When using "< .xyz" TS constructs, TS object browser may show a
error like "1: Line 5902: Object copied in this line
"ACT < .NO" would leave either the value or properties untouched
in TypoScript Version 1. Please check that this is not a problem
for you.". The message is unclear and scary. It is shown as error
but there is, in fact, no error.

Change-Id: I51e811829cfe2d0f264861c4bb4adcdabf9d0546
Resolves: #32012
Releases: 4.7
Reviewed-on: http://review.typo3.org/6866
Reviewed-by: Xavier Perseguers
Tested-by: Xavier Perseguers

There is no reason for search engines to crawl the "Forgot your
password?" page. Add a rel="nofollow" in the felogin to advice
search engines not to crawl the page.

Change-Id: I98f9dd4ffd385bc273437200feeefc09317bfd6b
Resolves: #22025
Releases: 4.7
Reviewed-on: http://review.typo3.org/6889
Reviewed-by: Georg Ringer
Reviewed-by: Mario Rimann
Reviewed-by: Simon Schaufelberger
Tested-by: Simon Schaufelberger
Reviewed-by: Steffen Ritter
Tested-by: Steffen Ritter

Fix XSS at column 'workspace membership'.

How to test:
* choose a workspace title like "<b>test</b>"
* assign a user as member to the workspace
* select the BE-module "Admin Tools->User Admin"
* select the checkbox "Workspace membership"
* press update
* take a look at column "Workspace membership"

Change-Id: I29bb7d05a2740cc9c88eb67c224e942dfc9165dc
Fixes: #32040
Releases: 4.7, 4.6, 4.5, 4.4
Reviewed-on: http://review.typo3.org/6878
Reviewed-by: Oliver Klee
Reviewed-by: Georg Ringer
Tested-by: Georg Ringer

When using USER_FUNCTION in the pageNotFound_handling, an exception
or a blank screen appears in the Frontend (depending on error
handling settings) because $GLOBALS['TSFE']->sys_page is not
initialized.

Change-Id: I737c1b263ca53e9d23d3bd66498974b41c83df1d
Resolves: #31839
Releases: 4.7, 4.6, 4.5
Reviewed-on: http://review.typo3.org/6712
Reviewed-by: Stefan Neufeind
Reviewed-by: Xavier Perseguers
Tested-by: Xavier Perseguers

This fix improves the check for the PHP session.auto_start configuration
to account also for valid Yes/No configuration values.

Change-Id: Icbbe4ed6afdb69642fc5a9ca3a86dc82cc066464
Fixes: #31404
Releases: 4.7, 4.6
Reviewed-on: http://review.typo3.org/6382
Reviewed-by: Georg Ringer
Tested-by: Georg Ringer
Reviewed-by: Stefan Neufeind
Reviewed-by: Xavier Perseguers
Tested-by: Xavier Perseguers

Vimeo changed its behaviour and there is always the
vimeo error "no video" shown. Their change is strange
as vimeo required the argument clip_id as the 1st one

Change-Id: I62e9c425895e08dfe091179dac34495fc681ffe1
Resolves: #31661
Releases: 4.7, 4.6, 4.5, 4.3
Reviewed-on: http://review.typo3.org/6591
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader

Use master branch in submodules
dbal, extbase, fluid, version, workspaces

Change-Id: Ia0d7a7d6ccd0c43b2f57905a01258d06bc9cfb1a
Resolves: #31989
Reviewed-on: http://review.typo3.org/6839
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader

PHP INI magic_quotes_gpc got deprecated in PHP 5.3 and is removed in
PHP 5.4, init.php should then behave as if it were set to "Off".

