- Jan 18, 2018
-
-
Oliver Hader authored
Composer license definition GPL-2.0+ has been deprecated and has to be replaced with GPL-2.0-or-later. Resolves: #83607 Releases: master, 8.7, 7.6, 6.2 Change-Id: I6113bc3a90cb6a56830b930522dde2eaacd5025e Reviewed-on: https://review.typo3.org/55398 Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
Oliver Hader <oliver.hader@typo3.org> Tested-by:
-
- Jul 19, 2016
-
-
TYPO3 Release Team authored
Change-Id: I0ff6ba2ca39c75c0614b8a3cd2131f63c90570ff Reviewed-on: https://review.typo3.org/49088 Reviewed-by:
TYPO3 Release Team <typo3cms@typo3.org> Tested-by:
-
TYPO3 Release Team authored
Change-Id: I8c21227c688af757b228fc0a328a137f92f39f49 Reviewed-on: https://review.typo3.org/49087 Reviewed-by:
-
Valentin Despa authored
JavaScript can be submitted for every link field and will be rendered in the frontend passed through typolink. To circumvent that, the URI scheme and prefix "data:" will be disallowed. Resolves: #76358 Releases: master,7.6,6.2 Security-Commit: d0eeaa3fe2f0c5736a746c10d4c43aec2bf46174 Security-Bulletins: TYPO3-CORE-SA-2016-014, 015, 016, 017, 018 Change-Id: I822d270c7b11b363af1422ee77ac2a1fce4ff98b Reviewed-on: https://review.typo3.org/49076 Reviewed-by:
-
Wouter Wolters authored
The language label for the refresh login popup contains the username already and is persisted to the filesystem. Use TYPO3.configuration.username and replace it with JavaScript instead to prevent the information disclosure. Resolves: #75933 Releases: master, 7.6, 6.2 Security-Commit: 0e7b21b3f455fef6703656889c43993976a4a6bc Security-Bulletins: TYPO3-CORE-SA-2016-014, 015, 016, 017, 018 Change-Id: Ib37f16bfbe680a863a6bfba7c940028725799dc3 Reviewed-on: https://review.typo3.org/49075 Reviewed-by:
-
Christian Kuhn authored
To mitigate a potential insecure unserialize issue in the core: Disable the import module of extension impexp for non admin users if the module is not explicitely enabled for this user or group. Introduce userTsConfig option options.impexp.enableImportForNonAdminUser Create a hook in page tree context menu to handle the item removal. The v8 series is not directly affected by the underlying security issue, but 7.6 and 6.2 are. Resolves: #73461 Releases: master, 7.6, 6.2 Security-Commit: 3ce6c6e064b3dd67051c573646e28c636937cd86 Security-Bulletins: TYPO3-CORE-SA-2016-014, 015, 016, 017, 018 Change-Id: I2a9db3bd47473092ec9c3e734fffd7fea4ce19b9 Reviewed-on: https://review.typo3.org/49074 Reviewed-by:
-
Nicole Cordes authored
This patch changes a JavaScript function to use text() instead of html() to prevent JavaScript execution. Resolves: #76922 Releases: master, 7.6, 6.2 Security-Commit: 252c2cb492ace6c3605772c280f65873f0c18299 Security-Bulletins: TYPO3-CORE-SA-2016-014, 015, 016, 017, 018 Change-Id: Id22bef4b337b2c8d06e98fba45d59ae83c7c3e35 Reviewed-on: https://review.typo3.org/49073 Reviewed-by:
-
Wouter Wolters authored
The content of the email link is not escaped correctly. This leads to XSS in the EmailViewHelper. Resolves: #76344 Releases: master,7.6,6.2 Security-Commit: da2381aa3b7518a697be7b181d434df3bcd523a4 Security-Bulletins: TYPO3-CORE-SA-2016-014, 015, 016, 017, 018 Change-Id: Idc9efc842a0b2c2be03373624cb4e7dc0d6a565e Reviewed-on: https://review.typo3.org/49072 Reviewed-by:
-
Benni Mack authored
Properly escape various parameters. Resolves: #31244 Releases: master, 7.6, 6.2 Security-Commit: 1efa6adc7b1d332c384779451626e34059e30d8d Security-Bulletins: TYPO3-CORE-SA-2016-014, 015, 016, 017, 018 Change-Id: Ib9776cfa6ff7556d8d8369e0cc9b57a495503ed3 Reviewed-on: https://review.typo3.org/49071 Reviewed-by:
-
Helmut Hummel authored
Resolves: #77152 Releases: 8.2, master Change-Id: I77737be3a9632ad34ab53337eea246c5b2368726 Reviewed-on: https://review.typo3.org/49046 Reviewed-by:
Markus Klein <markus.klein@typo3.org> Reviewed-by:
Wouter Wolters <typo3@wouterwolters.nl> Reviewed-by:
-
Oliver Hader authored
The patch from forge issue #76323 triggers errors at least on some PHP versions. The change is reverted with this patch and an acceptance test is added to verify correct behavior. Resolves: #76919 Related: #76323 Releases: master Change-Id: I2515d3a71c96f3d6e54e04af52bb8cbffbd69d6d Reviewed-on: https://review.typo3.org/48777 Reviewed-by:
