- Update to 3.13.4
  This release is rated moderate security release.
  - Fix a a possible XSS issue.
  * matomo-org/matomo
    - #15625 ‘Remember me’ not working because cookie expire is in wrong format [by @sgiehl]
    - #15598 Set samesite lax instead of None if site is not on https [by @tsteur]
    - #15623 Mention require PHP 7.2 in admin notification [by @sgiehl]
    - #15588 slow SQL query using MariaDB causing high CPU load [by @sgiehl]
    - #15609 Limit max execution time of transitions feature [by @sgiehl]
    - #15616 Review Archive invalidation code [by @diosmosis]
    - #15646 Today archive is invalidated too often [by @diosmosis]
    - #14694 Warning – ucwords() expects exactly 1 parameter, 2 given [by @katebutler, @sgiehl]
    - #14764 Page Overlay stuck on “Loading…”
    - #15589 [Geo] Unknown region metrics increased significantly after update to v3.13.1
    - #15629 Using Opt-Out iFrame twice doesn’t work [by @sgiehl]
    - #15637 Ecommerce Orders Conversion Rate Rounding Error [by @sgiehl]
    - #15550 Notice: Trying to access array offset on value of type null in 
      core/Session/SessionAuth.php on line 63 [by @diosmosis]
    - #15651 Prevent connection timed out when requesting configs.php file on IIS in web.config
    - #15672 There is no way to enable ‘secure’ for the 3rd party cookie [by @tsteur]
    - #15580 Geolocation: automatically download latest paid DB-IP databases [by @sgiehl]
    - #15614 Remove donation widget from dashboard [by @tsteur]
    - #15665 Convert range date to date archive if needed [by @tsteur, @sgiehl]
    - #15673 Always send a referrer-policy header [by @polarbirke, @diosmosis]
    - #15684 Retry compiling less file if it fails [by @tsteur, @diosmosis]
    - #15686 Prevent notice in PHP 7.4 Passing glue string after array is deprecated
    - #15687 Make sure config cache is only used when there is a correct path
    - #15707 Detect page view bucket [by @tsteur]
  * matomo-org/device-detector
    - #6174 Oppo devices not detected (new useragent list & model names)
    - #6176 Detect devices for brands: Asus, Oppo, Huawei, Sony, Lenovo, LG, Wiko, Nuvo, Alcatel,
      Irbis, Heair, Motorola, CoolPad, Sunvell, AllDocube, Assistant, DEXP, ZTE, CAT, Xiaomi,
      Google, Yandex, Hisense, T-Mobile, Allview, ViewSonic, Yxtel, Ginzzu, HTC 
    - #6178 Add Java port to README.md [by @mngsk, @sgiehl]
    - #6181 Add ScalaJ HTTP library [by @wallin, @sgiehl]
    - #6183 Detection of Google Stackdriver Monitoring [by @Pierre-Lannoy, @sgiehl]
    - #6184 Detection for Google Cloud Scheduler [by @Pierre-Lannoy, @sgiehl]
    - #6185 Car tablet CarPad
    - #6186 Panasonic Lumix DMC-CM1
    - #6189 feat(device) detect new brand NewsMy & CarPad 2, CarPad 3; [by @sanchezzzhak, @sgiehl]
    - #6191 Detect devices for brands: Wiko, Oysters, Pixus, Cherry Mobile, Vivo, EvroMedia,
      Allview, ZTE, Lenovo, Kiwi, Spectrum, Vesta, Ritmix, Casper, NUU, Ginzzu, Telefunken,
      National, Kaiomy, Kanji [by @sanchezzzhak, @sgiehl]
    - #6195 Added Node Fetch library [by @wallin, @sgiehl]
    - #6198 Adds detection for Samsung devices [by @liviuconcioiu, @sgiehl]
    - #6200 Adds detection for iHunt devices [by @liviuconcioiu, @sgiehl]
    - #6201 Adds detection for Allview devices [by @liviuconcioiu, @sgiehl]
    - #6202 Adds detection for Wiko devices [by @liviuconcioiu, @sgiehl]
  * matomo-org/referrer-spam-blacklist
    - #1181 More spammers [by @AaronVanGeffen, @spmedia]
    - #1182 Add greentechsy.com [by @ericguirbal, @spmedia]
    - #1184 Add ingramreed.xyz [by @ericguirbal, @spmedia]
    - #1185 Add janemill.xyz [by @ericguirbal, @spmedia]
    - #1186 More spammers [by @AaronVanGeffen, @spmedia]
    - #1187 Add sabinablog.xyz [by @ericguirbal, @spmedia]
    - #1188 Add martinahome.xyz [by @ericguirbal, @spmedia]
  * matomo-org/tag-manager
    - #229 Set samesite flag (used in “preview mode” in tag manager container)
    - #232 Remove duplicate index in variables table [by @tsteur]
  * matomo-org/matomo-php-tracker
    - #60 Prevent double slashes [by @tsteur, @sgiehl]
  * matomo-org/matomo-log-analytics
    - #180 Improve regex for date and time in w3c formats [by @sgiehl]  

• Files Changed
• Browse Source