Change-Id: I14fac85ef5f3dca86e1bd424ab0be4a37b9f331b
Fixes: #30083
Releases: 4.7, 4.6, 4.5
Reviewed-on: http://review.typo3.org/5104
Reviewed-by: Ernesto Baschny
Reviewed-by: Georg Ringer
Reviewed-by: Karsten Dambekalns
Reviewed-by: Xavier Perseguers
Tested-by: Xavier Perseguers

Change-Id: I9ac22bf2a94495042c1fe9c51821217e4c766f84
Resolves: #31486
Releases: 4.5, 4.6, 4.7
Reviewed-on: http://review.typo3.org/6416
Reviewed-by: Benjamin Mack
Tested-by: Benjamin Mack
Reviewed-by: Xavier Perseguers
Tested-by: Xavier Perseguers

An uncaught exception happens when trying to export records from a
singe table view in List mode on the page tree root. This is due to
the tree root being handled as a normal page record.

With this patch the tree root is handled as it should. Some cleanup
(CGL) is also applied.

Change-Id: Ia5c46044f5040472846f3e7fb4adbf203e5e1e6a
Fixes: #31350
Releases: 4.7, 4.6, 4.5
Reviewed-on: http://review.typo3.org/6551
Reviewed-by: Philipp Gampe
Tested-by: Philipp Gampe
Reviewed-by: Georg Ringer
Reviewed-by: Steffen Ritter
Reviewed-by: Francois Suter
Tested-by: Francois Suter

Jenkins reports 2 checkstyle errors in indexed search,
probably introduced by http://review.typo3.org/6657.

Change-Id: I8ac5046152357111e614a3555c7a6f4236e15137
Resolves: #31904
Releases: 4.7
Reviewed-on: http://review.typo3.org/6730
Reviewed-by: Markus Klein
Tested-by: Markus Klein
Reviewed-by: Stefano Kowalke
Tested-by: Stefano Kowalke
Reviewed-by: Christian Kuhn
Tested-by: Christian Kuhn

Adds some minor modifications for restructuring in the pi code,
and some hooks in order to allow for other search engines to be
used.
Additionally, a new extension "indexed_search_mysql" is added
to the core that allows the mysql fulltext search with it.
Thanks to Michael Stucki for all the work!

Change-Id: I7e739baa6d35b6678d008f19737f86c3bdaa6dd5
Resolves: #28613
Reviewed-on: http://review.typo3.org/6657
Reviewed-by: Steffen Ritter
Tested-by: Steffen Ritter

The Core still calls tslib_fe->ADMCMD_preview() in index_ts.php.
Remove the whole code block, since this has been moved to Tx_Version.

The corresponding function in Tx_Version_Preview is already called in
the connectToDB hook.

Change-Id: I24152ecd3183a17257eb79a58f5270d0fce3a04d
Fixes: #31290
Relates: #27931
Releases: 4.7, 4.6
Reviewed-on: http://review.typo3.org/6344
Reviewed-by: Oliver Klee
Reviewed-by: Simon Schaufelberger
Tested-by: Simon Schaufelberger
Reviewed-by: Georg Ringer
Tested-by: Georg Ringer
Reviewed-by: Andreas Wolf
Tested-by: Andreas Wolf

TYPO3 4.6 introduced a slider wizard for select-type and
input-type fields. For input-type fields it is possible
to define a minimum and maximum value for the slider.
Unfortunately the wizard misuses the "max" TCA property
for the maximum value, which is normally used for the
"maxlength" attribute of the input field.

The slider wizard should instead rely on the "range" property,
which already exists and serves exactly the purpose of defining
a minimum and maximum value for the field.

Change-Id: I0cf34c78f5109ce244357471a122be0f24f1aeef
Fixes: #31724
Releases: 4.7, 4.6
Reviewed-on: http://review.typo3.org/6618
Reviewed-by: Georg Ringer
Tested-by: Georg Ringer
Reviewed-by: Kay Strobach
Tested-by: Kay Strobach
Reviewed-by: Stefan Neufeind
Reviewed-by: Francois Suter
Tested-by: Francois Suter

Remove typo3/index.html which does nothing else than redirecting to
index.php.
It uses a meta redirection, which has been deprecated by the W3C:
http://www.w3.org/TR/WCAG10-HTML-TECHS/#meta-element

If this change will break your setup, make sure to change the
"DirectoryIndex" setting of your Apache webserver so it looks for files
named index.php: DirectoryIndex index.php

The patch will also remove other files with a similar functionality:
- typo3/index.htm
- typo3/index.html
- typo3/install/index.htm
- typo3/install/index.html

It will NOT remove index.html in t3lib/ and some other places, where the
redirect is rather used as a security feature to avoid directory
listings on poorly configured servers...

