Skip to content
Snippets Groups Projects
  1. Jun 29, 2020
  2. Jun 26, 2020
  3. May 30, 2020
  4. May 29, 2020
  5. May 26, 2020
  6. May 13, 2020
  7. May 02, 2020
  8. Apr 20, 2020
  9. Apr 16, 2020
  10. Apr 15, 2020
    • Alexander Schnitzler's avatar
      [TASK] Update rector/rector to 0.7.14 · 7c7ec6e8
      Alexander Schnitzler authored
      composer remove rector/rector
      
      Package operations: 0 installs, 8 updates, 4 removals
        - Removing tracy/tracy (v2.7.2)
        - Removing rector/rector (v0.7.0)
        - Removing phpstan/phpstan-phpunit (0.12.6)
        - Removing ondram/ci-detector (3.1.1)
        - Updating composer/xdebug-handler (1.4.0 => 1.4.1)
        - Updating nette/robot-loader (v3.2.1 => v3.2.3)
        - Updating symplify/package-builder (v7.2.2 => v7.2.12)
        - Updating symplify/auto-bind-parameter (v7.2.2 => v7.2.12)
        - Updating nette/http (v3.0.3 => v3.0.4)
        - Updating symplify/autowire-array-parameter (v7.2.2 => v7.2.12)
        - Updating symplify/smart-file-system (v7.2.2 => v7.2.12)
        - Updating symplify/set-config-resolver (v7.2.2 => v7.2.12)
      
      composer require rector/rector:"^0.7.14" --dev
      
      Package operations: 5 installs, 0 updates, 0 removals
        - Installing tracy/tracy (v2.7.4)
        - Installing phpstan/phpstan-phpunit (0.12.7)
        - Installing ondram/ci-detector (3.3.0)
        - Installing jetbrains/phpstorm-stubs (v2019.3)
        - Installing rector/rector (v0.7.14)
      
      Releases: master
      Resolves: #91048
      Change-Id: I45be2ba76b2bd909a28bd391fd2d9d774cbbe0e1
      Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/64186
      
      
      Reviewed-by: default avatarOliver Klee <typo3-coding@oliverklee.de>
      Reviewed-by: default avatarBenni Mack <benni@typo3.org>
      Tested-by: default avatarTYPO3com <noreply@typo3.com>
      Tested-by: default avatarBenni Mack <benni@typo3.org>
      7c7ec6e8
  11. Apr 09, 2020
  12. Apr 01, 2020
  13. Mar 31, 2020
    • Benni Mack's avatar
      [TASK] Update symfony dependencies for tarball distributions · e8f9acf7
      Benni Mack authored
      Used composer command:
        composer update "symfony/*" --with-all-dependencies
      
      Output:
        - Updating symfony/filesystem (v5.0.6 => v5.0.7)
        - Updating symfony/config (v5.0.6 => v5.0.7)
        - Updating symfony/console (v5.0.6 => v5.0.7)
        - Updating symfony/dependency-injection (v5.0.6 => v5.0.7)
        - Updating symfony/var-exporter (v5.0.6 => v5.0.7)
        - Updating symfony/cache (v5.0.6 => v5.0.7)
        - Updating symfony/expression-language (v5.0.6 => v5.0.7)
        - Updating symfony/finder (v5.0.6 => v5.0.7)
        - Updating symfony/mime (v5.0.6 => v5.0.7)
        - Updating symfony/event-dispatcher (v5.0.6 => v5.0.7)
        - Updating symfony/mailer (v5.0.6 => v5.0.7)
        - Updating symfony/inflector (v5.0.6 => v5.0.7)
        - Updating symfony/property-access (v5.0.6 => v5.0.7)
        - Updating symfony/property-info (v5.0.6 => v5.0.7)
        - Updating symfony/routing (v5.0.6 => v5.0.7)
        - Updating symfony/yaml (v5.0.6 => v5.0.7)
        - Updating symfony/css-selector (v5.0.6 => v5.0.7)
        - Updating symfony/process (v5.0.6 => v5.0.7)
        - Updating symfony/options-resolver (v5.0.6 => v5.0.7)
        - Updating symfony/stopwatch (v5.0.6 => v5.0.7)
        - Updating symfony/http-foundation (v5.0.6 => v5.0.7)
        - Updating symfony/var-dumper (v5.0.6 => v5.0.7)
        - Updating symfony/error-handler (v5.0.6 => v5.0.7)
        - Updating symfony/http-kernel (v5.0.6 => v5.0.7)
        - Updating symfony/intl (v5.0.6 => v5.0.7)
      
      Resolves: #90902
      Releases: master, 9.5
      Change-Id: I0874bb07f66a73ab1ff4fc5e3b3ffdd269d20f1f
      Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/64022
      
      
      Reviewed-by: default avatarFrank Nägler <frank.naegler@typo3.org>
      Reviewed-by: default avatarGeorg Ringer <georg.ringer@gmail.com>
      Tested-by: default avatarTYPO3com <noreply@typo3.com>
      Tested-by: default avatarFrank Nägler <frank.naegler@typo3.org>
      Tested-by: default avatarGeorg Ringer <georg.ringer@gmail.com>
      e8f9acf7
  14. Mar 30, 2020
    • Benni Mack's avatar
      [TASK] Update symfony dependencies for tarball distributions · 47aa141d
      Benni Mack authored
      Used composer command:
        composer update "symfony/*" --with-all-dependencies
      
