- Jan 18, 2018
-
-
Oliver Hader authored
Composer license definition GPL-2.0+ has been deprecated and has to be replaced with GPL-2.0-or-later. Resolves: #83607 Releases: master, 8.7, 7.6, 6.2 Change-Id: I6113bc3a90cb6a56830b930522dde2eaacd5025e Reviewed-on: https://review.typo3.org/55393 Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
Oliver Hader <oliver.hader@typo3.org> Tested-by:
-
- Jan 12, 2015
-
-
Alexander Stehlik authored
The comma seperated list of PIDs is not wrapped in quotes any more to allow more than one page to be searched in. Additionally invalid SQL queries with an empty IN parameter are prevented by avoiding any query if the PID list is empty and the user is locked to DB mounts. Resolves: #64169 Releases: master, 6.2 Change-Id: I3cf35a900ea84a5f7110e8b262f7aaccb27f3267 Reviewed-on: http://review.typo3.org/35864 Reviewed-by:
Markus Klein <klein.t3@reelworx.at> Reviewed-by:
Stanislas Rolland <typo3@sjbr.ca> Tested-by:
-
- Dec 18, 2014
-
-
Stanislas Rolland authored
Wrong wizard name is used. Releases: master, 7.0 Resolves: #63938 Change-Id: If8ce8a6efb7ef6b96cc2ce904ab0eb8953492f07 Reviewed-on: http://review.typo3.org/35568 Reviewed-by:
-
- Dec 10, 2014
-
-
TYPO3 Release Team authored
Change-Id: I23bb4c6fef0959e6d4d303fed5b8684a2036713a Reviewed-on: http://review.typo3.org/35235 Reviewed-by:
TYPO3 Release Team <typo3v4@typo3.org> Tested-by:
-
TYPO3 Release Team authored
Change-Id: I899975430bd1ab88fcbd92bc736464bda0ad722a Reviewed-on: http://review.typo3.org/35234 Reviewed-by:
-
Helmut Hummel authored
Specially crafted request could lead to anchors prefixed with URLs to domains controlled by the attacker on the domain root page (home page). No other pages are affected! Fix this by prefixing the anchors with a canonical URL to the current request. This could lead to the situation that the prefix does not match the current REQUEST_URI which leads to a page reload instead of just "jumping" to the page section. Additionally this change assures that REQUEST_URI always starts with a slash, which mitigates similar attack vectors when using getIndpEnv('REQUEST_URI') To mitigate the impact of this breaking change, the REQUEST_URI is used for anchor prefix if a backend user is logged in, to not disturb the preview functionality of the home page. In case prefixLocalAnchors is used in the HTML parser configuration with prefixLocalAnchors = 2, always the canonical URL is used as prefix. This change does *not* fix, that arbitrary (non functional) GET parameters will be included in the generated prefix URL. To fix this it is recommended to use absRefPrefix instead of baseUrl and prefixLocalAnchors. Resolves: #62723 Releases: 4.5, 6.2, 7.0, master Security-Commit: 2c5092fe3f2a4fc9a97a17a3ed9dcc5314bf64e2 Security-Bulletin: TYPO3-CORE-SA-2014-003 Change-Id: Icf989abdbab8720be13b2fda0a6d088f100e3aa7 Reviewed-on: http://review.typo3.org/35233 Reviewed-by: -
TYPO3 Release Team authored
Change-Id: I3177eaa28d95407f69a82da2ba74d47cb69c6379 Reviewed-on: http://review.typo3.org/35226 Reviewed-by:
-
TYPO3 Release Team authored
Change-Id: I16dfdfd41515547cad9e00ef274b1ae74adbdb45 Reviewed-on: http://review.typo3.org/35225 Reviewed-by:
-
- Dec 02, 2014
-
-
TYPO3 Release Team authored
Change-Id: I36cd3dcbf167dd3565c8be18417305ba4cd8d97a Reviewed-on: http://review.typo3.org/34956 Reviewed-by:
-
TYPO3 Release Team authored
Change-Id: I4f8846d79f0508e4fa244325d0a727cd2307a448 Reviewed-on: http://review.typo3.org/34955 Reviewed-by:
-
Markus Klein authored
