{"id": "changelog:id57", "page": "changelog", "ref": "id57", "title": "0.46 (2020-08-09)", "content": "This release contains a security fix related to authenticated writable canned queries. If you are using this feature you should upgrade as soon as possible. \n             \n             \n                 \n                     Security fix:  CSRF tokens were incorrectly included in read-only canned query forms, which could allow them to be leaked to a sophisticated attacker. See  issue 918  for details. \n                 \n                 \n                     Datasette now supports GraphQL via the new  datasette-graphql  plugin - see  GraphQL in Datasette with the new datasette-graphql plugin . \n                 \n                 \n                     Principle git branch has been renamed from  master  to  main . ( #849 ) \n                 \n                 \n                     New debugging tool:  /-/allow-debug tool  ( demo here ) helps test allow blocks against actors, as described in  Defining permissions with \"allow\" blocks . ( #908 ) \n                 \n                 \n                     New logo for the documentation, and a new project tagline: \"An open source multi-tool for exploring and publishing data\". \n                 \n                 \n                     Whitespace in column values is now respected on display, using  white-space: pre-wrap . ( #896 ) \n                 \n                 \n                     New  await request.post_body()  method for accessing the raw POST body, see  Request object . ( #897 ) \n                 \n                 \n                     Database file downloads now include a  content-length  HTTP header, enabling download progress bars. ( #905 ) \n                 \n                 \n                     File downloads now also correctly set the suggested file name using a  content-disposition  HTTP header. ( #909 ) \n                 \n                 \n                     tests  are now excluded from the Datasette package properly - thanks, abeyerpath. ( #456 ) \n                 \n                 \n                     The Datasette package published to PyPI now includes  sdist  as well as  bdist_wheel . \n                 \n                 \n                     Better titles for canned query pages. ( #887 ) \n                 \n                 \n                     Now only loads Python files from a directory passed using the  --plugins-dir  option - thanks, Amjith Ramanujam. ( #890 ) \n                 \n                 \n                     New documentation section on  Publishing to Vercel .", "breadcrumbs": "[\"Changelog\"]", "references": "[{\"href\": \"https://github.com/simonw/datasette/issues/918\", \"label\": \"issue 918\"}, {\"href\": \"https://github.com/simonw/datasette-graphql\", \"label\": \"datasette-graphql\"}, {\"href\": \"https://simonwillison.net/2020/Aug/7/datasette-graphql/\", \"label\": \"GraphQL in Datasette with the new datasette-graphql plugin\"}, {\"href\": \"https://github.com/simonw/datasette/issues/849\", \"label\": \"#849\"}, {\"href\": \"https://latest.datasette.io/-/allow-debug\", \"label\": \"demo here\"}, {\"href\": \"https://github.com/simonw/datasette/issues/908\", \"label\": \"#908\"}, {\"href\": \"https://github.com/simonw/datasette/issues/896\", \"label\": \"#896\"}, {\"href\": \"https://github.com/simonw/datasette/issues/897\", \"label\": \"#897\"}, {\"href\": \"https://github.com/simonw/datasette/issues/905\", \"label\": \"#905\"}, {\"href\": \"https://github.com/simonw/datasette/issues/909\", \"label\": \"#909\"}, {\"href\": \"https://github.com/simonw/datasette/issues/456\", \"label\": \"#456\"}, {\"href\": \"https://github.com/simonw/datasette/issues/887\", \"label\": \"#887\"}, {\"href\": \"https://github.com/simonw/datasette/pull/890\", \"label\": \"#890\"}]"}