- Apr 13, 2016
-
-
dirk_juettner authored
Call extensionmanager and verify ext:styleguide is listed. Resolves: #75523 Releases: master Change-Id: I0929a12c0699dc99a95151a8083fbb3efecee674 Reviewed-on: https://review.typo3.org/47573 Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
Susanne Moog <typo3@susannemoog.de> Tested-by:
-
Morton Jonuschat authored
The PHP7 return type declaration for getIgnoredEnableFields() as well as the input type hint for setIgnoredEnableFields() have been added. Additionally the development notes at the top of the class have been removed as all information from those notes was included in the appropriate phpDoc headers of the methods. Releases: master Resolves: #75574 Change-Id: I9765be595e1e3f2eb16fc5f3ba51fdab3681fec2 Reviewed-on: https://review.typo3.org/47649 Reviewed-by:
-
Jan Helke authored
Resolves: #75549 Releases: master Change-Id: Icfe6d3f47073e4dbd3636d6c435f946bfd6ee444 Reviewed-on: https://review.typo3.org/47628 Reviewed-by:
Morton Jonuschat <m.jonuschat@mojocode.de> Tested-by:
-
Christian Kuhn authored
There is some weird issue in the PHP internal web server resulting in unexpected EOF in combination with phantomjs. Having selenium in between seems to solve the issue for now. Change-Id: I3d682d60e3962a2027c7b5b2d2e0971e828f14bf Resolves: #75578 Releases: master Reviewed-on: https://review.typo3.org/47647 Reviewed-by:
Sascha Egerer <sascha@sascha-egerer.de> Tested-by:
-
Morton Jonuschat authored
This method was an early helper for the QueryBuilder to replace BEenableFields in a database agnostic way. Since the query restrictions are now built using the QueryRestrictionBuilder and QueryContext this method needs to be removed before it becomes part of the public API. Resolves: #75562 Releases: master Change-Id: I8428a43ed020ecbac722edba5e245d206158ac40 Reviewed-on: https://review.typo3.org/47638 Reviewed-by:
Frank Naegler <frank.naegler@typo3.org> Tested-by:
Wouter Wolters <typo3@wouterwolters.nl> Reviewed-by:
Michael Oehlhof <typo3@oehlhof.de> Reviewed-by:
-
Arjen Hoekema authored
The call to "addMessageToFlashMessageQueue" expects the second argument to be an array instead of a string. Additionally the type of the fifth argument of writeLog() has been corrected troughout the class. Resolves: #75531 Releases: master, 7.6 Change-Id: I1a96efea0f41abd2e4ae866254913a495e376cda Reviewed-on: https://review.typo3.org/47588 Reviewed-by:
Daniel Goerz <ervaude@gmail.com> Tested-by:
Arjen Hoekema <arjenhoekema@gmail.com> Tested-by:
-
Benjamin Kott authored
Releases: master Resolves: #75557 Change-Id: I556d536d590fd7ad2d531c2d803ee2b771155bb4 Reviewed-on: https://review.typo3.org/47633 Reviewed-by:
-
Sascha Egerer authored
The page module acceptance test should use the admin actor. Change-Id: I299815d86fd5070a6cbafb9cc3faf9208a70fd6c Resolves: #75558 Releases: master Reviewed-on: https://review.typo3.org/47634 Reviewed-by:
Dirk Jüttner <dirk.juettner@gmail.com> Tested-by:
-
Daniel Goerz authored
Change-Id: Ib6593d02955c1313ae16f9cef5fad683cb4738c5 Resolves: #19262 Releases: master Reviewed-on: https://review.typo3.org/47545 Reviewed-by:
-
Jan Fässler authored
The wrapping div is superfluous if neither text nor header is set in fluid_styled_content Resolves: #75237 Releases: master Change-Id: Ic5bba9cef51778311aa17df1c58d9c07ee439b8b Reviewed-on: https://review.typo3.org/47368 Reviewed-by:
Jan Helke <typo3@helke.de> Tested-by:
-
Benni Mack authored
