- Jul 20, 2018
-
-
Christian Kuhn authored
typo3.org git/gerrit show flakiness lately. To not torture the poor servers with our pesky testing so much we switch the git clones to github/TYPO3/TYPO3.CMS and hope merges are mirrored over there more quickly and they sustain our testing load easily. Resolves: #85606 Releases: master, 8.7, 7.6 Change-Id: I772d945a3bf697172cb26edb761f01e6cb8da4bf Reviewed-on: https://review.typo3.org/57645 Tested-by:
TYPO3com <no-reply@typo3.com> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
-
- Jul 17, 2018
-
-
Anja authored
The bamboo containers need a better passwd mapping per agent to set a proper home directory, otherwise ssh tasks may fail. Resolves: #85582 Releases: master, 8.7, 7.6 Change-Id: I42b59df7512dd5bd6e00c2c07eee9441cf1aa28c Reviewed-on: https://review.typo3.org/57620 Reviewed-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Tested-by:
-
- Jul 16, 2018
-
-
Christian Kuhn authored
A new bamboo agent infrastructure has been deployed that significantly changes how tests are executed: The agent docker containers are now "stupid" and no longer bundle specific php versions or daemons. Instead, they can run own containers to start needed daemons for specific jobs and execute needed php commands in ad-hoc containers that provide the required php version. Daemons needed for single jobs are defined in a docker-compose.yml file provided by core itself. This docker-compose.yml file can not be used directly for local test execution since it has to fiddle quite a bit with docker volume mounts, networks and executing users that is specific to the bamboo environment. However, another yml file can be added later to ease local test execution in a similar way. The patch rewrites the bamboo plan pre-merge and nightly specs of core master to use the new infrastructure and brings a couple of minor changes to tests that rely on a running memcached or redis to retrieve the daemon host from an environment variable. Patch for core v7. Change-Id: I65777eeee6e28fca5b3d3d979498293cc91a77af Resolves: #85563 Resolves: #36934 Releases: 7.6 Reviewed-on: https://review.typo3.org/57605 Tested-by:
-
- Jul 13, 2018
-
-
Oliver Hader authored
Including files from Phar archives (e.g. "phar://file.phar/autoload.php") does not work properly with having PHP setting open_basedir defined. The reason for that is, that TYPO3's custom PharStreamWrapper tries to find the appropriate base Phar file using file_exists() calls internally. In case those files are not part of the open_basedir restriction - which is the case for everything prefixed with the "phar://" scheme - a PHP warning is shown. Resolves: #85547 Releases: master, 8.7, 7.6 Change-Id: I72fdd7f0c016c0a8b1ed56a82b6b4042cac4d930 Reviewed-on: https://review.typo3.org/57596 Tested-by:
-
- Jul 12, 2018
-
-
Oliver Hader authored
Change-Id: I2263cb37e5395eb48d7d07908dd52c3f3d48c55c Reviewed-on: https://review.typo3.org/57574 Reviewed-by:
Benni Mack <benni@typo3.org> Tested-by:
-
Oliver Hader authored
Change-Id: Ief75740d3b83ebcef47da97800743e64677079f0 Reviewed-on: https://review.typo3.org/57573 Reviewed-by:
Oliver Hader <oliver.hader@typo3.org> Tested-by:
-
Oliver Hader authored
Resolves: #85385 Releases: master, 8.7, 7.6 Security-Commit: 8cd7fa85f5b60c508aaac3184101008ba2e8df7f Security-Bulletin: TYPO3-CORE-SA-2018-002 Change-Id: I2494702e67a180fff36173645b8478a12680b870 Reviewed-on: https://review.typo3.org/57542 Reviewed-by:
-
Christian Kuhn authored