Change-Id: I0097c62213cde9cec056e4a6b864cba9f2e828f6
Resolves: #31614
Reviewed-on: http://review.typo3.org/6561
Tested-by: Philipp Gampe
Reviewed-by: Christian Kuhn
Reviewed-by: John Galt
Tested-by: John Galt
Reviewed-by: Georg Ringer
Tested-by: Georg Ringer

The date picker in the Admin Tools > Log when selecting a user-defined
time range is broken. Adapt it to new skinning API for the JS to act
on it properly again.

Change-Id: I8471eff878015dd2ff078921b6947a3beae8d25f
Resolves: #31450
Releases: 4.7, 4.6, 4.5, 4.4
Reviewed-on: http://review.typo3.org/6560
Reviewed-by: Francois Suter
Tested-by: Francois Suter

When defining access lists for be_groups, all exclude fields are
listed for selection, ordered alphabetically per table and field
label. It may happen that some fields have the same label within
the same table. This causes confusion.

This patch adds the field's name next to its label to avoid
confusion.

Change-Id: I503c8a2e547c749a8bdcc19d70abe2d2471e6650
Fixes: #25236
Releases: 4.7, 4.6, 4.5
Reviewed-on: http://review.typo3.org/6543
Reviewed-by: Philipp Gampe
Tested-by: Philipp Gampe
Reviewed-by: Georg Ringer
Tested-by: Georg Ringer
Reviewed-by: Francois Suter
Tested-by: Francois Suter

The handling of file upload fields in the new system extension
form was broken and not fully implemented. Fetching the
contents, type and size of the file is missing. Besides that,
sending these files via mail was not fully implemented.

Change-Id: I9ad7aa2df1e037f1ac8d50031300af9a030a617c
Fixes: #31085
Releases: 4.7, 4.6
Reviewed-on: http://review.typo3.org/6003
Reviewed-by: Peter Beernink
Tested-by: Peter Beernink
Reviewed-by: Jigal van Hemert
Tested-by: Jigal van Hemert

Showing or hiding an element with workspace selected will result in
Error: Could not be edited in offline workspace...

Change-Id: I43ceaf2443dff7c3d666811726353f3b17b81182
Resolves: #20598
Releases: 4.7, 4.6, 4,5
Reviewed-on: http://review.typo3.org/5633
Reviewed-by: Georg Ringer
Reviewed-by: Simon Schaufelberger
Tested-by: Simon Schaufelberger
Reviewed-by: Francois Suter
Tested-by: Francois Suter

The options field is hidden in the BE user form if the user is admin.
This is a problem if the admin has assigned groups with db_mounts,
as the default value for the options is to mount also the group's mounts,
which is undesired for most instances.

Change-Id: Ia18f6179c0029f6063c0a72b8e4775e6ce120bf5
Fixes: #30492
Releases: 4.7, 4.6, 4.5, 4.4
Reviewed-on: http://review.typo3.org/6401
Reviewed-by: Francois Suter
Tested-by: Francois Suter
Reviewed-by: Thierry Brodard
Reviewed-by: Steffen Ritter
Tested-by: Steffen Ritter

The backend script alt_doc.php even considers deleted
pages_language_overlay records when determining in which language a
record can be/is localized.

This patch improves method documentation and applies
t3lib_BEfunc::deleteClause() on the respective database query.

Change-Id: I2f34cfb888a452136120b9e5d94cf2866b909fb1
Fixes: #31379
Releases: 4.3, 4.4, 4.5, 4.6, 4.7
Reviewed-on: http://review.typo3.org/6386
Reviewed-by: Helmut Hummel
Tested-by: Helmut Hummel
Reviewed-by: Markus Klein
Tested-by: Markus Klein
Reviewed-by: Steffen Ritter
Tested-by: Steffen Ritter

The class userAuthGroup has its own "inList"
functionality that is not really needed,
as there is an optimized version in t3lib_div

Thus, this function should be deprecated and
all occurences would be replaced with the
according calls to t3lib_div::inList.

