- May 28, 2016
-
-
Stephan Großberndt authored
Resolves: #76352 Releases: master, 7.6 Change-Id: I8332c93f1171d030d4198091779c8f1242c9337b Reviewed-on: https://review.typo3.org/48360 Reviewed-by:
Markus Klein <markus.klein@typo3.org> Tested-by:
Wouter Wolters <typo3@wouterwolters.nl> Tested-by:
-
Stephan Großberndt authored
Resolves: #76351 Releases: master Change-Id: Ic6971eaa4f2bf195022334c103e5af0a6079aed3 Reviewed-on: https://review.typo3.org/48359 Reviewed-by:
-
Valentin Despa authored
This patch deprecates the parameter 'hsc' within the following methods of TYPO3\CMS\Lang\LanguageService: * getLL * getLLL * sL Resolves: #71917 Releases: master Change-Id: I0aa9d0ad12d20719f2367459765dccb57cac69e8 Reviewed-on: https://review.typo3.org/48353 Reviewed-by: -
Benni Mack authored
The possibility to call "GeneralUtility::callUserFunc()" and "getUserObj()" with the first parameter containing the file reference to the function or class separated by a colon is deprecated. An example is "EXT:realurl/class.tx_realurl.php:tx_realurl->encodeSpURL". Calling one of the methods above with this syntax now triggers a deprecation message. It is encouraged to use the common autoloading functionality of composer or via the fallback autoloader by TYPO3 to achieve the same functionality. Resolves: #76345 Releases: master Change-Id: Iaaa2f825d330681199f0b0928727b93bbd3c73a7 Reviewed-on: https://review.typo3.org/48352 Reviewed-by:
-
Stephan Großberndt authored
This patch restores the version selector in info module which was broken during the fluidification of the info module. Resolves: #76343 Related: #74360 Releases: master Change-Id: I5488f5b7ca7efd28c5508c1e1e50cf55d3e14f38 Reviewed-on: https://review.typo3.org/48351 Reviewed-by:
-
Markus Klein authored
Remove the second parameter of getLL and replace it with htmlspecialchars directly in the code. Resolves: #76321 Related: #71917 Releases: master Change-Id: I71ed4d93c48731cad8cf88cc1de002190f38ba9a Reviewed-on: https://review.typo3.org/48350 Reviewed-by:
Valentin Despa <info@vdespa.de> Tested-by:
-
Wouter Wolters authored
Resolves: #76330 Releases: master Change-Id: Ifff1c2bf9af25bf1a57de4f80ce356dad3462b64 Reviewed-on: https://review.typo3.org/48337 Reviewed-by:
Stephan Großberndt <stephan@grossberndt.de> Tested-by:
-
Markus Klein authored
This avoids lots of filesystem I/O because it does not crawl all extensions on each BE request anymore. Resolves: #69172 Releases: master Change-Id: Ibe83caed164f78f51718fbd34e334f980a8e40d8 Reviewed-on: https://review.typo3.org/42730 Reviewed-by:
-
Elmar Hinz authored
Resolves: #76261 Releases: master Change-Id: I64ed81604b92e1c929a5252b396c0d3a21098c2b Reviewed-on: https://review.typo3.org/48242 Reviewed-by:
-
Benni Mack authored
This patch deprecates the following parameters/methods within DocumentTemplate: * sectionFlag (is internal) * viewPageIcon() * getHeader() * getResourceHeader() * header() * icons() * t3Button() * wrapScriptTags() * loadJavascriptLib() * getContextMenuCode() Resolves: #72859 Releases: master Change-Id: I589c364ec506793439ac007b002cf28a6e1ca69d Reviewed-on: https://review.typo3.org/47769 Reviewed-by:
-
Benni Mack authored
Some descriptions of options in DefaultConfiguration are not visible in the Install Tool. These are added and made sure to be rendered in the Install Tool. Resolves: #76333 Releases: master, 7.6 Change-Id: I87d90b7614d5c90a1d212d0a214ef26dc2d5fcfc Reviewed-on: https://review.typo3.org/48341 Reviewed-by:
-
Valentin Despa authored
Remove the second parameter of sL and replace it with htmlspecialchars directly in the code. Resolves: #76325 Related: #71917 Releases: master Change-Id: I6668eea01d80446a6b6f2ec95435c6e3d93cb0c3 Reviewed-on: https://review.typo3.org/48346 Reviewed-by:
-
- May 27, 2016
-
-
Valentin Despa authored
Remove the second parameter of sL and replace it with htmlspecialchars directly in the code. Resolves: #76325 Related: #71917 Releases: master Change-Id: Ibaae459cb81a4fb9616e953d772603acf85e4d11 Reviewed-on: https://review.typo3.org/48344 Reviewed-by:
-
Valentin Despa authored
Remove the second parameter of sL and replace it with htmlspecialchars directly in the code. Resolves: #76325 Related: #71917 Releases: master Change-Id: I6267c45daeddf9a652ad63acb014c824721df25f Reviewed-on: https://review.typo3.org/48338 Reviewed-by:
Michael Oehlhof <typo3@oehlhof.de> Reviewed-by:
Morton Jonuschat <m.jonuschat@mojocode.de> Tested-by:
-
Wouter Wolters authored
