- Feb 26, 2016
-
-
Michael Oehlhof authored
Call of FlashMessage->render() was replaced with appropriate code if getTask * the action is not found * the action had no type defined viewNewBackendUser * the action configuration is not finished * the user has been created viewSqlQuery * query is empty (not built) * query is not configured * required sysext lowlevel is not installed viewRecordList * the action configuration is not finished * not enough rights to access the list view or the page Resolves: #73587 Releases: master, 7.6 Change-Id: I9140d337cc52d1be7974771d3929f727266a9cc6 Reviewed-on: https://review.typo3.org/46797 Reviewed-by:
Wouter Wolters <typo3@wouterwolters.nl> Reviewed-by:
Frank Naegler <frank.naegler@typo3.org> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
-
Michael Oehlhof authored
Deprecate no longer used method BackendUtility::getFlashMessageForMissingFile Resolves: #73585 Releases: master Change-Id: I680b5d5b82b1b293d20b0738903ba2e16405c38a Reviewed-on: https://review.typo3.org/46796 Reviewed-by:
Christian Brinkert <christian.brinkert@googlemail.com> Tested-by:
Morton Jonuschat <m.jonuschat@mojocode.de> Tested-by:
-
Michael Oehlhof authored
Replace calls to deprecated method render() and to the function getFlashMessageForMissingFile() with appropriate html code. Resolves: #72508 Releases: master, 7.6 Change-Id: I90846f8349726e88dfa6aa77ab595fe28280e81b Reviewed-on: https://review.typo3.org/45554 Reviewed-by:
-
Alexander Opitz authored
As we are only supporting PHP 7.0, we can remove the security check for older PHP versions. The header() function do not support multi line headers any more. Resolves: #73700 Related: #58816 Releases: master Change-Id: I0f3e8f013111fc062058428388749f9f6450ff48 Reviewed-on: https://review.typo3.org/46911 Reviewed-by:
Markus Klein <markus.klein@typo3.org> Tested-by:
-
Oliver Hader authored
Issue #17643 introduced logging for a simulated backend user (switch-user) and thus logs by using the original admin user. This is a regression in PageLayoutController::renderQuickEdit since the used backend user id is different to the persisted one. Besides that, all actions are performed with the permissions of the simulated user - thus, logging with a different user seems to wrong. The sys_log.log_data field (array) is used to transport the information of the original (admin) user. This change reverts the initial change of issue #17643 and adds the initial intention of that issue as addition to the persisted data in sys_log.log_data. All affected components are adjusted as well to visualize that a user has been simulated (log view, record history and lowlevel_cleaner syslog command). Resolves: #71580 Releases: master, 7.6 Change-Id: If12df60563afd1f0746d43e62f824b20f139df8c Reviewed-on: https://review.typo3.org/45490 Reviewed-by:
-
Michael Oehlhof authored
Call of FlashMessage->render() when configuring a task with the class "File Abstraction Layer: Extract metadata in storage" for the "Registered extractors" was replaced with appropriate code. Resolves: #73685 Releases: master, 7.6 Change-Id: I1265ad845c2e951c9a5a242f74fa336a26645a88 Reviewed-on: https://review.typo3.org/46900 Reviewed-by:
-
Alexander Opitz authored
Xcache do not support PHP7 and WinCache removed opcode cache handling in first PHP7 compatible version. So we can remove this support. Resolves: #72415 Releases: master Change-Id: I1f5e855e94ca8e7a941425113d1473180abe5ed0 Reviewed-on: https://review.typo3.org/46898 Reviewed-by:
-
