Version 2.1.70

• Security: Fix CSRF protection for the netmount command
• Security: Fix MIME validation during ZIP archive extraction
• Security: Require cURL for URL uploads to prevent SSRF protection bypass in the fsock_get_contents() fallback
• Fix postMessage origin bypass and playsound DOM XSS

For technical details of [Security:], please refer to the published GitHub Security Advisories.

Full Changelog: https://github.com/Studio-42/elFinder/compare/2.1.69...2.1.70

Version 2.1.69

• Only fixes a release error; there are no changes to the functionality.

Version 2.1.68

• Fixing bug where uploading large files sometimes fails (#3761)
• Fix incorrect URL generation in getContentUrl() (#3759)
• pressing minimized button ( - ) on the editor while the editor is maximized will close the editor (#3737)
• Update deprecated php type casts (#3739)
• fix(mime): normalize MIME mappings and regenerate elFinder.mimetypes.js
• Update Russian translation and authorship details (#3757)
• chore(dev): add MIME mapping generator script
• Use Array.isArray instead of $.isArray (#3771)
• added "SVG image" & "WEBP image" file type description to "Kind" column when in list view (#3738)
• Correctly urlencode path in setcookie(); fix Studio-42#3538 (#3754)
• Create SECURITY.md
• fix: Pixo Image Editor JS path
• update: [css] change font-size of preview
• fix: improve PHP 8 compatibility in session, cURL, and callback handling (#3780)
• Prepare elFinder for jQuery 4 sup (#3781)
• fix: example html, js
• build: add elfinder-minimal
• feat(editor): add signed callback state storage for external save handlers
• fix(connector): add CSRF token validation and refresh flow
• fix(connector): refine CSRF token refresh timing and protected commands
• fix(js): guard CSRF reload check when xhr is missing
• fix(onedrive): prefer cached Graph download URLs for file access
• Preserve i18n keys in mount errors
• fix:#3782 avoid E_STRICT on PHP 8.4+
• Update safe CDN versions for external JS libs
• Normalize MPD text/xml MIME type
• [i18n:ja] Update elfinder.ja.js
• fix(connector): normalize PHP error handling and mount failures
• chore(js): update default CDN library versions
• chore: ignore local IDE project files
• docs: fix correct the incorrect date
• [security] [VD:MySQL] normalize numeric object ids for SQL usage

Changes form previous version

Full Changelog: https://github.com/Studio-42/elFinder/compare/2.1.67...2.1.68

• Fixing bug where uploading large files sometimes fails (#3761)
• Fix incorrect URL generation in getContentUrl() (#3759)
• pressing minimized button ( - ) on the editor while the editor is maximized will close the editor (#3737)
• Update deprecated php type casts (#3739)
• fix(mime): normalize MIME mappings and regenerate elFinder.mimetypes.js
• Update Russian translation and authorship details (#3757)
• chore(dev): add MIME mapping generator script
• Use Array.isArray instead of $.isArray (#3771)
• added "SVG image" & "WEBP image" file type description to "Kind" column when in list view (#3738)
• Correctly urlencode path in setcookie(); fix Studio-42#3538 (#3754)
• Create SECURITY.md
• fix: Pixo Image Editor JS path
• update: [css] change font-size of preview
• fix: improve PHP 8 compatibility in session, cURL, and callback handling (#3780)
• Prepare elFinder for jQuery 4 sup (#3781)
• fix: example html, js
• build: add elfinder-minimal
• feat(editor): add signed callback state storage for external save handlers
• fix(connector): add CSRF token validation and refresh flow
• fix(connector): refine CSRF token refresh timing and protected commands
• fix(js): guard CSRF reload check when xhr is missing
• fix(onedrive): prefer cached Graph download URLs for file access
• Preserve i18n keys in mount errors
• fix:#3782 avoid E_STRICT on PHP 8.4+
• Update safe CDN versions for external JS libs
• Normalize MPD text/xml MIME type
• [i18n:ja] Update elfinder.ja.js
• fix(connector): normalize PHP error handling and mount failures
• chore(js): update default CDN library versions
• chore: ignore local IDE project files
• docs: fix correct the incorrect date
• [security] [VD:MySQL] normalize numeric object ids for SQL usage

