Program: CWE-20
Project: CVE-2017-5602
Buggy source:
Jappix Changelog
================

Here's the log of what has changed over the Jappix releases.


Primo, v1.1.7 (Development)
---------------------------

 * (...)


Primo, v1.1.6 (August 2015)
---------------------------

 * Security fix on paths check  @valeriansaliou


Primo, v1.1.5 (August 2015)
---------------------------

 * Critical file upload security fix  @valeriansaliou, @mathiasertl


Primo, v1.1.4 (April 2015)
---------------------------

 * Fix various issues           @valeriansaliou
 * Fix XSS attack on dataforms  @V1RTUOZ


Primo, v1.1.3 (January 2015)
----------------------------

 * Better default priorities        @beanow, @valeriansaliou
 * Fix IE11+ browser compatibility  @valeriansaliou


Primo, v1.1.2 (October 2014)
----------------------------

 * XEP-0353: Jingle Message Initiation  @valeriansaliou
 * Fixes Jingle calls in Chrome 38+     @valeriansaliou


Primo, v1.1.1 (September 2014)
------------------------------

 * Ignore empty XHTML-IM messages  @eijebong, @valeriansaliou
 * Fix a bug with message markers  @valeriansaliou


Primo, v1.1.0 (June 2014)
-------------------------

 * XEP-0272: Multiparty Jingle (Muji)      @valeriansaliou
 * Prevent client crash on huge messages   @valeriansaliou
 * Beautified client code (JavaScript)     @valeriansaliou
 * Fix unavailable MUC rooms               @emamirazavi


One, v1.0.7 (May 2014)
----------------------

 * Fix BackLinks design                         @valeriansaliou
 * Sort Jappix Mobile contacts alphabetically   @valeriansaliou
 * Display offline contacts in Jappix Mini      @valeriansaliou


One, v1.0.6 (May 2014)
----------------------

 * XEP-0308: Last Message Correction               @valeriansaliou
 * XEP-0333: Chat Markers                          @valeriansaliou
 * XEP-0319: Last User Interaction into Presence   @valeriansaliou
 * XEP-0224: Attention                             @valeriansaliou
 * XEP-0152: Reachability Addresses                @valeriansaliou
 * XEP-0334: Message Processing Hints              @valeriansaliou
 * Fix gateway contacts management                 @valeriansaliou
 * Fix sounds in Jappix Mini                       @aryo, @valeriansaliou


One, v1.0.5 (May 2014)
----------------------

 * Fix MUC bookmark shortcut button                         @valeriansaliou
 * Fix HTML5 notifications in Firefox 22+                   @valeriansaliou
 * Fix server commands tool                                 @valeriansaliou
 * New translations added (Uzbek), and a few ones updated   @nurkamol, @valeriansaliou


One, v1.0.4 (May 2014)
----------------------

 * Fix update tool (on some environments)               @valeriansaliou
 * Fix MUC room join                                    @maranda, @valeriansaliou
 * Fix special chars in JIDs for Jappix Mini            @dunger, @valeriansaliou
 * Fix WebSocket session termination in JSJaC           @sstrigler
 * Enhance backend security (verify SSL certificates)   @valeriansaliou
 * Add assets client cache option                       @valeriansaliou
 * Add SSO support to Jappix Mobile                     @valeriansaliou


One, v1.0.3 (March 2014)
------------------------

 * Fix JSJaC packet register   @valeriansaliou, @sstrigler


One, v1.0.2 (March 2014)
------------------------

 * Fix IQ spoofing security issue   @valeriansaliou, @sstrigler
 * Better autocompletion            @Nabellaleen
 * Various bugfixes                 @Nabellaleen, @valeriansaliou


One, v1.0.1 (January 2014)
--------------------------

 * Change MAM namespace to a temporary one           @maranda
 * Fix broken Jappix Mini CSS loader in some cases   @valeriansaliou
 * Libs update                                       @valeriansaliou


One, v1.0.0 (January 2014)
--------------------------

 * XEP-0166: Jingle                                 @valeriansaliou
 * XEP-0292: vCard4 Over XMPP                       @valeriansaliou
 * XEP-0280: Message Carbons                        @valeriansaliou
 * IE9, IE10, IE11 support                          @valeriansaliou
 * Libs update                                      @valeriansaliou
 * Client code rewrite                              @valeriansaliou
 * Directory tree re-organization                   @valeriansaliou
 * Tested code (pass CSSLint, JSHint and PHPLint)   @valeriansaliou


