- Nov 27, 2017
-
-
Łukasz Uznański authored
Add 'Cache-Control: no-store' if conditions allowing client caching are not met. This change will prevent caching content by browser. Resolves: #81160 Releases: master, 8.7, 7.6 Change-Id: Ia91a339178b8cd8387706679bbea40ed0d1b0548 Reviewed-on: https://review.typo3.org/54794 Tested-by:
TYPO3com <no-reply@typo3.com> Reviewed-by:
Markus Klein <markus.klein@typo3.org> Tested-by:
-
Christian Kuhn authored
The bamboo test setup relies on a funny solution to determine the gerrit patch id and patch set, used for reporting results back to gerrit. The regex based solution started behaving weird with latest bamboo versions and is now quoted slightly differently to fix that. Special thanks to atlassian support for being friendly, helpful, quick and providing a working solution to our issue. Change-Id: I51ec85be2133033777fac8ff1f12071a81c71efc Resolves: #83107 Releases: master, 8.7, 7.6 Reviewed-on: https://review.typo3.org/54777 Tested-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
-
- Nov 24, 2017
-
-
Jigal van Hemert authored
Spaces added between attributes of boolean input fields. Resolves: #83040 Releases: 7.6 Change-Id: I28f24bbfbc46d992e452b7f0420c64575dda2df5 Reviewed-on: https://review.typo3.org/54738 Tested-by:
Stefan Neufeind <typo3.neufeind@speedpartner.de> Tested-by:
-
- Nov 22, 2017
-
-
Stefan Neufeind authored
Add for/id so clicking the label toggles the checkbox. Resolves: #83040 Releases: master, 8.7, 7.6 Change-Id: I3dc08706556e1a95ddc8d96cae705ee968c48326 Reviewed-on: https://review.typo3.org/54721 Tested-by:
Jigal van Hemert <jigal.van.hemert@typo3.org> Tested-by:
-
- Nov 20, 2017
-
-
Markus Günther authored
Releases: master, 8.7, 7.6 Fixes: #83044 Change-Id: I2c16f160a18f4c0e58b87261b59fbde90aca2f82 Reviewed-on: https://review.typo3.org/54698 Reviewed-by:
Alexander Opitz <opitz.alexander@googlemail.com> Tested-by:
-
Helmut Hummel authored
Because users have no access to deleted pages, the access check always fails, leading to delete page actions not being shown in the history despite being properly tracked. We now check this case and do a more lightweight check so that we still have the permissions checked, but can show deleted pages without disclosing unwanted information. Resolves: #45056 Releases: 7.6, 8.7, master Change-Id: Id919a24651c18a351f9723e86610b525a4f4726c Reviewed-on: https://review.typo3.org/54610 Tested-by:
Oliver Hader <oliver.hader@typo3.org> Reviewed-by:
-
Markus Klein authored
Move the hidden form field out of the label tag to ensure clicking the label's content (eg. fa icon) really toggles the checkbox. Resolves: #82998 Releases: master, 8.7, 7.6 Change-Id: Id4293b4109c82a9e6410e113a5b5560ffd1b75d4 Reviewed-on: https://review.typo3.org/54683 Tested-by:
-
- Nov 08, 2017
-
-
Georg Ringer authored
The title of a translated page must be overlayed with the workspace version. Resolves: #65607 Releases: master, 8.7, 7.6 Change-Id: If10260f196776a16a53968b78542827ecbc145fe Reviewed-on: https://review.typo3.org/54585 Tested-by:
Georg Ringer <georg.ringer@gmail.com> Tested-by:
-
- Nov 02, 2017
-
-
Markus Klein authored
With this fix the access module again returns to the correct page the user expects it to return to. Resolves: #82883 Releases: master, 8.7, 7.6 Change-Id: I76953aa1547365db6fbbea772d786e1ad9bfc184 Reviewed-on: https://review.typo3.org/54528 Tested-by:
-
Markus Klein authored
Resolves: #79915 Releases: master, 8.7, 7.6 Change-Id: Ie3b573857ff011295be198633a0f6868b1ff55b6 Reviewed-on: https://review.typo3.org/54527 Tested-by:
-
- Oct 30, 2017
-
-
Georg Ringer authored
Readd an image which has been removed during cleanups Resolves: #82857 Releases: 7.6 Change-Id: Idd487fec1d35dc919099bcf9477860976d346d38 Reviewed-on: https://review.typo3.org/54477 Tested-by:
Andreas Fernandez <typo3@scripting-base.de> Reviewed-by:
Benni Mack <benni@typo3.org> Tested-by:
Wouter Wolters <typo3@wouterwolters.nl> Tested-by:
-
- Oct 20, 2017
-
-
Sebastian Hofer authored
Changes the rendering for li tags in RTE in sys ext css_styled_content. This change is based on a former bugifx for TYPO3 6.2: https://review.typo3.org/#/c/38681/ The fix was not ported to css_styled_content for TYPO3 7, so the issue is present in TYPO3 7 if no fluid_styled_content TypoScript is present. Releases: 7.6 Resolves: #65506 Change-Id: I1aa744b7f381681a01cb797ff6dd9c61f221934a Reviewed-on: https://review.typo3.org/54165 Tested-by:
Benjamin Kott <benjamin.kott@outlook.com> Tested-by:
-
- Oct 18, 2017
-
-
Harry Glatz authored
The TypoScript of the CSC header element does not respect the global lib.parseTarget configuration Resolves: #36216 Releases: 8.7, 7.6 Change-Id: I08ea6c59829a4a63b4aca6bf90b89223921b3fdf Reviewed-on: https://review.typo3.org/54430 Tested-by:
-
Susanne Moog authored
When using PHP7 declarations of sub classes have to be compatible to their parent declarations. As the install tool has been completely refactored in newer TYPO3 version this patch implements only a workaround to prevent the PHP warning. Change-Id: I4128b3aef30a3a1bb9de6188509db1cdf4314b02 Resolves: #77203 Releases: 7.6 Reviewed-on: https://review.typo3.org/54417 Tested-by:
-
- Oct 15, 2017
-
-
Nicole Cordes authored
This patch adds missing functional tests for \TYPO3\CMS\Backend\Controller\FormInlineAjaxController::createAction Related: #82330 Releases: master, 8.7, 7.6 Change-Id: I61c8c07dd0d2c6a92bb445d7f2b6baee23251f5d Reviewed-on: https://review.typo3.org/54170 Tested-by:
Frank Naegler <frank.naegler@typo3.org> Tested-by:
-
- Oct 12, 2017
-
-
Christian Kuhn authored
Setting / unsetting the checkbox "Use regular expression" fails with JavaScript error "jumpToUrl is not defined". Add that to the document body. Change-Id: I0a5928e008972493d070a35d1219a0acca579ce8 Resolves: #82746 Releases: master, 8.7, 7.6 Reviewed-on: https://review.typo3.org/54380 Tested-by:
-
- Oct 10, 2017
-
-
Marc Bastian Heinrichs authored
Because of a missing page uid in rte module window iframe urls, like for the BrowseLinks popup, the ConditionMatcher could not evaluate conditions in INCLUDE_TYPOSCRIPT that rely on the page uid, like PIDinRootline. Resolves: #81190 Releases: 7.6 Change-Id: I7952b910d9caa50ce5ca1abd6bf7309ad80c60b1 Reviewed-on: https://review.typo3.org/52756 Reviewed-by:
Jan Helke <typo3@helke.de> Tested-by:
Riccardo De Contardi <erredeco@gmail.com> Reviewed-by:
-
- Oct 09, 2017
-
-
Joshua Westerheide authored
Resolves: #82697 Releases: master, 8.7, 7.6 Change-Id: I64bf51d5efd0394f4d3269965820281cbaf2de90 Reviewed-on: https://review.typo3.org/54331 Tested-by:
-
- Oct 05, 2017
-
-
Christian Kuhn authored
