- Mar 21, 2018
-
-
Oliver Hader authored
This reverts commit 1bd63f45. This change caused a regression which basically affected users of Mozilla Firefox - details are described in issue #84503. Besides that the initial bug report address the frontend part, changing backend login behavior was not required in order for the bug fix. Releases: master, 8.7, 7.6 Resolves: #84503 Reverts: #76120 Change-Id: I45fe6086afa48eed71be635e8cf4a1f3fa138ab2 Reviewed-on: https://review.typo3.org/56396 Tested-by:
TYPO3com <no-reply@typo3.com> Reviewed-by:
Oliver Hader <oliver.hader@typo3.org> Tested-by:
Oliver Hader <oliver.hader@typo3.org> Reviewed-by:
Susanne Moog <susanne.moog@typo3.org> Tested-by:
Susanne Moog <susanne.moog@typo3.org>
-
- Mar 13, 2018
-
-
Oliver Hader authored
Change-Id: Id1f1f992ac62eea7a6bb974a952afa47cf588b8b Reviewed-on: https://review.typo3.org/56137 Tested-by:
TYPO3com <no-reply@typo3.com> Reviewed-by:
Oliver Hader <oliver.hader@typo3.org> Tested-by:
Oliver Hader <oliver.hader@typo3.org>
-
Nicole Cordes authored
This patch adds the name and value of the first submit button found in a form to the input field used to send the form. RsaEncryptionWithLib.min.js created with: ../../../../../../Build/node_modules/uglify-js/bin/uglifyjs \ RsaLibrary.js RsaEncryption.js > RsaEncryptionWithLib.min.js Resolves: #76120 Releases: master, 8.7, 7.6 Change-Id: I3f0fdc7e933267689114d5bcf62d3fcfe2db5146 Reviewed-on: https://review.typo3.org/56104 Reviewed-by:
Stefan Neufeind <typo3.neufeind@speedpartner.de> Tested-by:
Stefan Neufeind <typo3.neufeind@speedpartner.de> Tested-by:
TYPO3com <no-reply@typo3.com> Reviewed-by:
Andreas Fernandez <a.fernandez@scripting-base.de> Tested-by:
Andreas Fernandez <a.fernandez@scripting-base.de>
-
- Feb 06, 2018
-
-
Oliver Hader authored
Change-Id: I74d839719a841d19b23241af87c1f5cfbc012d7f Reviewed-on: https://review.typo3.org/55574 Tested-by:
TYPO3com <no-reply@typo3.com> Reviewed-by:
Benni Mack <benni@typo3.org> Tested-by:
Benni Mack <benni@typo3.org>
-
Oliver Hader authored
Change-Id: I58a85b55724c2a4072a7ceec900cab685a0a834b Reviewed-on: https://review.typo3.org/55573 Reviewed-by:
Oliver Hader <oliver.hader@typo3.org> Tested-by:
Oliver Hader <oliver.hader@typo3.org>
-
- Jan 18, 2018
-
-
Oliver Hader authored
Composer license definition GPL-2.0+ has been deprecated and has to be replaced with GPL-2.0-or-later. Resolves: #83607 Releases: master, 8.7, 7.6, 6.2 Change-Id: I6113bc3a90cb6a56830b930522dde2eaacd5025e Reviewed-on: https://review.typo3.org/55395 Tested-by:
TYPO3com <no-reply@typo3.com> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch> Reviewed-by:
Oliver Hader <oliver.hader@typo3.org> Tested-by:
Oliver Hader <oliver.hader@typo3.org>
-
- Jan 04, 2018
-
-
Andreas Fernandez authored
Resolves: #83453 Releases: master, 8.7, 7.6 Change-Id: I40654f5c230e0e91b3b479dd1c07eb087e639051 Reviewed-on: https://review.typo3.org/55249 Tested-by:
TYPO3com <no-reply@typo3.com> Reviewed-by:
Jigal van Hemert <jigal.van.hemert@typo3.org> Tested-by:
Jigal van Hemert <jigal.van.hemert@typo3.org>
-
- Sep 20, 2017
-
-
Oliver Hader authored
Change-Id: I2ac58940eef04059791b3ef8b76f7c2223e15b28 Reviewed-on: https://review.typo3.org/54169 Tested-by:
TYPO3com <no-reply@typo3.com> Reviewed-by:
Oliver Hader <oliver.hader@typo3.org> Tested-by:
Oliver Hader <oliver.hader@typo3.org>
-
- Sep 05, 2017
-
-
Benni Mack authored
Change-Id: I20e4b22c6447b6c83d6c3850217f4c005f073861 Reviewed-on: https://review.typo3.org/53910 Reviewed-by:
Benni Mack <benni@typo3.org> Tested-by:
Benni Mack <benni@typo3.org>
-
- Jul 25, 2017
-
-
Benni Mack authored
Change-Id: I72f40ace329660419159fef87a2747a58b1cc4e7 Reviewed-on: https://review.typo3.org/53591 Tested-by:
TYPO3com <no-reply@typo3.com> Reviewed-by:
Benni Mack <benni@typo3.org> Tested-by:
Benni Mack <benni@typo3.org>