Nemesis Alpha 9, v0.9.9 (August 2013)
-------------------------------------

 * XEP-0313: Message Archive Management                                                                  @valeriansaliou
 * Drop support for Message Archiving (XEP-0136), outpaced by MAM (XEP-0313)                             @valeriansaliou
 * Jappix Desktop performances improved (noticeable with big rosters)                                    @valeriansaliou
 * Fix Jappix Desktop avatar system, unable to cache avatars (thus increasing network load and delays)   @valeriansaliou
 * New translations added (Mongolian), and a few ones updated                                            @valeriansaliou


Nemesis Alpha 8, v0.9.8 (May 2013)
----------------------------------

 * RTL (Right-To-Left Languages) support   @valeriansaliou
 * Various bufixes                         @valeriansaliou


Nemesis Alpha 7, v0.9.7 (April 2013)
------------------------------------

 * Fix overflow events in Mini                     @valeriansaliou
 * Fix user info display bug with formatted text   @valeriansaliou
 * Jappix Me notification system                   @valeriansaliou
 * Update JSJaC                                    @valeriansaliou
 * Update jQuery (v1.10.1)                         @valeriansaliou


Nemesis Alpha 6, v0.9.6 (April 2013)
------------------------------------

 * Fix login with accented usernames               @valeriansaliou
 * WOFF Get API headers fixed                      @valeriansaliou
 * Better Get API URL generator                    @valeriansaliou
 * Fix broken Jappix Mini extraction script        @valeriansaliou
 * Show when user joins/exits MUC in Jappix Mini   @valeriansaliou


Nemesis Alpha 5, v0.9.5 (March 2013)
------------------------------------

 * Jappix Mini enhancements                                    @valeriansaliou
 * Fix Jappix over non-standard ports                          @valeriansaliou
 * Locale detector improved                                    @valeriansaliou
 * Load more items on social channel scroll                    @valeriansaliou
 * Fix a lot of English base language typos                    @valeriansaliou
 * Support for XHTML microblog entries (Movim compatibility)   @valeriansaliou
 * Show Jappix Desktop on tablets (not mobile anymore)         @valeriansaliou
 * Option to disable Jappix Mini on mobile phones              @valeriansaliou
 * Fix broken MUC bookmarks retrieval                          @valeriansaliou


Nemesis Alpha 4, v0.9.4 (March 2013)
------------------------------------

 * [SECURITY] Fix insafe HTML escaping                 @valeriansaliou
 * PHP 5.4 compatibility                               @valeriansaliou
 * Auto-populate microblog on connect                  @valeriansaliou
 * Register API support for Metronome XMPPd            @valeriansaliou
 * Non-blocking PHP sessions                           @valeriansaliou
 * Permissive geoloc selector in microblog             @valeriansaliou
 * Select priority more easily                         @valeriansaliou
 * Compliancy with Atom specification (social inbox)   @valeriansaliou
 * Added project mirrors                               @valeriansaliou


Nemesis Alpha 3, v0.9.3 (February 2013)
---------------------------------------

 * [SECURITY] More randomness in CAPTCHA                                            @valeriansaliou
 * Fix buggy roster filter with groups                                              @valeriansaliou
 * Add Piwik tracking feature (configurable in manager)                             @valeriansaliou
 * Easy popup close by clicking away                                                @valeriansaliou
 * Fix cropped uploaded pictures                                                    @valeriansaliou
 * Revert to old File Share API (which is far better)                               @valeriansaliou
 * Fixes broken translations (strange UTF-8 chars due to bugged Gettext compiler)   @valeriansaliou


