- Aug 05, 2024
-
-
Georg Ringer authored
The information about the allowed content types (typically CType) has been added to the user information in the beuser module. Resolves: #98590 Releases: main, 12.4 Change-Id: Ifb1377424d064071a90e0f5238c037ec4b347e4e Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85459 Tested-by:
core-ci <typo3@b13.com> Tested-by:
Georg Ringer <georg.ringer@gmail.com> Reviewed-by:
-
- Aug 03, 2024
-
-
Corinne van der Zande authored
Previously, using the property cols="inline" doesn't have an effect for checkboxes with renderType checkboxToggle. This patch resolves this issue and introduces a test case in typo3/cms-styleguide. Resolves: #104487 Releases: main, 12.4 Change-Id: I2581bb462af80f2336b0cac76ce955e6b7411463 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85504 Tested-by:
-
Mathias Bolt Lesniak authored
SiteResolving will now correctly interpret a temporary ID of a new page (e.g., "NEW12345678ABCDEF") as an invalid ID and try to infer the site using `$result['effectivePid']`. This makes it possible to access site configuration properties within the TCA also on pages that have yet to be created. Resolves: #103573 Releases: main, 12.4, 11.5 Change-Id: I174e71e084e96b24ebe721ad0336a3dd1a8115d9 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85457 Tested-by:
Andreas Kienast <a.fernandez@scripting-base.de> Reviewed-by:
-
- Aug 02, 2024
-
-
Bastien Lutz authored
When creating a page with access set to "Show at any login" and trying to view that page with the admin panel "simulate user group" preview, the page is not displayed. This is because the provided frontend user does not contain the special group -2. Resolves: #104484 Releases: main, 12.4 Change-Id: I4504cdcadbdd6df217f74d258cd7e182ea23796e Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85456 Tested-by:
Benni Mack <benni@typo3.org> Tested-by:
-
Oliver Bartsch authored
In large installations, it's common to add sites, having site root option set, bundled into folders or similar structurs. Therefore, the auto creation of site configurations now also works for pages added with the site root option set on all levels. Resolves: #104531 Releases: main, 12.4 Change-Id: I8c5989754c34fef4a303ff3db497178f3366bf6e Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85455 Reviewed-by:
Oliver Bartsch <bo@cedev.de> Tested-by:
-
- Aug 01, 2024
-
-
Marcel Küpper authored
Namespace declaration did not match Fluid namespaces. This patch fixes the namespaces for the EXT:felogin partials. Also an unnecessary usage of a namespace fluid pointing to the TYPO3Fluid package was moved to the namespace f. Resolves: #104511 Releases: main, 12.4 Change-Id: Idafc5595177b312440e6a7bda18634df73bfb5be Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85453 Tested-by:
-
Georg Ringer authored
With the CKEditor5 unbundling in #102099, we can now ship free (GPL-2 licensed) CKEditor5 modules, that may be useful, for some installations, without the need to ship them for all installations in a big bundle. npm install --save \ @ckeditor/ckeditor5-highlight@41.4.2 \ @ckeditor/ckeditor5-language@41.4.2 \ @ckeditor/ckeditor5-mention@41.4.2 npm run build Releases: main, 12.4 Resolves: #101128 Related: #102099 Related: #99670 Change-Id: Ic7b88985c64c59c65ee8502e50d74c3206636893 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85452 Tested-by:
-
- Jul 31, 2024
-
-
Markus Sommer authored
Resolves: #104513 Releases: main, 12.4, 11.5 Change-Id: I73d4d5eac80e3bd637fa2fabd7b1d1948daf357c Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85429 Tested-by:
Stefan Bürk <stefan@buerk.tech> Tested-by:
-
Georg Ringer authored
An editor might not have access to the 1st storage defined (usually fileadmin). To avoid an exception, an additional check compares the default storage to the available ones. Resolves: #103897 Releases: main, 12.4 Change-Id: Ib2d4dc758a2ad95298479122bd7302bb008b3c20 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85424 Reviewed-by:
-
- Jul 30, 2024
-
-
Garvin Hicking authored
In case a `sys_log` entry is deleted via the `belog` backend module, an error was thrown. This only happened for log entries with `details_nr` 11 or 12 (PHP errors) AND where placeholder values in the column `details` were used. Then the backend log module would try to delete all rows only with the exactly matching, substituted log details, so that not too many records would be deleted (with different placeholders). The code for this tried to unserialize the log data, which led to the created delete-query utilizing an array as named parameter placeholder value, which then threw an error. The solution is to use the actual raw data for the query comparison, which is what this patch does. Then the exact contents of the fields `details` and `log_data` will be used to delete all matching rows. Resolves: #104494 Releases: main, 12.4 Change-Id: I393b918919340eb279c62136feec2f27eeac708f Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85414 Tested-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
