Sharetribe version 7.3.1 is now available!

[7.3.1] - 2018-06-07

Release contains important security fixes.

Security

  • [Critical] Fix several parameter validation bugs that opened the app to SQL injection
  • Update sinatra dependency #3344
  • Update multiple dependencies
  • Present form auto-complete for Stripe secret keys #3338

Added

  • Add soundcloud link support in custom landing page footer #3300
  • Add checkbox for consent for receiving emails from admins to signup process #3318
  • Add popup notification when giving admin rights to a new user #3329
  • Add link to privacy policy in the signup page #3328
  • Allow admins to disable end-user Analytics #3319
  • Allow links in custom listing text fields #3297
  • Add View reviews section in the admin panel #3267
  • Add possibility to export transaction as CSV file #3245

Changed

  • Improve user deletion to clear personal data more thoroughly #3325
  • Delete automatically transactions that fail with Stripe #3326
  • Prevent an admin from deleting their account if they are the only admin in the marketplace#3320
  • Split first name and last name from Stripe account connection form #3317

Removed

  • Remove feature flag for export transactions feature #3288

Fixed

  • Fix Dockerfile issue where bundler was trying to install binaries in root-owner directory #3321. Thanks, Nick Meiremans.
  • Fix Stripe payout scheduler #3309
  • Fix last 4 digits of SSN passing to Stripe for US bank accounts #3282

Upgrade from 7.3.0 to 7.3.1

Nothing special. See the general upgrade instructions.

1 Like

Thank you guys for maintaining this project :tada::tada:

1 Like

It’s impossible for me to do the upgrade
When I do :
git fetch --tags
git checkout latest

And I have the error :
error: pathspec ‘latest’ did not match any file(s) known to git.

Thanks for reporting!

I’m not able to reproduce this, unfortunately, could you try again just to be sure?

git checkout master
git pull
git fetch --tags
git checkout master

When doing this, I get the expected release: HEAD is now at 958a837... Release version 7.3.1.

Let us know!

Dear Sharetribe team,
I just like to post a bug of v7.3.1. On the signup page, if you click on “Privacy Policy” the link is not working. No popup is opening.

R
Stefan

Thanks for reporting, Stephan.

Clicking on that link should open a small popup that display your Privacy Policy text.
A couple questions:

  • do you have JavaScript enabled?
  • do you have some content in your /infos/privacy page?
  • do you experience the same issue with the Terms of Use link?

Let us know!

Dear Thomas,

  • yes java is enabled
  • yes I have content on the /infos/privacy page
  • no I don’t experience the same; the popup of the terms of use is working properly

Digging into the raw html source code, also the text of the privacy is available;

Dear ST team,
any idea how to solve that issue to see the popup for the privacy?

Hi @sst

Can you share your site ?

I’ve updated to 7.3.1 and I’ve no issue with those links.

Regards

Hi,
I found the bug. I forgot to precompile after the update. Know it is working again.
thx

Thanks a lot for the update, Stefan!

Good to hear that it works and thanks for sharing the reasons, that might help others in the future.

Keep up the good work!