3.1.1 release notes

What’s new in 3.1.1

  • Add Django 1.8 support

  • Tutorial updates and improvements

  • Add copy_site command

  • Add setting to disable toolbar for anonymous users

  • Add setting to hide toolbar when a URL is not handled by django CMS

  • Add editor configuration

Bug Fixes

  • Fixed an issue where privileged users could be tricked into performing actions without their knowledge via a CSRF vulnerability.

  • Fix issue with causes menu classes to be duplicated in advanced settings

  • Fix issue with breadcrumbs not showing

  • Fix issues with show_menu template tags

  • Fix an error in placeholder cache

  • Fix get_language_from_request if POST and GET exists

  • Minor documentation fixes

  • Revert whitespace clean-up on flash player to fix it

  • Correctly restore previous status of drag bars

  • Fix an issue related to “Empty all” Placeholder feature

  • Fix plugin sorting in Python 3

  • Fix language-related issues when retrieving page URL

  • Fix search results number and items alignment in page changelist

  • Preserve information regarding the current view when applying the CMS decorator

  • Fix errors with toolbar population

  • Fix error with watch_models type

  • Fix error with plugin breadcrumbs order

  • Change the label “Save and close” to “Save as draft”

  • Fix X-Frame-Options on top-level pages

  • Fix order of which application URLs are injected into urlpatterns

  • Fix delete non existing page language

  • Fix language fallback for nested plugins

  • Fix render_model template tag doesn’t show correct change list

  • Fix Scanning for placeholders fails on include tags with a variable as an argument

  • Fix handling of plugin position attribute

  • Fix for some structureboard issues

  • Pin South version to 1.0.2

  • Pin html5lib version to 0.999 until a current bug is fixed

  • Make shift tab work correctly in sub-menu

  • Fix language chooser template

Potentially backward incompatible changes

The order in which the applications are injected is now based on the page depth, if you use nested apphooks, you might want to check that this does not change the behaviour of your applications depending on applications urlconf greediness.

Thanks

Many thanks community members who have submitted issue reports and especially to these GitHub users who have also submitted pull requests: astagi, dirtycoder, doctormo, douwevandermeij, driesdesmet, furiousdave, ldgarcia, maqnouch, nikolas, northben, olarcheveque, pa0lin082, peterfarrell, sam-m888, sephii, stefanw, timgraham, vstoykov.

A special thank you to vad and nostalgiaz for their support on Django 1.8 support

A special thank to Matt Wilkes and Sylvain Fankhauser for reporting the security issue.