Susanne Moog <typo3@susannemoog.de> Tested-by:
Bamboo TYPO3com <info@typo3.com> Reviewed-by:
Helmut Hummel <typo3@helhum.io> Reviewed-by:
-
- Jul 05, 2016
-
-
TYPO3 Release Team authored
Change-Id: I893afe0f8e918fefa3d98a2ba924f25660840416 Reviewed-on: https://review.typo3.org/48801 Reviewed-by:
-
Oliver Hader authored
Resolves: # Releases: master Change-Id: Ibb20b289fdc13b2d05d4ae1d2794f661a564bf0b Reviewed-on: https://review.typo3.org/48800 Reviewed-by:
-
Susanne Moog authored
Change-Id: Ic87fdb39d9cd7ad48c81e4abeb9f27a1aa8f04ad Resolves: # Releases: master Reviewed-on: https://review.typo3.org/48798 Reviewed-by:
Benni Mack <benni@typo3.org> Tested-by:
-
Michael Oehlhof authored
Resolves: # Releases: master Change-Id: Ib98955c5f31dfdcecce94d3f28f3fee13ce829cd Reviewed-on: https://review.typo3.org/48794 Tested-by:
-
- Jul 04, 2016
-
-
Wouter Wolters authored
Resolves: #76786 Releases: master Change-Id: I601bcdc46a9d7c569152857880445bcd8e510c1b Reviewed-on: https://review.typo3.org/48670 Tested-by:
Jigal van Hemert <jigal.van.hemert@typo3.org> Tested-by:
Georg Ringer <georg.ringer@gmail.com> Tested-by:
-
Elmar Hinz authored
Releases: master Resolves: #76833 Change-Id: I5390af8181df2aff83f9810b3e94405875621cac Reviewed-on: https://review.typo3.org/48743 Tested-by:
Joerg Boesche <typo3@joergboesche.de> Tested-by:
-
Elmar Hinz authored
Releases: master Resolves: #76833 Change-Id: I0a6203f67a847a07af5834697f24783459a09e2c Reviewed-on: https://review.typo3.org/48748 Tested-by:
-
Mathias Schreiber authored
Resolves: # Releases: master Change-Id: If090c08345151e4eeb2fadcfd629956d05fc9ec7 Reviewed-on: https://review.typo3.org/48786 Tested-by:
Morton Jonuschat <m.jonuschat@mojocode.de> Reviewed-by:
-
- Jul 03, 2016
-
-
Elmar Hinz authored
Releases: master Resolves: #76839 Resolves: #76840 Resolves: #76841 Change-Id: I92d6f27ed2b7d76a7d193a57eee2ca2a3f8e161a Reviewed-on: https://review.typo3.org/48747 Tested-by:
-
- Jul 02, 2016
-
-
Wouter Wolters authored
Explode current showitem and check if new field is already available instead of using a wrong strpos check. Resolves: #73490 Releases: master,7.6,6.2 Change-Id: If0269a1ee783ec8468ac3f7df915b671f17312ff Reviewed-on: https://review.typo3.org/48663 Tested-by:
-
- Jul 01, 2016
-
-
Andreas Fernandez authored
This patch fixes the IN statement used for fetching the webmounts. Previously, the statement looked like `IN("1,2,3")`, resulting in only returning the last one. Resolves: #76861 Related: #75546 Releases: master Change-Id: I02204f5469d996e8ea967485737496b32a343231 Reviewed-on: https://review.typo3.org/48774 Tested-by:Daniel Goerz <ervaude@gmail.com> Tested-by:
-
Helmut Hummel authored
Since Github removed the API limit for non authenticated requests to get an archive link, we can safely remove the token without loosing the benefit of faster composer builds. Resolves: #76889 Releases: 7.6, master Change-Id: I6cffcc3bf17915ac3d4d99dcaafa9be3406ff5bc Reviewed-on: https://review.typo3.org/48750 Reviewed-by:
Steffen Müller <typo3@t3node.com> Tested-by:
Nicole Cordes <typo3@cordes.co> Tested-by:
-
Andreas Fernandez authored
Due to event juggling, setting the dirty state of a form does not work for the first changed element. Because of this, the form is checked for changes if a user clicks on the close button. The original behavior was introdced with commit 003f9903 which is reverted with this patch. Resolves: #76893 Related: #45348 Releases: master Change-Id: I45c2b05e096a2e7c18b8ce0aa584fc508f52ebdb Reviewed-on: https://review.typo3.org/48752 Tested-by:
Michael Oehlhof <typo3@oehlhof.de> Tested-by:
Riccardo De Contardi <erredeco@gmail.com> Reviewed-by:
-
Christian Kuhn authored
Xcache does not support PHP 7 and there seems to be little interest in making it compatible. For a server local memory cache backend apcu can be used as alternative. The patch drops the xcache cache backend in master since it doesn't work anyway. Change-Id: I850e58889520aa394b427fb9c52efdbed72758c4 Resolves: #76802 Releases: master Reviewed-on: https://review.typo3.org/48694 Tested-by:
-
- Jun 30, 2016
-
-
Eric Chavaillaz authored
