Ok, so barely a week has gone by since the 2.0.16 release, and here we are again. Admittedly, this has got something to do with a git revert mistake which resulted in an important fix that was supposed to be included in the previous release being left out. As I couldn't replicate the bug myself it slipped through the net...
The good news is that the bug - which would cause the Source Code view to "crash" - is now fixed. In addition to this, a few new bits have been added :
- UTF-8 file name and URL's are now supported
- The Directory Path in the File Browser is now clickable - you can change directories by clicking on the folder name - see the image below.
For a full list of changes and bugs fixed see the Changelog
This release fixes a bug with Vimeo support which would result in Vimeo popups opening in a new window. In addition, all of JCE MediaBox's javascript files are now merged into a single compressed file (uncompressed source files are still included in the package).
For users who have been using JCE MediaBox since prior to 1.0.10 (releases 1.0.0 to 1.0.9) it may be necessary to remove the twitter.js and/or twitter-src.js files in plugins/system/jcemediabox/addons/
A full changelog is available here
This release includes a number of bug fixes some administration improvements and some new security features.
Administration changes
The administration layout has been improved to better support RTL languages. This is part of an ongoing project to provide full RTL support throughout the editor.
Joomla! 1.7 ACL support has been improved (including a small fix related to the omission of the admin rule). Control Panel icons and items in the Options dialog will now respect the ACL settings.
The "support" links (Forum, FAQ, Documentation, Tutorials) in the Control Panel jave been merged into one link item.
New Security Parameters
Joomla! 1.5 and 1.7 both provide a Text Filter option for the Article Manager that, by default, removes applet,body,bgsound,base,basefont,embed,frame,frameset,head,html,id,iframe,ilayer,layer,link,meta,name,object,script,style,title,xml elements, as well as the action,background,codebase,dynsrc,lowsrc attributes. It is sometimes necessary to disable this filtering function for some user groups in order to insert media elements, scripts or iframes. Unfortunately fine-grained configuration with different filtering options for different user groups is not currently possible.
JCE Profiles are prefect for setting up specific configurations for different components, usergroups or users. This could allow for a more precise approach to element and attribute filtering using the Prohibited Elements, Prohibited Attributes and Extended Elements parameters (it will be necessary to have the Cleanup HTML option enabled and the Editor Toggle option disabled)
A Prohibited Elements parameter has existed existed for some time, with a limited default element list. This has been expanded in JCE 2.0.16 to include the full default list used by the Joomla! Text Filter. The difference here is that if you have certain plugins installed or options activated, the affected tags are automatically removed from the list, eg: with the Media Support option activated and the Allow Object and Allow Embed parameters enabled will remove the object and embed tags from the Prohibited Elements list. You can remove any of the other tags by adding them to the Extended Elements list (see below - the applet and frameset elements are allowed by adding them to the Extended Elements list)
A Prohibited Attributes parameter has also been added. This allows you to set a list of attributes that cannot be set for any element. This parameter supports a simple regular expression syntax, eg: on([a-z]+) will remove all event attributes such as onclick, onmouseover etc.
I will be publishing a tutorial soon on JCE 2.0.16 security tips.
For a full list of changes and bugs fixed see the Changelog
Development and distribution of JCE 1.5 will be discontinued on 31st October. From 1st November only JCE 2.0 and associated add-ons will be available for download.
Subscribers will still be able to download JCE 1.5 add-ons from their subscription page.
All existing JCE 1.5 users are urged to upgrade to JCE 2.0. JCE 2.0 is compatible with Joomla! 1.5 and Joomla! 1.7
Installation instructions are available here
This release adds HTML5 video and audio support to MediaBox for the mp4, mp3 and webm file types, with the inclusion of a Flash based MediaPlayer for browsers that don't support the HTML5 video and audio tag (mp4 and mp3 files only).
Click here for a mp4 video example
Youtube and Vimeo support has also been updated to use the new IFrame embed method offered by both providers.
In addition to these new features, popups that are unable to load their content (due to broken links, missing media or a lack of support for the format) will show a related media icon, eg:
A full changelog is available here