- Feb 25, 2016
-
-
Andreas Fernandez authored
The method `setColumn` in the backend layout wizard sanitizes the value by wrapping it into a <p> tag and fetching its text which strips off any HTML. This returns a string. However, the code later checks after performing a save action whether the value is a number. The value gets converted to a number in `setColumn` to recover the functionality. Change-Id: I686657e170668adf71f278fa537aa5510e3e2241 Resolves: #73656 Releases: master Reviewed-on: https://review.typo3.org/46880 Reviewed-by:
Wouter Wolters <typo3@wouterwolters.nl> Tested-by:
Morton Jonuschat <m.jonuschat@mojocode.de> Tested-by:
-
Christian Kuhn authored
Code snippets dedicated to PHP smaller than version 7 can be removed after requirement has been raised. Change-Id: Id04dca218e5d12c3e6d7d2a68fa8f88a812ccf0c Resolves: #73674 Releases: master Reviewed-on: https://review.typo3.org/46895 Reviewed-by:
Benni Mack <benni@typo3.org> Reviewed-by:
Alexander Opitz <opitz.alexander@googlemail.com> Tested-by:
Andreas Fernandez <typo3@scripting-base.de> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
-
Benni Mack authored
Resolves: #73679 Releases: master Change-Id: Id1203471ce44dcce86777abcb5c9b444df934a49 Reviewed-on: https://review.typo3.org/46897 Reviewed-by:
-
Christian Kuhn authored
TYPO3 CMS 8 requires at least PHP 7.0 Change-Id: I9fad64c48270a4ac1122fb28f52da5579d46e629 Resolves: #73655 Releases: master Reviewed-on: https://review.typo3.org/46878 Reviewed-by:
Mathias Schreiber <mathias.schreiber@wmdb.de> Tested-by:
Mathias Brodala <mbrodala@pagemachine.de> Reviewed-by:
Frank Naegler <frank.naegler@typo3.org> Tested-by:
-
Markus Klein authored
Fix a copy&paste error in the javascript to set the selected class on the image. Resolves: #73657 Releases: master, 7.6 Change-Id: I8b7e3580185221f98d16c8fd48fe9f9fc21cfd52 Reviewed-on: https://review.typo3.org/46882 Reviewed-by:
Harald <eisner.harald@online.de> Tested-by:
-
Oliver Hader authored
The workspace preview in the frontend shows the buttons to the previous and next stage if the user is not responsible for the current stage. Clicking the button does not forward the records to the names stage however - this is caught by DataHandlerHook in EXT:version. Resolves: #73243 Releases: master, 7.6, 6.2 Change-Id: I233629cb393d5786048ab7ead39cd3316780b488 Reviewed-on: https://review.typo3.org/46596 Reviewed-by:
Georg Ringer <georg.ringer@gmail.com> Tested-by:
Oliver Hader <oliver.hader@typo3.org> Tested-by:
-
Markus Klein authored
Resolves: #73662 Releases: master, 7.6 Change-Id: I46561ecfa2186c1b065acbffe154f375b823e839 Reviewed-on: https://review.typo3.org/46885 Reviewed-by:
Markus Klein <markus.klein@typo3.org> Tested-by:
-
- Feb 24, 2016
-
-
Frank Naegler authored
Resolves: #73652 Related: #73044 Releases: master Change-Id: Iaeecf307b00bc67c2a8a598cc45d21aa95771a53 Reviewed-on: https://review.typo3.org/46877 Reviewed-by:
Michael Oehlhof <typo3@oehlhof.de> Tested-by:
-
Wouter Wolters authored
Resolves: #73558 Releases: master, 7.6 Change-Id: Iaf7bdf486a0b0229233181cca8b4c7ef68bf9bbc Reviewed-on: https://review.typo3.org/46851 Reviewed-by:
Daniel Goerz <ervaude@gmail.com> Reviewed-by:
-
Gianluigi Martino authored
Only show cut icons when the user has write-permissions on the specific record. Change-Id: I0d5a1153faf448f9c1c6c0948f2cdf8f78cab8f6 Resolves: #73564, #73472 Releases: master, 7.6 Reviewed-on: https://review.typo3.org/46774 Reviewed-by:
Peter Kraume <peter.kraume@gmx.de> Tested-by:
-
Roland Golla authored