Resolves: #76881 Releases: master, 7.6, 6.2 Change-Id: I168cc72209c9a61c3101cb2aeeb52d7344231029 Reviewed-on: https://review.typo3.org/48738 Tested-by:
Oliver Klee <typo3-coding@oliverklee.de> Reviewed-by:
Andreas Fernandez <typo3@scripting-base.de> Tested-by:
-
Helmut Hummel authored
If methods do not end with tag values (arguments or return statement) the doc comment parser returned a slash as last line, which is now stripped off. Resolves: #76815 Releases: master, 7.6 Change-Id: I15d52104c190fbbf1e4ee5146595810f961ca3c7 Reviewed-on: https://review.typo3.org/48700 Reviewed-by:
-
Christian Kuhn authored
Field module in table pages "Contains plugin" is very limited in size and module names are easily cut off. It seems there is no technical reason for this limitation, extend it. Change-Id: Ie1a6d1e1e9b0059286d125f29852381e9ad0bd74 Releases: master, 7.6 Resolves: #76886 Reviewed-on: https://review.typo3.org/48739 Reviewed-by:
-
- Jun 29, 2016
-
-
Christian Kuhn authored
When the apcu backend was introduced unit tests were missing. The patch adds tests similar to the apc tests. Change-Id: I969b3ebc4745c93e9bc301774ff0fbb07faed92f Resolves: #76808 Related: #63291 Releases: master Reviewed-on: https://review.typo3.org/48695 Tested-by:
-
Elmar Hinz authored
Releases: master Resolves: #76826 Change-Id: I8baf36a2d4d4c3cd175c0973c2db647aee0da334 Reviewed-on: https://review.typo3.org/48705 Tested-by:
-
Elmar Hinz authored
- Show that stdWrap_cropHTML delegates to cropHTML. - Merge two unit tests for croptHTML into the new test cropHTML. Releases: master Resolves: #76827 Change-Id: Iacd94e7c2b27b4a85982d1848d8c5f65feebb252 Reviewed-on: https://review.typo3.org/48706 Reviewed-by:
-
Elmar Hinz authored
- Change old unit test to cover the method substring instead. - Show that stdWrap_substring delegates to substring. Resolves: #76783 Releases: master Change-Id: I1b7b0ff8707955e029c43ac6e92addace90d9e42 Reviewed-on: https://review.typo3.org/48703 Tested-by:
-
Elmar Hinz authored
Releases: master Resolves: #76829 Change-Id: Ia8279dd2be465f508b111764738f254eced516c1 Reviewed-on: https://review.typo3.org/48708 Tested-by:
-
Elmar Hinz authored
Releases: master Resolves: #76294 Change-Id: Ie85f618fda88b418e844c863915fc8338ea0ab8b Reviewed-on: https://review.typo3.org/48709 Tested-by:
-
Elmar Hinz authored
Releases: master Resolves: #76828 Change-Id: I05587e429be2f94c15f562d0df7aa8f88da57a2e Reviewed-on: https://review.typo3.org/48707 Tested-by:
-
Elmar Hinz authored
Resolves: #76782 Releases: master Change-Id: Ic594498a8aba1d6b248db4ca9441e143f1d5841b Reviewed-on: https://review.typo3.org/48702 Tested-by:
-
Andreas Häfner authored
Options are now checked for missing values and empty values are inserted instead. In rebuild process RADIOGROUP and CHECKBOXGROUP for every listed option a single RADIO/CHECKBOX element is created by its xtype-configuration. These elements rely on a passed value attribute. To prevent errors, triggered by missing value attributes, a check for existence of the attribute was introduced. In case of missing value, now an empty value is used. This change only influences the display process of the wizard. Generation of Form-Configuration is not changed. Resolves: #76019 Releases: master, 7.6 Change-Id: I3f459be2bec92c9eac20fd45a7453dbe6e28f758 Reviewed-on: https://review.typo3.org/48591 Reviewed-by:
Bjoern Jacob <bjoern.jacob@tritum.de> Tested-by:
-
Elmar Hinz authored
Resolves: #76780 Releases: master Change-Id: Ie41897d4ac2ab62577dd059e5a43844577691f62 Reviewed-on: https://review.typo3.org/48701 Tested-by:
-
- Jun 28, 2016
-
-
Jorgen van der Kroon authored
With the changes of the new formEngine the names of forms and elements must be adjusted to make the Page TSconfig options RTE.classesAnchor.[id].titleText work again. Resolves: #75804 Releases: master, 7.6 Change-Id: I92b2c6d0dcb959834db3bb8868beab55b627abac Reviewed-on: https://review.typo3.org/48693 Tested-by:
-
Elmar Hinz authored
Apply class aliases to improve the readability of the test class. Change-Id: Ibf5beed7ac93b173b6d88e565f508e0c8ffa9169 Resolves: #76810 Releases: master Reviewed-on: https://review.typo3.org/48697 Tested-by:
-