Nemesis Alpha 2, v0.9.2 (January 2013)
--------------------------------------

 * [SECURITY] Introduce the Register API (prevents register flood by spam bots)   @valeriansaliou
 * Reworked Storage API                                                           @valeriansaliou
 * Jappix Mini code beautify                                                      @valeriansaliou
 * Lighter and Web-safe font files                                                @valeriansaliou
 * Better error logging                                                           @valeriansaliou
 * Fix Openfire ping request                                                      @valeriansaliou
 * Typing notification in Jappix Mini                                             @valeriansaliou
 * Support for WebKit notifications                                               @valeriansaliou
 * Jappix Mini groupchat suggest                                                  @valeriansaliou
 * Enhanced Download API                                                          @valeriansaliou
 * Mini animated chat icon, much sexier                                           @valeriansaliou
 * IE custom font compatibility                                                   @valeriansaliou
 * Legal changes                                                                  @valeriansaliou
 * Update licensing with real names                                               @valeriansaliou


Nemesis Alpha 1, v0.9.1 (2012)
------------------------------

 * Show an 'add to home' button on iOS devices                   @camaran
 * Ability to suspend statistics                                 @valeriansaliou
 * Fix IE9 issue with clustering                                 @valeriansaliou
 * Show profile button in user search results                    @valeriansaliou
 * Ability to change message font, font size and color           @valeriansaliou
 * Fix choppy Jappix Mini status picker                          @valeriansaliou
 * Sounds for Safari & IE9                                       @valeriansaliou
 * Enhance new file storage functions                            @valeriansaliou
 * No resize for textareas                                       @valeriansaliou
 * Add a configurable legal disclaimer                           @valeriansaliou
 * Fix a loop bug on presence if no support for sessionStorage   @valeriansaliou
 * Universal fonts                                               @valeriansaliou
 * Add ability to configure the node owner name & website        @valeriansaliou
 * HTTP authentication for LDAP                                  @valeriansaliou
 * Better notification + comments management                     @valeriansaliou


Spaco, v0.9 (2011)
------------------

 * [SECURITY] Fix when sending files to a contact   @valeriansaliou
 * Better Jappix Mini performances                  @valeriansaliou
 * Fix Jappix Mini display issues                   @valeriansaliou
 * Connection issue fixed with BOSH API             @valeriansaliou
 * Open XMPP links when Jappix is ready             @valeriansaliou


Suno, v0.8 (2011)
---------------------

 * XEP-0066: Out of Band Data                                 @valeriansaliou
 * Switch from OpenStreetMap to Google Maps for geolocation   @valeriansaliou


Stelo, v0.7 (2011)
------------------

 * Lighter Jappix Mini                                           @valeriansaliou
 * Welcome popup                                                 @valeriansaliou
 * Support for /me command in Jappix Mini                        @valeriansaliou
 * Fixes in social channel                                       @valeriansaliou
 * Bigger BOSH poll interval (avoids some overactivity errors)   @valeriansaliou
 * Compression disabled by default in Get API                    @valeriansaliou
 * Send chatstates in MUC                                        @valeriansaliou
 * Social notification inbox                                     @valeriansaliou


Lumo, v0.6 (2011)
-----------------

 * Smoother Mini animation                                               @valeriansaliou
 * Show avatars in social channel comments                               @valeriansaliou
 * Legacy mode for microblog comments                                    @valeriansaliou
 * Microblog updated to comply with a new version of XEP-0277            @valeriansaliou
 * Fix DNS SRV issue because of a 'route' attribute on BOSH initiation   @valeriansaliou


Ribelo, v0.5 (2011)
-------------------

 * Add support for comments in microblog   @valeriansaliou
 * Jappix Mini fixes and improvements      @valeriansaliou


Lupo, v0.4 (2011)
-----------------

 * Full IE5.5 compatibility for Jappix Mini                            @valeriansaliou
 * BOSH without cURL (if cURL unavailable)                             @valeriansaliou
 * Handle multiple microblog attached files                            @valeriansaliou
 * Microblog attached files thumbnails                                 @valeriansaliou
 * BOM (Byte Order Mark) filtering for Get API                         @valeriansaliou
 * Autoplay for new YouTube HTML5 player                               @valeriansaliou
 * Support for privacy lists pushs                                     @valeriansaliou
 * Roster-side privacy lists (make contact blocking/unblocking easy)   @valeriansaliou
 * Better update checker                                               @valeriansaliou
 * XEP-0144: Roster Item Exchange                                      @valeriansaliou
 * Cross domain support for Internet Explorer and legacy browsers      @valeriansaliou
 * Update jQuery (v1.4.4)                                              @valeriansaliou
 * TZO fix (for negative timezones, e.g.: UTC-5)                       @valeriansaliou
 * Better language detection                                           @valeriansaliou
 * Use HTML5 or Flash for YouTube embedded videos                      @valeriansaliou