Michael Oehlhof authored
Call of FlashMessage->render() was replaced with appropriate code if a temporary mount point is set in DatabaseBrowser and PageLinkHandler. Resolves: #73661 Releases: master, 7.6 Change-Id: If11b9b1a6447807ff9e567b2288c198fa0eea961 Reviewed-on: https://review.typo3.org/46884 Reviewed-by:
-
Daniel Goerz authored
Change-Id: Ieba334b767e25c586b78dfcbe48ee1e56742596c Resolves: #73615 Releases: master, 7.6 Reviewed-on: https://review.typo3.org/46824 Reviewed-by:
Ralf Merz <info@merzilla.de> Reviewed-by:
Michael Oehlhof <typo3@oehlhof.de> Tested-by:
-
Roland Golla authored
Adds a test to login and logout an admin and an editor user. Resolves: #73448 Releases: master Change-Id: I8f7657a569230f910c58610095691b59fa45346b Reviewed-on: https://review.typo3.org/46689 Reviewed-by:
-
Christian Kuhn authored
codeception creates fine output in case something goes wrong, it looks as if we can throw away selenium and php server output to console for now to have a better overview in travis again. Change-Id: Idbc9f257fdbb41a6bb7d12c756cea5c7679852dc Resolves: #73681 Releases: master Reviewed-on: https://review.typo3.org/46899 Reviewed-by:
Mathias Brodala <mbrodala@pagemachine.de> Tested-by:
-
Franz Kugelmann authored
When pageIdSelector is configured to be enabled, a new key is added to $fieldDefinitions. But it has no effect as long as this key is not set additionally in $this->linkAttributes. This patch adds this missing piece. Resolves: #73090 Releases: master, 7.6 Change-Id: I86f83bc3292144e06c7fcc179469c715c80dcb16 Reviewed-on: https://review.typo3.org/46460 Reviewed-by:
Benni Mack <benni@typo3.org> Tested-by:
-
Gianluigi Martino authored
Add rel="next" and rel="prev" to pagination for SEO optimization Change-Id: Ia206b87042418f5bbe6de9a736753e9f9536ead6 Resolves: #73589 Releases: master Reviewed-on: https://review.typo3.org/46843 Reviewed-by:
-
- Feb 25, 2016
-
-
Andreas Fernandez authored
The method `setColumn` in the backend layout wizard sanitizes the value by wrapping it into a <p> tag and fetching its text which strips off any HTML. This returns a string. However, the code later checks after performing a save action whether the value is a number. The value gets converted to a number in `setColumn` to recover the functionality. Change-Id: I686657e170668adf71f278fa537aa5510e3e2241 Resolves: #73656 Releases: master Reviewed-on: https://review.typo3.org/46880 Reviewed-by:
-
Christian Kuhn authored
Code snippets dedicated to PHP smaller than version 7 can be removed after requirement has been raised. Change-Id: Id04dca218e5d12c3e6d7d2a68fa8f88a812ccf0c Resolves: #73674 Releases: master Reviewed-on: https://review.typo3.org/46895 Reviewed-by:
Alexander Opitz <opitz.alexander@googlemail.com> Tested-by:
Andreas Fernandez <typo3@scripting-base.de> Reviewed-by:
-
Benni Mack authored
Resolves: #73679 Releases: master Change-Id: Id1203471ce44dcce86777abcb5c9b444df934a49 Reviewed-on: https://review.typo3.org/46897 Reviewed-by:
-
Christian Kuhn authored
TYPO3 CMS 8 requires at least PHP 7.0 Change-Id: I9fad64c48270a4ac1122fb28f52da5579d46e629 Resolves: #73655 Releases: master Reviewed-on: https://review.typo3.org/46878 Reviewed-by:
Mathias Schreiber <mathias.schreiber@wmdb.de> Tested-by:
-
Markus Klein authored
Fix a copy&paste error in the javascript to set the selected class on the image. Resolves: #73657 Releases: master, 7.6 Change-Id: I8b7e3580185221f98d16c8fd48fe9f9fc21cfd52 Reviewed-on: https://review.typo3.org/46882 Reviewed-by:
