- Jul 07, 2015
-
-
Christian Kuhn authored
Main refactoring of RTE on PHP side. Classes AbstractRte, RteHtmlAreaBase and the instantiator API RTEgetObj() are dropped and inlined to the FormEngine class construct. Lots of code is simplified or moved around. Change-Id: Ibd4ff3e7fa8fe695a96b03355c905640d2efa351 Resolves: #67917 Releases: master Reviewed-on: http://review.typo3.org/40842 Reviewed-by:
Frank Nägler <frank.naegler@typo3.org> Tested-by:
Wouter Wolters <typo3@wouterwolters.nl> Tested-by:
Benjamin Mack <benni@typo3.org> Tested-by:
-
Wouter Wolters authored
Resolves: #67828 Releases: master Change-Id: Id9f0884fdfb9d572e5e1624e5cbb738fdcf0f614 Reviewed-on: http://review.typo3.org/40736 Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
-
- Jul 06, 2015
-
-
Markus Klein authored
Don't advertise the non-blocking capability of the FileLockStrategy on Windows systems with PHP versions below 5.5.23 or 5.6.7. The non-blocking feature of flock() for Windows was introduced with the aforementioned versions. Resolves: #67916 Releases: master Change-Id: I077f5fe39e237a689c3ad694f83a342b2cdb82c6 Reviewed-on: http://review.typo3.org/40926 Reviewed-by:
-
Benjamin Mack authored
The FluidTemplateDataProcessorInterface introduced with #66907 has been refactored to DataProcessorInterface. This decouples it from the Fluid StandaloneView and makes the ContentObjectRenderer available in the process method so the different DataProcessor classes do no have to initiate it on their own. Instead of manipulating the $data property of the ContentObjectRenderer a new key/value store can be filled/manipulated by the different dataProcessor classes. Resolves: #67890 Releases: master Change-Id: I461dbff039974715e2c8f916efd5d79c159cc8b5 Reviewed-on: http://review.typo3.org/40915 Reviewed-by:
Markus Klein <markus.klein@typo3.org> Reviewed-by:
Helmut Hummel <helmut.hummel@typo3.org> Tested-by:
-
Wouter Wolters authored
Add missing leading slashes for class name. Resolves: #67874 Releases: master Change-Id: Ib23f6927847cd3c0e8935beb294be982683ba832 Reviewed-on: http://review.typo3.org/40940 Reviewed-by:
-
Daniel Neugebauer authored
scheduler now keeps an options sub-array if it has been populated before ext_localconf.php runs. User can define additional options for TableGarbageCollectionTask as per extension documentation, i.e. tables can be added from user configuration files such as AdditionalConfiguration.php. Resolves: #67874 Releases: master, 6.2 Change-Id: I9eee7e1315e4a5049cee9db694c1f5a8375c8475 Reviewed-on: http://review.typo3.org/40830 Reviewed-by:
-
Andreas Fernandez authored
This patch refactors the "Page" module to always render hidden records. If the "Show hidden content elements" checkbox is set, the hidden elements are removed by JavaScript. This functionality is NOT ported to QuickEdit, as this part needs further refactoring. Resolves: #67831 Releases: master Change-Id: I5396a8c3ef8b3b11220c168c38aadf326bea38a8 Reviewed-on: http://review.typo3.org/40740 Reviewed-by:
-
Steffen Müller authored
The TYPO3 default context is production. Therefore the default logging should be limited to warnings and more severe levels. Releases: master Resolves: #67216 Change-Id: Ia4b34e67f99d475630f3401d459a1415146eb661 Reviewed-on: http://review.typo3.org/39839 Reviewed-by:
-
Markus Klein authored
The configuration now works independently of RewriteBase, hence we must not define one. Resolves: #67922 Releases: master, 6.2 Change-Id: Ib1e14f808fbf2e7abd08a4e85d2a3d4e8509060a Reviewed-on: http://review.typo3.org/40929 Reviewed-by:
Frederic Gaus <frederic.gaus@flagbit.de> Tested-by:
-
Frederic Gaus authored
Resolves: #65066 Releases: master, 6.2 Change-Id: If3d665b696f3847d91486afcffee7b62fd32b60a Reviewed-on: http://review.typo3.org/40801 Reviewed-by:
