Movable Type.org

Overview ¶

• Type: Bug Fix, one XSS vulnerability affecting a portion of users addressed.
• Mandatory? Highly Recommended for all MT4.0 users, and strongly recommended for users affected by the listed issues, but not required.
• Performance Implications: Expect performance increase. Some critical performance improvements to MT 4.0. Users expect to see performance increase in the application and in publishing.
• Plugins Affected: None that we are aware of -- all MT4.0 plugins should work in MT 4.01. However, this is a release that focuses on addressing issues with the Movable Type Perl API, so impacts are possible.
• Templates Affected: No changes in your templates are required. The default search results template was modified slightly to be compliant with W3C standards.
• Licensing considerations: None. MT 4.01 is a free upgrade for users of any version of MT 4.0

Download ¶

• This release is no longer in beta; MT 4.01 is available through the standard download process.

Known Issues ¶

Here is a list of known issues that we intend on fixing prior to this release.

• Several users have reported the upgrade process being run and re-run somewhat randomly. We are still investigating. If anyone encounters this issue please, please, please report it so that we can gather as much information as possible about it. In the mean time, we have put defensive measures in place to keep this from affecting users.

Overloading Core Tags ¶

Previously this document listed "unable to overload mt:tags" as a known issue. We have decided that this is by design. Listed below is an explanation from Brad Choate as to how plugin developers can work around this design if they feel it is necessary.

MT does have a system that allows for replacing core tags. The registry does permit a plugin to redeclare a handler, however, it currently doesn't handle a situation where multiple plugins are vying for the same tag. And in this case, MultiBlog is declaring itself the handler for certain core tags: Tags, Entries, Comments, etc. It does this so it can enforce any blog privacy rules that may exist. So if you say <MTEntries blog_ids="all">, MultiBlog will intercept that and pass through the appropriate blog_ids attribute if some of the blogs have opted out of being included in a MultiBlog group.

For example, say you want to override the 'Core' Tags handler, it is advised you replace the core handler for that tags as opposed to amending with your own behavior. So, I would recommend those plugins interact with the Core component directly. For example:

sub init {
    my $p = shift;
    $p->SUPER::init(@_);
    my $core = MT->component('core');
    my $r = $core->registry("tags", "block");
    $r->{Tags} = \&hose;
}

By doing this, you are replacing an element in MT's core registry. This insures that any plugin that extends that handler will call yours instead. So this will still wind up calling MultiBlog to enforce privacy, but MultiBlog will then call your handler to do the real work.

Change Log ¶

Release Candidate 2 - Released September 12, 2007 ¶

• 58300: Entry preview is broken FIXED - The ability to preview entries was temporarily broken in RC1. This has been fixed.
• 58391: Blog listing screen doesn't appear after restoring FIXED - "Invalid permission" error might have been thrown when restoring backup data which contains records for existing authors. The bug has been fixed.
• 58399: Warning produced from empty 'if' blocks FIXED - A warning was appearing in error logs when users used an empty If template tag container. Thanks to Tim Appnel for finding the root cause and providing a fix.
• 58476: Preview entry broken with custom archive mapping path FIXED - Users with custom archive paths and mappings had indicated that preview was not working. This has been fixed.
• 58292: MT Wizard: update content when config exists FIXED - Wizard offers link to login if config file exists
• 58222: MT gives permission error when / is used as SiteRoot FIXED - Blog users are now permitted to specify the root of their machine as a publishable directory. This is especially useful for environments that like to place installs into a chroot "jail."
• 58131: Misformatting of system plugins when some are disabled FIXED - There was styling problem with disabled plugins. This has been fixed.
• 58177: use level top menu link is wrong on FastCGI FIXED - The Manage menu name was linking to the wrong plae under FastCGI. This has been fixed.
• 55016: Clicking System Overview goes to system-level Users listing screen FIXED - The "System Overview" link somehow was changed to point to Manage Users. This change was reverted. It now points to the dashboard.
• 56507: CMS widget javascript duplicated 4 times FIXED - Thanks to Mark Carey for reporting this issue: the javascript include directive being duplicated for each widget on the page.
• 58233: Search box on assets listing screen searches entries not assets FIXED
• 58270: No (class label plural) message could be found message needs to be lower case. CHANGE - 'No "entries" found' message is now lowercased.