Changes form previous version

Full Changelog: https://github.com/Studio-42/elFinder/compare/2.1.66...2.1.67

• [security] fix command injection vulnerability in resize background color handling when using the ImageMagick CLI backend

Changes form previous version

Full Changelog: https://github.com/Studio-42/elFinder/compare/2.1.64...2.1.66

Version 2.1.65

• [js] update CDNs
• [php:editors] Zoho API update

Version 2.1.66

• [PHP 8.4] Fix: Curl CURLOPT_BINARYTRANSFER deprecated
• Merge pull request #3629 from Ayesh/php84-curl-depr
• translate to Chinese
• Update zh_CN.js
• Update Chinese help
• fix name
• Update elfinder.ko.js
• try copy / deleting folder if moving it doesn't work
• Merge pull request #3636 from vfishv/master
• Merge pull request #3647 from allity/patch-1
• Merge pull request #3653 from terrafrost/branch-1
• Fix #3637 FILTER_SANITIZE_STRING is deprecated (PHP 8.1)
• Allow image URL in theme manifest.json to be a relative link as well
• Update elfinder.ru.js
• Merge pull request #3677 from blutorange/feat-relative-image-link-in-theme-manifest
• Merge pull request #3682 from Ruslan-Aleev/patch-1
• Fixes #3684 (#3685)
• [OneDrive] fix Content URL
• Fix #3667 where the Content URL could be invalid
• [VD:core] Check if copying was successful when moving files in copy + delete mode
• Fix CVE-2025-0818 (#3723)
• Fixes #3689, fm.sync removes unavailable volumes. (#3690)
• [VD:SFTP] Make compatible with phpseclib version 2 or 3 when returned from connectCallback($options) (#3687)
• Add font mime kinds (WOFF, WOFF2, EOT, SFNT, generic font/*) (#3691)
• Ignore posted message that are not intended for ElFinder (#3692)
• Add option to rename command to disable alias rename (#3693)
• Add option commandsOptions.edit.confirmUnsavedBeforeClose (#3698)
• Fix build for Windows environment (#3699)
• Replace usage of deprecated E_STRICT constant (#3705)
• Add "WEBP" to File mimetype to kind mapping (#3712)
• fix translation mistakes and unification (#3719)

Changes form previous version

All previous changes is here.

Version 2.1.64

• [css] re-fix #3584 css error and CI

Version 2.1.63

• [php:core] fix download a file via context menu the windows download popup don't close (#3619)
• [VD:MySQL] Use prepared statements instead of escaping when saving file (#3604)
• [VD:core] fix #3617 Filename Restriction Bypass Leading To Persistent Cross-site Scripting
• [js] fix #3614 $.isFunction() is deprecated in jQuery
• [js] Update to jQuery 3.7.1 and Jquery UI 1.13.2
• [VD:LocalFileSystem] fix #3615 Using .php8 in PHP handler leading to RCE
• [cmd:upload] fix #3575 Drag&Drop Upload Issue with Firefox

Changes form previous version

All previous changes is here.

• [php:core] prevent garbled file name when URL upload
• [js:core,upload] fixed DnD in-browser image upload in Chrome
• [js:options] update CDNs
• [js:core,upload] fixed DnD in-browser image upload in Chrome
• [php] Update elFinderVolumeSFTPphpseclib.class.php (#3483)
• [mime.types] Update mime.types to allow MS outlook message files (#3499)
• [js:cmd:resize] fix #3513 rotate bug on Chrome
• [VD:LocalFileSystem] Security fixes, directory traversal vulnerability fixes
  • Awaiting CVE ID.
  • This issue was found by Michał Majchrowicz & Livio Victoriano AFINE Team.
• Correctly urlencode path in setcookie(); fix #3538 (#3561)
• [js:core] fix #3572 Useless backend request during elFinder.sync()
• [VD:LocalFileSystem] fix #3543 Can't download folder in PHP 8.1
• [php:core] fix #3546 Use elFinder::getCmdOfBind instead of self::getCmdOfBind which is deprecated in PHP v8.2
• [VD:SFTP] fix SFTP driver fatal error, cleanup (#3574)
• And some minor bug fixes

Changes form previous version

All previous changes is here.