Change-Id: Ica7566807112589c69d70f311a6ac84da280c0e2
Resolves: #31068
Releases: 4.7
Reviewed-on: http://review.typo3.org/5961
Reviewed-by: Tolleiv Nietsch
Tested-by: Tolleiv Nietsch
Reviewed-by: Oliver Klee
Reviewed-by: Benjamin Mack
Tested-by: Benjamin Mack
Reviewed-by: Georg Ringer
Tested-by: Georg Ringer

Without this getter method there's no clean way to access the current
tslib_cObj object from a custom media renderer for example.

Resolves: #30994
Releases: 4.5, 4.6

Change-Id: I065f2c94c586237963e553fddc4ebbea7d199915
Reviewed-on: http://review.typo3.org/5890
Reviewed-by: Oliver Klee
Reviewed-by: Thierry Brodard
Reviewed-by: Markus Klein
Tested-by: Markus Klein
Reviewed-by: Georg Ringer
Tested-by: Georg Ringer

Custom plugin from user RTE extension using reference to this.base() will not initialize correctly in TYPO3 4.6.

Change-Id: I059a93f74ad189833ddd93d14654c851241a1a2a
Resolves: #31498
Releases: 4.6, 4.7
Reviewed-on: http://review.typo3.org/6497
Reviewed-by: Stanislas Rolland
Tested-by: Stanislas Rolland

When a language is chosen but does not provide localization files for an
extension, the localization overlay mechanism fails to detect it and
provides NULL instead of an array to the array merge method of t3lib_div.

Change-Id: Ibf0aa0feadc16a77e61d515ae0c684bf182cf1a6
Fixes: #31353
Releases: 4.6, 4.7
Reviewed-on: http://review.typo3.org/6384
Reviewed-by: Thomas Juhnke
Tested-by: Thomas Juhnke
Reviewed-by: Jigal van Hemert
Tested-by: Jigal van Hemert

Check for default password of admin account no longer
works in status reports module.

Change-Id: Ibefcadb60afb2d22490fc1219559d8651d256c8a
Fixes: #31397
Releases: 4.6, 4.7
Reviewed-on: http://review.typo3.org/6392
Reviewed-by: Markus Klein
Tested-by: Philipp Gampe
Reviewed-by: Philipp Gampe
Reviewed-by: Francois Suter
Tested-by: Francois Suter

When method $GLOBALS['TSFE']->sL() is called with a non-localizable
label key (not starting with "LLL:"), an empty string is returned
instead of the label key itself.

This is a breaking change with previous versions of TYPO3.

Change-Id: I2847e51fd479d9636ac815c820b2e63cf449d6a7
Fixes: #31347
Releases: 4.6, 4.7
Reviewed-on: http://review.typo3.org/6364
Reviewed-by: Andreas Wolf
Tested-by: Andreas Wolf

Recognize if the ENABLE_INSTALL_TOOL file deletion fails
and keep the install tool closed in this case.

Change-Id: I78e1990b6a0b66ef8804ede9bbfa3546b08d4067
Fixes: #29674
Releases: 4.7, 4.6, 4.5
Reviewed-on: http://review.typo3.org/4906
Reviewed-by: Markus Klein
Tested-by: Markus Klein
Reviewed-by: Christian Kuhn
Tested-by: Christian Kuhn

Remove files that are scheduled for deletion in 4.7 and not
referenced in the core at any place.

Change-Id: I0b6b70aaaf063111ab4e063d39ca116d1e8a0e3d
Resolves: #31298
Depends: #31296
Releases: 4.7
Reviewed-on: http://review.typo3.org/6339
Reviewed-by: Markus Klein
Tested-by: Markus Klein
Reviewed-by: Oliver Klee
Reviewed-by: Helmut Hummel
Tested-by: Helmut Hummel
Reviewed-by: Christian Kuhn
Tested-by: Christian Kuhn

The class is obsolete since 4.5 and can be removed now.