SoftReferenceIndex throws exceptions on phar streams LegacyLinkNotationConverter throws exceptions on phar streams Resolves: #85385 Releases: master, 8.7, 7.6 Security-Commit: 0311b6c0cc7fed584f59f34adba5b693e75797d8 Security-Bulletin: TYPO3-CORE-SA-2018-002 Change-Id: Ic57514e1bcdb30ec612a39bcb3c49287cc0c5330 Reviewed-on: https://review.typo3.org/57541 Reviewed-by:
-
Oliver Hader authored
This custom stream wrapper for the phar:// protocol overrides PHP's native handling. In case Phar bundles shall be loaded from a valid directory, the custom wrapper falls back to the native PHP wrapper in order to invoke Phar-related actions. In case the location is not trustworthy, an according exception is thrown. The custom stream wrapper is registered in the beginning of TYPO3's bootstrap class. Truested locations are those in typo3conf/ext/* - anything else is denied and not considered as trustworthy. Releases: master, 8.7, 7.6 Resolves: #85385 Security-Commit: 86f79d23a2c198fb3054b1d1f9414226f955c66d Security-Bulletin: TYPO3-CORE-SA-2018-002 Change-Id: I8c6499ca8dea31bdfc7ed9fba0b479b4a7715f4a Reviewed-on: https://review.typo3.org/57540 Reviewed-by:
-
Oliver Hader authored
Using password hashing methods that are related by class inheritance can lead to authentication bypass by just knowing a valid username. Resolves: #84703 Releases: master, 8.7, 7.6 Security-Commit: 9183f7c5d84544c0b9464119d0ebe0951998c61c Security-Bulletin: TYPO3-CORE-SA-2018-001 Change-Id: I2271f300e4a4956fa85b7d35fa1f48245e00d6c4 Reviewed-on: https://review.typo3.org/57539 Reviewed-by:
-
- Jul 09, 2018
-
-
Stefan Neufeind authored
Resolves: #85512 Releases: master, 8.7, 7.6 Change-Id: I4077fe7481063feb97014048580c3fb1b1ca5e2a Reviewed-on: https://review.typo3.org/57509 Tested-by:
Mathias Brodala <mbrodala@pagemachine.de> Tested-by:
-
- Jul 06, 2018
-
-
Łukasz Uznański authored
This avoids an error in case file metadata is edited through a file reference and there is no file metadata translation for the current language. Resolves: #76262 Resolves: #82178 Releases: master, 8.7, 7.6 Change-Id: Ifecf659637773c5f3773fc3439b09df9c030cb3f Reviewed-on: https://review.typo3.org/56568 Tested-by:
Alexander Stehlik <alexander.stehlik@gmail.com> Tested-by:
Stephan Großberndt <stephan.grossberndt@typo3.org> Reviewed-by:
Rudy Gnodde <rgn@windinternet.nl> Reviewed-by:
-
- Jul 05, 2018
-
-
Daniel Siepmann authored
Releases: master, 8.7, 7.6 Resolves: #85473 Change-Id: Ic0ac284bb8f02c7275e17bde67e79bb20a7fd919 Reviewed-on: https://review.typo3.org/57473 Tested-by:
-
- Jul 02, 2018
-
-
Anja authored
With the correct delimiter, the category feature for the documentation file can be properly retrieved and does not get sorted into its own, exclusive category. Change-Id: I228c46377190c3d1bd0eb5459df8d63975a6895b Resolves: #85422 Releases: master, 8.7, 7.6 Reviewed-on: https://review.typo3.org/57447 Tested-by:
-
- Jun 22, 2018
-
-
Harry authored
Resolves: #85324 Releases: master, 8.7, 7.6 Change-Id: I90461715f59cd74c72571151f3e37cb4ee374b7f Reviewed-on: https://review.typo3.org/57308 Tested-by:
Andreas Fernandez <a.fernandez@scripting-base.de> Tested-by:
-
- Jun 11, 2018
-
-
Oliver Hader authored
Change-Id: Ia6dec22dfca3c560f939c8eb0f84ee5fc2b34310 Reviewed-on: https://review.typo3.org/57191 Tested-by:
Susanne Moog <susanne.moog@typo3.org> Tested-by:
-
Oliver Hader authored
Change-Id: Icd51d163b2245b27ca487cb4e0106dd33e69bdf5 Reviewed-on: https://review.typo3.org/57190 Reviewed-by:
-
- Jun 09, 2018