• [security] Fixed #3458 filename bypass leading to RCE on Windows server
• [security:CVE-2022-26960] Fixed a path traversal issue
• [i18n] Updated ru and fr
• [js] Updated CDNs of external libs
• And some minor bug fixes

Changes form previous version

All previous changes is here.

• [VD:OneDrive] show error on _od_obtainAccessToken()
• [ui:cwd] make easily able to mapping mimetype to the kind (#3375)
• [cmd:rm] Fixed an issue that sometime ignore the delete button and into the trash
• [VD:LocalFileSystem] Fixed #3429 RCE on Windows server
• [js:core,options] Fixed #3401 add an option workerBaseUrl

Changes form previous version

All previous changes is here.

• [Security:php] Fixed multiple vulnerabilities leading to RCE
• [php:session] Fixed #3278 wrong code of typo
• [js:core] #3351 allow columnsCustomName[x] to be a function
• [css:quicklook] Fixed #3240 remove unnecessary color specifications
• [cmd:extract] Fixed #3252 for checking the existence of existing files
• [js:core] Fixed #3359 add an option "noResizeBySelf"
• [VD:abstract] Fixed #3216 missing url option on upload into root
• And some minor bug fixes

Changes form previous version

All previous changes is here.

• [VD:abstract] Fixed #3151 support RAR5 lib
• [cmd:fullscreen] Fixed #3177 wrong fullscreen button caption
• [js:core] Supports cookie samesite attribute
• [VD:SFTP] Add new SFTP driver, via phpseclib library
• [js:core] Fixed #3193 auto-detection of baseUrl
• [js:upload] Fixed upload bug (#3264)
• [VD:abstract,php] make the thumbnail support webp (#3265)
• [php:core] Fixed #3250 error only variables can be passed by reference
• [VD:abstract] add 'phar:*' => 'text/x-php' into 'staticMineMap'
• [VD:abstract] Fixed #3181 add an option uploadMaxMkdirs
• [php:core] Add cwd param to proc_open (#3281)
• [VD:abstract] Bugfix of an option mimeDetect (#3291)
• [UI] Fixed #3302 problem of d&d when copy of UI command is disabled
• And some minor bug fixes

Changes form previous version

All previous changes is here.

• [js] Fixed #3148 to support jQuery 3.5.0 update
• [php:core] Fixed #3154 volume that require online access cannot be specified
• [VD:abstract] Fixed #3161 fix option data of cwd results on after change files
• [VD:abstract] Fixed #3167 added "none" (no image library check) to imgLib
• [cmd:resize] Fixed #3158 to make able to change quality without changing dimensions
• And some minor bug fixes

Changes form previous version

All previous changes is here.

• [js:extras:editors.default] remove Pixlr editor it is no longer possible to display in IFRAME
• [php:core] Fixed #3134 close file pointer before deleting temporary file on shutdown
• [VD:abstract] change prefix of zipdl temp file
• [php:core] Fixed #3136 zipdl fails on Chrome on iOS / iPadOS
• [cmd:netmount] Fixed #3138 OAuth not possible with CORS due to new ITP
• [VD:MySQL,OneDrive] Fixed #3142 remove debug code
• [i18n:pl,ko] Updated translations
• And some minor bug fixes

Changes form previous version

All previous changes is here.

• [VD:abstract] Fixed #3125 Fatal error in zipArchiveUnzip()
• [cmd:open] optimization, move function definition in loop to out of loop
• [php:session] Fixed #3103 WARNING: setcookie(): Unrecognized key 'lifetime'
• [i18n:cs,sk] Updated translations

Changes form previous version

All previous changes is here.