Resolves: #63531 Releases: master Change-Id: Iba8e8b148915b73a14aa1bc74ee6ce460d64de03 Reviewed-on: http://review.typo3.org/34954 Reviewed-by:
Andreas Fernandez <a.fernandez@scripting-base.de> Tested-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Tested-by:
-
Andreas Fernandez authored
Due to DataTable update, the clearable part did not work. This patch corrects this issue. Resolves: #63530 Releases: master Change-Id: I3855cd99c53b798482cc570ad398de4c480e82bf Reviewed-on: http://review.typo3.org/34953 Reviewed-by:
Wouter Wolters <typo3@wouterwolters.nl> Tested-by:
Jigal van Hemert <jigal.van.hemert@typo3.org> Tested-by:
-
Oliver Hader authored
This reverts commit 4d2c5475. Change-Id: I1375a77d97001a3dab3ef9efc6cec971efedad9f Reviewed-on: http://review.typo3.org/34952 Reviewed-by:
-
Oliver Hader authored
This reverts commit 485830b9. Change-Id: I74e71ad4a51a9b0036db6f23436b66872749ab28 Reviewed-on: http://review.typo3.org/34951 Reviewed-by:
-
TYPO3 Release Team authored
Change-Id: I7aa85af5ab56c91e9d313732e093b6f0b92eb78e Reviewed-on: http://review.typo3.org/34950 Reviewed-by:
-
TYPO3 Release Team authored
Change-Id: I9192fd0a465d63f9d52b3794182be2bc28c9b5c6 Reviewed-on: http://review.typo3.org/34949 Reviewed-by:
-
Oliver Hader authored
Scenario: * upgrading from Introcuction Package with TYPO3 CMS 6.2 to TYPO3 CMS 7 * realurl is marked as incompatible extension to be uninstalled * realurl is a dependency of bootstrap_package which itself is dependency of introduction Result: * resolving the dependencies does not work and thus the uninstall process for realurl fails as well Solution: * check whether extension to be removed is a dependency of some other extension * if so, first remove that extension and afterwards to original extension Resolves: #63526 Releases: master Change-Id: Ie2bbfc1d46f338c42d557ec6d103b7766317cf75 Reviewed-on: http://review.typo3.org/34946 Reviewed-by:
-
Benjamin Mack authored
When redirecting to the distributions modulefunction after the first login, it does not work, as the backend only redirects to the module itself, but does not add parameters to the module loading instance. The patch makes sure that the startModule also adds the second parameter. For review, have a look at BackendController->setStartupModule and EXT:install/Action/Step/DefaultConfiguration (look for startModuleOnFirstLogin) to understand the logic. Releases: master Resolves: #63521 Change-Id: I4280717556b097ddd242e45fe42803b74814eb47 Reviewed-on: http://review.typo3.org/34944 Reviewed-by:
-
Markus Klein authored
The checkExtensionsCompatibility() function is not global anymore. Resolves: #63518 Releases: master Change-Id: Ie25311b3057c8a7ee988cedce3404dca82af893a Reviewed-on: http://review.typo3.org/34941 Reviewed-by:
Christoph Hofmann <typo3@its-hofmann.de> Tested-by:
-
Benjamin Kott authored
If the list module is not enabled for the user the dropdown would not stay within the viewport. Resolves: #63508 Releases: master Change-Id: I43099e8f7679cdb8a0780d05e880ecdaa638d879 Reviewed-on: http://review.typo3.org/34927 Reviewed-by:
-
Markus Klein authored
Regression to #61361. There's no reason to require ucfirst file names for Layouts and Partials. Change-Id: I9402af9120440d9460eec5290b81acda7db0c1cc Resolves: #63367 Releases: 6.2, master Reviewed-on: http://review.typo3.org/34920 Reviewed-by:
Alexander Opitz <opitz.alexander@googlemail.com> Reviewed-by:
-
Wouter Wolters authored
Fix a JS error if switching workspaces in toolbar item if a backend module without pagetree is currently shown. Resolves: #63492 Releases: master Change-Id: I65cbc4979bad4b0b3dcee94b72ffdebc9d8b9aff Reviewed-on: http://review.typo3.org/34889 Reviewed-by:
