- Apr 14, 2016
-
-
dirk_juettner authored
Resolves: #75628 Releases: master Change-Id: I20bab4abea826e4e8cfb1b2a718f438ed22ccd72 Reviewed-on: https://review.typo3.org/47675 Reviewed-by:
Wouter Wolters <typo3@wouterwolters.nl> Reviewed-by:
Sascha Egerer <sascha@sascha-egerer.de> Tested-by:
-
Benjamin Kott authored
Releases: master Resolves: #75619 Change-Id: I36e2bdba2baf931726797cbe89a0f10e0519eaba Reviewed-on: https://review.typo3.org/47668 Reviewed-by:
Benni Mack <benni@typo3.org> Tested-by:
-
Georg Ringer authored
To improve the usability, add tool tips to the icons. Resolves: #75616 Releases: master, 7.6 Change-Id: Iceffc8d15625aa02da55ce533463951546d8d890 Reviewed-on: https://review.typo3.org/47666 Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
Daniel Goerz <ervaude@gmail.com> Tested-by:
-
Wouter Wolters authored
Resolves: #75527 Releases: master Change-Id: If675538d4869ff66b4664f3064083f896632652d Reviewed-on: https://review.typo3.org/47583 Reviewed-by:
Andreas Fernandez <typo3@scripting-base.de> Reviewed-by:
-
Georg Ringer authored
Add the renderType to the field to avoid entries in the deprecation log Resolves: #75613 Releases: master Change-Id: I5be3d984caa2deed3a2f546f833e05010367e5a7 Reviewed-on: https://review.typo3.org/47665 Reviewed-by:
Morton Jonuschat <m.jonuschat@mojocode.de> Tested-by:
-
Oliver Hader authored
The method GeneralUtility::xml2array uses a runtime cache and in addition a persistent database cache. The database cache is triggered using the "cache_hash" method in PageRepository, which is a frontend only component. Since this approach is binding the common layer with the frontend layer, this dependency is removed. Resolves: #75609 Releases: master Change-Id: I43bd92df6570502abbb5714b217f3ff0e32a588c Reviewed-on: https://review.typo3.org/47663 Reviewed-by:
-
Benjamin Kott authored
Releases: master Resolves: #75599 Change-Id: If8c31cf1402335b7d1f84c6141e63df8313b9485 Reviewed-on: https://review.typo3.org/47658 Reviewed-by:
Mathias Schreiber <mathias.schreiber@wmdb.de> Tested-by:
-
Wouter Wolters authored
Fix acceptance test Resolves: #75525 Releases: master Change-Id: Icfcc8aa7c04f11005c6ce774fcce064fa8b480e5 Reviewed-on: https://review.typo3.org/47656 Reviewed-by:
-
Benjamin Kott authored
Releases: master Resolves: #75583 Change-Id: Id82af2fed1a9a5174fe29629bceb7aaf00a9c047 Reviewed-on: https://review.typo3.org/47639 Reviewed-by:
Frank Naegler <frank.naegler@typo3.org> Tested-by:
-
Sascha Egerer authored
The pagetree will be used in many acceptance tests. To simplyfy the navigation a special pagetree helper is added. The helper can simply be injected in test by codeceptions dependecy injection. Change-Id: I38e2f9b44586c6d6de25740692cafbde52442dc8 Resolves: #75582 Releases: master Reviewed-on: https://review.typo3.org/47653 Reviewed-by:
Dirk Jüttner <dirk.juettner@gmail.com> Tested-by:
-
Gianluigi Martino authored
Remove the beginning dash of the id in body-Tag by stripping the forward slash from the route identifier. Change-Id: I1454f5f51469ea17b9bdf5520b50c8da8825a73f Resolves: #75525 Releases: master Reviewed-on: https://review.typo3.org/47651 Reviewed-by:
Gianluigi Martino <gmartino27@gmail.com> Tested-by:
-
Frank Naegler authored
Resolves: #75157 Releases: master Change-Id: I7e91a19dd61155ab7118229411bca397cfa581d8 Reviewed-on: https://review.typo3.org/47300 Tested-by:
Susanne Moog <typo3@susannemoog.de> Tested-by:
Jan Helke <typo3@helke.de> Tested-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Tested-by:
-
- Apr 13, 2016
-
-
Benjamin Kott authored
