Skip to content
Snippets Groups Projects
  1. Mar 15, 2023
  2. Mar 14, 2023
  3. Mar 13, 2023
  4. Mar 10, 2023
  5. Mar 01, 2023
    • Christian Kuhn's avatar
      [TASK] Modernize condition matching · 41e3abe8
      Christian Kuhn authored
      The TypoScript condition matching and our symfony
      expression language handling is a heavily convoluted
      mess: The entire API tends to fetch lots of global
      state, the classes are complex, hard to understand and
      handle, over-abstracted and full of anti-patterns.
      
      The patch aims to mitigate this. The main strategy is
      to provide relevant data from within callers directly
      instead of fetching globals TYPO3_REQUEST, calling
      GeneralUtility::_GP() and GeneralUtility::getIndpEnv().
      
      * For TypoScript 'condition' expression handler usages,
        the frontend/backend related ConditionMatcher classes
        are obsoleted. The IncludeTreeConditionMatcherVisitor
        class within the new TypoScript parser is now the
        construct that prepares TypoScript relevant variables
        to initialize the symfony expression language construct,
        and gets variables actively hand over.
      
      * The default provider now prepares variables from state
        that can be injected, the entire ProviderInterface no
        longer relies o...
      41e3abe8
  6. Feb 24, 2023
  7. Feb 10, 2023
  8. Feb 07, 2023
  9. Feb 06, 2023
    • Benni Mack's avatar
      [BUGFIX] Enforce validation when no cHash is given · 434c4fde
      Benni Mack authored
      When no cHash is given but GET parameters are handed in
      which _would_ require cHash parameters, these are now
      properly evaluated during the frontend request.
      
      As this has a security impact,
      a new option called
      $GLOBALS['TYPO3_CONF_VARS']['FE']['cacheHash']['enforceValidation']
      is introduced, which then skips
      the "requireCacheHashPresenceParameters" option.
      The latter is an include list, but cache Hash
      calculation should rather be based on
      the exclude list such as "excludedParameters" and
      "cachedParametersWhiteList".
      
      If the new option is set, but some properties such
      as tx_solr[q] should be allowed, then this needs
      to be added to the excludedList ("excludedParameters")
      by extension authors.
      
      A new test "SlugSiteWithoutRequiredCHashRequestTest"
      is added which works with a disabled feature
      flag compared to "SlugSiteRequestTest" which
      has the feature flag enabled.
      
      Resolves: #95297
      Releases: main, 11.5, 10.4
      Change-Id: Ib72c6a34602e77d8c2044ad2e826c0474ebd23...
      434c4fde
  10. Feb 04, 2023
  11. Feb 01, 2023
  12. Jan 23, 2023
  13. Jan 20, 2023
  14. Jan 19, 2023
  15. Jan 18, 2023
  16. Jan 17, 2023
  17. Jan 10, 2023
  18. Dec 12, 2022
  19. Dec 06, 2022
  20. Dec 01, 2022
  21. Nov 30, 2022
  22. Nov 29, 2022
  23. Nov 20, 2022
  24. Nov 12, 2022
  25. Nov 10, 2022
    • Christian Kuhn's avatar
      [TASK] Deprecate TypoScript setup "constants" TLO · a3074ab9
      Christian Kuhn authored
      This is not about TypoScript constants/settings
      that are accessed using {$myConstant} in TypoScript
      setup.
      
      This is about the TypoScript setup "constants"
      top-level-object: It is used in TypoScript
      "parseFunc" and allows referencing string literals
      by name in "parseFunc" strings, which are substituted
      by using ###theName###, when property "constants = 1" is
      set in "parseFunc".
      
      This feature dates back to Kasper's "Initial revision"
      and is obsolete ever since: The feature exists next
      to well-known TypoScript constants, existing
      usages can be easily substituted. The confusion with
      TypoScript "constants" alone justifies a deprecation
      of this detail.
      
      The patch deprecates both the TypoScript setup
      "constants" top-level-object, plus the "constants"
      property in "parseFunc".
      
      Resolves: #99040
      Releases: main
      Change-Id: I91546067db8a7eb72661087780e39f320db2cbeb
      Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/76532
      
      
      Tested-by: default avatarcore-ci <typo3@b13.com>
      Tested-by: default avatarSusanne Moog <look@susi.dev>
      Tested-by: default avatarBenni Mack <benni@typo3.org>
      Reviewed-by: default avatarSusanne Moog <look@susi.dev>
      Reviewed-by: default avatarBenni Mack <benni@typo3.org>
      a3074ab9
  26. Nov 09, 2022
  27. Nov 07, 2022
  28. Nov 03, 2022
  29. Oct 31, 2022
  30. Oct 29, 2022