- Mar 23, 2020
-
-
Claus Due authored
Pure metadata change - allows site admin to create a new site which uses Fluid 3.0. A separate change will come in TYPO3 v9. Releases: master Resolves: #90285 Change-Id: I5de150a4a8b7d99b12a50b2b5c9eb36462121f06 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63132 Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Benni Mack <benni@typo3.org> Reviewed-by:
-
Benni Mack authored
This change targets a couple of things: - The global constant "FILE_DENY_PATTERN_DEFAULT" is moved to a class constant - The global constant "PHP_EXTENSIONS_DEFAULT" which is not in use anymore, is removed. - The security aspect of checking against the fileDenyPattern is extracted into its own Class where - The fileDenyPattern can never be empty, but only be set via DefaultConfiguration. This makes it easier to test this functionality, a single object is taking over the responsibility, and the logic is now in one place. Also, the non-usage of the global constant makes life easier. Resolves: #90147 Releases: master Change-Id: I9db0d6fc3b10f75a3735017cb9ac0d9bfd4ff02b Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/62843 Tested-by:
Oliver Hader <oliver.hader@typo3.org> Tested-by:
Georg Ringer <georg.ringer@gmail.com> Reviewed-by:
-
Georg Ringer authored
Due to incomplete editing in the site module or wrong yaml configuration it is possible that an empty static route is defined which will break the complete frontend. Skip empty routes as those don't make any sense. Resolves: #87500 Releases: master, 9.5 Change-Id: I9f5737bf077fd3b2f0c38522ee3ae641c7e5cd21 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63610 Tested-by:
Daniel Goerz <daniel.goerz@posteo.de> Tested-by:
Susanne Moog <look@susi.dev> Reviewed-by:
-
Benni Mack authored
The environment status should show proper information whether both PHP.ini settings have the same value or differ (but post_max_size is higher which is fine). Resolves: #89543 Releases: master, 9.5 Change-Id: Ib589715507d7e929904366cbda9b33b45e254564 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63879 Tested-by:
-
Benni Mack authored
When transforming the workspace notification emails, the option to set an alternative email sender was not added, but is now configurable properly. Resolves: #46634 Releases: master Change-Id: I3c254de90ce2c490f1e076eee60e99c885f91575 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63878 Tested-by:
-
Kay Strobach authored
The previous implementation used two typecasts in a row: from bool to string, and from string to bool again. This caused a boolean false to be cast first to null and then to an empty string instead of to "0". Resolves: #89491 Releases: master, 9.5 Change-Id: I4003dfe1e027437fe6366d21cc05453511f85919 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/62087 Tested-by:
Stefan Froemken <froemken@gmail.com> Tested-by:
-
Benni Mack authored
The hook BackendUtility->preProcessValue() needs more context for the hooks to know what field/table/record is currently processed. This is added as a stdObject now. Resolves: #32169 Releases: master Change-Id: I477d0ad61f0279165f81c772005fd2b3b0c3f0b2 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63877 Reviewed-by:
-
Christian Eßl authored
In the list view of a sysfolder, users could still see the page preview button. The list view is now using the same logic as the page module and the EditDocumentController, that allows for excluding some doktypes from showing the preview button. By default, the page types Recycler, Sysfolder and Spacer are excluded. This behaviour can be overridden by setting the already available pageTSconfig "TCEMAIN.preview.disableButtonForDokType". Resolves: #55300 Releases: master, 9.5 Change-Id: Iad7c651e33928b3ababe84c86222291e0bb6c3cc Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63515 Tested-by:
-
Andreas Fernandez authored
Due to CSS precedences the `sortable-ghost` class must have an important opacity to have any effect, e.g. in IRRE. Resolves: #90807 Releases: master Change-Id: I5d026bc86281b35c6f120d26c35dd468473d3f5a Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63840 Tested-by:
-
Andreas Fernandez authored