Releases: master Resolves: #75579 Change-Id: Iae5d8aa364bcb11c593365814d157047dea15c70 Reviewed-on: https://review.typo3.org/47652 Reviewed-by:
-
Frank Naegler authored
The cache clearing system has been simplified by removing options in cache clear menu and install tool. Resolves: #75581 Releases: master Change-Id: Ia784efb13e443705b1be3326ba12107b885e8268 Reviewed-on: https://review.typo3.org/47580 Reviewed-by:
-
Morton Jonuschat authored
Convert all SQL statements in backend authentication classes to the new Doctrine DBAL based API. Releases: master Resolves: #75546 Change-Id: I2450a9cb8947673285763b475bcf25a2dc284ee8 Reviewed-on: https://review.typo3.org/47576 Reviewed-by:
-
dirk_juettner authored
Call extensionmanager and verify ext:styleguide is listed. Resolves: #75523 Releases: master Change-Id: I0929a12c0699dc99a95151a8083fbb3efecee674 Reviewed-on: https://review.typo3.org/47573 Reviewed-by:
-
Morton Jonuschat authored
The PHP7 return type declaration for getIgnoredEnableFields() as well as the input type hint for setIgnoredEnableFields() have been added. Additionally the development notes at the top of the class have been removed as all information from those notes was included in the appropriate phpDoc headers of the methods. Releases: master Resolves: #75574 Change-Id: I9765be595e1e3f2eb16fc5f3ba51fdab3681fec2 Reviewed-on: https://review.typo3.org/47649 Reviewed-by:
-
Jan Helke authored
Resolves: #75549 Releases: master Change-Id: Icfe6d3f47073e4dbd3636d6c435f946bfd6ee444 Reviewed-on: https://review.typo3.org/47628 Reviewed-by:
-
Christian Kuhn authored
There is some weird issue in the PHP internal web server resulting in unexpected EOF in combination with phantomjs. Having selenium in between seems to solve the issue for now. Change-Id: I3d682d60e3962a2027c7b5b2d2e0971e828f14bf Resolves: #75578 Releases: master Reviewed-on: https://review.typo3.org/47647 Reviewed-by:
-
Morton Jonuschat authored
This method was an early helper for the QueryBuilder to replace BEenableFields in a database agnostic way. Since the query restrictions are now built using the QueryRestrictionBuilder and QueryContext this method needs to be removed before it becomes part of the public API. Resolves: #75562 Releases: master Change-Id: I8428a43ed020ecbac722edba5e245d206158ac40 Reviewed-on: https://review.typo3.org/47638 Reviewed-by:
Michael Oehlhof <typo3@oehlhof.de> Reviewed-by:
-
Arjen Hoekema authored
The call to "addMessageToFlashMessageQueue" expects the second argument to be an array instead of a string. Additionally the type of the fifth argument of writeLog() has been corrected troughout the class. Resolves: #75531 Releases: master, 7.6 Change-Id: I1a96efea0f41abd2e4ae866254913a495e376cda Reviewed-on: https://review.typo3.org/47588 Reviewed-by:
Arjen Hoekema <arjenhoekema@gmail.com> Tested-by:
-
Benjamin Kott authored
Releases: master Resolves: #75557 Change-Id: I556d536d590fd7ad2d531c2d803ee2b771155bb4 Reviewed-on: https://review.typo3.org/47633 Reviewed-by:
-
Sascha Egerer authored
The page module acceptance test should use the admin actor. Change-Id: I299815d86fd5070a6cbafb9cc3faf9208a70fd6c Resolves: #75558 Releases: master Reviewed-on: https://review.typo3.org/47634 Reviewed-by:
-
Daniel Goerz authored
Change-Id: Ib6593d02955c1313ae16f9cef5fad683cb4738c5 Resolves: #19262 Releases: master Reviewed-on: https://review.typo3.org/47545 Reviewed-by:
-
Jan Fässler authored
The wrapping div is superfluous if neither text nor header is set in fluid_styled_content Resolves: #75237 Releases: master Change-Id: Ic5bba9cef51778311aa17df1c58d9c07ee439b8b Reviewed-on: https://review.typo3.org/47368 Reviewed-by:
-
Benni Mack authored
The Fluid namespaces can be put in short-syntax, and in tags to be resolved. However, if the template source is very large, then preg_match_all() stops and returns "0" although the matched values are within $matches. However, the $matched result is "0". The regular expression for doing so, is very exhaustive and greedy, and uses preg_match_all() however, preg_match() does the job as well. Additionally, the regular expression is changed to be less greedy (using *?). An example where this is necessary is the FileList search module where the additional namespaces are not resolved currently and the core icons are not shown, because of the memory - exhausting regular expression. Change-Id: Ia685091fe9fbcbb1520415ee5d48925852d1a400 Resolves: #75464 Releases: master Reviewed-on: https://review.typo3.org/47549 Reviewed-by:
-
Benjamin Kott authored
Releases: master Resolves: #75554 Change-Id: Id9f971a36b3b8d91e7e80ec072370276551b1891 Reviewed-on: https://review.typo3.org/47631 Reviewed-by:
-
Morton Jonuschat authored
The QueryHelper deals with GROUP BY and ORDER BY strings coming from sources where the data format is not strictly defined and the input might be a string prefixes or otherwise unsuitable for immediate further usage. For GROUP BY strings the prefix is removed and the remainder of the string is treated as a comma separated list of column names that get parsed into an array. For ORDER BY strings the prefix is removed and the remainder of the string is treated as a list of comma separated column names, possibly with a sort direction separated from the column name, that gets parsed into an array. For WHERE SQL fragments leading the leading logical operators "AND" and "OR" get removed, no further modifications are performed on the string. Resolves: #75559 Releases: master Change-Id: I37016eda6597cab49b274f498188a8579dec7b2c Reviewed-on: https://review.typo3.org/47636 Reviewed-by:
Georg Ringer <georg.ringer@gmail.com> Tested-by:
-
- Apr 12, 2016
-
-
Susanne Moog authored
- add correct cache dependency for rebuilding of php on appveyor Change-Id: I3d88b4f3572b59ffe90b8ec0f670913f7f1763e4 Resolves: #75498 Releases: master Reviewed-on: https://review.typo3.org/47635 Reviewed-by:
-
Sascha Egerer authored
Fix bash syntax error in .travis.yml and install bz2 module in appvoyer Change-Id: I381b43485276958dfbb3a67f87bb9bdb1f85f95d Resolves: #75498 Releases: master Reviewed-on: https://review.typo3.org/47632 Reviewed-by:
-
Sascha Egerer authored
PhantomJS should be installed via composer to reduce the system requirements of acceptance tests. The PhantomJS server should also be started automatically when running acceptance tests. Change-Id: I416359484e923e2a04f5213fb7f221bc7d0111e1 Resolves: #75498 Releases: master Reviewed-on: https://review.typo3.org/47564 Reviewed-by:
-
Sascha Egerer authored
An admin and an editor actor has been added for the acceptance test suite. These actors are able to reuse a session that is imported in the fixture. Reusing the session does speed up the tests as to login process must not be done on every test. Change-Id: Ie20972c8b968ee8e986df0e0ee91460aa6dde68a Resolves: #75550 Releases: master Reviewed-on: https://review.typo3.org/47627 Reviewed-by:
-
Kay Strobach authored
This patch ensures that we do not display override "" but a more useful information. Additionally the checkboxes are enabled by default if no default value available to reduce the effort needed to provide an element specific value. Resolves: #75540 Releases: master Change-Id: I11667232761968c077f02ec18e6802d7e54fcc6f Reviewed-on: https://review.typo3.org/47618 Reviewed-by:
-
Andreas Fernandez authored
Resolves: #75526 Releases: master Change-Id: I944cc10e8b12e2d779db37a1afd8ebc737933714 Reviewed-on: https://review.typo3.org/47581 Reviewed-by:
-
Sascha Egerer authored
The logout action of the user acceptance tests must be executed on the main page frame. We must ensure that we are in the correct frame inside of this action. Change-Id: Ied588442516513138f16da4037e29fa56f3f1399 Resolves: #75528 Releases: master Reviewed-on: https://review.typo3.org/47585 Reviewed-by:
-
Morton Jonuschat authored
The Doctrine DBAL library is added as a composer dependency as a foundation to replace the current DatabaseConnection class, EXT:dbal and EXT:adodb. Doctrine DBAL is encapsulated within a ConnectionPool class that manages the connections to all defined database connections. The main parts of the patch consist of the connection management, convenience methods for simple SQL queries, a QueryBuilder to build complex queries in a database platform independent way and a QueryRestriction Builder that aims to replace deleteClause and BEenableFields in the backend context as well as enableFields in frontend context. Documentation and an example implementation of using the API will follow in separate patches. Releases: master Resolves: #75454 Change-Id: I47837d9e77331132807bbb7fb956c359031b4f16 Reviewed-on: https://review.typo3.org/47111 Reviewed-by:
-
Helmut Hummel authored
In case a backend or frontend user is stored in the database with an empty string as password (not possible through backend UI), it is possible to authenticate this user using an empty password with the standard TYPO3 username/password authentication services. By definition this should be prohibited. Resolves: #75055 Releases: master, 7.6, 6.2 Security-Bulletins: TYPO3-CORE-SA-2016-009, 010, 011, 012 Change-Id: I4ca1b7d80c04de86d6ff1ef6e99a4a57b97ed948 Reviewed-on: https://review.typo3.org/47611 Reviewed-by:
Oliver Hader <oliver.hader@typo3.org> Tested-by:
-
Nicole Cordes authored
To view a preview of a workspace page a backend user is simulated. Currently the user who created the preview link is taken into account. This patch creates a limited backend user to be able to process the web request. Resolves: #28175 Releases: master, 7.6, 6.2 Security-Commit: f0445be5322b4c0e4b1c0900542aca4e00a39f46 Security-Bulletins: TYPO3-CORE-SA-2016-009, 010, 011, 012 Change-Id: I80dd9168b22bf62b2a2ed4a264240d07f056cc73 Reviewed-on: https://review.typo3.org/47610 Reviewed-by:
-
Nicole Cordes authored
In Javascript context the title attribute of a selected option is passed as unescapd HTML argument to the function. Creating a new option tag without title validation results in a XSS possibility. This patch removes hardcoded attribute setting and uses jQuery function which take care of proper escaping. Resolves: #75164 Releases: master, 7.6, 6.2 Security-Commit: c6ec139a9ad69db67c17b1f3688b07e65f8898cc Security-Bulletins: TYPO3-CORE-SA-2016-009, 010, 011, 012 Change-Id: Ie664fdaf71f4f28f66b0e7cde42da1d6284b1f02 Reviewed-on: https://review.typo3.org/47609 Reviewed-by:
-
Frank Naegler authored
This patch fix a XSS vulnerability in TCA type inline. Resolves: #73460 Releases: master, 7.6 Security-Commit: 8f178b4a68cbb50a55e0864b3f3c9989aa415ab3 Security-Bulletins: TYPO3-CORE-SA-2016-009, 010, 011, 012 Change-Id: I7a39d3d6717b3edb02f6a7ee82675279d7ebf940 Reviewed-on: https://review.typo3.org/47608 Reviewed-by:
-
