# HG changeset patch # User Sebastien Jodogne # Date 1772364461 -3600 # Node ID e703805398d89cdfad2ad0b33184be29382bd3bc # Parent 9722dc04e6a68646bed7207c911317ee266bfb5d NEWS diff -r 9722dc04e6a6 -r e703805398d8 NEWS --- a/NEWS Sun Mar 01 12:19:35 2026 +0100 +++ b/NEWS Sun Mar 01 12:27:41 2026 +0100 @@ -13,11 +13,14 @@ - "orthanc_logged_errors_count" - "orthanc_logged_warnings_count" * Fixed a security issue where one could hijack HTTP headers in the response - through the "filename" argument of "/.../file" or "/.../archive" routes. + through the "filename" argument of "{...}/file" or "{...}/archive" routes. (credits: Pavel Kohout, Aisle Research, https://www.aisle.com/) * In "tools/find", filtering against "LabelsConstraint": "None" with an empty "Labels" list now returns all resources that do not have any label attached, instead of returning all resources. This applies to the default SQLite DB and will apply to the next PostgreSQL plugin (v10.1). +* New option "Utf8" available in the "{...}/archive" and "/tools/create-archive" routes + to use UTF-8 filenames in the generated ZIP archives. It defaults to the value + of the new configuration option "ZipUseUtf8". Lua --- diff -r 9722dc04e6a6 -r e703805398d8 OrthancServer/Resources/Configuration.json --- a/OrthancServer/Resources/Configuration.json Sun Mar 01 12:19:35 2026 +0100 +++ b/OrthancServer/Resources/Configuration.json Sun Mar 01 12:27:41 2026 +0100 @@ -1098,6 +1098,13 @@ // at any given time. A value of "0" indicates to use all the // available CPU logical cores. Prior to Orthanc 1.12.6, there were not limit. // (new in Orthanc 1.12.6) - "MaximumConcurrentDcmtkTranscoders" : 0 + "MaximumConcurrentDcmtkTranscoders" : 0, + // Whether to use UTF-8 filenames in the ZIP archives generated by + // Orthanc. By default, it is set to "false" and only ASCII + // filenames are generated, which corresponds to the behavior of + // Orthanc <= 1.12.10. This default value can be overwritten per archive, + // by providing the "Utf8" field to the "{...}/archive" and + // "/tools/create-archives" routes. (new in Orthanc 1.12.11) + "ZipUseUtf8" : false }