--- rxvt-unicode/Changes	2021/12/04 22:56:48	1.1279
+++ rxvt-unicode/Changes	2023/07/07 06:10:37	1.1301
@@ -37,14 +37,72 @@
 TODO: c&c perl socket via daemon-ext mechanism
 TODO: simplify extension metainfo cache, cache on disk
 TODO: URxvt::Ext::Name installs urxvt ext name and provides pod/manpage for URxvt::Ext::Name
-TODO: üpixel droppins idenrasm,ll,scrollup
+TODO: pixel droppins idenrasm,ll,scrollup
 TODO: cuu/cud and probably others default to 1 when arg is 0, not just missing, in xterm/vt102, but not in rxvt
 TODO: clean up the resource vs. long option mess, especially in the manpage.
 TODO: think about daemon delaying urxvt client exit.
 IDEA: use harfbuzz to render combining sequences, maybe also complex scripts
-TODO: https://github.com/bbidulock/icewm/issues/492 urxvt wrongfully(?) needa configurenotify after mapwindow? also, black border?
+TODO: rclock horribly time-biased
+TODO: rclock iso date mode?
+TODO: printf "\e[4:3m" - "undercurl" - should probbaly be interpreted as underline, rather than \e[43m
+TODO: feature where I can just click on (y/p/n) when prompted after pasting text to the terminal?
+
+TODO: 08:11:16 <dg> in some cases printf "\e]50;\a" can be a crash
+08:11:50 <dg> it seems to depend a bit on setup, two in a row maybe needed
+- what font dpes urxvtr flal back ion this case? why not fixed?
+07:28:56 <dg> schmorp: try printf '\e]50;\a\xe7\xaf\xad'
+07:29:15 <dg> i'm guessing the builtin font doesn't have that character (篭)
+07:29:40 <dg> on one machine with 9.30 that segfaults, with what looks like a null pointer deref
+07:29:58 <dg> on latest dev, but a different machine it hangs
+07:33:26 <dg> hmm, and on openbsd it doesn't even hang with that reduction, but the actual case the fuzzer 
+              found does hang
+07:34:02 <dg> curl -o - dg.cx/f12-afl-urxvt-id0-src517.txt
+
+TODO: nmeum reports that when the wm resizes urxvt while it opens, the prompt is now somewhere in the middle
+of the window, rather than near the top. this behaviour change wss part of the wrapmode fix, and should normally
+prevent from readline jumping around on resizes. running urxvt with the exact geometry that the wm will assign "fixed" this.
+https://github.com/exg/rxvt-unicode/commit/1eb2c326cb88ee7bae01e995a16829746bfe374e
+
+        - fix reference counting of values returned by some perl bindings.
+        - fix OSC responses with 7-bit ST (reported by Stuart Henderson).
+        - change the encoding of buttons 8-11 in mouse reporting
+          sequences to match xterm's and enable reporting of release
+          events for them (patch by Pierre-Marc Fournier).
+        - clamp coordinates in mouse reporting sequences to the number
+          of rows and columns (patch by Nick Hanley).
+	- added Alt_L/ALt_R and updated some keys in iso 14755 5.2 mode.
+        - perl 5.38 does not handle empty locale names, use "C" instead
+          (patch by sxzzsf).
+
+9.31 Mon 02 Jan 2023 18:13:16 CET
+	- implement a fix for CVE-2022-4170 (reported and analyzed by David Leadbeater).
+          While present in version 9.30, it should not be exploitable. It is exploitable
+          in versions 9.25 and 9.26, at least, and allows anybody controlling output to
+          the terminal to execute arbitrary code in the urxvt process.
+	- the background extension no longer requires off focus fading support
+          to be compiled in.
+        - the confirm-paste extension now offers a choice between pasting the original
+          or a sanitized version, and also frees up memory used to store the paste text
+          immediately.
+        - fix compiling without frills.
+        - fix rewrapMode: never.
+        - fix regression that caused urxvt to no longer emit responses
+          to OSC color queries other than OSC 4 ones.
+        - fix regression that caused urxvt to no longer process OSC 705.
+        - restore CENTURY to be 1900 to "improve" year parsing in urclock (or at
+          least go back to the old interpretation) (based on an analysis
+          by Tommy Pettersson).
+        - exec_async (used e.g. by the matcher extension to spawn processes) now
+          sets the URXVT_EXT_WINDOWID variable to the window id of the terminal.
+        - implement -fps option/refreshRate resource to change the default 60 Hz
+          maximum refresh limiter. I always wanted an fps option, but had to
+          wait for a user requesting it.
+        - new clickthrough extension.
+        - perl now also requires Xext.
+        - X region and shape extension functionality has been exposed to perl
+          extensions.
+        - RENDER extension no longer depends on ENABLE_XIM_ONTHESPOT.
 
-TODO: configurable fps setting
 9.30 Sat 27 Nov 2021 21:07:09 CET
 	- the background extension did not initialise properly when automatically
           loaded via the OSC.
@@ -235,6 +293,7 @@
 	- a key combination bound to 'matcher:select' can now be used
 	  to cycle through the matches in matcher.
         - change perl integer accessors (->width et al.) into mutators.
+        - this version has been verified to work with perl 5.8.3.
 
 9.21 Wed Dec 31 14:50:03 CET 2014
 	- the "moa redraw 8-bit british vintage colour management" release.