The 6.0 to 6.1 upgrade allows us to specifiy last missing pieces via bamboo specs: mostly job cleanups, plugin configuration and plan permissions. Change-Id: If26aeb45b1109ba9797f3807087201033ea1f368 Resolves: #82679 Releases: master, 8.7, 7.6 Reviewed-on: https://review.typo3.org/54299 Tested-by:
-
- Sep 25, 2017
-
-
Georg Ringer authored
Allow 255 chars for a domain to be in sync with RFC 1035. Resolves: #82515 Releases: master, 8.7, 7.6 Change-Id: I63916cb115b00e50c62c1926cf890e29bf89de77 Reviewed-on: https://review.typo3.org/54191 Tested-by:
Morton Jonuschat <m.jonuschat@mojocode.de> Tested-by:
-
- Sep 23, 2017
-
-
Frank Naegler authored
Resolves: #82533 Releases: master, 8.7, 7.6 Change-Id: Ia47f604b9cb7fa53d3707e6150554709cbfdb763 Reviewed-on: https://review.typo3.org/54197 Tested-by:
-
- Sep 20, 2017
-
-
Markus Hoelzle authored
Disallow backend users to edit pages which doktypes are not allowed via backend usergroup permissions. Resolves: #79954 Releases: master, 8.7, 7.6 Change-Id: I527602e71c62bc8e33b0886a5758c7c8040b4720 Reviewed-on: https://review.typo3.org/53715 Tested-by:
Jan Stockfisch <jan.stockfisch@googlemail.com> Tested-by:
Susanne Moog <susanne.moog@typo3.org> Tested-by:
-
Oliver Hader authored
Change-Id: I2ac58940eef04059791b3ef8b76f7c2223e15b28 Reviewed-on: https://review.typo3.org/54169 Tested-by:
-
- Sep 19, 2017
-
-
Oliver Hader authored
Change-Id: I8ec14f6fd21ec2757988c13f1612348998d198c5 Reviewed-on: https://review.typo3.org/54168 Reviewed-by:
-
Oliver Hader authored
On creating child records for an inline field, the values of TCA['ctrl']['languageField'] configuration of parent and child records are used without checking if they are set at all. This patch adds appropriate guards. Resolves: #82330 Releases: 7.6 Change-Id: I6383e55820239b0363ff890855430ac32e2cdf62 Reviewed-on: https://review.typo3.org/53944 Reviewed-by:
Tobias Liebig <tobias.liebig@typo3.org> Tested-by:
-
Markus Klein authored
Providing a non-existing entry-level to the getPageUids() method now returns an empty array instead of an array with key zero and a null value. This way we can correctly stop processing in the viewhelpers using the MenuViewHelperTrait. Resolves: #82507 Releases: 7.6 Change-Id: I99a610e612545648d7637e4a441dcdd1b1e51adc Reviewed-on: https://review.typo3.org/54167 Tested-by:
Johannes Kasberger <johannes.kasberger@reelworx.at> Tested-by:
-
- Sep 11, 2017
-
-
Philipp Gampe authored
Make sure root level excludes are prefix with a forward slash (/). Sort the .gitignore into logical groups. Releases: 7.6, 8.7, master Resolves: #81992 Change-Id: If1cb4105e57fb7ab3c28448abc3eaeb898da60e3 Reviewed-on: https://review.typo3.org/54113 Tested-by:
-
- Sep 09, 2017
-
-
Tymoteusz Motylewski authored
addTypoScriptToTemplateRecord method was added to FunctionalTestCase.php in Testing Framework. So we can remove it from test cases. Fix two other gremlins also (unneeded comment and unused variable). Resolves: #82401 Releases: master, 8.7, 7.6 Change-Id: I8144bae5a807d60123ef5228a44eba579a7705c7 Reviewed-on: https://review.typo3.org/54060 Tested-by:
Tymoteusz Motylewski <t.motylewski@gmail.com> Tested-by:
-
- Sep 08, 2017
-
-
Alexander Opitz authored
Resolves: #82275 Releases: master, 8.7, 7.6 Change-Id: I77dc811456f4bbd759e28c27284c4652ad09dd23 Reviewed-on: https://review.typo3.org/54042 Tested-by:
-