Release Candidate 1 - Released September 5, 2007 ¶

• 57851: MT4.01 MTViewer.php doesn't work with dynamic fields FIXED (in beta 2) - We didn't add this one to the release notes last week. MTViewer.php now works with dynamic tags.

• 58037: Site root for personal blog not appended with unique identifier FIXED - Auto provisioned blogs for new users were not having the URL appended with a unique identifier for the user.

• 58041: Database error when table was extended by a plugin - then remove the plugin and add another plugin FIXED - A database error may have happened during upgrade when using SQLite. This occurred when a plugin that extended MT::Object was installed and then removed, and then when another plugin which also extends MT::Object was installed. The bug has been fixed. Thanks Hirotaka Ogawa who reported the issue with detailed information.

• 58137: Previewing sometimes does bad things to published file FIXED - Published entry archive file may have been removed during scheduled task when individual entry archive map did not utilize entry's basename. The bug has been fixed. Thanks Border.garaku for his report and help to our investigation.

• 58138: Asset search does not return search result table FIXED

• 58169: 'load_iter' method behavior does not match MT 3.x FIXED - This was a critical bug that was resulting in Movable Type pulling every single entry for a blog into memory in order to compose any page (app or blog side) that contained next entry and/or previous entry links. This also resulted in some large sites from publishing some pages. This bug had an adverse impact on memory utilization, and performance at large. Users are strongly encourage to upgrade in order to address this problem.

• 58187: Sidebar archive label is not translated in dynamic publishing FIXED - MTArchiveTypeLabel did not return translated label of archive type in dynamic publishing. The bug has been fixed.

• 57783: Build Errors in Schwarz from using default templates FIXED - Thanks to Michele for the bug report.

• 57941: Filter by icon doesn't work on Comments list page FIXED - Status icon on the list comments screen did not filter comments correctly. The bug has been fixed.

• 57992: Last Modified date edit on Batch Edit Pages doesn't work FIXED - Editing Last Modified date had no effect.

• 58006: "TrackBacks on my entries" quick filter doesn't work. FIXED - Quickfilter "TrackBacks on my entries" didn't work. The bug has been fixed.

• 58065: Sort order doesn't work with category tags FIXED

• 58076: Blog Administrators Cannot Comment on The Blogs They Administer FIXED - Blog admins sometimes were unable to leave comments on the blogs they administer. This has been fixed.

• 58086: Install two plugins which extends an existing table at the same time fails? FIXED - Installing more than a plugin which extend the same database table has failed (only one of those was succeeded). The bug has been fixed. Thanks Mr. Noda.

• 58087: Setting value to innerHTML may end up in infinite loop FIXED - Setting some value to innerHTML property of MT::Template sometimes ended up in infinite loop. The bug has been fixed. Thanks mtos-ja Google Groups for their report, investigation, and suggestion of code patch.

• 58096: Report as spam link does not work as advertised FIXED - Report as Spam link in comment notification email did not result in comment being marked as spam.

• 55896: Cityscape banner images are cut off ...? Users reported that the cityscape banners were being cut off when a blog description was not present. This has been accounted for and fixed.

• 56611: sort_order="ascend" doesn't seem to work with Entry Listing archive template FIXED

• 57624: Site root is not set correctly when filling blog name on Create Blog screen with Windows FIXED

• 57651: Search Results template with MTSearchIncludeBlogs tag FIXED - When searching multiple blogs at a time (using the IncludeBlogs parameter) the search results were unstyled. This has been fixed. Now when searching multiple blogs, the templates for displaying the results is based upon the style for the first blog in the list of blogs to search. For example, IncludeBlogs="2,1,3" will search blogs 1, 2 and 3. The style for the search results will be based upon blog #2. Also, IncludeBlogs="3,2,1" will search the same blogs, but the style for the results will be determined by blog #3.

• 57675: Message after backup is confusing L10N - Translation fixed.

• 57683: reCaptcha: move public and private key setting from system scope to blog scope FIXED - Thanks to Brandon for the feature/bug report.

• 58012: From header of notification email is not system email FIXED - Message modifed a little - entry notification does not set system email address in From email header.

• 57994: Changing blog after import is finished results in an error FIXED - Switching to other blog when importing to a blog was finished resulted in an error. The bug has been fixed. Thanks to Mr. Noda.