Prism, v0.3 (2011)
------------------

 * [SECURITY] Fix JS escape bug for quotes                @valeriansaliou
 * [SECURITY] HTML-encode notification username           @valeriansaliou
 * Introduction of Jappix Mini                            @valeriansaliou
 * Introduction of Jappix Manager                         @valeriansaliou
 * Introduction of Jappix Install                         @valeriansaliou
 * XEP-0050: Ad-Hoc Commands                              @valeriansaliou
 * XEP-0136: Message Archiving                            @valeriansaliou
 * Update Jappix logo                                     @valeriansaliou
 * Declare application language to XMPP server            @valeriansaliou
 * Add a buddy search tool                                @valeriansaliou
 * Support for old/legacy vCard server implementations    @valeriansaliou
 * Inbox messages sorted by date                          @valeriansaliou
 * Better music search                                    @valeriansaliou
 * Human-readable geolocation                             @valeriansaliou
 * Gateway show/hide                                      @valeriansaliou
 * HTML5 forms                                            @valeriansaliou
 * Better notification management                         @valeriansaliou
 * Unified chat design                                    @valeriansaliou
 * Dynamic DOM load (better performances)                 @valeriansaliou
 * Jappix logo shown when connected (improves branding)   @valeriansaliou


Lidar, v0.2 (2010)
------------------

 * Introduction of Jappix Mobile               @valeriansaliou
 * UI redesign (from grey to black and blue)   @valeriansaliou
 * Social channel introduced (microblog)       @valeriansaliou


Genesis, v0.1 (2010)
--------------------

 * Initial version, released after private beta         @valeriansaliou
 * Introduction of Jappix Desktop                       @valeriansaliou
 * Basic chat, groupchat, roster and profile features   @valeriansaliou
 * Basic UI                                             @valeriansaliou


**For more information about what changed through time, check the changes made to our source code on GitHub: https://github.com/jappix/jappix/commits/master**


Fixed version (ground truth):
Jappix Changelog
================

Here's the log of what has changed over the Jappix releases.


Primo, v1.1.7 (January 2017)
----------------------------

 * Improve Carbons  @valeriansaliou


Primo, v1.1.6 (August 2015)
---------------------------

 * Security fix on paths check  @valeriansaliou


Primo, v1.1.5 (August 2015)
---------------------------

 * Critical file upload security fix  @valeriansaliou, @mathiasertl


Primo, v1.1.4 (April 2015)
---------------------------

 * Fix various issues           @valeriansaliou
 * Fix XSS attack on dataforms  @V1RTUOZ


Primo, v1.1.3 (January 2015)
----------------------------

 * Better default priorities        @beanow, @valeriansaliou
 * Fix IE11+ browser compatibility  @valeriansaliou


Primo, v1.1.2 (October 2014)
----------------------------

 * XEP-0353: Jingle Message Initiation  @valeriansaliou
 * Fixes Jingle calls in Chrome 38+     @valeriansaliou


Primo, v1.1.1 (September 2014)
------------------------------

 * Ignore empty XHTML-IM messages  @eijebong, @valeriansaliou
 * Fix a bug with message markers  @valeriansaliou


Primo, v1.1.0 (June 2014)
-------------------------

 * XEP-0272: Multiparty Jingle (Muji)      @valeriansaliou
 * Prevent client crash on huge messages   @valeriansaliou
 * Beautified client code (JavaScript)     @valeriansaliou
 * Fix unavailable MUC rooms               @emamirazavi


One, v1.0.7 (May 2014)
----------------------

 * Fix BackLinks design                         @valeriansaliou
 * Sort Jappix Mobile contacts alphabetically   @valeriansaliou
 * Display offline contacts in Jappix Mini      @valeriansaliou


One, v1.0.6 (May 2014)
----------------------

 * XEP-0308: Last Message Correction               @valeriansaliou
 * XEP-0333: Chat Markers                          @valeriansaliou
 * XEP-0319: Last User Interaction into Presence   @valeriansaliou
 * XEP-0224: Attention                             @valeriansaliou
 * XEP-0152: Reachability Addresses                @valeriansaliou
 * XEP-0334: Message Processing Hints              @valeriansaliou
 * Fix gateway contacts management                 @valeriansaliou
 * Fix sounds in Jappix Mini                       @aryo, @valeriansaliou