-
- Jul 29, 2024
-
-
Thomas Hohn authored
In the RestoreRegisterContentObject::render method a call to array_pop is performed. The result is assigned to the variable $frontendController->register which has type array. However array_pop can return null, this patch add's a null coalesce operator to ensure that correct type. Resolves: #104495 Releases: main, 12.4, 11.5 Change-Id: I46efce10e4322ff3cd39b5a0eeafd1f768644e38 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85358 Tested-by:
-
- Jul 25, 2024
-
-
Stefan Bürk authored
With #93223 minor index handling within the Database Analyzer Stack was fixed. Via DBAL 4 changes in "main" (and not 12.4), some variable names in loops were changed. When backporting #93223 to 12.4, these changes were not carried over, which led to an inner loop re-using a variable name from the outer loop. Due to this, the index name generation could not properly recognize all renamed keys, and only the last renamed key was recognized in the Database Analyzer. This patch adjusts the inner and outer loop variable names to be unique and in line with what is in place in "main". Resolves: #104449 Related: #93223 Releases: 12.4 Change-Id: Id2aeefad661188c1fe458c773f571abdf9bfb0bf Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85379 Tested-by:
Garvin Hicking <gh@faktor-e.de> Tested-by:
Sergio Catalá <cajondesartre@gmail.com> Reviewed-by:
-
Christian Kuhn authored
Youngest patch levels add a finding. Fit it codewise and raise. > composer req --dev phpstan/phpstan:^1.11.8 Resolves: #104478 Releases: main, 12.4 Change-Id: I21830f4a36094dd6c279715a0571a2f2ad911afa Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85383 Tested-by:
-
Garvin Hicking authored
In #102557 additional sprintf() placeholders were added, but were missing to be introduced to `DataStructureIdentifierListener`. This change propagates the needed identifier to the output, too. Resolves: #104433 Related: #102557 Releases: main, 12.4 Change-Id: Idb4f3f37f8fb347d77f3ca0038962a7280291930 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85380 Tested-by:
-
Benni Mack authored
Resolves: #104396 Releases: main, 12.4 Change-Id: I28404ae44961918f372dd3b3c8e8de4e138e09c0 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85355 Tested-by:
-
Markus Klein authored
* ext:form is FE an extbase plugin and operates with an extbase request created by extbase bootstrap (or by FluidTemplateContentObject, but that's a different story). * ConfirmationFinisher has option 'contentElementUid', which - when set - creates a ContentObjectRenderer to render specific content elements. * ContentObjectRenderer then often renders this content element using FluidTemplateContentObject. Various code within Fluid rendering then applies magic to create new requests, *if* an extbase request is given. This can lead to broken template resolving when rendering in FluidTemplateContentObject. This entire thing is quite messy. We're taking measures to resolve the underlying flaws in v13. To fix the situation in v12, the idea is like that: When ConfirmationFinisher calls ContentObjectRenderer and hands over its request, it should "free" that request from its own extbase context to not trigger pollution by code that does things if an extbase request is given. Note this was not an issue in v11 since only v12 started handing over the extbase request to ContentObjectRenderer, in v11 it was indirectly pulled from $GLOBALS['TYPO3_REQUEST'] within ContentObjectRenderer, which is the "original" request before it is turned into an extbase request by extbase plugin bootstrap. Resolves: #104462 Related: #100623 Related: #104472 Related: #104471 Related: #104473 Releases: main, 12.4 Change-Id: Id53bc9f159dc2575a8bedb63cd7e7a039864f92b Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85376 Tested-by:
-
- Jul 24, 2024
-
-
Georg Ringer authored
Resolves: #99197 Releases: main, 12.4 Change-Id: I9ac78c5a7ef29f0390dbe7d5dd0004472382eea8 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85352 Reviewed-by:
-
Georg Ringer authored
ProcessedFile::getSize() can call AbstractFile::getSize which can return null instead of integer which is required as return type. Add a type cast to avoid exceptions. Backport the changes done already in v13 with #101327. Resolves: #103777 Related: #101327 Releases: 12.4 Change-Id: Ie42cb69c045d5c586a7ce34cd4dee545ec6233b9 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/84445 Reviewed-by:
-
Andreas Kienast authored