• [cmd:edit,quicklook] adjustment about select encoding function
• [php:core] add toastErrorHandler for send toast message to client side
• [cmd:resize] to allow image resize more image type with the ImageMagick
• [php:session] Fixed #3103 WARNING: setcookie(): Unrecognized key 'lifetime'
• [php:session] Fixed #2857 warning error on start()
• [ui:dialog] delete an option flexibleHeight so it works well by option `height: "auto"``
• [cmd:edit] bugfix of save as on the serach results
• [php:core] add a public method utf8Encode() and make new main option utf8Encoder @callable
• [VD:abstract] Fixed #3104 Fixed as much as possible the differences in encoding of archive file names
• [php:plugins:Watermark] repeated use of Imagick::compositeImage() may cause PHP to hang, so disable it
• [js:core] Fixed #3106 enable to specify header name of parrot return to enable ITP measures
• [php:Connector] add a public method setHeader($value)
• [js:core] support fake progress bar
• [VD:OneDrive] bugfix of large file uploading
• [VD:Box] Fixed problem where access token could be lost
• [VD:Box] Fixed processing of getSharedWebContentLink()
• [js:core] if the file URL is public, use it as onetime url
• [php:plugins:Normalizer] support "caron" with option "umlauts"
• [js:core:notify] Fixed #3111 add minimize, close(option) button into notify dialog
• [ja:extars:editors.default] Fixed #2600 remove Creative Cloud Image Editor UI
• [php] Fixed #3114 stream proxy function using the file cmd corresponds to range request
• [js:extras:efitors.default] to show color slider of TUI Image Editor
• [cmd:edit] error handling of ta.getContent()
• [cmd:edit] bugfix of savecl() edit dialog may not re-open in case of error
• [js:core] Fixed #3118 web worker does not work when elfinder.js is cross-site loaded
• [php:core,VD] Fixed #3119 disallow extract of uncompressed size larger than option "maxArcFilesSize"
• [php:core] Fixed #3120 allow plugins (Sanitizer etc) to be applied when pasting from another volume
• [php:plugins:Normlizer,Sanitizer] update example commentation, recommend to bind to action "paste.copyfrom"
• [VD:FTP] Fixed stat() of root on server with no supports "MLST"
• [ui:cwd] Fixed a bug that thumbnails might not be displayed after editing image
• And some minor bug fixes

Changes form previous version

All previous changes is here.

• [VD:LocalFileSystem] Fixed #3095 not able to make quarantine directory
• [cmd:quicklook] Added TIFF image viewer
• [VD:abstract] Fixed #3097 "Unable to create archive" error deletes target files
• [cmd:quicklook] Fixed #3099 to make charactor encoding selectable in text file preview
• And some minor bug fixes

Changes form previous version

All previous changes is here.

• [js:core] Fixed #3052 a bug where duplicate CSS was loaded by loadCss()
• [debugger] Fixed #3057 add a client option toastBackendWarn
• [php:core] Fixed #3062 bugfix of elFinder::getConnectorUrl()
• [VD:abstract] Fixed #3071 folders in archive may not be extracted
• Use square brackets instead of curly braces, because this syntax is deprecated with PHP 7.4 (#3070)
• [cmd:quicklook] support the elFinder client option dialogContained
• [ui:dialog] Fixed wrong dialog sizing with the option dialogContained
• [VD:abstract] Fixed #3042 stricter processing verification on getItemsInHand()
• [VD] Fixed #3074 authentification (return) URL not useable if the connctor url has "?"
• [VD:abstract] Fixed #3077 support rapid root stat
• [VD:Box,OneDrive] Fixed #3082 support permanent mount with connector roots configure
• [js] Fixed #3081 handle when browser cookies are disabled
• [js:core] Fixed an issue where opened tabs could't be closed, such as when approving netmount
• [js:extras:editors.default] Fixed problem that can't save as JPEG with TUI image edtor
• [editors:online-convert] online-convert.com can no longer be displayed in iFrames on external sites
• [VD:abstract] Fixed #3084 add thumbnail garbage collection function
• [VD:FTP] change default option, 'checkSubfolders' to -1
• [core] Fixed #3085 malfunction of volume root option "disabled"
• [doc,example] Fixed #3079 add connector.maximal.php-dist
• [VD] save alias of options to session data of netmount volume
• [ui:cwd] Fixed #3087 wrong behavior when dragging with old jQuery UI
• [VD:Box] Fixed problem that isNameExists() return value is wrong
• [js] add worker/worker.js to support the Window.Worker
• [cmd:quicklook] add bzip2 preview and use Worker to calc
• [js:core] create new method fm.getWorker(options)
• [i18n:LANG] add new word 'linesLeft' : '... $1 lines left.'
• [js:core] Fixed #3069 send relative path on folder uploading
• [ui:cwd] Fixed lazy display of oldschool parent directory icon
• [php:core] Fixed #3093 add a delegate point get.detectencoding for the bind option
• And some minor bug fixes

Changes form previous version

All previous changes is here.