Resolves: #76329 Releases: master,7.6 Change-Id: Ie5320e71aa8ded5b744997b6f1ca71c3542aa2f0 Reviewed-on: https://review.typo3.org/48334 Reviewed-by:
-
Christian Kuhn authored
Change-Id: I09d769584dc4389d0d6e0d2ffa3e8e1b0fa571ad Resolves: #76327 Releases: master Reviewed-on: https://review.typo3.org/48333 Reviewed-by:
-
Wouter Wolters authored
Remove the second parameter of getLL and replace it with htmlspecialchars directly in the code. Resolves: #76321 Related: #71917 Releases: master Change-Id: I513c5915c9273c906b6b828d65425ac8ee485e12 Reviewed-on: https://review.typo3.org/48332 Reviewed-by:
-
Wouter Wolters authored
Remove the second parameter of getLL and replace it with htmlspecialchars directly in the code. Resolves: #76321 Related: #71917 Releases: master Change-Id: Ieabcf550883ebcf85fe13232caab249b0f37e4b1 Reviewed-on: https://review.typo3.org/48330 Reviewed-by:
-
Christian Kuhn authored
There is a funny comment for this call within TypoScriptParser. Reading the code, there seems to be no part that works with references on this variable in setVal(). The patch now removes this odd construct. In the unlikely case some issue still pops up later, we would at least have a clear way to reproduce then ... Change-Id: I70f5f8915386a7a4b5038d66611b4ec359f5c1fa Resolves: #76323 Releases: master Reviewed-on: https://review.typo3.org/48327 Reviewed-by:
-
Benni Mack authored
This change allows the IconViewHelper in the reports module to be used not just from typo3/ (e.g. if a person puts typo3/index.php to a different place or wants to show the reports in the install tool). Resolves: #76322 Releases: master Change-Id: I7067654b3fff5ac75fb9883b708ddb28a9ddc7d1 Reviewed-on: https://review.typo3.org/48321 Reviewed-by:
Frank Naegler <frank.naegler@typo3.org> Tested-by:
-
Morton Jonuschat authored
Use the charset name 'utf8' instead of 'utf-8' for MySQL connections as some MySQL server versions silently ignore the connection charset name 'utf-8' and work with the global default connection charset instead. Using 'utf8' as charset name doesn't exhibit this behavior. Also changes the silent upgrade wizard to only set the default driver and connection charset if no value has been configured, this avoids silently changing non-default values for these options. Change-Id: I94e1e7c557aff890cec357ef9ee069ae9aa052c6 Resolves: #76265 Releases: master Reviewed-on: https://review.typo3.org/48310 Tested-by:
Riccardo De Contardi <erredeco@gmail.com> Tested-by:
Gianluigi Martino <gmartino27@gmail.com> Reviewed-by:
Andreas Fernandez <typo3@scripting-base.de> Reviewed-by:
-
Elmar Hinz authored
Releases: master Resolves: #76316 Change-Id: I40c05c0d6a342b3d3c19dc164ae7716076aa3df2 Reviewed-on: https://review.typo3.org/48307 Reviewed-by:
-
Elmar Hinz authored
Resolves: #76307 Releases: master Change-Id: Ie75ab139102cedb6e5bc01ffb59bbf51c900dded Reviewed-on: https://review.typo3.org/48293 Reviewed-by:
-
Elmar Hinz authored
Resolves: #76294 Releases: master Change-Id: Ifca415dd965473cde9cec29ca21a476491540845 Reviewed-on: https://review.typo3.org/48284 Reviewed-by:
-
Frank Naegler authored
Resolves: #75397 Releases: master, 7.6 Change-Id: I7cb4f04e38e3d9f755aaf92012eb56d71a1ad6f7 Reviewed-on: https://review.typo3.org/48110 Reviewed-by:
-
Torben Hansen authored
When an admin user tries to upload a file which has a fileextension that is included in the fileDenyPattern, the upload is denied. With the security fix in #51326 admin users are now able to change the extension of a file to any value, since the fileDenyPattern is not checked for admin users. This leads to the situation, that admin users can create/rename files in the filelist with a fileextension of their choice. To keep the behavior consistent, this patch re-enables the check of the fileDenyPattern for admin users in the filelist. Resolves: #60173 Releases: master, 7.6, 6.2 Change-Id: I3b819e70cf2218a4580203ac7b7a6b0c3c5087ab Reviewed-on: https://review.typo3.org/32610 Reviewed-by:
Nicole Cordes <typo3@cordes.co> Tested-by:
Helmut Hummel <helmut.hummel@typo3.org> Tested-by:
-
Christian Kuhn authored
To mitigate potential "unsecure unserialize()" issues, the new PHP7 feature to allow only specific classes or to totally deny object creation is rolled out throughout the core in v8. Since a lot of places use unserialize() and some are critical or hard to understand, this is done with a series of patches for single areas. This patch denies object creation at all places where $GLOBALS['TYPO3_CONF_VARS']['EXT']['extConf']['anExtension'] is unserialized() - the extension manager and ext_conf_template.txt handling never handles objects at this place, so it should be safe to deny objects at all places. Change-Id: Ie96e6fb6837418fd765f883b216b7a9c5af5795d Resolves: #76320 Releases: master Reviewed-on: https://review.typo3.org/48314 Reviewed-by:
Oliver Hader <oliver.hader@typo3.org> Tested-by:
-
Elmar Hinz authored
Double slash one-line comments are standard in many languages. Make them standard in TypoScript, too. Deprecated: / Line comment headed by single slash Resolves: #76104 Releases: master Change-Id: Id78391f973cdf8147bf91b269996f31d475de717 Reviewed-on: https://review.typo3.org/48051 Reviewed-by:
-
Wouter Wolters authored
Remove the second parameter of getLL and replace it with htmlspecialchars directly in the code. Resolves: #76321 Related: #71917 Releases: master Change-Id: Iaccd3e31b235632fac9022e9120a35426bd5d99b Reviewed-on: https://review.typo3.org/48320 Reviewed-by:
-
Frank Naegler authored
The MenuViewHelperTrait has been marked as deprecated. All methods of the Trait have been implemented in a new AbstractMenuViewHelper class. Resolves: #75209 Releases: master Change-Id: Ie8cad645c80c3cb7814dd2b69f22feb729334779 Reviewed-on: https://review.typo3.org/48111 Reviewed-by:
-
Elmar Hinz authored
Explain the creation and name of the variable in concise words. Resolves: #76195 Related: #76194 Releases: master Change-Id: Ifff61c38dbb4ea07f79cb42cfe7f6aca41e5fbe1 Reviewed-on: https://review.typo3.org/48132 Reviewed-by:
Olaf Schmidt-Wischhöfer <osw@eadi.org> Tested-by:
-
Andreas Fernandez authored
Use `$table` for logging instead of the hardcoded `pages` table. Resolves: #74125 Releases: master, 7.6 Change-Id: I13b4306bdc54cf461d23c401d54c04983059df46 Reviewed-on: https://review.typo3.org/48318 Reviewed-by:
-
Andreas Fernandez authored
In case `$rows` in the method `DataHandler::copySpecificPage()` is null, the foreach loop will throw an error. `$rows` may become null if an extension brings TCA but the table does not have `uid` field, for example. It's now checked whether the result being iterated is an array, otherwise an error is logged. Resolves: #74125 Releases: master, 7.6 Change-Id: I20cb101155632309b9e08600fcd33e655c1c9d2f Reviewed-on: https://review.typo3.org/48311 Reviewed-by:
-
Frank Naegler authored
Mark stdWrap_removeBadHTML as deprecated in doc comment. Resolves: #15415 Releases: master Change-Id: I4534a8b93b731f8e736752e712c0c13293b0b05d Reviewed-on: https://review.typo3.org/48313 Reviewed-by:
Elmar Hinz <t3elmar@gmail.com> Reviewed-by:
-
Wouter Wolters authored
Resolves: #15415 Releases: master Change-Id: Iac92d6d36e2a84b069fa7c4a17d2dc567d952309 Reviewed-on: https://review.typo3.org/48301 Reviewed-by:
-
Elmar Hinz authored
The PHP char() function only works reliably with ASCII codes independent of the actual char set. See http://php.net/manual/en/function.chr.php Releases: master Resolves: #76315 Change-Id: Ia87b95239fc4678f297571704f031003f84a5759 Reviewed-on: https://review.typo3.org/48306 Reviewed-by:
-
Morton Jonuschat authored
Instead of passing the simple value "1" to QueryGenerator->getTreeList() use a page permission clause created using $BE_USER->getPagePermsClause() when determining the recursive storage pids. Passing the unprocessed value "1" causes invalid SQL statements and does not perform any access checks. Releases: master, 7.6 Resolves: #75912 Change-Id: I6edadd627c0a9c01a78c3cb55805455fed710d14 Reviewed-on: https://review.typo3.org/48220 Reviewed-by:
-
Andreas Fernandez authored
It's possible to open some backend modules (e.g. RTE or EditDocumentController) in a new tab. However, the configuration for popups is missing in such case, causing e.g. opening the "Insert image" wizard of RTE is not possible anymore. Place configuration inline in TYPO3.settings to not have this problem of missing configuration. Resolves: #76285 Releases: master Change-Id: I1405dd90e4e00fc709d504af2ed0a936a6374fce Reviewed-on: https://review.typo3.org/48276 Reviewed-by:
-
- May 26, 2016
-
-
Georg Ringer authored
Due to the wrong approach of RemoveXSS it is not 100% safe and does not keep its promise. Resolves: #76164 Releases: master Change-Id: I8aa0a05f7866041f392441fa852bae5a7c202142 Reviewed-on: https://review.typo3.org/48102 Reviewed-by:
-
Markus Klein authored
Resolves: #76303 Releases: master, 7.6 Change-Id: Ia03f62ccc1c7c989a4284de36ac814758c63d288 Reviewed-on: https://review.typo3.org/48290 Tested-by:
-
