Yona support social login, Github and Gmail.
It doesn't need to sign up anymore.

This feature was easily developed thanks to "Play Athenticate"
See: https://github.com/joscha/play-authenticate

Before:
xss.js with jvm javascript engine

After:
OWASP Java HTML Sanitizer
https://www.owasp.org/index.php/OWASP_Java_HTML_Sanitizer_Project

Reason:
xss.js is too buggy and not maintained anymore.

To increase performance and use more options,
upgrade MariaDB connector to v1.5.5

You can see available options and discussions:
https://mariadb.com/kb/en/mariadb/about-mariadb-connector-j

Instead of YONA_HOME, use YONA_DATA.

If you set a YONA_DATA and run bin/yona,
conf, uploads, repos, logs will be stored at YONA_DATA folder.

eg.
YONA_DATA=/yona-data;export YONA_DATA
bin/yona

It will make easy to upgrade and backup
YONA_HOME is no longer needed.

Play: 2.3.6 -> 2.3.10
jgit: 3.5 -> 4.5

Yona use 'jsoup' for parsing posting contents.
But some already escaped html contents are parsed wrong.
jsoup's node.text() method do unescape strings.
So, change to use node.toString() instead of node.text().

And Upgrade jsoup to 1.8.3 from 1.8.2