Test backend login with bad credentials and verify an error message is rendered. Resolves: #73213 Releases: master Change-Id: Ic97b9a95d5d8060e2f05b89a9fc2a273ad713c05 Reviewed-on: https://review.typo3.org/46624 Reviewed-by:
-
Michael Oehlhof authored
Call of FlashMessage->render() was replaced with appropriate code if *CType 'list' list_type has invalid value *CType not defined Resolves: #73638 Releases: master, 7.6 Change-Id: Ic6342e8eae8bace4d855d6471dd2ccefd339efc1 Reviewed-on: https://review.typo3.org/46867 Reviewed-by:
-
Christian Kuhn authored
To successfully run acceptance tests we need to create a "controlled environment" that is separated from any existing core environment. A standalone instance is created that has its own set of loaded extensions, an own database and an own web path. The patch refactors and simplifies the existing set up code of unit and functional test environments to be better reusable to achieve this. Change-Id: I6c4a818fa82d2723075888ad8a60b30acb5ed30e Resolves: #68113 Releases: master Reviewed-on: https://review.typo3.org/46727 Reviewed-by:
-
Benni Mack authored
When the file upload controller is called (which is almost impossible to call these days) and no return URL is given (which is again almost impossible), then the URL is invalid. The patch uses the proper getModuleUrl() call which is sufficient. Resolves: #73506 Releases: master, 7.6 Change-Id: I49830e84cb10c14ccb84ea932927898899e58e70 Reviewed-on: https://review.typo3.org/46729 Reviewed-by:
-
Benni Mack authored
A Frontend request could previously be called with index.php?id=[id] or just index.php?[id]. The support for calling pages through the syntax of index.php?[id] was removed, along with the method $TSFE->setIDfromArgV. Resolves: #73602 Releases: master Change-Id: Ic0f0131e15e72281ab8324785c42c3887deed5cb Reviewed-on: https://review.typo3.org/46812 Reviewed-by:
-
Frank Naegler authored
Add a runtime cache for icons and remove the calls to getDeprecationSettings. Resolves: #73606 Releases: master Change-Id: I28fe3721db105cbd41c8beb45afc36903e3f945f Reviewed-on: https://review.typo3.org/46808 Reviewed-by:
-
- Feb 23, 2016
-
-
Michael Oehlhof authored
Clipboard: Use new modal confirmation dialog for the menu item "Delete Elements" Resolves: #72350 Releases: master, 7.6 Change-Id: Icb4a9c428802af4bc09152010b264c1c02b2eb74 Reviewed-on: https://review.typo3.org/45997 Reviewed-by:
-
Wouter Wolters authored
Resolves: #73627 Releases: master Change-Id: I017c97bf415b630d183d91086ae17e66295e6a1b Reviewed-on: https://review.typo3.org/46849 Reviewed-by:
-
Michael Oehlhof authored
Call of FlashMessage->render() if the task object is not valid was replaced with appropriate code. Resolves: #73427 Releases: master, 7.6 Change-Id: I2f21e46814d369519756f35b27ee7b546a6b6938 Reviewed-on: https://review.typo3.org/46658 Reviewed-by:
-
Wouter Wolters authored
Resolves: #73464 Releases: master,7.6 Change-Id: Ibe2579552703c30eda2e22c8ef6caf738da18265 Reviewed-on: https://review.typo3.org/46856 Reviewed-by:
-
Wouter Wolters authored
The module has been merged into EXT:about Resolves: #73633 Releases: master Change-Id: I931113ee7ca7454c2a5fd6d8a1e83b5dabed08cc Reviewed-on: https://review.typo3.org/46850 Reviewed-by:
-
Stephan Großberndt authored
Fix documentation in extensionmanager pointing to outdated classnames. Releases: master, 7.6 Resolves: #73636 Change-Id: Idfd277cde8674dc7a6fae7eb7786150a941ad0ba Reviewed-on: https://review.typo3.org/46858 Reviewed-by:
Nicole Cordes <typo3@cordes.co> Tested-by:
-
Wouter Wolters authored