The Fluid namespaces can be put in short-syntax, and in tags to be resolved. However, if the template source is very large, then preg_match_all() stops and returns "0" although the matched values are within $matches. However, the $matched result is "0". The regular expression for doing so, is very exhaustive and greedy, and uses preg_match_all() however, preg_match() does the job as well. Additionally, the regular expression is changed to be less greedy (using *?). An example where this is necessary is the FileList search module where the additional namespaces are not resolved currently and the core icons are not shown, because of the memory - exhausting regular expression. Change-Id: Ia685091fe9fbcbb1520415ee5d48925852d1a400 Resolves: #75464 Releases: master Reviewed-on: https://review.typo3.org/47549 Reviewed-by:
-
Benjamin Kott authored
Releases: master Resolves: #75554 Change-Id: Id9f971a36b3b8d91e7e80ec072370276551b1891 Reviewed-on: https://review.typo3.org/47631 Reviewed-by:
-
Morton Jonuschat authored
The QueryHelper deals with GROUP BY and ORDER BY strings coming from sources where the data format is not strictly defined and the input might be a string prefixes or otherwise unsuitable for immediate further usage. For GROUP BY strings the prefix is removed and the remainder of the string is treated as a comma separated list of column names that get parsed into an array. For ORDER BY strings the prefix is removed and the remainder of the string is treated as a list of comma separated column names, possibly with a sort direction separated from the column name, that gets parsed into an array. For WHERE SQL fragments leading the leading logical operators "AND" and "OR" get removed, no further modifications are performed on the string. Resolves: #75559 Releases: master Change-Id: I37016eda6597cab49b274f498188a8579dec7b2c Reviewed-on: https://review.typo3.org/47636 Reviewed-by:
Georg Ringer <georg.ringer@gmail.com> Tested-by:
-
- Apr 12, 2016
-
-
Susanne Moog authored
- add correct cache dependency for rebuilding of php on appveyor Change-Id: I3d88b4f3572b59ffe90b8ec0f670913f7f1763e4 Resolves: #75498 Releases: master Reviewed-on: https://review.typo3.org/47635 Reviewed-by:
-
Sascha Egerer authored
Fix bash syntax error in .travis.yml and install bz2 module in appvoyer Change-Id: I381b43485276958dfbb3a67f87bb9bdb1f85f95d Resolves: #75498 Releases: master Reviewed-on: https://review.typo3.org/47632 Reviewed-by:
-
Sascha Egerer authored
PhantomJS should be installed via composer to reduce the system requirements of acceptance tests. The PhantomJS server should also be started automatically when running acceptance tests. Change-Id: I416359484e923e2a04f5213fb7f221bc7d0111e1 Resolves: #75498 Releases: master Reviewed-on: https://review.typo3.org/47564 Reviewed-by:
-
Sascha Egerer authored
An admin and an editor actor has been added for the acceptance test suite. These actors are able to reuse a session that is imported in the fixture. Reusing the session does speed up the tests as to login process must not be done on every test. Change-Id: Ie20972c8b968ee8e986df0e0ee91460aa6dde68a Resolves: #75550 Releases: master Reviewed-on: https://review.typo3.org/47627 Reviewed-by:
-
Kay Strobach authored
This patch ensures that we do not display override "" but a more useful information. Additionally the checkboxes are enabled by default if no default value available to reduce the effort needed to provide an element specific value. Resolves: #75540 Releases: master Change-Id: I11667232761968c077f02ec18e6802d7e54fcc6f Reviewed-on: https://review.typo3.org/47618 Reviewed-by:
-
Andreas Fernandez authored
Resolves: #75526 Releases: master Change-Id: I944cc10e8b12e2d779db37a1afd8ebc737933714 Reviewed-on: https://review.typo3.org/47581 Reviewed-by:
-
Sascha Egerer authored
The logout action of the user acceptance tests must be executed on the main page frame. We must ensure that we are in the correct frame inside of this action. Change-Id: Ied588442516513138f16da4037e29fa56f3f1399 Resolves: #75528 Releases: master Reviewed-on: https://review.typo3.org/47585 Reviewed-by:
-
Morton Jonuschat authored
