ownCloud 8.1 Features

This collects all the new features of ownCloud 8.1. This will be used for the release announcement. Please add your features that are merged here. If they are not merged yet but you plan to before the feature freeze than add a (planned) comment to it.

Main Features

• SFTP external storage with SSH key (https://github.com/owncloud/core/pull/13190)
• SMB external storage now based on libsmbclient (https://github.com/owncloud/core/pull/10673)
• Improved performance of preview generation (https://github.com/owncloud/core/pull/13674) (planned) (https://github.com/owncloud/core/pull/13635) (planned)

Minor Features

• Updated doctrine/dbal component fixing upgrade issues for MariaDB 10
• Setup command for occ - ownCloud can now be installed via the console
• Display avatars in share dialog (https://github.com/owncloud/core/pull/13866 and https://github.com/owncloud/core/pull/14582)
• More media types preview support (https://github.com/owncloud/core/pull/13652) (planned) (https://github.com/owncloud/core/pull/13648) (planned)

Incompatible Changes

Administrators

Security

• The .htaccess and index.html in the data directory is now updated after every update. Administrators are encouraged to verify that they don't have any manual modifications done in there.
• The SabreDAV browser at /remote.php/webdav has been removed. Only pure WebDAV access is permitted anylonger.
• Using ownCloud without a trusted_domain will not work anymore (except for whitelisted items such as local loopback addresses)
• The logging format for failed logins has changed and considers now the proxy configuration in the config file (see https://github.com/owncloud/core/pull/10735)
• "Download from link" feature has been removed (see https://github.com/owncloud/core/pull/14652)
• Some security headers should now be sent by the web-server, the default .htaccess file already contains them (see https://github.com/owncloud/core/pull/14651) – if the headers are not set a security warning in the admin menu will get shown.
• The OC_User_HTTP backend has been removed. Administrators are encouraged to use the user_webdavauth application instead.

Deployment

• Memory cache configuration is no longer automatic, requiring configuration in config.php with the keys memcache.local and/or memcache.distributed (https://github.com/owncloud/core/pull/13368)

Developers

Public API

• \OCP\Json is now deprecated (https://github.com/owncloud/core/pull/14129)
• Update Sabre library to 2.1: https://github.com/owncloud/core/pull/14151, apps using Sabre from core might be affected
• \OCP\Util::sendMail is deprecated and \OCP\Mail\IMailer should be used instead

Non public API

• OC_Request is gone and replaced by public API (IRequest)
• \OC_Json is now deprecated (https://github.com/owncloud/core/pull/14129)
• \OC\Preferences and OC_Preferences have been removed
• \OC_Mail is gone and replaced by public API (\OCP\Mail\IMailer)

##### Security

• The default Content-Security-Policy of AppFramework apps is now stricter but can be adjusted by developers. See https://github.com/owncloud/core/pull/13989
• Parameters passed to OC.generateUrl are now automatically encoded, this behaviour can be adjusted by developers. See https://github.com/owncloud/core/pull/14266
• Views constructed by OC\Files\View do not allow directory traversals anymore in the constructor. See https://github.com/owncloud/core/pull/14342
• The CSRF token may now contain not URL compatible characters (for example the plus sign: +), developers have to ensure that the CSRF token is encoded properly before using it in URIs.
• The default RNG now returns all valid base64 characters
• OC.msg escapes the message now by default (see https://github.com/owncloud/core/pull/14208)

Performance

• Adjust your navigation entry in app.php to use a closure to avoid unnecessary route loading (see https://mailman.owncloud.org/pipermail/devel/2015-March/001146.html)

Schedule

• Feature Freeze March 31st 2015