One, v1.0.5 (May 2014)
----------------------

 * Fix MUC bookmark shortcut button                         @valeriansaliou
 * Fix HTML5 notifications in Firefox 22+                   @valeriansaliou
 * Fix server commands tool                                 @valeriansaliou
 * New translations added (Uzbek), and a few ones updated   @nurkamol, @valeriansaliou


One, v1.0.4 (May 2014)
----------------------

 * Fix update tool (on some environments)               @valeriansaliou
 * Fix MUC room join                                    @maranda, @valeriansaliou
 * Fix special chars in JIDs for Jappix Mini            @dunger, @valeriansaliou
 * Fix WebSocket session termination in JSJaC           @sstrigler
 * Enhance backend security (verify SSL certificates)   @valeriansaliou
 * Add assets client cache option                       @valeriansaliou
 * Add SSO support to Jappix Mobile                     @valeriansaliou


One, v1.0.3 (March 2014)
------------------------

 * Fix JSJaC packet register   @valeriansaliou, @sstrigler


One, v1.0.2 (March 2014)
------------------------

 * Fix IQ spoofing security issue   @valeriansaliou, @sstrigler
 * Better autocompletion            @Nabellaleen
 * Various bugfixes                 @Nabellaleen, @valeriansaliou


One, v1.0.1 (January 2014)
--------------------------

 * Change MAM namespace to a temporary one           @maranda
 * Fix broken Jappix Mini CSS loader in some cases   @valeriansaliou
 * Libs update                                       @valeriansaliou


One, v1.0.0 (January 2014)
--------------------------

 * XEP-0166: Jingle                                 @valeriansaliou
 * XEP-0292: vCard4 Over XMPP                       @valeriansaliou
 * XEP-0280: Message Carbons                        @valeriansaliou
 * IE9, IE10, IE11 support                          @valeriansaliou
 * Libs update                                      @valeriansaliou
 * Client code rewrite                              @valeriansaliou
 * Directory tree re-organization                   @valeriansaliou
 * Tested code (pass CSSLint, JSHint and PHPLint)   @valeriansaliou


Nemesis Alpha 9, v0.9.9 (August 2013)
-------------------------------------

 * XEP-0313: Message Archive Management                                                                  @valeriansaliou
 * Drop support for Message Archiving (XEP-0136), outpaced by MAM (XEP-0313)                             @valeriansaliou
 * Jappix Desktop performances improved (noticeable with big rosters)                                    @valeriansaliou
 * Fix Jappix Desktop avatar system, unable to cache avatars (thus increasing network load and delays)   @valeriansaliou
 * New translations added (Mongolian), and a few ones updated                                            @valeriansaliou


Nemesis Alpha 8, v0.9.8 (May 2013)
----------------------------------

 * RTL (Right-To-Left Languages) support   @valeriansaliou
 * Various bufixes                         @valeriansaliou


Nemesis Alpha 7, v0.9.7 (April 2013)
------------------------------------

 * Fix overflow events in Mini                     @valeriansaliou
 * Fix user info display bug with formatted text   @valeriansaliou
 * Jappix Me notification system                   @valeriansaliou
 * Update JSJaC                                    @valeriansaliou
 * Update jQuery (v1.10.1)                         @valeriansaliou


Nemesis Alpha 6, v0.9.6 (April 2013)
------------------------------------

 * Fix login with accented usernames               @valeriansaliou
 * WOFF Get API headers fixed                      @valeriansaliou
 * Better Get API URL generator                    @valeriansaliou
 * Fix broken Jappix Mini extraction script        @valeriansaliou
 * Show when user joins/exits MUC in Jappix Mini   @valeriansaliou