• [css] fix #2985 conflict css with bootstrap
• [cmd:edit,mkfile] fix #3000 add an option commandsOptions.edit.mkfileHideMimes
• [css:cwd] fix #3008 adjusting the minimum width of the type badge
• [css:cwd] refix #3008 adjusting the minimum width of the type badge
• [php:session] fix #3017 param "SameSite=None" support for CORS
• [cmd:edit] fix #3018 CodeMirror lib URL don't work as relative path when using RequireJS
• [js:core,VD:abstract] fix #3028 add an option tmbReqCustomData to the volume roots
• And some minor bug fixes

Changes form previous version

All previous changes is here.

• [cmd:edit] Fixed #2903 Types that can not be created are hidden in the contextmenu
• [VD:abstract] Fixed #2908 MIME type misjudgment of file with upper case extension
• [js:main.default] Fixed #2943 add error handling of lang detector
• [cmd:paste,VD:abstract] Fixed #2954 make the paste command cancelable
• [js:core] Fixed #2957 prevent circular reference of data for event call back
• [cmd:paste] Fixed #2967 add an option commandsOptions.paste.moveConfirm
• [js:core] Fixed #2970 "response is not defined" on upload error
• [js:core] Fixed #2971 of logic of getSize() function
• [js:core] Fixed #2863 (again) cssAutoLoad is not working
• And some minor bug fixes

Changes form previous version

All previous changes is here.

• [js:core] Fixed #2863 cssAutoLoad Array option is not working
• [js:core] Fixed #2862 stop autoSync when browser tab turn to background
• [cmd:search] Fixed #2867 support incremental search other than filename
• [VD:abstract] Fixed #2873 correct MIME-Type detection of "*.java"
• [js:extras:editors] Fixed #2879 adjustment save type of Photopea
• [js:resources:mixin] Fixed #2880 error "Uncaught TypeError"
• [VD:MySQL] Fixed #2883 problem that not uses tmpPath on _fopen()
• [js:extras:editors] Fixed problem of Online Convert by <base> tag
• [ui:dialog] Fixed problem of dialog height by CSS percentage max-height
• [ui:cwd] Fixed #2865 add an option uiOptions.cwd.matekeyDragout
• [Security,php:core] Fixed being bypassable of CVE-2019-6257 SSRF
• And some minor bug fixes

Changes form previous version

All previous changes is here.

• [VD:abstract] fix animated image conversion on ImageMagick
• [Security,VD:abstract] [CVE-2019-9194] fix command injection vulnerability of PHP connector Special thanks to Thomas Chauchefoin (Synacktiv) for reporting this vulnerability.

Changes form previous version

All previous changes is here.

• [js] Fixed #2820 remove Multi-byte space characters
• [js:jqueryelfinder] bugfix of elfinder reload(restart) on dialogelfinder
• [ui:places] Fixed #2822 set title attr correctly
• [ui:tree] add an option uiOptions.tree.attrTitle to enable set path info to title attr
• [js:editors.default] support tinyMCE 5 and integrate image uploader
• [js:dialogelfinder] Fixed #2824 freezes browser in uses dialogelfinder
• [ui:button] add CSS class elfinder-button-{COMMAND NAME}-menu to submenu
• [ui:sortbutton] Fixed #2829 sort menu is not synchronized with the data of cwd
• [ui:cwd] Fixed #2840 thumbnail is not created when adding an image to an empty folder
• [ui:cwd] Fixed #2836 setting CWD icons size not working
• [php:core] Fixed #2842 allow to cancel upload on upload.presave callback
• [js:core] Fixed #2845 size request with wrong params targets
• [php:session] Fixed #2857 consideration for environment other than "apache2 SAPI"
• [cmd:fullscreen] Fixed #2858 add an option of fullscreen mode screen/window
• And some minor bug fixes

Changes form previous version

All previous changes is here.