Stephan Großberndt <stephan@grossberndt.de> Reviewed-by:
Andreas Fernandez <typo3@scripting-base.de> Tested-by:
Alexander Opitz <opitz.alexander@googlemail.com> Tested-by:
-
Stefan Neufeind authored
Replace usages of "use TYPO3\CMS\Core\Utility;" with use-statements of the utility classes to be used. Change-Id: I6360790b41196387b6d411926cf120aa77d8b4f9 Resolves: #67908 Releases: master Reviewed-on: http://review.typo3.org/40919 Reviewed-by:
-
- Jul 04, 2015
-
-
Andreas Fernandez authored
Replace occurences of count() with matching empty() pendants. Resolves: #67774 Releases: master Change-Id: Ie75551a9410affe8840b521e15a0daf68655ba2a Reviewed-on: http://review.typo3.org/40683 Reviewed-by:
Markus Sommer <markussom@posteo.de> Tested-by:
Stefan Neufeind <typo3.neufeind@speedpartner.de> Tested-by:
-
- Jul 03, 2015
-
-
Andreas Fernandez authored
Errors in the Extension Manager (e.g. deleting an extension w/o proper file permissions) are now caught and displayed as a flash message. Resolves: #67898 Releases: master, 6.2 Change-Id: I8f8334f2f0ea1c2fcf3ab49122c2c52447efc904 Reviewed-on: http://review.typo3.org/40887 Reviewed-by:
Oliver Klee <typo3-coding@oliverklee.de> Reviewed-by:
Michael Oehlhof <typo3@oehlhof.de> Reviewed-by:
Nicole Cordes <typo3@cordes.co> Tested-by:
-
Alexander Opitz authored
The API returns TRUE on success and FALSE if something went wrong. So we need to prevent that the ErrorHandler comes up, as it throws Core\Error exceptions. Resolves: #67897 Releases: master, 6.2 Change-Id: I2912241dd3c9a1b9928b4449ebc16897699fa9b5 Reviewed-on: http://review.typo3.org/40914 Reviewed-by:
-
Andreas Fernandez authored
Replace occurences of count() with matching empty() pendants. Affected extensions: - aboutmodules - beuser - compatibility6 - cshmanual - css_styles_content - dbal - felogin - sys_action - t3editor - taskcenter - tstemplate Resolves: #67777 Releases: master Change-Id: I6986c71866c4f27f0c9bccc7d7d0dd14ea5695ac Reviewed-on: http://review.typo3.org/40685 Reviewed-by:
-
Andreas Fernandez authored
Resolves: #67786 Releases: master Change-Id: I5b8e088c8a6d33117aca9189ff1f6606b2ca7592 Reviewed-on: http://review.typo3.org/40693 Reviewed-by:
-
Patrick Broens authored
The configuration for the new content element wizard is defined in the extension frontend. The content elements which are defined are specifically to css_styled_content. For the new frontend rendering some content elements will not be used anymore. This patch moves this configuration from frontend to css_styled_content in a seperated file Resolves: #65901 Releases: master Change-Id: Idea403c64775ccdf1dd792229e594a470ad72ff9 Reviewed-on: http://review.typo3.org/38007 Reviewed-by:
Oliver Eglseder <oliver.eglseder@in2code.de> Tested-by:
-
Markus Klein authored
There is no good reason for this internal class to be a static utility. Move the code to a simple service class. Resolves: #63838 Releases: master Change-Id: Iff4d538b9ae01e64e9c3b4aa9b5a913d9fabd851 Reviewed-on: http://review.typo3.org/40766 Reviewed-by:
Mathias Brodala <mbrodala@pagemachine.de> Reviewed-by:
-
Markus Klein authored
Resolves: #67903 Releases: master Change-Id: I73cb32a8cf591ccf4e07454efc06e5430c8dfec1 Reviewed-on: http://review.typo3.org/40910 Reviewed-by:
-
- Jul 02, 2015
-
-
Markus Klein authored
The cookie's expire time is changed from session to +90 days as otherwise the cookie makes no sense. Resolves: #67891 Releases: master Change-Id: I778b096c21a48be9e601ea0d03ca57eec263dd40 Reviewed-on: http://review.typo3.org/40859 Reviewed-by:
-
Helmut Hummel authored
