/lizmap-web-client:3.8.18
• docker pull 3liz/lizmap-web-client:3.8

Do not forget to go in your QGIS desktop plugin manager and regularly update all your plugins to their latest version 🤗

Requirements

To be able to run this version of Lizmap Web Client, you need :

• QGIS Server 3.28 minimum, check the latest monthly bugfix release on the QGIS roadmap
• Lizmap QGIS Server plugin 2.13.0 minimum
• QGIS project files targeting at least Lizmap Web Client 3.5.0 to be displayed
• Recommended version for Lizmap Desktop plugin 4.4.9

Automatic testing process

Changelog

Security ⚠

• admin - sanitize file name of the uploaded image
• admin - escape html content into links on the user admin page
• lizmap - strengthen some requests processing
• media - don't disclose full path of unknown media in 404 page
• xmltools - do not load explicity entities when loading XML files

Fixed 🐛

• Admin - syntax error in lizmapConfig.ini.php into the list of domains for CORS
• Admin - invalid repository path locked update

Backend ⛽

• Upgrade Jelix to version 1.8.24
• Upgrade jCommunity to version 1.4.5
• Update locales

Translations

• Update translated strings from the Transifex website, not coding skills required to contribute :
  • Lizmap Web Client
  • Jelix

Full changelog between 3.8.17 and 3.8.18: 3.8.17...3.8.18

The Lizmap team 🦎