• [php:core:security] Add an option urlUploadFilter(@type callable) to elFinder class constructor options
• [php:core:security] [CVE-2019-6257] Fixed SSRF vulnerability of elFinder::get_remote_contents() [Reporter: Do Ha Anh of Viettel Cyber Security]
• [ui:button] Fixed #2818 correction of cmd menu position
• And some minor bug fixes

Changes form previous version

All previous changes is here.

• [js] Fixed #2802 broken handling of jQuery # selector
• [cmd:upload] Fixed #2807 correction of event handling of buttons
• [api:url] Fixed #2808 supports onetime url for the external service
• [VD:abstract] typo Fixed #2809 undefined ERROR_COPY_INTO_ITSELF
• [cwd] Fixed problem of thumbnail attaching on mobile devices
• [cmd:edit:editors.default] Fixed #2815 add Pixo editor integration
• [cmd:edit] To support onetime URL to get content URL
• [php:core:security] [CVE-2019-5884] Fixed information leakage vulnerability [Reporter: Ravindra Rajaram (ravindra.rajaram@broadcom.com) and Hamsalekha Madiraju (hamsalekha.madiraju@broadcom.com)]
• And some minor bug fixes

Changes form previous version

All previous changes is here.

• [cmd:sort] Fixed #2774 to make can disable "Also Treeview" sort option
• [cmd:edit:zoho] Fixed #2777 to show warning when editing items that can not be written anonymously
• [js:core] Fixed #2783i, #2784 make new event xhruploadfail
• [ui:tree,cwd] Fixed #2785 event handling of droppable element of tree of navbar
• [VD:abstract] Fixed #2791 correction of localRmdirRecursive() for Win server
• [js:core] Fixed #2799 some files are not saved when uploading multiple files
• And some minor bug fixes

Changes form previous version

All previous changes is here.

• [VD:abstract,cmd:info] Fixed #2646 volume roots option 'dirUrlOwn' accepts value 'hide'
• [php:plugin] Fixed #2649 disable content editing plugin when saving data in OnlineConvert
• [cmd:open] Fixed #2651 add an option selectAction
• [php:core] Fixed #2657 add a connector main option throwErrorOnExec
• [ui:cwd] Fixed #2653 correction of event handling of input:checkbox
• [js:core] Fixed #2660 add requestError event and make error message controlable
• [js:core,ui:cwd,tree] Fixed #2664 problem of handling of connector option maxTargets
• [php:autoload] Fixed #2672 simplified class map
• [js:core] Fixed #2674 'tooltip' conflict with Bootstrap
• [VD:abstract] Fixed #2687 add public method getSession()
• [ui:cwd] Fixed #2687, #2694 prevent select action of the item with CSS class "elfinder-cwd-nonselect"
• [php:core,VD] Fixed #2695 improved redundant check of archivers
• [ui:cwd] Fixed #2701 correction of oldScholl function
• [VD:abstract] Fixed #2704 correction of mimetype() & add an option mimeTypeUnknown
• [VD:abstract] Fixed #2704 use MIME-Type notified by the volume driver if detected as unknown
• [css:cwd] Fixed #2707 typo
• [js:core] Fixed #2706 add an option i18nBaseUrl
• [ui:toolbar] Fixed #2710 add an option uiOptions.toolbarExtra.preferenceInContextmenu
• [cmd:netmount] Fixed #2714 disable command if there is no protocols
• [cmd:info] Fixed #2712 remove ZWSP of the Path value with mousedown event
• [cmd:edit] Fixed #2717 encoding select box move to footer
• [css:toolbar] Fixed #2721 duplicated class name
• [js:command] Fixed #2718 add a method fmDialog() to add cmd class name to dialog
• [js:core] Fixed #2720 implementation of theme changer
• [cmd:empty] Fixed #2729 add check that folder is readable in getstate()
• [cmd:upload] Fixed #2725 problem of contextmenu (target selector) handling
• [VD:Group] Fixed #2730 set copy to disabled command
• [js:core,ui:cwd] Fixed #2730 correction of dragging icon
• [cmd:preference] Fixed #2731 add options width, height
• [cmd:rm] Fixed #2733 correction of spinner position
• [css:cwd] Fixed #2724 problem of position of perm marker in rtl
• [js:core] Fixed #2744 add class name "elfinder-err-var" to replaced word of error message
• [css:dialog] rel #2724 correction style of td.elfinder-info-hash
• [ui:navdock] Fixed #2747 theme support of CSS fine tuning part
• [ui:navdock] rel #2747 correction of the ui size adjustment
• [css:commands] Fixed #2748 fix spinner position in rtl and unify elfinder-info-spinner to elfinder-spinner
• [css:command] rel #2748 typo fix of "spiner" to "spinner"
• [cmd:quicklook] Fixed #2742 ViewerJS integration for PDF,ODT,ODS,ODP
• [ui:toolbar] Fixed #2751 correction rtl-toolbar (float icons in group)
• [css:toolbar] rel #2751 mirroring some icons for rtl
• [ui:cwd] Fixed #2749 show an unnecessary context menu on touch to the list header
• [cmd:resize] Fixed #2718 duplicate CSS class name
• [ui:cwd] Fixed #2749 show an unnecessary context menu on touch to the list header
• [ui:dialog] rel #2739 use CSS class ui-corner-top instead ui-corner-all
• [css:navbar] rel #2748 integrate "elfinder-navbar-spinner" into "elfinder-spinner"
• [API:upload] Fixed #2753 uploading multiple items continues uploading except error items
• [js:core] Fixed #2762 prevent useless requests when chunks uploading
• [cmd:quickllok] Fixed #2752 title bar HTML structure as well as other dialogs
• [js:core] Fixed #2764 delete padding specification by inline to maximize element
• [js:core] Fixed #2766 correction upload file size judgment
• And some minor bug fixes