This patch debounced or throttles some `scroll` or `resize` events to improve the client performance a bit, as the event listeners aren't executed anymore everytime the event is triggered. Resolves: #90810 Releases: master Change-Id: Id5262eebd004ee4d10d87a83cc17e3f517aca1a8 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63844 Tested-by:
-
Susanne Moog authored
When using `makeCategorizable` with options to overwrite the default field configuration, onChange was not overwritten. This has now been implemented. Resolves: #84799 Releases: master, 9.5 Change-Id: If62dd0472be2214d02b3b6c538d5d35d6d41661a Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63873 Tested-by:
Guido Schmechel <guido.schmechel@brandung.de> Reviewed-by:
-
Benni Mack authored
The internal_type=file was removed in TYPO3 v10, but the Backend Module "DB Check" (lowlevel) still contained lots of parts that are not relevant anymore. This patch cleans up the corresponding parts and simplifies various other places due to the lack of checks of internal_type=file. Resolves: #90816 Releases: master Change-Id: I742fc1ea197837c477415368a674ad8831e10f31 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63872 Tested-by:
-
Benni Mack authored
With PSR-14 events, it is now easier to detect newly created metadata records. For the time being, the pseudo-field "newlyCreated" is removed and the current check is made against "crdate". In addition, a unnecessary unit tests was removed. Resolves: #89020 Releases: master Change-Id: Ifc5e0e0faee6e3b6f7130c2387abbe6e6992109e Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63874 Tested-by:
-
Andreas Fernandez authored
If assets get imported via mass selection in the Element Browser, the order of the items is now kept. Since this requires interframe communication, the Inline Control Container now sends a postMessage to the Element Browser. When the import process starts, the first asset of the selection gets imported. After the import, the postMessage is intercepted and the next asset get imported, until the queue is empty. As this could be a rather lenghty process, a progress bar is rendered at the top of the file table. To get a more fitting naming, all previously used action names used in postMessages have been renamed from `typo3:foreignRelation:inserted` to `typo3:foreignRelation:insert`. As a drive-by fix, the server is not spammed with n request anymore due to queueing. Resolves: #86362 Resolves: #59341 Releases: master Change-Id: Ib9e3ee8d943582874a0a73632968f8660b169b42 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63838 Tested-by:
-
Alexander Schnitzler authored
Used command: composer require friendsoftypo3/phpstan-typo3:"~0.2" --dev Releases: master Resolves: #90811 Change-Id: Ibd9ae856e8046edc67cb7610956ede92c474bf12 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63846 Tested-by:Oliver Klee <typo3-coding@oliverklee.de> Reviewed-by:
-
Susanne Moog authored
The parser for foreign_table_where consists of a basic regex that did not allow the use of field functions due to its character restrictions. The character match group has been adjusted to allow the following chars additionally: ")( Resolves: #82955 Resolves: #88166 Releases: master, 9.5 Change-Id: I0fa9283d920a0aaf2bacf9168d0e35f09c3d57af Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63755 Tested-by:
Oliver Bartsch <bo@cedev.de> Tested-by:
-
Sybille Peters authored
Lists must always be preceeded and followed by a newline. Otherwise they will not get rendered correctly. Resolves: #90805 Releases: master, 9.5, 8.7 Change-Id: I558e486ef556be41bb27873af8d0d67a448064f4 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63837 Tested-by:
Daniel Haupt <mail@danielhaupt.de> Tested-by:
Björn Jacob <bjoern.jacob@tritum.de> Tested-by:
Andreas Fernandez <a.fernandez@scripting-base.de> Reviewed-by:
-
Andreas Fernandez authored
Executing a debounced event listener immediately now sets a timeout to wait until the next execution is invoked. Resolves: #90809 Releases: master Change-Id: I76622c62cacfcf82d737fd93ae5a96fa4e7485a3 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63843 Tested-by:
-
Andreas Fernandez authored
Resolves: #71750 Releases: master, 9.5 Change-Id: Ifc27ee8ed4dffba36098b9e72cac6e39cc775ebd Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63850 Tested-by:
-
Andreas Fernandez authored