Nemesis Alpha 5, v0.9.5 (March 2013)
------------------------------------

 * Jappix Mini enhancements                                    @valeriansaliou
 * Fix Jappix over non-standard ports                          @valeriansaliou
 * Locale detector improved                                    @valeriansaliou
 * Load more items on social channel scroll                    @valeriansaliou
 * Fix a lot of English base language typos                    @valeriansaliou
 * Support for XHTML microblog entries (Movim compatibility)   @valeriansaliou
 * Show Jappix Desktop on tablets (not mobile anymore)         @valeriansaliou
 * Option to disable Jappix Mini on mobile phones              @valeriansaliou
 * Fix broken MUC bookmarks retrieval                          @valeriansaliou


Nemesis Alpha 4, v0.9.4 (March 2013)
------------------------------------

 * [SECURITY] Fix insafe HTML escaping                 @valeriansaliou
 * PHP 5.4 compatibility                               @valeriansaliou
 * Auto-populate microblog on connect                  @valeriansaliou
 * Register API support for Metronome XMPPd            @valeriansaliou
 * Non-blocking PHP sessions                           @valeriansaliou
 * Permissive geoloc selector in microblog             @valeriansaliou
 * Select priority more easily                         @valeriansaliou
 * Compliancy with Atom specification (social inbox)   @valeriansaliou
 * Added project mirrors                               @valeriansaliou


Nemesis Alpha 3, v0.9.3 (February 2013)
---------------------------------------

 * [SECURITY] More randomness in CAPTCHA                                            @valeriansaliou
 * Fix buggy roster filter with groups                                              @valeriansaliou
 * Add Piwik tracking feature (configurable in manager)                             @valeriansaliou
 * Easy popup close by clicking away                                                @valeriansaliou
 * Fix cropped uploaded pictures                                                    @valeriansaliou
 * Revert to old File Share API (which is far better)                               @valeriansaliou
 * Fixes broken translations (strange UTF-8 chars due to bugged Gettext compiler)   @valeriansaliou


Nemesis Alpha 2, v0.9.2 (January 2013)
--------------------------------------

 * [SECURITY] Introduce the Register API (prevents register flood by spam bots)   @valeriansaliou
 * Reworked Storage API                                                           @valeriansaliou
 * Jappix Mini code beautify                                                      @valeriansaliou
 * Lighter and Web-safe font files                                                @valeriansaliou
 * Better error logging                                                           @valeriansaliou
 * Fix Openfire ping request                                                      @valeriansaliou
 * Typing notification in Jappix Mini                                             @valeriansaliou
 * Support for WebKit notifications                                               @valeriansaliou
 * Jappix Mini groupchat suggest                                                  @valeriansaliou
 * Enhanced Download API                                                          @valeriansaliou
 * Mini animated chat icon, much sexier                                           @valeriansaliou
 * IE custom font compatibility                                                   @valeriansaliou
 * Legal changes                                                                  @valeriansaliou
 * Update licensing with real names                                               @valeriansaliou


Nemesis Alpha 1, v0.9.1 (2012)
------------------------------

 * Show an 'add to home' button on iOS devices                   @camaran
 * Ability to suspend statistics                                 @valeriansaliou
 * Fix IE9 issue with clustering                                 @valeriansaliou
 * Show profile button in user search results                    @valeriansaliou
 * Ability to change message font, font size and color           @valeriansaliou
 * Fix choppy Jappix Mini status picker                          @valeriansaliou
 * Sounds for Safari & IE9                                       @valeriansaliou
 * Enhance new file storage functions                            @valeriansaliou
 * No resize for textareas                                       @valeriansaliou
 * Add a configurable legal disclaimer                           @valeriansaliou
 * Fix a loop bug on presence if no support for sessionStorage   @valeriansaliou
 * Universal fonts                                               @valeriansaliou
 * Add ability to configure the node owner name & website        @valeriansaliou
 * HTTP authentication for LDAP                                  @valeriansaliou
 * Better notification + comments management                     @valeriansaliou


Spaco, v0.9 (2011)
------------------

 * [SECURITY] Fix when sending files to a contact   @valeriansaliou
 * Better Jappix Mini performances                  @valeriansaliou
 * Fix Jappix Mini display issues                   @valeriansaliou
 * Connection issue fixed with BOSH API             @valeriansaliou
 * Open XMPP links when Jappix is ready             @valeriansaliou


Suno, v0.8 (2011)
---------------------

 * XEP-0066: Out of Band Data                                 @valeriansaliou
 * Switch from OpenStreetMap to Google Maps for geolocation   @valeriansaliou