• 58139: Output of MTProductName has the difference between under static and under dynamic FIXED - Product name now in sync between static and dynamic publishing.

• 58152: Hyphens converted to underscores in UI only BANDAID - There was inconsistency in the display of basenames in the entry/page editing interface. While basenames were being published correctly, underscores were often displayed in lieu of hyphens. For consistencies sake (for now anyways) underscores will now ALWAYS be used.

Beta 2 - Released August 30, 2007 ¶

• 57901: Restore of backup file stalled FYI - A user had experienced a problem with the MT4 Backup and Restore capability. A mismatch between the encoding of the blog and the XML encoding of the import file proved to be the root cause.

• 57923: Single quotes in last name breaks commenter registration FIXED - Single quotes in a user's last name was resulting an error. Now all fields are properly escaped.

• 57924: Cmtr_name_js needs to encode commenter info FIXED - Some users could not comment to some blog run by MT4 because of Javascript error. The bug has been fixed. This fix also addresses a XSS vulnerability resulting from sites on which the blog and the MT application are hosted on different domains. The bug has to do with javascript not being properly escaped.

• 57729: MT::Promise object assigned with stash method is immediately evaluated FIXED - MT::Promise object was not getting evaluated lazily, causing a slight performance problem. This has been fixed.

• 57691: NWC settings are on blog-level settings screen instead of system-level Naughty Word Character settings were being stored in the wrong table. They were moved to a more appropriate location.

• 57694: Can't regist a user for commenting under LDAP-Auth (not EUM) on Oracle FIXED - When LDAP auth was turned on, users could not register to comment. Now users can register.

• 54173: Bulk author creation needs to be added to the user listing screen by the enterprise pack FIXED - Added a bulk author import link to the user listing screen for Enterprise Pack users.

• 57552: Created by column on user listing screen is actually edited by FIXED - We were displaying the wrong name in user listing screen. It was display last edited by, when in fact it should have been created by.

• 57470: Asset thumbs and popup pages get duped FIXED - Assets were being unnecessarily duplicated when uploading a file twice.

• 57504: The clone of a blog does not work with the entry which disabled "Accept TrackBacks" and re-saved it FIXED - Cloning a blog that had a disabled "Accept TrackBacks" setting was failing. This has been fixed.

• 57505: Bad CPAN link in readme FIXED - Updated link for CGI::Cookie in readme and install wizard. Thanks Su!

• 57230: MTCommentFields generates old style commenting form The MTCommentFields tag is no longer supported; users should use the MTInclude tag with the 'Comment Form' template module instead.

• 57272: Cloning a blog fails if source blog's template module has link file CHANGE: Template's linked file field will not be cloned to avoid relative path to the file wrongly write something in arbitrary path.

• 57338: Bug with IfCommentParent FIXED - In support of Simply Threaded, fixed a bug with IfCommentParent template tag.

• 56335: Restore does not restore assets to relative path (patch available) FIXED - When backup file had %r or %a which is symbols that they are relative to site- or archive-path, restore actually restored path and url to the real path and url. The bug has been fixed so they preserve those symbols.

• 56337: File upload stores wrong "relative" path when the file is uploaded immediately under site path FIXED - Asset's file path had unnecessarily duplicated filepath separator in the file_path column when file was uploaded immediately under site path. The bug has been fixed.

• 56354: Bug with default Header template using incorrect MTLink syntax (leading to dynamic inclusion of wrong template!) FIXED

• 56367: Mark Down (with Smarty Pants) and RSS feed not working FIXED - The text filter associated with an entry was not being used in the RSS feed because the default templates for feeds were specifying a 'convert_linebreaks="1"' attribute which was overriding the user's preference. These attributes have been removed from the default templates.

• 56421: Bad plugin present at database initialization not handled From Tim Appnel: "Bug: If a "bad" (dies when required) plugin is present when creating a new MT database, $mt->log will be called to record the problem. The underlying data tables have not been created when the init_plugin is first run causing another and quite different error that obscures the source of the real problem." FIXED - thanks Tim!

• 56425: Blog's name isn't correct in an entries/pages feed FIXED - The blog name in Entries/Pages application feed was incorrect. Fixed.

• 56432: Activity Log detail shows

   tag
  FIXED: Message contents in the activity log are now escaped properly.
  