The Doctrine DBAL library is added as a composer dependency as a foundation to replace the current DatabaseConnection class, EXT:dbal and EXT:adodb. Doctrine DBAL is encapsulated within a ConnectionPool class that manages the connections to all defined database connections. The main parts of the patch consist of the connection management, convenience methods for simple SQL queries, a QueryBuilder to build complex queries in a database platform independent way and a QueryRestriction Builder that aims to replace deleteClause and BEenableFields in the backend context as well as enableFields in frontend context. Documentation and an example implementation of using the API will follow in separate patches. Releases: master Resolves: #75454 Change-Id: I47837d9e77331132807bbb7fb956c359031b4f16 Reviewed-on: https://review.typo3.org/47111 Reviewed-by:
-
Helmut Hummel authored
In case a backend or frontend user is stored in the database with an empty string as password (not possible through backend UI), it is possible to authenticate this user using an empty password with the standard TYPO3 username/password authentication services. By definition this should be prohibited. Resolves: #75055 Releases: master, 7.6, 6.2 Security-Bulletins: TYPO3-CORE-SA-2016-009, 010, 011, 012 Change-Id: I4ca1b7d80c04de86d6ff1ef6e99a4a57b97ed948 Reviewed-on: https://review.typo3.org/47611 Reviewed-by:
Oliver Hader <oliver.hader@typo3.org> Tested-by:
-
Nicole Cordes authored
To view a preview of a workspace page a backend user is simulated. Currently the user who created the preview link is taken into account. This patch creates a limited backend user to be able to process the web request. Resolves: #28175 Releases: master, 7.6, 6.2 Security-Commit: f0445be5322b4c0e4b1c0900542aca4e00a39f46 Security-Bulletins: TYPO3-CORE-SA-2016-009, 010, 011, 012 Change-Id: I80dd9168b22bf62b2a2ed4a264240d07f056cc73 Reviewed-on: https://review.typo3.org/47610 Reviewed-by:
-
Nicole Cordes authored
In Javascript context the title attribute of a selected option is passed as unescapd HTML argument to the function. Creating a new option tag without title validation results in a XSS possibility. This patch removes hardcoded attribute setting and uses jQuery function which take care of proper escaping. Resolves: #75164 Releases: master, 7.6, 6.2 Security-Commit: c6ec139a9ad69db67c17b1f3688b07e65f8898cc Security-Bulletins: TYPO3-CORE-SA-2016-009, 010, 011, 012 Change-Id: Ie664fdaf71f4f28f66b0e7cde42da1d6284b1f02 Reviewed-on: https://review.typo3.org/47609 Reviewed-by:
-
Frank Naegler authored
This patch fix a XSS vulnerability in TCA type inline. Resolves: #73460 Releases: master, 7.6 Security-Commit: 8f178b4a68cbb50a55e0864b3f3c9989aa415ab3 Security-Bulletins: TYPO3-CORE-SA-2016-009, 010, 011, 012 Change-Id: I7a39d3d6717b3edb02f6a7ee82675279d7ebf940 Reviewed-on: https://review.typo3.org/47608 Reviewed-by:
-
Andreas Fernandez authored
Since the XEE security fix (I26701fc2ffb5aed7ccbd96c168aef571d012091e), the XML files in the Extension Manager may are not loaded anymore, depending on the machine. Change the way how the files are loaded to fix the issue. Change-Id: I2a3dffd089ed427b965bcbae8aa596c26a81770b Resolves: #75022 Releases: master, 7.6, 6.2 Reviewed-on: https://review.typo3.org/47196 Reviewed-by:
Daniel Maier <dani-maier@gmx.de> Reviewed-by:
Mathias Schreiber <mathias.schreiber@wmdb.de> Tested-by:
Stephan Großberndt <stephan@grossberndt.de> Reviewed-by:
-
Georg Ringer authored
Change width of the textarea to edit file's content in the file list module if EXT:t3editor is not installed. Resolves: #75495 Releases: master, 7.6 Change-Id: I5b05f753cae8a11a7889a6391521fcfd7c0aef51 Reviewed-on: https://review.typo3.org/47586 Reviewed-by:
Andreas Fernandez <typo3@scripting-base.de> Reviewed-by:
Benni Mack <benni@typo3.org> Reviewed-by:
-
- Apr 11, 2016
-
-
Frank Naegler authored