-
-
Frank Naegler authored
The new IpAnonymizationAdditionalFieldProvider introduced the same JavaScript variable which breaks the garbage collection task. The JavaScript initialization has been removed and the field provider simplified. Resolves: #85068 Releases: master, 8.7, 7.6 Change-Id: Ibb307ee37d6fea33a721373bdc50bbbd3fee1453 Reviewed-on: https://review.typo3.org/57165 Tested-by:
-
- Jun 08, 2018
-
-
Frederik Holz authored
Currently on OSX using chrome, it is not possible to use select boxes of the rte, because they instantly close again. Chrome and Safari have issues using on click events on select boxes, so changing it to "on change" fixes it. Resolves: #83379 Related: #84479 Releases: 7.6 Change-Id: I037e5640229e3f7b4619e1d00e1d92701aa195fb Reviewed-on: https://review.typo3.org/56849 Reviewed-by:
Frank Naegler <frank.naegler@typo3.org> Tested-by:
-
- Jun 01, 2018
-
-
Daniel Siepmann authored
In PHP 7, under some circumstances the exception is not caught as expected. Therefore we use a check (as already done in ReflectionService.php). Releases: 8.7, 7.6 Resolves: #85011 Change-Id: I41d58c3dbb508a7b17b4534ebd1c5ca79914af94 Reviewed-on: https://review.typo3.org/56972 Tested-by:
Daniel Siepmann <daniel.siepmann@typo3.org> Tested-by:
Mona Muzaffar <mona.muzaffar@gmx.de> Tested-by:
Jan Helke <typo3@helke.de> Tested-by:
-
- May 25, 2018
-
-
Nicole Cordes authored
This patch shows collected SQL errors that occurred during an extension installation as flash message. Resolves: #82245 Releases: 7.6 Change-Id: Ifdfd738045022109ce33b33846e9673898077fc2 Reviewed-on: https://review.typo3.org/54497 Reviewed-by:
Alexander Opitz <opitz.alexander@googlemail.com> Tested-by:
-
- May 22, 2018
-
-
Oliver Hader authored
Change-Id: I2ca4c227a409a45cfbc2f197c4412c01b02eaeb0 Reviewed-on: https://review.typo3.org/57037 Tested-by:
-
Oliver Hader authored
Change-Id: I60423ab35e9b213f49b6054296f8a2ea1ada5858 Reviewed-on: https://review.typo3.org/57036 Reviewed-by:
-
Andreas Fernandez authored
Resolves: #85060 Related: #84053 Releases: master, 9.2, 8.7, 7.6 Change-Id: I04dba093dc8e423adbf75e2198c31e5c013864cb Reviewed-on: https://review.typo3.org/57029 Tested-by:
-
Guido Schmechel authored
While retrieving the list with begin as argument for a recursive call, getTreeList builds the comma-separated list correctly. Resolves: #83328 Releases: master, 8.7, 7.6 Change-Id: I643477dd5c0cbfb67532dd96eb0b479e0cb532b8 Reviewed-on: https://review.typo3.org/57026 Tested-by:
Markus Klein <markus.klein@typo3.org> Tested-by:
-
- May 15, 2018
-
-
Mathias Schreiber authored
Log entries no longer contain specific tokens. Instead, they are replaced with `--AnonymizedToken—`. Resolves: #84502 Releases: master, 8.7, 7.6 Change-Id: I42a8127cdccc904e8bbb82b5ea74b0e3d012586f Reviewed-on: https://review.typo3.org/56964 Tested-by:
-
Georg Ringer authored
IP anonymizing improves the privacy of users and required as part of the GDPR. Resolves: #84781 Releases: master, 8.7, 7.6 Change-Id: Idd938136bed8f29e86b5e3e541c9fb8c9afd48ff Reviewed-on: https://review.typo3.org/56925 Tested-by:
Georg Ringer <georg.ringer@gmail.com> Tested-by:
-
- May 14, 2018
-
-
Mathias Brodala authored
Releases: master, 8.7, 7.6 Resolves: #84947 Change-Id: I4d81174497158b411c291ee51b331c1d3652e4a1 Reviewed-on: https://review.typo3.org/56930 Tested-by:
-
- May 13, 2018
-
-
Georg Ringer authored
