diff --git a/scriptLib.pas b/scriptLib.pas
index ed593b9..90c2f78 100644
--- a/scriptLib.pas
+++ b/scriptLib.pas
@@ -1977,6 +1977,8 @@ try
       result:=strMD5(p);
     if name = 'sha1' then
       result:=strSHA1(p);
+    if name = 'sha256' then
+      result:=strSHA256(p);
 
     if name = 'vfs select' then
       if pars.count = 0 then
diff --git a/todo.txt b/todo.txt
index 0300c45..202a276 100644
--- a/todo.txt
+++ b/todo.txt
@@ -24,9 +24,12 @@
 + macros missing to cache a folder: {.reply|content=|var=|code=|filename=|mime=.}
 - unexpected scripting behavior http://www.rejetto.com/forum/index.php/topic,9728.msg1054517.html#msg1054517
     in handleItem() translate only symbols, and run all macros at the end
+document: {.if|var}
+document: {.for line.}
 document: {.exec|out|timeout|exitcode.}
 document: [+section]
 document: {.set item|diff template.}
+document: {.calc| ][ }
 document: single line diff templates
 document: disconnection reason|if=XXX
 document: %url%
diff --git a/whatsnew.txt b/whatsnew.txt
index eb98c8e..1bc1dae 100644
--- a/whatsnew.txt
+++ b/whatsnew.txt
@@ -12,20 +12,24 @@ propaganda
   Mobile-friendly template
   Unicode support
   Encrypted login, and logout
+  DoS protection
   IPv6
 /propaganda
 + new default template
 + new login system, session based, with logout
 + IPv6 support
++ DoS protection https://rejetto.com/forum/index.php?topic=13060.msg1065962#msg1065962
 + {.set item|name.}
 + {.get item|icon.}
 + {.set cfg.}
 + {.for line.}
 + {.if|var}
 + cache for jquery and template sections
-+ new template commands: base64, base64decode, md5, sha1
++ new template commands: base64, base64decode, md5, sha1, sha256
 + *.diff.tpl in exe's folder
 + default mime-type for mkv
++ 'no list' section flag
++ https client support (not server)
 - fixed template handling of section names with both '+' and '=' present
 - fixed LNK files to deleted items
 - fixed comments files were not updated upon deletion of files