Harald <eisner.harald@online.de> Tested-by:
-
Oliver Hader authored
The workspace preview in the frontend shows the buttons to the previous and next stage if the user is not responsible for the current stage. Clicking the button does not forward the records to the names stage however - this is caught by DataHandlerHook in EXT:version. Resolves: #73243 Releases: master, 7.6, 6.2 Change-Id: I233629cb393d5786048ab7ead39cd3316780b488 Reviewed-on: https://review.typo3.org/46596 Reviewed-by:
Georg Ringer <georg.ringer@gmail.com> Tested-by:
Oliver Hader <oliver.hader@typo3.org> Tested-by:
-
Markus Klein authored
Resolves: #73662 Releases: master, 7.6 Change-Id: I46561ecfa2186c1b065acbffe154f375b823e839 Reviewed-on: https://review.typo3.org/46885 Reviewed-by:
-
- Feb 24, 2016
-
-
Frank Naegler authored
Resolves: #73652 Related: #73044 Releases: master Change-Id: Iaeecf307b00bc67c2a8a598cc45d21aa95771a53 Reviewed-on: https://review.typo3.org/46877 Reviewed-by:
-
Wouter Wolters authored
Resolves: #73558 Releases: master, 7.6 Change-Id: Iaf7bdf486a0b0229233181cca8b4c7ef68bf9bbc Reviewed-on: https://review.typo3.org/46851 Reviewed-by:
Daniel Goerz <ervaude@gmail.com> Reviewed-by:
-
Gianluigi Martino authored
Only show cut icons when the user has write-permissions on the specific record. Change-Id: I0d5a1153faf448f9c1c6c0948f2cdf8f78cab8f6 Resolves: #73564, #73472 Releases: master, 7.6 Reviewed-on: https://review.typo3.org/46774 Reviewed-by:
Peter Kraume <peter.kraume@gmx.de> Tested-by:
-
Roland Golla authored
Test backend login with bad credentials and verify an error message is rendered. Resolves: #73213 Releases: master Change-Id: Ic97b9a95d5d8060e2f05b89a9fc2a273ad713c05 Reviewed-on: https://review.typo3.org/46624 Reviewed-by:
-
Michael Oehlhof authored
Call of FlashMessage->render() was replaced with appropriate code if *CType 'list' list_type has invalid value *CType not defined Resolves: #73638 Releases: master, 7.6 Change-Id: Ic6342e8eae8bace4d855d6471dd2ccefd339efc1 Reviewed-on: https://review.typo3.org/46867 Reviewed-by:
-
Christian Kuhn authored
To successfully run acceptance tests we need to create a "controlled environment" that is separated from any existing core environment. A standalone instance is created that has its own set of loaded extensions, an own database and an own web path. The patch refactors and simplifies the existing set up code of unit and functional test environments to be better reusable to achieve this. Change-Id: I6c4a818fa82d2723075888ad8a60b30acb5ed30e Resolves: #68113 Releases: master Reviewed-on: https://review.typo3.org/46727 Reviewed-by:
-
Benni Mack authored
When the file upload controller is called (which is almost impossible to call these days) and no return URL is given (which is again almost impossible), then the URL is invalid. The patch uses the proper getModuleUrl() call which is sufficient. Resolves: #73506 Releases: master, 7.6 Change-Id: I49830e84cb10c14ccb84ea932927898899e58e70 Reviewed-on: https://review.typo3.org/46729 Reviewed-by:
-
Benni Mack authored
A Frontend request could previously be called with index.php?id=[id] or just index.php?[id]. The support for calling pages through the syntax of index.php?[id] was removed, along with the method $TSFE->setIDfromArgV. Resolves: #73602 Releases: master Change-Id: Ic0f0131e15e72281ab8324785c42c3887deed5cb Reviewed-on: https://review.typo3.org/46812 Reviewed-by:
-
Frank Naegler authored