Version 1.2.1 of the composer installer fixes an important bug regarding symlinking the autoload.php file. See: https://github.com/TYPO3/CmsComposerInstallers/commit/f631d729928ce569994ea8e5088491b3eb41f697 Releases: master Resolves: #67892 Change-Id: I709cc5086d5866b6aae50059a3d74905c8ad79b3 Reviewed-on: http://review.typo3.org/40869 Reviewed-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Tested-by:
Alexander Stehlik <alexander.stehlik@gmail.com> Tested-by:
-
Sascha Egerer authored
* initialize variables before they are used * do not use FQ namespaces if not required * fix PHPDocs * add missing return statements Resolves: #67797 Releases: master Change-Id: I581ae9ac8c0a277a415d9ba69812305951a86464 Reviewed-on: http://review.typo3.org/40705 Reviewed-by:
-
Helmut Hummel authored
During bootstrap refactoring, additional methods have been added and / or made public. Mark all of them as internal to make clear this is no public API Resolves: #67877 Releases: master Change-Id: I3d5a047e0dde5ca729438dc368357fe05032625b Reviewed-on: http://review.typo3.org/40836 Reviewed-by:
Daniel Maier <dani-maier@gmx.de> Reviewed-by:
-
Andreas Fernandez authored
Fix invalid syntax for mod_filter on apache 2.4 and mismatching comment endings. Resolves: #66235 Releases: master Change-Id: Id4a67dab8f2fbf4d4bf9e2da4ac1c83d06b93388 Reviewed-on: http://review.typo3.org/40793 Reviewed-by:
-
- Jul 01, 2015
-
-
Helmut Hummel authored
The baseSetup call for the bootstrap was forgotten during the Application/ Bootstrap refactoring. Add this call to the console application to fix the fatals. Resolves: #67878 Related: #67808 Releases: master Change-Id: Ic6a05b3d605a9f7cbde0b23e9d4417ef2d9c35fe Reviewed-on: http://review.typo3.org/40837 Reviewed-by:
-
Mathias Brodala authored
The request format needs to be respected when rendering partials, otherwise the same partial cannot be rendered in different formats in the same request. An example is rendering mails in plain text and HTML. Resolves: #60338 Releases: master, 6.2 Change-Id: I118ee0a535d0f06391cd802c10d7c3c5129c2a2c Reviewed-on: http://review.typo3.org/35475 Reviewed-by:
-
Bernhard Kraft authored
To make debugging this easier and as a stale lock file really represents an error in the locking mechanism the severity being used for logging stale lockfiles should get raised. This applies to the old locking API only. Change-Id: I94b91d10411e60bfe944445865f5cb630e988701 Resolves: #67227 Releases: master, 6.2 Reviewed-on: http://review.typo3.org/39871 Reviewed-by:
-
Wouter Wolters authored
This commit also removes the sources because they are not maintained anymore. Resolves: #67458 Releases: master, 6.2 Security-Bulletin: TYPO3-CORE-SA-2015-007 Change-Id: I0813656e3617cb7944d0e620aa3e2863cc614d16 Reviewed-on: http://review.typo3.org/40810 Reviewed-by:
-
Nicole Cordes authored
Currently only the backend login is protected with an implement sleep time after login failure. This patch adds a new hook which can be used to implement a protection functionality (e.g. for detecting brute force) and moves the sleep time as default protection in the abstract user authentication class. Resolves: #59231 Releases: master, 6.2 Security-Bulletin: TYPO3-CORE-SA-2015-006 Change-Id: I1fd1ebdc32ce7797651b5ead284dcff1eb511b94 Reviewed-on: http://review.typo3.org/40809 Reviewed-by:
-
Nicole Cordes authored
All users with access to the filelist module are able to display the content of the document root folder by spoofing the url. This patch prevents any rendering from that storage and throws an error. Resolves: #67538 Releases: master, 6.2 Security-Bulletin: TYPO3-CORE-SA-2015-005 Change-Id: I59cc315e913c02001efdad23e2ded7385502c5f2 Reviewed-on: http://review.typo3.org/40808 Reviewed-by:
-
Nicole Cordes authored