In the Extension model from the extension manager the variable type of $dependencies is wrong. This should be \TYPO3\CMS\Extensionmanager\Domain\Model\Dependency instead of Tx_Extensionmanager_Utility_Dependency. Resolves: #73624 Releases: master, 7.6 Change-Id: Ibbdd9933ff6c312ad7759574be425b4e57eb1f04 Reviewed-on: https://review.typo3.org/46848 Reviewed-by:
Stephan Großberndt <stephan@grossberndt.de> Reviewed-by:
-
Wouter Wolters authored
Resolves: #73529 Releases: master, 7.6 Change-Id: Id4f6558b1130bcff8e70f1f0e0dfe38645d33c7f Reviewed-on: https://review.typo3.org/46852 Reviewed-by:
-
Benni Mack authored
Indexed Search allows to show up to 100.000 entries per page by configuring the paging entry via a GET/POST variable, leading to a possible DoS attack. The max limit is set to 100 entries per page, as a reasonable limit for the website search results. Resolves: #73458 Releases: master, 7.6, 6.2 Security-Commit: ea0c1c4377b1111e4a822981a6a948b96dc0215f Security-Bulletins: TYPO3-CORE-SA-2016-005, 006, 007, 008 Change-Id: I7d2ff1c3ba388a9bfc0be0cd905a8e24a14f13d8 Reviewed-on: https://review.typo3.org/46836 Reviewed-by:
-
Georg Ringer authored
Escape the value of the field CType in tt_content.default. Resolves: #73450 Releases: master, 7.6, 6.2 Security-Commit: fa4f42b5e20e08fa154be29de867e1c01d4f7e1c Security-Bulletins: TYPO3-CORE-SA-2016-005, 006, 007, 008 Change-Id: Iaa185caac5e08d3ba03121b45edca2fd98afa741 Reviewed-on: https://review.typo3.org/46835 Reviewed-by:
-
Benni Mack authored
Remote XML entites can be loaded in places where TYPO3 expects only local files to be fetched. All places are changed so the option to load entities is disabled. Resolves: #61269 Releases: master, 7.6, 6.2 Security-Commit: 736a7ef0823893047843c6a7f5e72b220bfd4697 Security-Bulletins: TYPO3-CORE-SA-2016-005, 006, 007, 008 Change-Id: I26701fc2ffb5aed7ccbd96c168aef571d012091e Reviewed-on: https://review.typo3.org/46834 Reviewed-by:
-
Markus Klein authored
Make inserting/editing images in RTE possible again. Resolves: #71494 Releases: master, 7.6 Change-Id: If561562d9330c39544b7bd514a273641538d03f8 Reviewed-on: https://review.typo3.org/45697 Tested-by:
-
Andreas Fernandez authored
The localization wizard currently disallows creating copies if a column has elements. There are now two flags which influence the allowed actions. The wizard now checks whether there are translations or standalone content elements and negates one of the flags. Change-Id: Ief40d311959943f2f7e901b80e4b29931f2894d2 Resolves: #73538 Releases: master, 7.6 Reviewed-on: https://review.typo3.org/46753 Reviewed-by:
Ralf Merz <info@merzilla.de> Reviewed-by:
-
Frank Naegler authored
This patch replaces the old JavaScript confirm dialog in user settings module, which was used on the button "Reset Configuration and Clear Temporary Data". Resolves: #73600 Releases: master, 7.6 Change-Id: I24f872c5828aebfa08b2936e64abf57713182fbc Reviewed-on: https://review.typo3.org/46810 Reviewed-by:
-
- Feb 22, 2016
-
-
Oliver Hader authored
IRRE child records are not synchronized or localized inside a localized parent record. The DataHandler command contains the target language that shall be used for the new localized child elements. Since currently an array is transmitted, all localized children are created for the first language (sys_language_uid=1), which is the result of "(int)array(123)". Resolves: #71596 Releases: master, 7.6 Change-Id: Ic34380c7f773449b62bd1e14318f1ea8c081536f Reviewed-on: https://review.typo3.org/46813 Reviewed-by:
-
Christian Kuhn authored