Stelo, v0.7 (2011)
------------------

 * Lighter Jappix Mini                                           @valeriansaliou
 * Welcome popup                                                 @valeriansaliou
 * Support for /me command in Jappix Mini                        @valeriansaliou
 * Fixes in social channel                                       @valeriansaliou
 * Bigger BOSH poll interval (avoids some overactivity errors)   @valeriansaliou
 * Compression disabled by default in Get API                    @valeriansaliou
 * Send chatstates in MUC                                        @valeriansaliou
 * Social notification inbox                                     @valeriansaliou


Lumo, v0.6 (2011)
-----------------

 * Smoother Mini animation                                               @valeriansaliou
 * Show avatars in social channel comments                               @valeriansaliou
 * Legacy mode for microblog comments                                    @valeriansaliou
 * Microblog updated to comply with a new version of XEP-0277            @valeriansaliou
 * Fix DNS SRV issue because of a 'route' attribute on BOSH initiation   @valeriansaliou


Ribelo, v0.5 (2011)
-------------------

 * Add support for comments in microblog   @valeriansaliou
 * Jappix Mini fixes and improvements      @valeriansaliou


Lupo, v0.4 (2011)
-----------------

 * Full IE5.5 compatibility for Jappix Mini                            @valeriansaliou
 * BOSH without cURL (if cURL unavailable)                             @valeriansaliou
 * Handle multiple microblog attached files                            @valeriansaliou
 * Microblog attached files thumbnails                                 @valeriansaliou
 * BOM (Byte Order Mark) filtering for Get API                         @valeriansaliou
 * Autoplay for new YouTube HTML5 player                               @valeriansaliou
 * Support for privacy lists pushs                                     @valeriansaliou
 * Roster-side privacy lists (make contact blocking/unblocking easy)   @valeriansaliou
 * Better update checker                                               @valeriansaliou
 * XEP-0144: Roster Item Exchange                                      @valeriansaliou
 * Cross domain support for Internet Explorer and legacy browsers      @valeriansaliou
 * Update jQuery (v1.4.4)                                              @valeriansaliou
 * TZO fix (for negative timezones, e.g.: UTC-5)                       @valeriansaliou
 * Better language detection                                           @valeriansaliou
 * Use HTML5 or Flash for YouTube embedded videos                      @valeriansaliou


Prism, v0.3 (2011)
------------------

 * [SECURITY] Fix JS escape bug for quotes                @valeriansaliou
 * [SECURITY] HTML-encode notification username           @valeriansaliou
 * Introduction of Jappix Mini                            @valeriansaliou
 * Introduction of Jappix Manager                         @valeriansaliou
 * Introduction of Jappix Install                         @valeriansaliou
 * XEP-0050: Ad-Hoc Commands                              @valeriansaliou
 * XEP-0136: Message Archiving                            @valeriansaliou
 * Update Jappix logo                                     @valeriansaliou
 * Declare application language to XMPP server            @valeriansaliou
 * Add a buddy search tool                                @valeriansaliou
 * Support for old/legacy vCard server implementations    @valeriansaliou
 * Inbox messages sorted by date                          @valeriansaliou
 * Better music search                                    @valeriansaliou
 * Human-readable geolocation                             @valeriansaliou
 * Gateway show/hide                                      @valeriansaliou
 * HTML5 forms                                            @valeriansaliou
 * Better notification management                         @valeriansaliou
 * Unified chat design                                    @valeriansaliou
 * Dynamic DOM load (better performances)                 @valeriansaliou
 * Jappix logo shown when connected (improves branding)   @valeriansaliou


Lidar, v0.2 (2010)
------------------

 * Introduction of Jappix Mobile               @valeriansaliou
 * UI redesign (from grey to black and blue)   @valeriansaliou
 * Social channel introduced (microblog)       @valeriansaliou


Genesis, v0.1 (2010)
--------------------

 * Initial version, released after private beta         @valeriansaliou
 * Introduction of Jappix Desktop                       @valeriansaliou
 * Basic chat, groupchat, roster and profile features   @valeriansaliou
 * Basic UI                                             @valeriansaliou


**For more information about what changed through time, check the changes made to our source code on GitHub: https://github.com/jappix/jappix/commits/master**