Andreas Fernandez authored
If any callback is registered by `SplitButtons.addPreSubmitCallback()` and requests to stop the event by `stopPropagation()`, the event must be aborted and not only possibly stacked events. Additionally, the `preventExec` flag gets reset. Resolves: #82355 Related: #77942 Releases: master, 8.7, 7.6 Change-Id: Ib8478ef4c51915365c804c1c408b3fc16a13da0b Reviewed-on: https://review.typo3.org/54033 Tested-by:
-
Alexander Opitz authored
Resolves: #82322 Releases: master, 8.7, 7.6 Change-Id: I31f7bc2db61337e10be7ffd44ac294b77c44d07b Reviewed-on: https://review.typo3.org/53986 Reviewed-by:
-
- Sep 07, 2017
-
-
Tymoteusz Motylewski authored
Functional tests checking Extbase rendering of tt_content records with FAL images. Also fixes two typos in fixture data. Resolves: #82298 Releases: master, 8.7, 7.6 Change-Id: I2cddf81a99b08df46a7fd03dc0e54b41b10452e5 Reviewed-on: https://review.typo3.org/53921 Reviewed-on: https://review.typo3.org/53952 Tested-by:
-
Tymoteusz Motylewski authored
Cover getContentObject related methods of ContentObjectRenderer by unit tests. Resolves: #80737 Releases: master, 8.7, 7.6 Change-Id: Ida957cd18c35d10cfc41f954ffdc15e0a04c03a8 Reviewed-on: https://review.typo3.org/53943 Tested-by:
-
- Sep 06, 2017
-
-
Tymoteusz Motylewski authored
Functional tests checking TypoScript rendering of tt_content records with FAL images. It also backports small change to testing-framework, required for this patch to work. https://github.com/TYPO3/testing-framework/pull/30 Releases: master, 8.7, 7.6 Resolves: #82187 Change-Id: I5889ab13183b28dc2ff1ccc2c00c18f01ceacc76 Reviewed-on: https://review.typo3.org/53919 Tested-by:
-
- Sep 05, 2017
-
-
Benni Mack authored
Change-Id: I20e4b22c6447b6c83d6c3850217f4c005f073861 Reviewed-on: https://review.typo3.org/53910 Reviewed-by:
-
Benni Mack authored
Change-Id: Iaed11281eaa6ba0be86396a7dd9b412873cbfe49 Reviewed-on: https://review.typo3.org/53909 Reviewed-by:
-
Oliver Hader authored
Releases: master, 8.7, 7.6 Change-Id: I167c68d7d04dd4b8c876b1f6f8f939cf3d933478 Reviewed-on: https://review.typo3.org/53907 Tested-by:
-
Susanne Moog authored
Some web servers allow and accept pht files as PHP files and execute them. Thus, pht should be part of the default file deny pattern and PHP file extensions. Resolves: #82078 Releases: master, 8.7, 7.6 Security-Commit: 548472d3d9dde59c6f9736666184b3853b734e0a Security-Bulletin: TYPO3-CORE-SA-2017-007 Change-Id: Idcd7b13383c10935469f23826297f59a7362f693 Reviewed-on: https://review.typo3.org/53896 Reviewed-by:
-
Susanne Moog authored
TYPO3 does no longer send the concrete TYPO3 version as part of the default User-Agent header when doing requests. Resolves: #82072 Releases: master, 8.7, 7.6 Security-Commit: 5c4ded6108c4cb6c94ac11c58a4a9b9a1437ff25 Security-Bulletin: TYPO3-CORE-SA-2017-006 Change-Id: Icd6eb811ef96110d9c2636b5910a46186d248372 Reviewed-on: https://review.typo3.org/53895 Reviewed-by:
-
Georg Ringer authored
If a user creates a sys_file_collection record, only those storage records must be shown which are allowed for the user. Resolves: #82029 Releases: master, 8.7, 7.6 Security-Commit: 3434e003fe61229e099fb80328ceda58e52c2eb0 Security-Bulletin: TYPO3-CORE-SA-2017-005 Change-Id: I41ea240e36b2a2834d385836477958652b3116a8 Reviewed-on: https://review.typo3.org/53894 Reviewed-by:
-