Improve the privacy of users by using the no-cookie domain of youtube by default and just use youtube.com if explicitly set. Resolves: #84843 Releases: master, 8.7, 7.6 Change-Id: I01472f93e32c2011b5494c4670d07f29348016c3 Reviewed-on: https://review.typo3.org/56929 Tested-by:
-
- May 10, 2018
-
-
Nicole Cordes authored
This patch ensures using an integer value for turning a timestamp to a DateTime object as otherwise a PHP error is thrown. Resolves: #84962 Releases: master, 8.7, 7.6 Change-Id: I18e82c8f91f42c29c4014985a1ad11671b5a31f4 Reviewed-on: https://review.typo3.org/56915 Tested-by:
-
- Apr 24, 2018
-
-
Georg Ringer authored
To be compatible with the GDPR, 2 new features are added to the indexed_search extension: - Make the index_stat_search table part of the garbage collector task - Make the IP tracking configurable Resolves: #84740 Releases: master, 8.7, 7.6 Change-Id: I8e1bcd937a3d4095fb1a048064e82845ff1a5344 Reviewed-on: https://review.typo3.org/56737 Tested-by:
-
- Apr 19, 2018
-
-
Georg Ringer authored
Add an API to anonymize IP addresses. The core uses this API to anonymize all IP addresses before storing them. E.g. when logging. This a necessary tool in order to comply with data and privacy protections laws. Resolves: #84053 Releases: master, 8.7, 7.6 Change-Id: Id45ee94696dee4fa2293e1226f2076883f6b9ade Reviewed-on: https://review.typo3.org/56718 Tested-by:
-
- Apr 17, 2018
-
-
Oliver Hader authored
Change-Id: I442f2c40d720fe80561efa576d3fcbc7926509cd Reviewed-on: https://review.typo3.org/56700 Tested-by:
-
Oliver Hader authored
Change-Id: I49d55a037a92edbb111becd23072d75d4e729237 Reviewed-on: https://review.typo3.org/56699 Reviewed-by:
-
- Apr 06, 2018
-
-
Andreas Fernandez authored
Any given attribute stored in the `P` parameter is kept and attached to the return URL of the upload form. Resolves: #83923 Releases: master, 8.7, 7.6 Change-Id: Id6ff93f0a30691f7bde84275128a34eb479499de Reviewed-on: https://review.typo3.org/56596 Reviewed-by:
-
Frank Naegler authored
Resolves: #84600 Releases: master, 8.7, 7.6 Change-Id: I3f4698e892c98aadb41d3e6ba4f1e974a2ca479d Reviewed-on: https://review.typo3.org/56591 Tested-by:
-
- Apr 05, 2018
-
-
rickymk authored
Catch InsufficientFileAccessPermissionsException while extracting metadata. Reason for this exception could be that the file extension is not allowed by the ['BE']['fileDenyPattern'] setting. This patch makes sure that the indexer doesn't break and is able to extract the other files from storage. Resolves: #82060 Release: master, 8.7, 7.6 Change-Id: I37950aa70f4f59b388c6b9203e1922708ad07b71 Reviewed-on: https://review.typo3.org/56540 Tested-by:
Nicole Cordes <typo3@cordes.co> Tested-by:
-
- Apr 04, 2018
-
-
Helmut Hummel authored
A regression was introduced in symfony/finder https://github.com/symfony/symfony/pull/26337 This caused PackageManager to not find any core packages any more in case they were symlinked. Composer command (after adding conflict): composer update --lock Resolves: #84601 Releases: 7.6, 8.7, master Change-Id: I914c3b3c4a6c12375ebd9fe5442c3f7ff407de72 Reviewed-on: https://review.typo3.org/56549 Tested-by:
Helmut Hummel <typo3@helhum.io> Tested-by:
-
- Mar 29, 2018
-
-
Sybille Peters authored
Resolves: #83480 Releases: master, 8.7, 7.6 Change-Id: I87f3d692b4422b2e998076b2ef09ee65c85b8bba Reviewed-on: https://review.typo3.org/56481 Tested-by:
-
- Mar 22, 2018
-
-
Oliver Hader authored
Change-Id: I9158aa79f8f38716bea88bdd6263cc68eaa7f58f Reviewed-on: https://review.typo3.org/56424 Tested-by:
Wouter Wolters <typo3@wouterwolters.nl> Tested-by:
-