Move description field into own tab and display description column as callout. Resolves: #75515 Releases: master Change-Id: I552b814d1ea06b02a2b34653bca09769c656fa48 Reviewed-on: https://review.typo3.org/47565 Reviewed-by:
-
Frank Naegler authored
A new renderType was added to render the backend layout wizard inline in FormEngine. Resolves: #75497 Releases: master Change-Id: If26ff91e2c35a692f27b4fd55debbc69027d754a Reviewed-on: https://review.typo3.org/47563 Tested-by:
-
Jan Helke authored
As decided during the last RL Product Team meeting in Dusseldorf, the upgrade wizards from the install tool should stay for two generations of LTS versions. This reverts commit 021237d5. Releases: master Resolves: #75485 Related: #72367 Change-Id: I2f9d52a5bf0ffeca6843780354e349a5151ddb07 Reviewed-on: https://review.typo3.org/47556 Reviewed-by:
-
Benjamin Kott authored
Releases: master, 7.6 Resolves: #74324 Change-Id: I3432881a896accf94d5a0a101dbcbecbe6027320 Reviewed-on: https://review.typo3.org/47566 Reviewed-by:
-
Christian Kuhn authored
Fixes a circular dependency if local core dev version is not a release branch. Change-Id: Iff1e08bdf5345a3de133c879f87f7b922c0e5b0e Releases: master Resolves: #75516 Reviewed-on: https://review.typo3.org/47568 Reviewed-by:
-
Christian Kuhn authored
Adds styleguide as require-dev composer dependency and call the data generator for acceptance tests. Change-Id: I917b732face3c9d194ef88bada18e3195562a6dc Resolves: #75481 Releases: master Reviewed-on: https://review.typo3.org/47541 Reviewed-by:
-
Nicole Cordes authored
Currently the CropViewHelper is not able to return HTML as the output is always escaped. This patch corrects escaping for children and output. Resolves: #75459 Related: #75133 Releases: master Change-Id: I5b9aae67f4550b2923424ae2690084f8849c12a9 Reviewed-on: https://review.typo3.org/47547 Reviewed-by:
Helmut Hummel <helmut.hummel@typo3.org> Tested-by:
Stefan Neufeind <typo3.neufeind@speedpartner.de>
-
Sascha Egerer authored
The composer package for selenium standalone is deprecated and must be updated to support the current Firefox version. Change-Id: I1c0e5a2c010b5f154b44ee80253cbe4e43f4279a Resolves: #75492 Releases: master Reviewed-on: https://review.typo3.org/47560 Reviewed-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Tested-by:
-
Gianluigi Martino authored
Ensure that access settings are shown after clicking on visibility settings in language view (Clickmenu) Change-Id: If674e4328086edcc83386539851a42b6b95a1c84 Resolves: #75476 Releases: master, 7.6 Reviewed-on: https://review.typo3.org/47552 Reviewed-by:
Riccardo De Contardi <erredeco@gmail.com> Reviewed-by:
-
- Apr 10, 2016
-
-
Benjamin Kott authored
Releases: master Resolves: #75491 Change-Id: Ie1daec9744b89d9082d8bd3820fe023b3e540991 Reviewed-on: https://review.typo3.org/47559 Reviewed-by:
-
Frank Naegler authored
This patch adds a button to lock the install tool again, also without login. Resolves: #56640 Releases: master, 7.6 Change-Id: I6a4368376082288955eb20197ab437e893c93ffc Reviewed-on: https://review.typo3.org/47555 Reviewed-by:
Kay Strobach <typo3@kay-strobach.de> Tested-by:
Benjamin Kott <info@bk2k.info> Tested-by:
-
Benjamin Kott authored
Releases: master Resolves: #75483 Change-Id: Ia525a19d87be6a99ca2cc48b8561ebc800e9e34e Reviewed-on: https://review.typo3.org/47554 Reviewed-by:
-
- Apr 08, 2016
-
-
Andreas Fernandez authored
``PageRenderer:: addRequireJsConfiguration`` does now load RequireJS in the backend, as this method is called before ``loadRequireJs()`` otherwise, colliding with how ``loadRequireJs()`` handles RequireJS. This is not done in frontend, as the output could get broken. Resolves: #75353 Releases: master, 7.6 Change-Id: I7a1140036dcbf9ab869b361c40fedc3813a887d3 Reviewed-on: https://review.typo3.org/47478 Reviewed-by:
Markus Sommer <markussom@posteo.de> Tested-by:
Markus Klein <markus.klein@typo3.org> Tested-by:
-