• 56547: Deferred loading support to plugins It is hard to summarize this one, so I will let Arvind speak for himself - this is what he originally reported: "The registry method is being called incorrectly as $plugin->registry->{tags}{block} rather than $plugin->registry('tags', 'block'). Looking at CMS.pm, there are a lot of places this is happening in mode cfg_plugins. If $plugin->registry('tags', 'block') is called on a variable, all coderefs in it are processed such that a hashref is returned." Thank you Arvind for your bug report and sleuthing!

• 56593: Archive extension only partially applied to file template list in template's archive mapping FIXED - custom file extensions for archives were not always been displayed properly in the app. Fixed.

• 57709: Page Preview Broken in MT 4.0 FIXED - Page Preview was broken when pages were published to alternate archive path. Thanks Reed for the report and help!

• 56689: MTHasParentCategory doesn't work. FIXED - In support of SimplyThreaded, fixed the template tag HasParentCategory. Thanks Arvind!

• 57681: NWC Settings of "do not replace" ignored at first FIXED - Naughty Word Character settings not complete saved.

• 57606: Weblog name not HTML encoded in activity feeds FIXED - HTML Escaped the blog name in activity feeds.

• 57601: ezsqlmysql.php errors when trying to use dynamic publishing with mysql 5 and DBSocket FIXED - The error was showing up: "Warning: mysqlerrno(): supplied argument is not a valid MySQL-Link resource in .../mt/php/extlib/ezsql/ezsql_mysql.php on line 94". This has been fixed.

• 57815: Archive extension wrongly applied to the link to master archive index FIXED - The link to the Master Archives template was hard coded. So when someone changed the output file name, links in the template broke. This has been fixed.

• 57827: Category listing has no actions in template FIXED - From Chad Everett, "That about sums it up - the 'page actions' (I'm pretty sure that is the function that includes the itemset action list) doesn't appear to exist in the category table, meaning there is no way to add an itemset action to the category list or, more specifically, if you add it, there is no way to make it work because the list won't show." Fixed. Thanks Chad!

• 57741: Dynamic $ctx->tag expects template tag files FIXED - Arvind found a bug in which dynamically generated template tags, like the ones in Custom Fields, did not work under dynamic publishing because a physical PHP file was needed for each tag. This constraint was removed and the bug fixed.

• 57753: MTIndexBasename with 'extension' attribute doesn't work under dynamic publishing FIXED

• 57754: JavaScript for blog stats widget is replicated on Dashboard page FIXED - The javascript for the dashboard widgets was being replicated for each widget on the dashboard. This has been fixed. A ProNet member reported this, but I forget who - my apologies. Good catch!

• 57931: Thumbnail files were removed when insert existing asset with make thumbnail option FIXED - Existing thumbnails were removed accidentally when inserting a different thumbnail of the same asset into a different post. They are no longer removed.

• 57869: Windows IIS send STDERR output to browsers... FIXED - Removed unnecessary debugging output.

• 57887: Unnecessary hdlrdate call in YearlyArchiveTitle FIXED - a subroutine in WeblogPublisher was inadvertantly replicated. Impact was zero, but we removed the redundant code.

• 57939: 'strip' modifier returns blank string FIXED

• 57837: addtask (Compat:v3) does not work with subclassed tasks. FIXED - Tim Appnel reported, "The addtask method in MT::Compat::v3 will not work with a subclass of MT::Task which implement a key method instead of setting a HASH when constructed." This has been fixed. Thanks Tim!

• 57816: Typo on system level groups listing screen FIXED

• 57656: Template Edit Screen Should List Template Name in HTML Title FIXED - Matt Jacobs noted that the template edit screen did not include the name of the template being editing in the HTML title. This made it difficult in tabbed browsers for example to keep track of which tabs were for which templates. This has been fixed. Thanks Matt!

• 56594: trim_to="0" does not work in Perl 5.8.0 FIXED

• 56352: XML-RPC: mt.supportedTextFilters still returns wrong label. FIXED - ppm (whoever you are :) discovered that the XML-RPC interface for MT was returning garbley-gook for what text editors were supported. This has been fixed so MT should interoperate with 3rd party posting clients more easily.

• 56739: WYSIWYG editor capitalizes HTML tags other than specified in code in IE6 FIXED - HTML tags were getting capitalized automagically when switching between rich/plain text modes. This was been fixed.