Change-Id: I914e3ef199c2215ca25ffa27631ac28ecf05ac50
Resolves: #31299
Releases: 4.7
Reviewed-on: http://review.typo3.org/6340
Reviewed-by: Markus Klein
Tested-by: Markus Klein
Reviewed-by: Oliver Klee
Reviewed-by: Christian Kuhn
Tested-by: Christian Kuhn

The backend modules should have unified headers.
In page and list module the header is the current page title.
This the current page must not be displayed in the path.

Change-Id: Id915f156570f8370fa40a2d1369b7451b5213442
Resolves: #23828
Releases: 4.7
Reviewed-on: http://review.typo3.org/5639
Reviewed-by: Christian Kuhn
Tested-by: Christian Kuhn
Reviewed-by: Jigal van Hemert
Tested-by: Jigal van Hemert

Hide the option to create a new MySQL database within the 1-2-3 wizard,
if the MySQL user has no permissions to do so.

Change-Id: Ia1dac4ff39e9254d91b4b044306dbb6600df1525
Resolves: #27194
Releases: 4.7
Reviewed-on: http://review.typo3.org/2507
Reviewed-by: Andreas Wolf
Tested-by: Andreas Wolf

Change-Id: Ic11eccffe0961c627397bf27dabc1164f2508abc
Fixes: #31309
Releases: 4.5, 4.6, 4.7
Reviewed-on: http://review.typo3.org/6345
Reviewed-by: Ernesto Baschny
Tested-by: Ernesto Baschny
Reviewed-by: Andreas Wolf
Tested-by: Andreas Wolf

Change-Id: If0028195ed4a6a51ebe5b507c98eb1251e232326
Reviewed-on: http://review.typo3.org/6332
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader

Change-Id: I49fcdd768a00e1207ad22cd56caac7ece19f2c37
Reviewed-on: http://review.typo3.org/6330
Reviewed-by: TYPO3 v4 Release Team
Tested-by: TYPO3 v4 Release Team

Change-Id: I80f13bd0b46b6ac37a372dc95eeaa71c286f7c00
Reviewed-on: http://review.typo3.org/6329
Reviewed-by: TYPO3 v4 Release Team
Tested-by: TYPO3 v4 Release Team

The md5 checksums for all system extensions not integrated as submodule
should be updated.

Change-Id: Iee20932b1b58feaf02317855de38d191204150df
Resolves: #30723
Releases: 4.6
Reviewed-on: http://review.typo3.org/6321
Reviewed-by: Xavier Perseguers
Tested-by: Xavier Perseguers

Default configuration for inlineToWindow is set to 1 in ext_conf_template.txt but
if localconf.php contains an incomplete definition for $TYPO3_CONF_VARS['EXT']['extConf']['em'],
it defaults to 0 instead.

Change-Id: I3df433e9f9ddf2b610e6eaad89333f03bba3e231
Fixes: #31271
Releases: 4.6
Reviewed-on: http://review.typo3.org/6318
Reviewed-by: Steffen Ritter
Reviewed-by: Xavier Perseguers
Tested-by: Xavier Perseguers

Due to a wrong implementation the file upload feature in the
form wizard will be disabled for the time being.

Change-Id: Ie434fade3047e8ce24fd94e5c1d4c1347024fac2
Resolves: #31274
Related: #31085
Reviewed-on: http://review.typo3.org/6320
Reviewed-by: Steffen Ritter
Reviewed-by: Jigal van Hemert
Tested-by: Jigal van Hemert
Tested-by: Steffen Ritter
Reviewed-by: Xavier Perseguers
Tested-by: Xavier Perseguers

Change-Id: I0580ce6e45b5e2bb9110e90475a2ce4f8b1424d1
Reviewed-on: http://review.typo3.org/6313
Reviewed-by: TYPO3 v4 Release Team
Tested-by: TYPO3 v4 Release Team