Add a runtime cache for icons and remove the calls to getDeprecationSettings. Resolves: #73606 Releases: master Change-Id: I28fe3721db105cbd41c8beb45afc36903e3f945f Reviewed-on: https://review.typo3.org/46808 Reviewed-by:
-
- Feb 23, 2016
-
-
Michael Oehlhof authored
Clipboard: Use new modal confirmation dialog for the menu item "Delete Elements" Resolves: #72350 Releases: master, 7.6 Change-Id: Icb4a9c428802af4bc09152010b264c1c02b2eb74 Reviewed-on: https://review.typo3.org/45997 Reviewed-by:
-
Wouter Wolters authored
Resolves: #73627 Releases: master Change-Id: I017c97bf415b630d183d91086ae17e66295e6a1b Reviewed-on: https://review.typo3.org/46849 Reviewed-by:
-
Michael Oehlhof authored
Call of FlashMessage->render() if the task object is not valid was replaced with appropriate code. Resolves: #73427 Releases: master, 7.6 Change-Id: I2f21e46814d369519756f35b27ee7b546a6b6938 Reviewed-on: https://review.typo3.org/46658 Reviewed-by:
-
Wouter Wolters authored
Resolves: #73464 Releases: master,7.6 Change-Id: Ibe2579552703c30eda2e22c8ef6caf738da18265 Reviewed-on: https://review.typo3.org/46856 Reviewed-by:
-
Wouter Wolters authored
The module has been merged into EXT:about Resolves: #73633 Releases: master Change-Id: I931113ee7ca7454c2a5fd6d8a1e83b5dabed08cc Reviewed-on: https://review.typo3.org/46850 Reviewed-by:
-
Stephan Großberndt authored
Fix documentation in extensionmanager pointing to outdated classnames. Releases: master, 7.6 Resolves: #73636 Change-Id: Idfd277cde8674dc7a6fae7eb7786150a941ad0ba Reviewed-on: https://review.typo3.org/46858 Reviewed-by:
Nicole Cordes <typo3@cordes.co> Tested-by:
-
Wouter Wolters authored
In the Extension model from the extension manager the variable type of $dependencies is wrong. This should be \TYPO3\CMS\Extensionmanager\Domain\Model\Dependency instead of Tx_Extensionmanager_Utility_Dependency. Resolves: #73624 Releases: master, 7.6 Change-Id: Ibbdd9933ff6c312ad7759574be425b4e57eb1f04 Reviewed-on: https://review.typo3.org/46848 Reviewed-by:
Stephan Großberndt <stephan@grossberndt.de> Reviewed-by:
-
Wouter Wolters authored
Resolves: #73529 Releases: master, 7.6 Change-Id: Id4f6558b1130bcff8e70f1f0e0dfe38645d33c7f Reviewed-on: https://review.typo3.org/46852 Reviewed-by:
-
Benni Mack authored
Indexed Search allows to show up to 100.000 entries per page by configuring the paging entry via a GET/POST variable, leading to a possible DoS attack. The max limit is set to 100 entries per page, as a reasonable limit for the website search results. Resolves: #73458 Releases: master, 7.6, 6.2 Security-Commit: ea0c1c4377b1111e4a822981a6a948b96dc0215f Security-Bulletins: TYPO3-CORE-SA-2016-005, 006, 007, 008 Change-Id: I7d2ff1c3ba388a9bfc0be0cd905a8e24a14f13d8 Reviewed-on: https://review.typo3.org/46836 Reviewed-by:
-
Georg Ringer authored
Escape the value of the field CType in tt_content.default. Resolves: #73450 Releases: master, 7.6, 6.2 Security-Commit: fa4f42b5e20e08fa154be29de867e1c01d4f7e1c Security-Bulletins: TYPO3-CORE-SA-2016-005, 006, 007, 008 Change-Id: Iaa185caac5e08d3ba03121b45edca2fd98afa741 Reviewed-on: https://review.typo3.org/46835 Reviewed-by:
-
Benni Mack authored
Remote XML entites can be loaded in places where TYPO3 expects only local files to be fetched. All places are changed so the option to load entities is disabled. Resolves: #61269 Releases: master, 7.6, 6.2 Security-Commit: 736a7ef0823893047843c6a7f5e72b220bfd4697 Security-Bulletins: TYPO3-CORE-SA-2016-005, 006, 007, 008 Change-Id: I26701fc2ffb5aed7ccbd96c168aef571d012091e Reviewed-on: https://review.typo3.org/46834 Reviewed-by:
-