There is a list of patches we applied to adodb manually in typo3/sysext/adodb/Documentation/Index.rst. This, together with 'git log' should be enough in case adodb is updated. The diff file is pain to maintain and also does not contain all changes that were done to adodb. Change-Id: If0525ce90b637541d659569f697377f011b8ad37 Resolves: #73607 Releases: master, 7.6 Reviewed-on: https://review.typo3.org/46815 Reviewed-by:
-
Claus Due authored
This change restores the previous f:switch and f:case ViewHelpers. Once deprecation period for f:case argument "default" is over both classes can be safely deleted. Change-Id: Ie0d79ef69d145e851f4f27187696a5a5297b3a80 Resolves: #73197 Releases: master Reviewed-on: https://review.typo3.org/46548 Reviewed-by:
-
Michael Oehlhof authored
Call of FlashMessage->render() was replaced with appropriate code when * setup was saved * temporary data was cleared * Notice for activated changes * password is updated * selected language is not available Resolves: #73581 Releases: master, 7.6 Change-Id: I68432729334eb905e3aae112d42ae45177a70809 Reviewed-on: https://review.typo3.org/46794 Reviewed-by:
-
Andreas Fernandez authored
After closing the wizard the internal settings object stays an object and is not converted to an array. Wizard.getComponent() now generates the markup if Wizard.show() was not called before. Also, the method now returns only the generated markup and not the (missing) modal window. Also, the events of the wizard component are now used and not the bootstrap modal events. The documentation is adjusted a bit and Localization.js is fixed. Change-Id: I0f7efd5f50247ae70fbd14600ce204c22949703d Resolves: #73575 Releases: master Reviewed-on: https://review.typo3.org/46788 Reviewed-by:
-
Christian Weiske authored
Translated labels containing UTF-8 characters were double-encoded in frontend editing. extGetLL() already runs htmlspecialchars() on labels, so we do not have to do that again in FrontendEditPanel. This fixes the titles of the admin panel buttons. Also, since we can expect all pages to be UTF-8 now, we can drop the forced conversion of UTF-8 characters to XML entities. This fixes the confirmation popup texts. Resolves: #63131 Releases: master, 7.6 Change-Id: I49faff20ff4da8434868534d566c0d3da85e30c6 Reviewed-on: https://review.typo3.org/46247 Reviewed-by:
Christian Weiske <typo3@cweiske.de> Tested-by:
Susanne Moog <typo3@susannemoog.de> Tested-by:
-
- Feb 21, 2016
-
-
Benni Mack authored
By declaring the TimeTracker class as singleton, there is no need anymore for $GLOBALS['TT']. Change-Id: I412fbdcbd2c60dcaae4dc592bea48a7d059f7e95 Resolves: #73504 Releases: master Reviewed-on: https://review.typo3.org/46520 Reviewed-by:
Michiel Roos <michiel@maxserv.com> Tested-by:
-
- Feb 20, 2016
-
-
Michael Oehlhof authored
Call of FlashMessage->render() if user not have access to these listings and when no broken links to be displayed were replaced with appropriate code. Resolves: #73576 Releases: master, 7.6 Change-Id: I86ce5c1dd49ea40aeb26be8f9da1060b1f6dc65d Reviewed-on: https://review.typo3.org/46792 Reviewed-by:
-
- Feb 19, 2016
-
-
Michael Oehlhof authored
Call of FlashMessage->render() if no reference to record was replaced with appropriate code. Resolves: #73546 Releases: master, 7.6 Change-Id: I3fa0285ccd68d7a62d63df60b488bb1fb561a243 Reviewed-on: https://review.typo3.org/46765 Reviewed-by:
-
Andreas Fernandez authored
This patch adds a wizard component. The component allows to add "slides" combined with a callback. The localization wizard used in the Page module is converted to the module wizard. Change-Id: Id60830370a85ced2425c14a593352a9f165ff4c2 Resolves: #73429 Releases: master Reviewed-on: https://review.typo3.org/46651 Reviewed-by:
-