-
- Jul 04, 2017
-
-
Benni Mack authored
Change-Id: I681f52006af409b3430b2c39d90ad62aefde796c Reviewed-on: https://review.typo3.org/53390 Tested-by:
TYPO3com <no-reply@typo3.com> Reviewed-by:
Benni Mack <benni@typo3.org> Tested-by:
Benni Mack <benni@typo3.org>
-
Benni Mack authored
Change-Id: I60e2cb94a00d9add16b7609e6002ab229a341c0e Reviewed-on: https://review.typo3.org/53389 Reviewed-by:
Benni Mack <benni@typo3.org> Tested-by:
Benni Mack <benni@typo3.org>
-
- Jan 26, 2017
-
-
Anja Leichsenring authored
With the update of cs-fixer to version 2.0, some checks got minor changes in behaviour. The core follows now in applying those suggested changes. Change-Id: I1326b698da1a9615729733d8408b583d150de284 Resolves: #79469 Relates: #79361 Releases: master, 7.6 Reviewed-on: https://review.typo3.org/51433 Tested-by:
TYPO3com <no-reply@typo3.com> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch>
-
- Jan 07, 2017
-
-
Wouter Wolters authored
Resolves: #79165 Releases: master, 7.6, 6.2 Change-Id: Ia3211ad00a3b6bd915b0a099bdb8d98a8b12dc7f Reviewed-on: https://review.typo3.org/51176 Tested-by:
TYPO3com <no-reply@typo3.com> Reviewed-by:
Wouter Wolters <typo3@wouterwolters.nl> Tested-by:
Wouter Wolters <typo3@wouterwolters.nl>
-
- Nov 07, 2016
-
-
Christian Kuhn authored
The files were substituted with "Settings.cfg" a while ago and are now obsolete according to the docs team. Change-Id: I43f2a6fca83f839359d5c1b0c1bb4f0cf967e253 Resolves: #78595 Releases: master, 7.6 Reviewed-on: https://review.typo3.org/50527 Tested-by:
TYPO3com <no-reply@typo3.com> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch>
-
- Oct 31, 2016
-
-
Frank Naegler authored
This patch removes the hard dependency to RsaEncryptionModule and adds a check if the module can be loaded. It on the go adds a hardening to the RsaEncryptionModule to avoid registration of form event handlers twice, which is now needed to cover all potential loading orders of RsaEncryptionModule and LoginRefresh. Resolves: #78299 Related: #75911 Releases: master, 7.6 Change-Id: Ie03f1c7bc34e48f03213dec70c62d8ccc339ab31 Reviewed-on: https://review.typo3.org/50239 Tested-by:
TYPO3com <no-reply@typo3.com> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch>
-
Michael Oehlhof authored
Resolves: #78411 Releases: master, 7.6 Change-Id: I47273726595639621c988910a537b205f49be13c Reviewed-on: https://review.typo3.org/50454 Tested-by:
TYPO3com <no-reply@typo3.com> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch>
-
- Aug 30, 2016
-
-
Wouter Wolters authored
As decided during T3ACME we will use the short array syntax in master. The 7.6 branch will also be done to make backporting easier. Resolves: #77692 Releases: master,7.6 Change-Id: I37e9484b1012fc9161148257a842054c24d162ba Reviewed-on: https://review.typo3.org/49660 Tested-by:
Bamboo TYPO3com <info@typo3.com> Reviewed-by:
Susanne Moog <susanne.moog@typo3.org> Tested-by:
Susanne Moog <susanne.moog@typo3.org> Reviewed-by:
Georg Ringer <georg.ringer@gmail.com> Tested-by:
Georg Ringer <georg.ringer@gmail.com>
-
- Aug 29, 2016
-
-
Helmut Hummel authored
The RsaEncryption and the LoginRefresh module are loaded independently by requireJS, which means they are loaded asynchronous. This means that either one of those modules is initialized first. However the RsaEncryption module scans the DOM for form elements and the LoginRefresh inserts a form. This means if the RsaEncryption is initialized first, then the form created by LoginRefresh will not be intercepted, leading to the (heisen-)bug described. This change enforces the loading order by adding the RsaEncryption as dependency to LoginRefresh and registering the form manually, to make sure it will be intercepted and passwords will transmitted encrypted. Resolves: #75911 Releases: 7.6, master Change-Id: Ib4aba70b3545f163a16a4eee62bed9e5a48b2fe7 Reviewed-on: https://review.typo3.org/49478 Tested-by:
Bamboo TYPO3com <info@typo3.com> Reviewed-by:
Andreas Fernandez <typo3@scripting-base.de> Tested-by:
Andreas Fernandez <typo3@scripting-base.de>
-
- Jul 22, 2016
-
-
Helmut Hummel authored
Previously an active and valid session was dismissed, if login credentials are sent again. Now we do not start the user authentication if we have a valid session. This also fixes weird side effects during backend login, when it says that token is not valid. Resolves: #76995 Releases: master, 7.6 Change-Id: Ia070493eb99ff395c67e0ac40e85b5e8fe7debd3 Reviewed-on: https://review.typo3.org/48865 Reviewed-by:
Markus Klein <markus.klein@typo3.org> Tested-by:
Markus Klein <markus.klein@typo3.org> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch>
-
- Apr 30, 2016
-
-
Nicole Cordes authored
To enforce Chrome to respect the disabled autocompletion for fields, the value of the autocomplete attribute is set to some semantic value. Resolves: #75809 Releases: master, 7.6 Change-Id: Ib30fdfe7d7a9ff3f564b8e016331a0706ff0db01 Reviewed-on: https://review.typo3.org/47973 Reviewed-by:
Susanne Moog <typo3@susannemoog.de> Tested-by:
Susanne Moog <typo3@susannemoog.de> Reviewed-by:
Helmut Hummel <helmut.hummel@typo3.org> Tested-by:
Helmut Hummel <helmut.hummel@typo3.org>
-
- Apr 25, 2016
-
-
Stefan Neufeind authored
When deleting the rsa key from the database we now remove the PHP cookie as well in order to keep the system cleaned up. Change-Id: I037deabf0a60e6ad785678b60424b3cc49af77b0 Resolves: #61016 Releases: master, 7.6 Reviewed-on: https://review.typo3.org/47901 Reviewed-by:
Frank Naegler <frank.naegler@typo3.org> Tested-by:
Frank Naegler <frank.naegler@typo3.org>
-
- Jan 01, 2016
-
-
Benni Mack authored
Resolves: #72501 Releases: master, 7.6, 6.2 Change-Id: I6b2636913da50e6b79ea3990175914add03a6cf3 Reviewed-on: https://review.typo3.org/45545 Reviewed-by:
Benni Mack <benni@typo3.org> Tested-by:
Benni Mack <benni@typo3.org>
-
- Nov 20, 2015
-
-
Wouter Wolters authored
Resolves: #71726 Releases: master Change-Id: I4a356c8da668acee555149eee9cf56ccdb4dc0ee Reviewed-on: https://review.typo3.org/44822 Reviewed-by:
Andreas Fernandez <typo3@scripting-base.de> Tested-by:
Andreas Fernandez <typo3@scripting-base.de> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch>
-
- Oct 31, 2015
-
-
Gernot Schulmeister authored
It was requested by the documentation team to add a Settings.cfg to all extensions that have a Settings.yml file. Resolves: #71133 Releases: master Change-Id: I10504557270d6e3d2fe49ad5e4ee41c3851493b7 Reviewed-on: https://review.typo3.org/44362 Reviewed-by:
Martin Bless <m.bless@gmx.de> Tested-by:
Martin Bless <m.bless@gmx.de> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch>
-
- Oct 23, 2015
-
-
Frank Nägler authored
Resolves: #70966 Releases: master Change-Id: Ic78753be0facd860e5ab30ce6d7340e040dee59c Reviewed-on: https://review.typo3.org/44170 Reviewed-by:
Wouter Wolters <typo3@wouterwolters.nl> Tested-by:
Wouter Wolters <typo3@wouterwolters.nl> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch>
-
- Oct 22, 2015
-
-
Christian Kuhn authored
Resolves: #25111 Releases: master Change-Id: I2040b9e3dd5b6fdc17c011f2de9e8dbb8468118e Reviewed-on: https://review.typo3.org/44129 Reviewed-by:
Markus Klein <markus.klein@typo3.org> Tested-by:
Markus Klein <markus.klein@typo3.org> Reviewed-by:
Wouter Wolters <typo3@wouterwolters.nl> Tested-by:
Wouter Wolters <typo3@wouterwolters.nl>
-
- Oct 15, 2015
-
-
Markus Klein authored
Also remove useless closures and public exposure of modules, which are not used via the TYPO3 global. Moreover use single quotes for 'use strict' consistently. Resolves: #70601 Releases: master Change-Id: If7183f91a5b9fab320cea8eb1759e78b47141984 Reviewed-on: http://review.typo3.org/43999 Reviewed-by:
Daniel Goerz <ervaude@gmail.com> Tested-by:
Daniel Goerz <ervaude@gmail.com> Reviewed-by:
Andreas Fernandez <typo3@scripting-base.de> Tested-by:
Andreas Fernandez <typo3@scripting-base.de>
-
- Oct 12, 2015
-
-
Frank Nägler authored
The namespace and name of an AMD module is not needed. The resolving of names works without the defined name of a module and should be removed to anonymize the modules. Resolves: #70607 Releases: master Change-Id: I9e1a81d30de7764ffbccf0b0985b55ed5b6cb96d Reviewed-on: http://review.typo3.org/44002 Reviewed-by:
Wouter Wolters <typo3@wouterwolters.nl> Tested-by:
Wouter Wolters <typo3@wouterwolters.nl> Reviewed-by:
Markus Klein <markus.klein@typo3.org> Tested-by:
Markus Klein <markus.klein@typo3.org>
-
- Oct 09, 2015
-
-
TYPO3 Release Team authored
In our efforts to achieve a better interoperability with other PHP projects, the PHP code base of the TYPO3 Core switches to the PHP coding guideline standard PSR-2. See http://www.php-fig.org/psr/psr-2/ for more information. Resolves: #70515 Releases: master Change-Id: I734c0d838af157003decfeb5fc0a11dddcb87bf5 Reviewed-on: http://review.typo3.org/43918 Reviewed-by:
TYPO3 Release Team <typo3cms@typo3.org> Tested-by:
TYPO3 Release Team <typo3cms@typo3.org>
-
- Oct 08, 2015
-
-
Zsolt Molnar authored
This patch adds an additional TCA configuration for input fields to switch on or off auto completion. This is used for username and password fields for frontend and backend users. Resolves: #70126 Releases: master Change-Id: I1bda9e19826ca975a4e3f56d3f67b82e898e8c2e Reviewed-on: http://review.typo3.org/43883 Reviewed-by:
Nicole Cordes <typo3@cordes.co> Tested-by:
Nicole Cordes <typo3@cordes.co> Reviewed-by:
Andreas Fernandez <typo3@scripting-base.de> Reviewed-by:
Georg Ringer <georg.ringer@gmail.com> Tested-by:
Georg Ringer <georg.ringer@gmail.com> Reviewed-by:
Benni Mack <benni@typo3.org> Tested-by:
Benni Mack <benni@typo3.org>
-
- Oct 05, 2015
-
-
Morton Jonuschat authored
Resolving of placeholder for field types text and input has been moved from the element rendering into the form data providers. The data provider approach allows reuse of existing providers and data groups and reduces the amount of database queries by having access to previously parsed data. Resolves: #70370 Resolves: #70146 Resolves: #70297 Releases: master Change-Id: I05fa2c6d3237e65627cae74811d1a9202e3ac0c8 Reviewed-on: http://review.typo3.org/43748 Reviewed-by:
Frank Nägler <frank.naegler@typo3.org> Tested-by:
Frank Nägler <frank.naegler@typo3.org> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch>
-
Benjamin Mack authored
The AjaxRequestHandler now first checks in the Router if an AJAX route exists. A new flag "ajax" in the routing mechanism allows to call ajax-based URLs which are then handed to the AJAX Request Handler. All controllers now receive proper Request and Response objects. All previous logic still works, but can slowly be migrated to the Routing concept. Resolves: #69916 Releases: master Change-Id: I1e67d5a341a4dd2769247531246c9e1fad900c76 Reviewed-on: http://review.typo3.org/43365 Reviewed-by:
Benni Mack <benni@typo3.org> Tested-by:
Benni Mack <benni@typo3.org> Reviewed-by:
Wouter Wolters <typo3@wouterwolters.nl> Tested-by:
Wouter Wolters <typo3@wouterwolters.nl> Reviewed-by:
Andreas Fernandez <typo3@scripting-base.de> Tested-by:
Andreas Fernandez <typo3@scripting-base.de>
-
- Sep 29, 2015
-
-
Wouter Wolters authored
Releases: master Change-Id: Ic9608e3c91abe435beefc595a33f537f777f4446 Reviewed-on: http://review.typo3.org/43626 Reviewed-by:
Andreas Fernandez <typo3@scripting-base.de> Tested-by:
Andreas Fernandez <typo3@scripting-base.de> Reviewed-by:
Benni Mack <benni@typo3.org> Tested-by:
Benni Mack <benni@typo3.org>
-
- Sep 26, 2015
-
-
Nicole Cordes authored