• 56757: mt-check.cgi giving uninitialized value in concatenation error FIXED - From Rizky, "If you look at the top of the page, you can see warning messages (which i don't quite understand). These warnings shows up on the header of every cgi files. I'm just wondering whether, this is a problem with MT or is there something wrong with my web hosting and the Perl version they use." Fixed. Thanks Rizky!

• 56767: Callbacks in config.yaml files are not initialized. FIXED - From Tim, "I've created a couple of plugins using a config.yaml file exclusively and have discovered that callbacks are not being registered. Tracing through the code of initplugins, when a YAML file is detected its read in and a plugin object is created, but initcallbacks is never called on it." His submission is much larger... long story short - this has been fixed. Thank you Tim!!

Beta 1 - Released August 22, 2007 ¶

• 56072: L10N: System overview - List authors Author and User listings: Merged Name, Email, and Link fields to satisfy localization requirements.

• 56089: L10N: Manage assets Width of Asset Preview widened to satisfy localization requirements

• 56330: Revise sidebar navigation of user listing screen to move Group related links to Enterprise As Groups are a function of the Enterprise Pack, sidebar navigation has been modified to account for this code segmentation.

• 47468: Athena make failing due to lack of required module Please note: MT4.0 introduces new external modules which are installed in MT_DIR/extlib folder. Please don't forget to update your extlib folder when you are upgrading older MT to this version.

• 47548: D::OD::BaseObject's clone method removes primary key MT::Object, which is a wrapper now around Data::ObjectDriver, has a method called "clone" which did not produce a perfect clone. It omitted the object's primary key. This was a change in behavior that affected several plugins. This has been fixed. The "clone" method now produces a perfect clone.

• 57511: Object callback parameters are incorrect The object level callbacks in the developer API were receiving as input the original asset (prior to modification). This was affecting the callbacks presave, preremove, preremove and postremove. This has been fixed.

• 56752: Remove references to group from list_role All references to enterprise features like groups have been fully extracted from the core. In this case from MT/App/CMS.pm

• 56753: Remove references to group from list_member All references to enterprise features like groups have been fully extracted from the core. In this case from MT/App/CMS.pm

• 56754: Remove references to group from list_author All references to enterprise features like groups have been fully extracted from the core. In this case from MT/App/CMS.pm

• 56755: Remove references to group from grant_role All references to enterprise features like groups have been fully extracted from the core. In this case from MT/App/CMS.pm

• 57358: "All weblogs" MultiBlog trigger causes double rebuilds in blog defining the trigger There was a problem with the "All Weblog" publishing trigger in Multiblog. This error resulted in posts to be published twice, which was unnecessary and slowed down publish times. This has been fixed. Thank you Jay Allen for finding and reporting this!

• 56283: Roles associated to Pseudo New User can not be seen and removed The role association to the pseudo user "Newly Created User" now appears in listing screens so that it can be edited and removed.

• 56194: Upgrading from 3.34 causes $ctx->stash to not be populated with blog In some edge cases around upgrading users found that they could not navigate to certain screens after upgrading, e.g. the system level dashboard. This occurred when there were unexpected orphaned comments. The code was modified so it will skip those orphaned comments from being processed.

• 46828: Preferred archive type can never be No Archives Removed "No Archives" from the list of "Preferred Archives" because you cannot NOT have a preferred archive type.

• 55751: Import Tool - Wordpress Errors and basename (hyphens) not preserved FIXED: WXRImporter did unnecessary call to dirify, to break basenames imported from WordPress. The code was changed so importing does harder to preserve entry basenames. However, it can't be perfect and basename/permalink can still be broken by importing.

• 47632: Plug-in links on blog main menu page are broken L1ON - Create link javascript alert/prompt dialogs were not getting localized properly. This has been fixed.

• 44125: LDAP SSL connection does not work when Net::LDAP->start_tls() method is not available CHANGE: LDAP over TLS support in MT Enterprise pack now depends on Net::LDAPS module, which comes with the same package as Net::LDAP resides.

• 56405: List of recent entries does not appear and Javacript error occurs when clicking a tag in BLOG STATS widget FIXED: Clicking a tag name on Blog Stats widget did not return list of entries when PublishCharset was not UTF-8. The bug has been fixed.