Stefan Neufeind <typo3.neufeind@speedpartner.de> Reviewed-by:
-
Mathias Schreiber authored
Fix some styling issues of the ExtJS wizard in EXT:form Resolves: #63473 Releases: master Change-Id: I1f56c8c72883b6fd390f4d1d69290c3784d58539 Reviewed-on: http://review.typo3.org/34841 Reviewed-by:
Helmut Hummel <helmut.hummel@typo3.org> Tested-by:
-
Steffen Müller authored
Direct file uploads for FAL fields can be disabled with ...['appearance']['fileUploadAllowed'] = FALSE Resolves: #63286 Releases: master, 6.2 Change-Id: I8fd6bd7ab385ba8acc4c7d18fb38507dc8689dbc Reviewed-on: http://review.typo3.org/34535 Reviewed-by:
Steffen Müller <typo3@t3node.com> Tested-by:
-
Andreas Fernandez authored
In change If564b1797a81ce63730ebf2601cc62058940493c, DataTables was updated to the latest version. The interal API has changed, the property name for sorting was renamed in the new version. Resolves: #63500 Related: #63479 Releases: master Change-Id: Ica273c34fa79dae7ef1341ac0b04c0ce623d5a6d Reviewed-on: http://review.typo3.org/34904 Reviewed-by:
Mathias Schreiber <mathias.schreiber@wmdb.de> Tested-by:
-
Xavier Perseguers authored
When using EXT:sphinx, the interactive JSON view should take the place of the always empty SXW view action. Resolves: #63445 Related: #63430 Releases: master Change-Id: Ib7f3488ebffb0cc6e6fd5cc0c6c0068c85e0abee Reviewed-on: http://review.typo3.org/34809 Reviewed-by:
Frank Nägler <typo3@naegler.net> Tested-by:
Xavier Perseguers <xavier@typo3.org> Reviewed-by:
-
Stefan Neufeind authored
(part for EXT:fluid) Use name-resolution with ...::class instead of strings where possible. (needs PHP 5.5, which is meanwhile required for master) Change-set Iedbb896607adddce2b23ab67f990fa2296c0d1bb first introduced usage of ::class in master. We now add it in various more places. Change-Id: Ie7d0334957047876cdf566113c0a6b84f6994e38 Resolves: #63477 Releases: master Reviewed-on: http://review.typo3.org/34857 Reviewed-by:
-
Stefan Neufeind authored
(part for EXT:extbase) Use name-resolution with ...::class instead of strings where possible. (needs PHP 5.5, which is meanwhile required for master) Change-set Iedbb896607adddce2b23ab67f990fa2296c0d1bb first introduced usage of ::class in master. We now add it in various more places. Change-Id: I7ead29b6dd71240c4a05a4bf9b1c501e6a513019 Resolves: #63477 Releases: master Reviewed-on: http://review.typo3.org/34856 Reviewed-by:
-
Stefan Neufeind authored
Use DataTables instead of dataTables to access the API. Also switch to the new API. https://datatables.net/reference/api/ Followup to change-id If564b1797a81ce63730ebf2601cc62058940493c Change-Id: I81e2024f5a7d4032cfa65def91699bf9cbdd2982 Resolves: #63479 Releases: master Reviewed-on: http://review.typo3.org/34897 Reviewed-by:
-
Stefan Neufeind authored
(part for EXT:core) Use name-resolution with ...::class instead of strings where possible. (needs PHP 5.5, which is meanwhile required for master) Change-set Iedbb896607adddce2b23ab67f990fa2296c0d1bb first introduced usage of ::class in master. We now add it in various more places. Change-Id: I9f75521db330b1c3282c221a7ae2257fbf3557f7 Resolves: #63477 Releases: master Reviewed-on: http://review.typo3.org/34855 Reviewed-by:
-
- Dec 01, 2014
-
-
Stefan Neufeind authored