Changes form previous version

All previous changes is here.

• [VD:abstract] Fixed #2624 "application/xml" determines the MIME-Type with the file extension
• [cmd:quicklook] Fixed #2627 kml, kmz preview with GoogleMaps API
• [ui:statusbar] Fixed #2635 positioning design with CSS flexible box
• [cmd:rename] Fixed #2639 change cmd title to "Alias (Preference)" of the volume root
• [php:core] Fixed #2641 problem of overwrite upload of folder uploading
• [php] Fixed #2642 Measures of Ghostscript security vulnerabilities
• And some minor bug fixes

Changes form previous version

All previous changes is here.

• [ui:cwd] Fixed #2583 uiOptions.cwd.oldSchool is no longer working
• [VD:abstract] change type from protected to public of mimeTypeNormalize()
• [js:core] Fixed #2591 show the toast message according with the response of connector
• [cmd:edit] Fixed #2592 to make ediable as text that the media file composed of text
• [cmd:undo/redo] Fixed #2596 bug of not updating status when elFinder into enable
• [cmd:hide] Fixed #2595 make to be able to hide selected items as personal setting
• [cmd:edit] Fixed #2565 Integrate the TUI Image Editor
• [cmd:quicklook] Fixed #2599 add controls option of HTML5 media , PDF preview
• [cmd:edit] set integrate of the "TUI Image Editor"
• [php:core] Fixed #2603 options path settings convert to absolute path
• [cmd:edit] Fixed #2569 add the photopea.com editor integration
• [cmd:upload] Fixed #2607 hash@undefined on select folder upload
• [cmd:mkfile] Fixed #2609 allow creation of various file types
• [img] Fixed #2503 make icons-big.svg and use it
• [VD:Dropbox2] Fixed options definition test (PR #2619)
• [js:core] Fixed #2616 can't close dialogelfinder if can't connect to the connector
• [php:plugin:Watermark] Fixed #2621 add option ratio, position, marginX and marginY
• And some minor bug fixes

Changes form previous version

All previous changes is here.