• 56367: Mark Down (with Smarty Pants) and RSS feed not working The text filter associated with an entry was not being used in the RSS feed because the default templates for feeds were specifying a 'convert_linebreaks="1"' attribute which was overriding the user's preference. These attributes have been removed from the default templates.

• 56372: mt-upgrade.cgi is choking on orphaned mt_templatemap records Users with "orphaned template map records" - entries that were no longer associated with a template, were causing upgrade errors. This has been fixed.

• 56217: Rich text editor is adding editor-content.html to anchor links The rich text editor was erroneously adding an incorrect URL into relative anchor links like <a href="#foo">. This has been fixed. Anchors are no longer molested.

• 56472: DOC: OpenID providers using HTTPS will require additional Perl modules for SSL A release note was added to MT4's official release notes alerting users to this fact.

• 56503: Consistency of navigation labels in Blog Settings A minor copy change to have labels be grammatically consistent in their use of pluralized words.

• 56505: Is there something wrong with the mark-up generated by the sign-in widget? Users were reporting that the login widget was screwing up their layout. We traced this to an unclosed <div> tag. This has been fixed.

• 56506: Simplify "Create new XXX" to "Create XXX" In a number of places we used the term "Create new foo" - which is a tautology - or grammatically incorrect. So we done fixed that up right quick yall.

• 56547: Deferred loading support to plugins It is hard to summarize this one, so I will let Arvind speak for himself - this is what he originally reported: "The registry method is being called incorrectly as $plugin->registry->{tags}{block} rather than $plugin->registry('tags', 'block'). Looking at CMS.pm, there are a lot of places this is happening in mode cfg_plugins. If $plugin->registry('tags', 'block') is called on a variable, all coderefs in it are processed such that a hashref is returned." Thank you Arvind for your bug report and sleuthing!

• 56548: Confirming an email address with mt-add-notify doesn't work FIXED: mt-add-notify.cgi did not work in MT 4.0 when mt-config has relative URL for CGIPath. The bug has been fixed.

• 56719: Unable to Edit Author name for page. One could edit the author of an entry using the batch edit mode, but could not do the same for pages. This oversight has been fixed.

• 57419: MTArchiveTypeLabel error on dnyamic publishing There was an error with the MTArchiveTypeLabel tag that resulted in a smarty error "unrecognized tag." This has been fixed.

• 57458: Fixes to support non-local file assets Made a number of changes so that MT's asset management framework could support non file based asset types, like Amazon Books and DVDs. The system prior assumed that all assets were files that had been uploaded to the server. This has been fixed.

• 57465: Clearing activity log doesn't actually seem to Clearing the activity log at a system level was clearing only system messages. This was confusing. Users expected it to clear ALL activity log messages. So that's what we do now.

• 57168: readme installation guide link goes to 3.2 docs The readme.html file we shipped with MT was never updated from the beta to link to the new docs. Fixed.

• 57532: Blog Templates: Style Entry Tags and Entry Categories Applied default styling to Entry Tags and Entry Categories as a footer in the Entry Detail

• 57494: Some of callbacks were not found in callback alias We created aliases to some of our MT3 callbacks to map the old API into the new one. Not all of these apparently got created leaving some to be effectively non-existent. This has been fixed.

• 56464: Alias MTArchiveLabel to MTArchiveTypeLabel For consistencies sake we aliased MTArchiveLabel to MTArchiveTypeLabel.

• *56348: Create user form: not all mandatory fields marked by * * Required fields on the create user form have now been styles sufficiently to differentiate them from optional fields.

• 45610: Misspelling ("errror") in error message Fixed speling error of the word "errror".

• 55980: Username isn't left-aligned in role users listing screen table Fixed alignment problem in table.

• 56154: Can't open and close plugin details in IE There was a funky CSS issue that created a very small target to click on for expanding the plugin details in IE. We fixed it by making the whole plugin name clickable to expand the plugin info portion of the plugin.

• 56236: Typo in backup confirmation message Fixed typo in backup confirmation message.

• 56238: Invalid XHTML on search result page using default templates Blog Templates: Resolved id conflict in search forms by merging advanced options into Search widget when viewed from Search Results screen. Search-based feed moved to Syndication widget.

• 56252: "Require E-mail Address for Comments via TypeKey" and "Movable Type Native" blog comment settings labels are not clickable A couple HTML labels were not encapsulated properly to make them associated with their corresponding checkbox. This has been fixed to give these options a large hot spot.