Instead of encrypting the visible field, the value of the hidden field for rsa input fields have to be encrypted. Resolves: #70118 Releases: master Change-Id: I369a81d8168cda33097c4e1d3a0b86d96503e4bc Reviewed-on: http://review.typo3.org/43581 Reviewed-by:
Andreas Fernandez <typo3@scripting-base.de> Tested-by:
Andreas Fernandez <typo3@scripting-base.de> Reviewed-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Tested-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Reviewed-by:
Markus Klein <markus.klein@typo3.org> Tested-by:
Markus Klein <markus.klein@typo3.org>
-
- Sep 23, 2015
-
-
Josef Glatz authored
Since http://typo3.org has been changed to https, adopt all links in the core as well. Replace some outdated links to newer once (if it could be replaced). Resolves: #69989 Releases: master Change-Id: I5d612b3b01cb75b613483649e8c754336c0fe516 Reviewed-on: http://review.typo3.org/43459 Reviewed-by:
Andreas Fernandez <typo3@scripting-base.de> Tested-by:
Andreas Fernandez <typo3@scripting-base.de> Reviewed-by:
Josef Glatz <jousch@gmail.com> Tested-by:
Josef Glatz <jousch@gmail.com> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch>
-
- Sep 16, 2015
-
-
Benjamin Mack authored
In order to allow the same logic as with the Routing and the direct information which method to call, the ControllerInterface is removed again. Additionally, the previously introduced Dispatcher is now renamed to RouteDispatcher (based on routing), and a simple dispatcher is now added to EXT:core, which the RouteDispatcher derives from. Resolves: #69846 Releases: master Change-Id: Ica028f81aa377fd60e5159907c8c226fe0ebd34a Reviewed-on: http://review.typo3.org/43352 Reviewed-by:
Wouter Wolters <typo3@wouterwolters.nl> Tested-by:
Wouter Wolters <typo3@wouterwolters.nl> Reviewed-by:
Georg Ringer <georg.ringer@gmail.com> Tested-by:
Georg Ringer <georg.ringer@gmail.com> Reviewed-by:
Mathias Schreiber <mathias.schreiber@wmdb.de> Tested-by:
Mathias Schreiber <mathias.schreiber@wmdb.de>
-
- Sep 14, 2015
-
-
Morton Jonuschat authored
Update the handling of human readable fields so that the values are not being set and only the hidden field with the actual value is submitted. This patch also updates the handling for the _list and _mul appendixes as these use the same methods and needed to be changed as well. Resolves: #69672 Releases: master Change-Id: I7a92c924a567621c2f79c736f878af288595c657 Reviewed-on: http://review.typo3.org/43254 Reviewed-by:
Nicole Cordes <typo3@cordes.co> Tested-by:
Nicole Cordes <typo3@cordes.co> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch>
-
- Sep 12, 2015
-
-
Nicole Cordes authored
This patch add the function StringUtility::getUniqueId() which gets an unique id (with using more entropy for Windows users) and removes the included dot to be able to use the generated id in HTML as the dot is an invalid character in some tag attributes e.g. id. Resolves: #69730 Releases: master Change-Id: Ic8a83df0a8b02f6778f0f5588d237379d909b59e Reviewed-on: http://review.typo3.org/43244 Reviewed-by:
Morton Jonuschat <m.jonuschat@mojocode.de> Tested-by:
Morton Jonuschat <m.jonuschat@mojocode.de> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch>
-
Andreas Fernandez authored
Stores the original submit handler, remove it from the form element and add it back only at a later point, when the RSA module wants to submit the form. This prevents Chrome to submit a form twice if it contains a RSA password protected field. Resolves: #69713 Releases: master Change-Id: I085b68dfeb901be960096e3d570da097adf0327b Reviewed-on: http://review.typo3.org/43239 Reviewed-by:
Stephan Großberndt <stephan@grossberndt.de> Tested-by:
Stephan Großberndt <stephan@grossberndt.de> Reviewed-by:
Nicole Cordes <typo3@cordes.co> Tested-by:
Nicole Cordes <typo3@cordes.co> Reviewed-by:
Mathias Brodala <mbrodala@pagemachine.de>
-