If the to be linked text is empty the ContentObjectRenderer chooses an appropriate link text but doesn't encode it properly. As hsc() was abandoned before this patch adds the parseFunc functionality to keep common html tags which might be used by the editor but escapes unknown characters and tags. Resolves: #34107 Releases: master, 6.2 Security-Bulletin: TYPO3-CORE-SA-2015-004 Change-Id: I9730cb81c315a76a8fc0ef184362cabb9a59f2e5 Reviewed-on: http://review.typo3.org/40807 Reviewed-by:
-
Markus Bucher authored
Properly escape user input when showing error messages during file renaming. Resolves: #59211 Releases: master, 6.2 Security-Bulletin: TYPO3-CORE-SA-2015-004 Change-Id: Iffafad7282445d51fa244f3b31e6886b0b0f65b6 Reviewed-on: http://review.typo3.org/40806 Reviewed-by:
-
Helmut Hummel authored
When authenticating as a frontend user with a previously present anonymous session, the session id is not regenerated which leads to a possible session fixation. This is now fixed by re-generating a new id when a user is just authenticated but no new session id is generated during this process. Resolves: #59258 Releases: master, 6.2 Security-Bulletin: TYPO3-CORE-SA-2015-003 Change-Id: Ia52b17e95cf8074b0f569cf025eab4d041d1677f Reviewed-on: http://review.typo3.org/40805 Reviewed-by:
-
Marc Bastian Heinrichs authored
By forging edit URLs it was possible to edit meta data records of files which were not within a user mount. Implement several hooks to check access to the file and only grant access to a meta data record if the user has access to the file. Resolves: #56644 Releases: master, 6.2 Security-Bulletin: TYPO3-CORE-SA-2015-002 Change-Id: I0f0704af2e7f01d16b9420f9ba4ac1a7846b5270 Reviewed-on: http://review.typo3.org/40804 Reviewed-by:
-
Andreas Fernandez authored
Improve the example .htaccess file by adding rules for caching, MIME types and CORS. Also, the rewrite rules are extended to block access to certain files and folders. Additionally all rules are made compatible for Apache 2.4 as well. Resolves: #23078 Resolves: #66235 Releases: master, 6.2 Change-Id: I629f524b5a209769601f04a74bb7434736058ab8 Reviewed-on: http://review.typo3.org/39254 Reviewed-by:
-
Andreas Fernandez authored
Use single quotes for values in the query executed in WorkspaceService::isOldStyleWorkspaceUsed(). In ANSI SQL, single quotes have to be used for values. Resolves: #67835 Releases: master, 6.2 Change-Id: I5bf598d9acdbc7d2db6d5b8b6f1a4c668fe13ccb Reviewed-on: http://review.typo3.org/40748 Reviewed-by:
-
Xavier Perseguers authored
Change-Id: I691706710f9bfe3294c59010fa0fd3fdb21f6a3e Releases: master, 6.2 Resolves: #67867 Reviewed-on: http://review.typo3.org/40785 Reviewed-by:
Xavier Perseguers <xavier@typo3.org> Tested-by:
-
Nicole Cordes authored
If an incompatible extension is trying to be installed, a popup opens with the possibility to skip dependency checks and retry the installation. Currently the skipping is only implemented for system checks (TYPO3 and PHP versions). This patch adds the missing skip method during extension dependency resolving. Resolves: #67863 Releases: master Change-Id: Idbd4bc649a83a8e8a98652ffb8bd8081a7c65192 Reviewed-on: http://review.typo3.org/40775 Reviewed-by:
Florian Weiss <typo3org@leblanc.at> Tested-by:
-
Morton Jonuschat authored
Deprecate MetaType() which always returned an empty meta fieldtype with DBAL and move function to getMetadata(). The signature for getMetadata() includes the field information for the query so that the cached field metatype can be used before resorting to querying the DBMS. Resolves: #67288 Releases: master Change-Id: I57dbd7501c9e7a62f2164fb755f1d1a73da01a05 Reviewed-on: http://review.typo3.org/39941 Reviewed-by:
-
Andreas Fernandez authored
Replace occurences of count() with matching empty() pendants. Resolves: #67778 Releases: master Change-Id: I16c0299db8afda4c0fe406f7465a41d5eee3dd88 Reviewed-on: http://review.typo3.org/40686 Reviewed-by:
-