Resolves: #86100 Releases: master, 9.5 Change-Id: Ib76a2bbd00cca4a69178049e51f6ca04325b49ec Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63835 Tested-by:
Riccardo De Contardi <erredeco@gmail.com> Tested-by:
-
Georg Ringer authored
The code completion must differ between dots at the end and those in the middle which belong to the key. Instead of just replacing all dots, only the one at the end is used to split the TS into chunks. Resolves: #84534 Releases: master, 9.5 Change-Id: I82890b56d1a95584ddc079cc7e9c930cfaa71830 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63765 Tested-by:
-
Georg Ringer authored
If the file `ENABLE_INSTALL_TOOL` with the content `KEEP_FILE` is available, the login form must be shown instead of the template `ShowEnableInstallToolFile`. Additionally the button to lock the Install Tool is switched to a warning instead. Resolves: #85656 Releases: master, 9.5 Change-Id: I3aed824d099f23b48be0bed890935b9d244953b0 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63831 Tested-by:
Markus Klein <markus.klein@typo3.org> Tested-by:
-
Georg Ringer authored
Use event.key instead of the discouraged event.keyCode. Resolves: #87793 Releases: master, 9.5 Change-Id: Ie26c98fc9d11ed4f5adbe527afbc6ed37056d776 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63833 Tested-by:
-
- Mar 22, 2020
-
-
Susanne Moog authored
There are systems and library combinations that do not allow the usage of more than one thread to generate passwords. To ensure maximum compatibility, the number of threads is reset to its default state. If raising the number makes sense for performance reasons on systems that support it, the setting can still be overwritten by setting `$GLOBALS['TYPO3_CONF_VARS']['BE']['passwordHashing']['options']['threads']`. Resolves: #90612 Releases: master, 9.5 Change-Id: I19e883359737e6882aed40968959eadd8f74f8d1 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63605 Tested-by:
Alexander Schnitzler <git@alexanderschnitzler.de> Tested-by:
-
Andreas Fernandez authored
A new close button is rendered next to the "Open Documents" headline in the dropdown menu which enables to close all open documents at once. Resolves: #89053 Releases: master Change-Id: I4a1a7503cd0140210f4f78148f9dec1312d67dda Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63836 Tested-by:
-
Ivan Dharma Kartolo authored
If the clipboard contains at least one item, a paste button is rendered next to fields of type `group`. With this patch, all items of the clipboard are now pasted into the field. Resolves: #88711 Releases: master, 9.5 Change-Id: Ib8d5d9ab148e8794f54d2665d95721c10f8b7255 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63834 Tested-by:
-
Andreas Fernandez authored
Resolves: #90808 Releases: master, 9.5 Change-Id: Ie06fb7710591bfab8d8892e55bed0716505b7289 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63841 Tested-by:
-
Georg Ringer authored
System maintainers must be admin users which should be checked with a guard clause. This avoids showing the modules to editors whose id is in the list of system maintainers. Resolves: #82616 Releases: master, 9.5 Change-Id: I84cd20d2b84eaa0182c27943ffdcde005980a426 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63832 Tested-by:
-
- Mar 21, 2020
-
-
Benni Mack authored
"GeneralUtility::isRunningOnCgiServerApi()" is now deprecated in favor of "Environment::isRunningOnCgiServer()". Resolves: #90800 Releases: master Change-Id: Ib9e9e38d0e53ca00f3c58eb3255943d57cf7c0e0 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63680 Tested-by:
-
Marco Huber authored
Multi Select fields without any option given will be added properly to the forms __trustedProperties list and therefor no longer cause validation errors. Resolves: #90761 Releases: master, 9.5 Change-Id: I3c73ffbbd38a9a2ae24ed4b271efc1c4ce248d53 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63720 Tested-by:
Marco Huber <mail@marco-huber.de> Tested-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Reviewed-by:
-
Christian Eßl authored
It must not be possible to perform rename/copy/cut/delete actions on a file mount and this is already respected in the FilemountsProvider context menu and used in the filelist svg tree. However, the docheader section in the top right corner of the filelist module showed the wrong context menu for file mounts, which made it possible for editors to perform these actions. Resolves: #90677 Releases: master, 9.5 Change-Id: Iac10b18a4fa3249de9b9c29a0102b3832c933841 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63674 Tested-by:
-
Susanne Moog authored
When using the edit popup of SelectMultipleSideBySide editing is related to the items that are active and selected in the element. The old placement of the edit pencil however suggested that it should be possible to edit all (even inactive items, unrelated to the current record) elements. Whenever an editPopup is configured to be shown in a SelectMultipleSideBySide element, the edit pencil is now placed directly next to the active select items. Resolves: #90777 Releases: master Change-Id: Iac8df9dafca455adb4b18d5bca882fa2ab3bd0cc Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63792 Tested-by:
-
Andreas Fernandez authored
If a record gets deleted via context menu no further handling could be added as the promise returned by AjaxDataHandler is available in an encapsulated scope only. To bypass this issue, the AjaxDataHandler now optionally emits events to listen on. This patch implements event listeners for the record list and the information module of "Template tools". Resolves: #90791 Releases: master Change-Id: I0b659e695f31b2f3ab40adc17421f8b036d5aab6 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63811 Tested-by:
-
Benni Mack authored
The lowlevel cleaner "missing files" detects files like "filepath/file.pdf#page-15" as missing as the "#" is considered part of the filename. A new check now properly detects this. Resolves: #84999 Releases: master, 9.5 Change-Id: Ic394f7d34e993807e932ebc3ac438f31f50dcb32 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63819 Tested-by:
-
Benni Mack authored
When creating a link with TypoLink or Fluid pointing to a file, it is possible (e.g. in PDFs) to use an "anchor" (#) to point to a specific section. This is now possible like this: <f:link.typolink parameter="file:1#page-13">test</f:link.typolink> Resolves: #75213 Releases: master, 9.5 Change-Id: Ia085e6a684894613e20ebcfe5ddf5fdcc883a37e Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63823 Tested-by:
-
Benni Mack authored
This happens when the content element does not exist yet, which is why this needs to be checked properly, otherwise the PHP strict typing error will stop execution of the PHP script. Resolves: #90801 Releases: master, 9.5 Change-Id: I94e5969a312ad876e9bd03b2c75b2de149ba3c61 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63813 Tested-by:
-
Andreas Fernandez authored
The order in JSON objects is not defined and the browser can stringify them in an arbitrary order. Resolves: #88094 Releases: master, 9.5, 8.7 Change-Id: I6b0ef6cb4e3877aa828578ce70e35dad0779da74 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63808 Tested-by:
-
Andreas Fernandez authored
To have a better overview of which packages are actually in TYPO3 itself, matching packages have been moved into the `dependencies` section of package.json. Resolves: #88049 Releases: master, 9.5 Change-Id: Ibe41fb56df4aacbe818508afdc8a3bbb48cc43f5 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63822 Tested-by:
-
Alexander Schnitzler authored
With https://review.typo3.org/c/Packages/TYPO3.CMS/+/59514/ all possibilities have been taken to define which view class to use based on the format query param. As those format query params are still api and in use, the core must reintegrate the former behaviour: Instantiating a JsonView object for requests with a format query param set to 'json'. The implementation is marked as internal as the overall idea is to remove the format param in the long run. Releases: master Resolves: #90788 Change-Id: I62aaa8f44126edbe1238a5a972044f239f3362eb Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63438 Tested-by:
-
Oliver Eglseder authored
useDefaultLanguageRecord is documented to use the default record uid by default. The actual behaviour is the opposite. This change introduces a test and the change, that fixes the evaluation of useDefaultLanguageRecord in the code. Resolves: #87948 Releases: master, 9.5 Change-Id: I9633092089cc74e8a837bf0bfe27e6b3b8d0d229 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/60297 Tested-by:
-