      Output
        - Removing symfony/debug (v4.4.4)
        - Updating typo3/cms-composer-installers (v2.2.3 => v2.2.4)
        - Updating symfony/polyfill-ctype (v1.14.0 => v1.15.0)
        - Updating symfony/filesystem (v5.0.4 => v5.0.6)
        - Updating symfony/config (v4.4.0 => v5.0.6)
        - Updating symfony/service-contracts (v1.1.8 => v2.0.1)
        - Updating symfony/polyfill-php73 (v1.14.0 => v1.15.0)
        - Updating symfony/polyfill-mbstring (v1.12.0 => v1.15.0)
        - Updating symfony/console (v4.4.0 => v5.0.6)
        - Updating symfony/dependency-injection (v4.4.0 => v5.0.6)
        - Updating symfony/var-exporter (v4.4.0 => v5.0.6)
        - Updating symfony/cache-contracts (v1.1.7 => v2.0.1)
        - Updating psr/log (1.1.2 => 1.1.3)
        - Updating symfony/cache (v4.4.0 => v5.0.6)
        - Updating symfony/expression-language (v4.4.0 => v5.0.6)
        - Updating symfony/finder (v4.4.0 => v5.0.6)
        - Updating symfony/polyfill-php72 (v1.13.1 => v1.15.0)
        - Updating symfony/polyfill-intl-idn (v1.12.0 => v1.15.0)
        - Updating symfony/mime (v4.4.0 => v5.0.6)
        - Updating symfony/event-dispatcher-contracts (v1.1.7 => v2.0.1)
        - Updating symfony/event-dispatcher (v4.4.5 => v5.0.6)
        - Updating egulias/email-validator (2.1.16 => 2.1.17)
        - Updating symfony/mailer (v4.4.0 => v5.0.6)
        - Updating symfony/inflector (v4.4.0 => v5.0.6)
        - Updating symfony/property-access (v4.4.0 => v5.0.6)
        - Updating symfony/property-info (v4.4.0 => v5.0.6)
        - Updating symfony/routing (v4.4.0 => v5.0.6)
        - Updating symfony/yaml (v4.4.0 => v5.0.6)
        - Updating symfony/css-selector (v5.0.5 => v5.0.6)
        - Updating symfony/process (v5.0.5 => v5.0.6)
        - Updating symfony/options-resolver (v4.3.1 => v5.0.6)
        - Updating symfony/stopwatch (v4.3.1 => v5.0.6)
        - Updating symfony/http-foundation (v5.0.1 => v5.0.6)
        - Updating symfony/var-dumper (v4.4.4 => v5.0.6)
        - Updating symfony/error-handler (v4.4.4 => v5.0.6)
        - Updating symfony/http-kernel (v4.4.4 => v5.0.6)
        - Updating symfony/intl (v4.3.1 => v5.0.6)
        - Updating symfony/polyfill-intl-icu (v1.11.0 => v1.15.0)
      
      Resolves: #90885
      Releases: master, 9.5, 8.7
      Change-Id: I736be0294aeafef86cfcb0ce7ca4545c3ee2c7ad
      Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/64004
      
      
      Reviewed-by: default avatarManuel Selbach <manuel_selbach@yahoo.de>
      Reviewed-by: default avatarBenni Mack <benni@typo3.org>
      Tested-by: default avatarTYPO3com <noreply@typo3.com>
      Tested-by: default avatarBenni Mack <benni@typo3.org>
      47aa141d
  15. Mar 29, 2020
  16. Mar 27, 2020
  17. Mar 23, 2020
  18. Mar 06, 2020
  19. Mar 05, 2020
  20. Mar 04, 2020
  21. Mar 03, 2020
  22. Feb 25, 2020
  23. Feb 24, 2020
  24. Feb 19, 2020
  25. Feb 15, 2020
  26. Feb 14, 2020
  27. Feb 13, 2020
    • Benni Mack's avatar
      [FEATURE] Implement SameSite option for TYPO3 cookies · de29dc2d
      Benni Mack authored
      This change introduces a new security option for setting the SameSite
      option to all cookies sent by TYPO3 Core.
      
      Namely:
      - Frontend User Sessions ("lax" by default)
      - Backend User Sessions ("strict" by default)
      - Install Tool Sessions ("strict", none-configurable)
      - Last Login Provider in Backend ("strict", non-configurable)
      
      This means that these can only be accessed by scripts and requests
      by the same site, and not by any third-party scripts.
      
      Since we're talking about actual cookies for a user, and not
      ads-related or third-party login-dependant cookies, the default
      options fit just perfectly.
      
      All modern browsers except Internet Explorer respect this option
      to be set. Please note that Firefox and Chrome will have "SameSite=lax"
      set in Q1/2020 by default if NO SameSite option is set at all. This change
      allows to configure this.
      
      Backend and Frontend User Cookies can be configured to "strict", "lax"
      or "none" (= same as before), whereas "none" only works for secure
      connections (= HTTPS).
      
      If "strict" is in place, security via CSRF is not needed anymore, and can
      be dropped in the future.
      
      Resolves: #90351
      Releases: master, 9.5, 8.7
      Change-Id: I8095e2a552faa9d1fd4fa7855297302a9ec6a75f
      Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63183
      
      
      Tested-by: default avatarAnja Leichsenring <aleichsenring@ab-softlab.de>
      Tested-by: default avatarTYPO3com <noreply@typo3.com>
      Tested-by: default avatarGeorg Ringer <georg.ringer@gmail.com>
      Reviewed-by: default avatarAnja Leichsenring <aleichsenring@ab-softlab.de>
      Reviewed-by: default avatarGeorg Ringer <georg.ringer@gmail.com>
      de29dc2d
  28. Feb 12, 2020
  29. Feb 03, 2020
  30. Feb 02, 2020
  31. Jan 22, 2020
  32. Jan 17, 2020
  33. Jan 16, 2020
  34. Dec 20, 2019
  35. Dec 19, 2019