- When ``++api++`` is in the url multiple times, redirect to the proper url. When the url is badly formed, for example ``++api++/something/++api++``, give a 404 NotFound. Fixes a denial of service. See `security advisory <https://github.com/plone/plone.rest/security/advisories/GHSA-h6rp-mprm-xgcq>`_. [maurits] (1)
3.0.0
Not secure
------------------
Breaking changes:
- Change the HTTP status from 301 (Moved Permanently) to 302 (Found) for GET requests and to 307 (Temporary Redirect) for other request methods. This fixes problems when an existing redirect is re-used. [mamico] (135) - Drop official support for Plone 4.3, 5.0 and 5.1 (most likely the package will continue to work though) [tisto] (140)
New features:
- Add official support for Plone 6 [tisto] (143) - Add official support for Python 3.9, 3.10, and 3.11 [tisto] (147)
2.2.1
------------------
Bugfixes:
- Fix ReST on PyPi. [timo]
2.2.0
------------------
New Features:
- Document the use of the `Accept-Language` HTTP header. [erral]
- Translate FTI titles on `types` endpoint. Fixes 337. [erral]
- Translate action name, workflow state and transition names in history endpoint. [erral]
- Enhance `workflow` endpoint to support applying transitions to all contained items and to set effective and expiration dates. [buchi]
Bugfixes:
- Make sure DX DefaultFieldDeserializer validates field values. [lgraf]
- Reindex AT content on PATCH. This fixes `issue 531 <https://github.com/plone/plone.restapi/issues/531>`_. [buchi]
- Fix change password on Plone 5.2 [sunew]
- Plone 5.2 compatible tests. [sunew]
2.1.0
------------------
New Features:
- Include translated role title in `roles` GET. [lgraf]
2.0.1
------------------
Bugfixes:
- Hide upgrades from the add-ons control panel. Fixes `issue 532 <https://github.com/plone/plone.restapi/issues/532>`_. [maurits]