• [php:plugin] Fixed #2532 perform folder name filtering on folder upload
• [VD:abstract] Fixed #2534 bugfix of doSerach() method
• [API,ui:cwd] Fixed #2535 show the remaining time until the volume expires into cwd
• [js:core] bugfix of click problem of select element of netmount oauth dialog
• [cmd:rm] Fixed #2541 to be able to customize the action of to put in the trash
• [VD:abstract] fallback imgLib to 'gd' when error in Imagick (#2544)
• [ui:dialog] Fixed #2545 problem of the mousedown event of the form element
• [VD:abstract] Fixed #2549 freezes while creating and extracting a zip/7zip archive
• [ui:dialog] Fixed #2551 trigger dialogopen event before open the dialog
• [ui:dialog] Fixed #2558 autoopen after creation of dialog if it has open callback
• [cmd:upload] Fixed #2559 since 2.1.30, broken paste upload on iOS
• [ui:dialog] Fixed #2560 corection of restore dialog size on maximize/minimize
• [cmd:edit,preference] Fixed #2566 add preference 'Open the maximized editor window'
• [cmd:quicklook] Fixed #2567 support Microsoft Office Online viewer
• [VD:abstract] Fixed #2564 bugfix of MIME-Type detection
• [cmd:quicklook,VD:abstract] Fixed #2575 add CAD-Files and 3D-Models online viewer on sharecad.org
• [cmd:edit] Fixed #2570 add online-convert.com integration
• [cmd:edit] Fixed #2580 fix detectation of current enabled editors
• [cmd:help] Add a tab "Integrations" to listing external services
• [cmd:edit:images] Fixed #2568 open one format save to another
• [js:core] Fixed #2582 sync size of list view column headers on browser resize
• And some minor bug fixes

Changes form previous version

All previous changes is here.

• [cmd:preference] Fixed #2497 add a preference "Icon Size (Icons View)"
• [cmd:mkdir] Fixed #2466 mkdir 'Into new folder' always on
• [css] Fixed #2499 style correction to the Firefox browser
• [css] replace volume_icon_* to SVG image
• [cmd:edit] Fixed #2507 not work if the "commandsOptions.edit.editors" is empty
• [php:core] Fixed #2515 support multi Level directory creation when uploading
• [VD:abstract] Fixed #2523 thumbnail file name may exceed 255 bytes
• [VD:abstract] re-Fixed #2523 add volume id as prefix to tmbname of fallback
• [API,cmd:download] Fixed #2525 show notification dialog until browser starts downloading
• [ui:cwd] Fixed #2526 connector option 'tmbURL' => 'self' does not work currently
• [cmd:upload] Fixed #2528 show error message "errFolderUpload"
• [ui:fullscreenbutton] Fixed #2530 wrong toolbar icon of re-fullscreen
• [VD:abstract,security] add "pht:", "php7:" to default option staticMineMap
• [cmd:upload] Fixed #2531 upload buttons are not working in Firefox
• And some minor bug fixes

Changes form previous version

All previous changes is here.

• [js:dialogelfinder] Re-fixed #2401 remove deprecated functions of jQuery
• [cmd:info,help] Fixed #2445 add user preference Info Items (Selection Info Panel)
• [php:core] More secure processing of zipdl()
• [VD:abstract] Fixed #2450 correction of getContentUrl() (when $this->root is "/")
• [js:core] Fixed #2453 handling back button press to close dialog
• [cmd:opennew] Fixed #2457 new command "Open in new window" for the folder
• [cmd:preference] Fixed #2458 move settings from "Preference" tab
• [cmd:mkdir] Fixed #2466 'Into new folder' always on (toolbar button)
• [css:common] Fixed #2469 to disable resizable in fullscreen mode
• [cmd:sort] Fixed #2472 keep stay the context menu when choosing the sort menu
• [VD:GoogleDrive] Fixed #2473 not use undefined variable
• [ui:tree] Fixed #2485 add an option uiOptions.tree.durations
• [ui:toast] Fixed #2487 add an option uiOptions.toast.defaults
• [js] Performance tuning
• [VD,cmd:search] Fixed #2490 support custom search method
• [cmd:quicklook] support AMR Audio, FLV Video preview
• And some minor bug fixes