This commit updates the package `requirejs` to version 2.3.7 to fix a prototype pollution vulnerability [1]. [1] https://github.com/requirejs/requirejs/compare/2.3.6...2.3.7 Resolves: #104459 Releases: 12.4, 11.5 Change-Id: I73a62c7e4e715954db5802d0a46d5758c407ac7a Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85334 Tested-by:
Andreas Nedbal <andy@pixelde.su> Reviewed-by:
-
- Jul 23, 2024
-
-
Lina Wolf authored
So that they can be properly linked in api.typo3.org and IDEs. Releases: main, 12.4 Resolves: #104439 Change-Id: Id01abd68ec8f8238a70aa900a17fd33917ffd67e Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85339 Tested-by:
-
- Jul 19, 2024
-
-
Sandra Erbel authored
Missing definition provided and wording corrected. Releases: main, 12.4 Resolves: #104429 Change-Id: I59bca54826557e7633ce837c73df6d38cda24742 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85308 Reviewed-by:
-
Stephan Großberndt authored
Disables spell checking in the changePassword form of EXT:felogin See issue #98492 for details. Resolves: #104437 Related: #98492 Related: #98504 Releases: main, 12.4 Change-Id: I4ec8056867ac55b00a542c1527f028c234a064c3 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85207 Tested-by:
Stephan Großberndt <stephan.grossberndt@typo3.org>
-
Stephan Großberndt authored
Resolves: #104438 Releases: main, 12.4 Change-Id: I4ef127561e45d72c03beb9db08a2a081aa59ddca Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85307 Tested-by:
-
Oliver Hader authored
Fixes an array key warning in $backendUser->groupData['webmounts']. Resolves: #104430 Releases: main, 12.4, 11.5 Change-Id: I077c59c67067f6221288ca4a73589dcc9c69bd07 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85297 Tested-by:
Oliver Hader <oliver.hader@typo3.org> Tested-by:
-
Andreas Kienast authored
Historically, FormEngine UI mangles dates from one format to another and feeds the result back to the date picker, crossing fingers nothing goes wrong. This bites hard when it comes to non-standard date formats, basically everything but `d-m-Y`. To lay the groundwork on tackling the date format issue, FormEngine now always works with ISO8601 dates internally, allowing to get rid of some helper methods. Resolves: #104309 Releases: main, 12.4 Change-Id: Iafac126f8f02b6dba6f2623f1e7790c6c6fb9bb4 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85243 Tested-by:
Benjamin Franzke <ben@bnf.dev> Tested-by:
-
Georg Ringer authored
Remove the usage of the RawViewHelper in the list view of distributions as also the single view doesn't allow any HTML. Resolves: #97930 Releases: main, 12.4 Change-Id: I6b4fceb7adcb6c7e396140a28d2a50a9dd136029 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85203 Tested-by:
-
Garvin Hicking authored
The Changelog mistakenly referred to "PageRenderer::loadJavaScriptModules" (even though the example code itself was right). To avoid confusion of the method not being static, the notation is also changed from "::" to "->" to indicate a non-static class member method. Resolves: #104428 Releases: main, 12.4 Change-Id: I82827590ea2c852522b487986ff95159204b5b70 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85290 Tested-by:
-
- Jul 18, 2024
-
-
Markus Klein authored
Referencing xmlns namespaces in Fluid using https://typo3.org/ns/... does not work. Fluid only searches for http://typo3.org/ns/. While this is not critical for the default "f" namespace, the core should serve as a good example. Resolves: #104416 Releases: main, 12.4 Change-Id: I698347c3cb6a2b89fd9b3de9dd24e5dabf373be0 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85204 Tested-by:
-
Ayke Halder authored
This patch corrects the misusage of anchor elements instead of buttons for controlling sortable selects. In addition we are adding the existing labels to the buttons to support visually impaired users. Resolves: #104414 Related: #102783 Releases: main, 12.4 Change-Id: If80f62db06bda61250d09bc4727a7ec708f02757 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85282 Tested-by:
-
- Jul 15, 2024
-
-
Georg Ringer authored
Remove the spread operator when merging page ids for generating a constraint on the pids in the suggestOptions. Resolves: #102846 Releases: main, 12.4 Change-Id: Id0a55cc9c02473faf3efe48192e86e97b6d76785 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85202 Tested-by:
-
- Jul 13, 2024
-
-
Garvin Hicking authored
With #103898 the handling of `handleRootPackage()` was streamlined. This lead to root packages' paths not being set to the base dir of the composer installation any more. The missing code is now added again. Resolves: #104345 Related: #103898 Releases: main, 12.4 Change-Id: I8c66d88ffcacddc2c825964d393d7446db551e68 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85198 Tested-by:
Nikita Hovratov <nikita.h@live.de> Tested-by:
Helmut Hummel <typo3@helhum.io> Reviewed-by:
-
Nikita Hovratov authored
