--- rxvt-unicode/Changes	2022/04/22 17:02:39	1.1280
+++ rxvt-unicode/Changes	2022/12/30 16:51:59	1.1290
@@ -37,42 +37,46 @@
 TODO: c&c perl socket via daemon-ext mechanism
 TODO: simplify extension metainfo cache, cache on disk
 TODO: URxvt::Ext::Name installs urxvt ext name and provides pod/manpage for URxvt::Ext::Name
-TODO: üpixel droppins idenrasm,ll,scrollup
+TODO: pixel droppins idenrasm,ll,scrollup
 TODO: cuu/cud and probably others default to 1 when arg is 0, not just missing, in xterm/vt102, but not in rxvt
 TODO: clean up the resource vs. long option mess, especially in the manpage.
 TODO: think about daemon delaying urxvt client exit.
 IDEA: use harfbuzz to render combining sequences, maybe also complex scripts
 TODO: https://github.com/bbidulock/icewm/issues/492 urxvt wrongfully(?) needa configurenotify after mapwindow? also, black border?
 
-TODO: ❤️ configurable fps setting
-TODO: backgreound ext needs --enable-fading for just Color_fade, either eval { urxvt::Color_fade } // urxvt::Color_bg or eval || die
 TODO: rclock horribly time-biased
 TODO: rclock iso mode?
 
-TODO: printf "\e[4:3m" - "undercurl" - should probbaly be interpüreted as underline, rather than \e[43m
-TODO: click through mode / https://shallowsky.com/blog/2017/Apr/06/
-
-TODO:
-03:32:26 <BlueFish> Hi. I think I found a bug in special_encode in rxvtperl.xs
-03:33:37 <BlueFish> special_encode('لا') or any other string that contains 'لا' returns a disturbed string
-03:33:40 <schmorp> hi BlueFish 
-03:34:10 <schmorp> whats a disturbed string?
-03:34:25 <BlueFish> for example سلام becomes ملام
-03:35:05 <BlueFish> see this issue: https://github.com/mkamensky/Text-Bidi/issues/10 I was trying to fix it 
-                    and after playing around for a while found out that special_encode is causing the problem
-03:35:36 <schmorp> does this happen when you compile without --enable-combining (or with --disable-combining)?
-03:37:40 <BlueFish> I don't know the one that I installed from my distro repository has this flag or not. Is 
-                    there anyway to check?
-03:38:49 <schmorp> rxvt --help will output a options: line at the top, whioch will list "combining"
-03:39:10 <schmorp> anyway, I don't think i will understand this at my current tiredness level, I'll have a 
-                   look when I have time
-03:39:26 <schmorp> are you usually around on this network, so I coulöd ask you in cas eI have questions?
-03:40:25 <BlueFish> yes combining is enabled. No I don't check IRC that much. You can reach me via email
-03:40:44 <schmorp> ok, thats fine
-03:40:40 <BlueFish> avestasabayemoghadam@gmail.com
-
+TODO: printf "\e[4:3m" - "undercurl" - should probbaly be interpreted as underline, rather than \e[43m
+TODO: click through mode / https://shallowsky.com/blog/2017/Apr/06/ http://ue.tst.eu/72ab4421e31ef231c111e02706fff7bb.txt
+http://mika.l3ib.org/tmp/71f1ab72a741eeee7c84933f35436341.txt
+
+	- implement a fix for CVE-2022-4170 (reported and analyzed by David Leadbeater).
+          While present in version 9.30, it should not be exploitable. It is exploitable
+          in versions 9.25 and 9.26, at least, and allows anybody controlling output to
+          the terminal to execute arbitrary code in the urxvt process.
 	- the background extension no longer requires off focus fading support
           to be compiled in.
+        - the confirm-paste extension now offers a choice betwene pasting the original
+          or a sanitized version, and also frees up memory used to store the paste text
+          immediately.
+        - fix compiling without frills.
+        - fix rewrapMode: never.
+        - fix regression that caused urxvt to no longer emit responses
+          to OSC color queries other than OSC 4 ones.
+        - fix regression that caused urxvt to no longer process OSC 705.
+        - restore CENTURY to be 1900 to "improve" year parsing in urclock (or at
+          least go back to the old interpretation) (based on an analysis
+          by Tommy Pettersson).
+        - exec_async (used e.g. by the matcher extension to spawn processes) now
+          sets the URXVT_EXT_WINDOWID variable to the window id of the terminal.
+        - implement -fps option/refreshRate resource to change the default 60 Hz
+          maximum refresh limiter. I always wanted an fps option, but had to
+          wait for a user requesting it.
+        - perl now also requires Xext.
+        - X region and shape extension functionality has been exposed to perl
+          extensions.
+        - RENDER extension no longer depends on ENABLE_XIM_ONTHESPOT.
 
 9.30 Sat 27 Nov 2021 21:07:09 CET
 	- the background extension did not initialise properly when automatically
@@ -264,6 +268,7 @@
 	- a key combination bound to 'matcher:select' can now be used
 	  to cycle through the matches in matcher.
         - change perl integer accessors (->width et al.) into mutators.
+        - this version has ben verified to work with perl 5.8.3.
 
 9.21 Wed Dec 31 14:50:03 CET 2014
 	- the "moa redraw 8-bit british vintage colour management" release.