Transmission-Qt full changelog

Highlights:
Fixed 4.1.0 bug that could cause duplicate HTTP announces to be sent to trackers. (#8639)
All Platforms:
Reject benc data that has invalid characters. (#8577)
Fixed a bug during the startup sequence where if one torrent failed to parse, subsequent torrents would also fail. (#8605)
Fixed a bug that stalled some downloads at 99%. (#8654)
Fixed a 4.1.0 upgrade bug that could overwrite utp_enabled and tcp_enabled settings. (#8658)
Fixed a 4.1.0 crash that could happen when a peer supplied reqq value smaller than 32 in LTEP handshake. (#8713)
Fixed a 4.1.0 regression that periodically wrote upload & download stats to disk even when Transmission had been idle since the last write, preventing the stats file's disk from hibernating while idle. (#8722)
Fixed a 4.1.0 bug that prevented TCP peer connections on some systems. (#8748)
Added safeguards to HTTP responses to prevent clickjacking. (#8749)
Fixed edge case that didn't preserve the order of a batch of torrents when moving their queue position up or down. (#8782)
Added sanitization for UTF-8 client names provided by peers during handshake. (#8809)
Stopped appending redundant zeros to blocklist files when downloaded from a remote URL. (#8819)
Fixed a build failure that occurred when building with link-time optimization. (#8540)
Qt Client:
Fixed a 4.1.0 crash when parsing some RPC responses from older Transmission servers. (#8618)
Fixed a 4.1.0 bug that saved both deprecated and current settings names to settings.json. (#8623)
GTK Client:
Fixed a 4.1.0 bug that did not show translated logging level strings. (#8611)
Fixed a 4.1.0 crash when toggling alternative speed limits. (#8709)
Web Client:
Fixed a 4.1.0 bug that displayed timestamps in some dropdowns as 6.75:45 instead of 6:45. (#8624)
Fixed a bug that could show incorrect torrent status when reconnecting to the server after a lost connection. (#8780, #8783)
transmission-remote:
Improved transmission-remote console output for JSON-RPC 2. (#8799, #8805)

Highlights
Fixed 4.0.0 bug where the IP address field in UDP announces were not encoded in network byte order. [BEP-15].
Fixed a bug that incorrectly escaped JSON strings in some locales.
Fixed 4.0.4 decreased download speeds for people who set a low upload bandwidth limit.
All Platforms
Fixed bug that prevented editing trackers on magnet links.
Fixed HTTP tracker announces and scrapes sometimes failing after adding a torrent file by HTTPS URL.
In RPC responses, change the default sort order of torrents to match Transmission 3.00.
Fixed tr_sys_path_copy() behavior on some Synology Devices.

All Platforms:
Fixed bug in sending torrent metadata to peers. (#5460)
Avoid unnecessary heap memory allocations. (#5520, #5527)
Fixed filename collision edge case when renaming files. (#5563)
Fixed locale errors that broke number rounding when displaying statistics, e.g. upload / download ratios. (#5587)
Always use a fixed-length key query in tracker announces. This isn't required by the spec, but some trackers rely on that fixed length because it's common practice by other BitTorrent clients. (#5652)
Fixed potential Windows crash when getstdhandle() returns NULL. (#5675)
Fixed 4.0.0 bug where the port numbers in LDP announces are sometimes malformed. (#5825)
Fixed a bug that prevented editing the query part of a tracker URL. (#5871)
Fixed a bug where Transmission may not announce LPD on its listening interface. (#5896)
Made small performance improvements in libtransmission. (#5715)

All Platforms:
Allow the RPC server to listen on an IPv6 address (#161)
Change TR_CURL_SSL_VERIFY to TR_CURL_SSL_NO_VERIFY and enable verification by default (#334)
Go back to using hash as base name for resume and torrent files (those stored in configuration directory) (#122)
Handle "fields" argument in "session-get" RPC request; if "fields" array is present in arguments, only return session fields specified; otherwise return all the fields as before
Limit the number of incorrect authentication attempts in embedded web server to 100 to prevent brute-force attacks (#371)
Set idle seed limit range to 1..40320 (4 weeks tops) in all clients (#212)
Add Peer ID for Xfplay, PicoTorrent, Free Download Manager, Folx, Baidu Netdisk torrent clients (#256, #285, #355, #363, #386)
Announce INT64_MAX as size left if the value is unknown (helps with e.g. Amazon S3 trackers) (#250)
Add TCP_FASTOPEN support (should result in slight speedup) (#184)
Improve ToS handling on IPv6 connections.

All Platforms
Fix building against LibreSSL (#284, #486, #570)
Fix building against mbedTLS (#115, #528)
Fix torrents ETA calculation (#522)
Fix cross-compilation issues caused by miniupnpc configuration test (#475)
Qt Client
Fix bad downloaded percentage in DetailsDialog (#547)
Web Client
Fix tracker error XSS in inspector (CVE pending; found by Rory McNamara of Gotham Digital Science)
Fix torrent name HTML-escaping in trackers inspector tab