This may happen if the CType is not defined via TCA but rather through page TSConfig or itemsProcFunc. This is really an edge-case, which was found during experiments on backend previews for something else than tt_content records. Still, the above scenario may theoretically happen and can easily be reproduced. Resolves: #102823 Releases: main, 12.4 Change-Id: I7ed54ef339578fc6646c4baeacae7db6fe4c1048 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85199 Tested-by:
-
- Jul 12, 2024
-
-
Garvin Hicking authored
When a CType content element is registered with an empty label, the page preview of that element showed a warning: INVALID VALUE ("myPlugin") which is actually misleading, because not the value itself is wrong, but the label is missing. A new language variable is introduced to distinguish the difference of this misconfiguration issue, and now emits: MISSING LABEL ("myPlugin") Resolves: #104299 Releases: main, 12.4 Change-Id: I7fedaaa017c37f65841c0f00bafa42dd78fc91ef Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85241 Tested-by: -
Garvin Hicking authored
Resolves: #90503 Releases: main, 12.4 Change-Id: I3aa078bf231211580aa8f29c11860e002e7be2d0 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85240 Tested-by:
-
Christian Kuhn authored
BcryptPasswordHash has an option to set a cost value. The lower barrier used to be identical to PHP constant PASSWORD_BCRYPT_DEFAULT_COST. Tests use the lower barrier to speed up tests. With PHP <8.4, PASSWORD_BCRYPT_DEFAULT_COST is 10, it has been raised to 12 with PHP 8.4. The patch frees our code from access to this constant and hard codes 10 as lower barrier check. This keeps the API as is, and this hash is by default set to 12 already in default options if none are provided. Resolves: #104373 Releases: main, 12.4, 11.5 Change-Id: I4c1e94fdc50aa3075570549ccdd3b81a2de2e98a Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85236 Tested-by:
-
Georg Ringer authored
As only `Resources\File` provides the method `setMissing` an additional check is provided - just as on multiple other places in the class. Resolves: #95102 Releases: main, 12.4 Change-Id: I75dc0cb29c3f66e06e9658d9c5cb27da3a6ca816 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85197 Tested-by:
-
Oliver Bartsch authored
When using boolean attributes there are two things to consider: 1. The default value must be FALSE 2. Presence of the attribute always means TRUE It's therefore not possible to have a boolean attribute, which defaults to TURE and it's also not possible to set an attribute to FALSE via its value (e.g. "0" or "false). See for reference: https://html.spec.whatwg.org/multipage/common-microsyntaxes.html#boolean-attributes Therefore, to properly handle the "is writeable" state in the language packs module, the default is set to FALSE an the attribute only gets added (which defines the TRUE state) in case corresponding data attribute is set in the template. Resolves: #104353 Releases: main, 12.4 Change-Id: I82f440ae4fbeba405c35bbfa859804e2bc0660c0 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85239 Tested-by:
-
Oliver Bartsch authored
The `OtherLanguageThumbnails` field wizard renders thumbnails of each crop variant from the default language for images in translations. However, on the first view, the cropped (processed) image is not created yet, leading to the public url being an absolute url to the `image_processing` route, e.g. "https://example.com/typo3/image/process?token=abc&id=123". This URL can not be used by `getIconHtml()` to create the markup. However the function call is not needed at all, since we can just render the markup directly as no icon is about to be generated. Resolves: #104355 Releases: main, 12.4 Change-Id: Ic624f8fd7114da18e01d7f33a9c8714bc8db026c Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85238 Tested-by:
-
Torben Hansen authored
When a CKEditor configuration by intention does not include the `softhyphen` toolbar item, the item is automatically added in `CKEditor5Migrator`. This change removes the forcibly added softhyphen toolbar item, allowing integrators to create a CKEditor configuration that does not include the `softhyphen` toolbar item. Resolves: #103919 Releases: main, 12.4 Change-Id: I72a926a75e5c1b791d90921b0ff4c94eb7e938b1 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85196 Tested-by:
-
- Jul 11, 2024
-
-
Xavier Perseguers authored
When the plugin is configured to use the referrer to redirect after a successful login, it should not honor it when the referrer is the password reset form and the user just updated their password. Resolves: #104214 Resolves: #101581 Related: #21943 Releases: main, 12.4 Change-Id: I6fcf3927de0a7157958c4d20682bfcf5390826c8 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85195 Reviewed-by:
-