(part for EXT:compatibility6) Use name-resolution with ...::class instead of strings where possible. (needs PHP 5.5, which is meanwhile required for master) Change-set Iedbb896607adddce2b23ab67f990fa2296c0d1bb first introduced usage of ::class in master. We now add it in various more places. Change-Id: I666e586749d6f4526bd780bdb210e58e57827d71 Resolves: #63477 Releases: master Reviewed-on: http://review.typo3.org/34849 Reviewed-by:
-
Wouter Wolters authored
In 1.10 version the parameter names need to be converted to their new names. See http://datatables.net/upgrade/1.10-convert fnCookieCallback is removed without substiution. Therefore removed in this patch. Resolves: #63479 Releases: master Change-Id: If564b1797a81ce63730ebf2601cc62058940493c Reviewed-on: http://review.typo3.org/34893 Reviewed-by:
-
Felix Kopp authored
Change the color of the icon to dark instead of white to make it visible again. Fixes regression in row-header icon color from I4d189857c2fd884e19479a5d702671bdc0e2b3da Resolves: #63472 Related: #63468 Releases: master Change-Id: Iaeac45e3594fd4f3fa6c17c80146b4d070600c5e Reviewed-on: http://review.typo3.org/34840 Reviewed-by:
Georg Ringer <georg.ringer@gmail.com> Tested-by:
Benjamin Kott <info@bk2k.info> Tested-by:
-
Georg Ringer authored
The sys_action items need a restyling. Resolves: #63480 Releases: master Change-Id: I8b0c52924e9291eb3520c76b19be86ebba1f1ddd Reviewed-on: http://review.typo3.org/34865 Reviewed-by:
-
Benjamin Kott authored
* Add sitename to topbar * Remove TYPO3 name from topbar shape * Align TYPO3 logo with module navigation * Adjust livesearch styling * Adjust help menu * Adjust user menu * Adjust workspace menu * Adjust clear cache menu * Adjust open docs menu * Adjust bookmarks menu * Add workspace highlight corresponding to the icon color * Remove duplicated css for app-icon in module menu * Refactor topbar Resolves: #63158 Resolves: #63160 Resolves: #63161 Releases: master Change-Id: I5e34b41c0317e2720291503d97954481abb0356d Reviewed-on: http://review.typo3.org/34776 Reviewed-by:
Felix Kopp <felix-source@phorax.com> Tested-by:
-
Georg Ringer authored
Change the color of the icon to dark instead of white to make it visible again. Resolves: #63468 Releases: master Change-Id: I4d189857c2fd884e19479a5d702671bdc0e2b3da Reviewed-on: http://review.typo3.org/34831 Reviewed-by:
-
- Nov 30, 2014
-
-
Helmut Hummel authored
Previously the FileMetadataOverlayAspect only did a version/ workspace overlay for translated metadata records, which meant that changes to default language meta data records did not show up during preview. Fix this by properly overlaying also the default language record. Resolves: #62986 Releases: 6.2, master Change-Id: I5b7b0f9ab20d5539107b6fd2e2872a8bd4003454 Reviewed-on: http://review.typo3.org/34208 Reviewed-by:
Alex Kellner <alexander.kellner@einpraegsam.net> Tested-by:
-
Mathias Schreiber authored
Wrong view helper notation lead to it not being rendered. Additionally flash message enqueue is used with a string instead of a flash message object, which lead to a PHP fatal error. * Fix the vh notation * Use addFlashMessage() to add the flash message * Make the message translatable Resolves: #63439 Releases: master Change-Id: Iddbc39ba0fd55d2ee0ac8610e9c8b8b96b614633 Reviewed-on: http://review.typo3.org/34799 Reviewed-by:
-
Wouter Wolters authored
Resolves: #63467 Releases: master Change-Id: Iab64ea6935d06248f15fe6fb41a23bd1bab92cd7 Reviewed-on: http://review.typo3.org/34830 Reviewed-by:
-
Christoph Hofmann authored
Correct resizing of the table in recycler and workspaces backend view. Resolves: #63225 Resolves: #63212 Releases: master Change-Id: I28b9660b5b4ba8ba085d878d4059eea464b7411e Reviewed-on: http://review.typo3.org/34649 Reviewed-by:
-
