- Apr 13, 2016
-
-
Benjamin Kott authored
Releases: master Resolves: #75557 Change-Id: I556d536d590fd7ad2d531c2d803ee2b771155bb4 Reviewed-on: https://review.typo3.org/47633 Reviewed-by:
Frank Naegler <frank.naegler@typo3.org> Tested-by:
Susanne Moog <typo3@susannemoog.de> Tested-by:
-
Sascha Egerer authored
The page module acceptance test should use the admin actor. Change-Id: I299815d86fd5070a6cbafb9cc3faf9208a70fd6c Resolves: #75558 Releases: master Reviewed-on: https://review.typo3.org/47634 Reviewed-by:
Dirk Jüttner <dirk.juettner@gmail.com> Tested-by:
-
Daniel Goerz authored
Change-Id: Ib6593d02955c1313ae16f9cef5fad683cb4738c5 Resolves: #19262 Releases: master Reviewed-on: https://review.typo3.org/47545 Reviewed-by:
-
Jan Fässler authored
The wrapping div is superfluous if neither text nor header is set in fluid_styled_content Resolves: #75237 Releases: master Change-Id: Ic5bba9cef51778311aa17df1c58d9c07ee439b8b Reviewed-on: https://review.typo3.org/47368 Reviewed-by:
Jan Helke <typo3@helke.de> Tested-by:
-
Benni Mack authored
The Fluid namespaces can be put in short-syntax, and in tags to be resolved. However, if the template source is very large, then preg_match_all() stops and returns "0" although the matched values are within $matches. However, the $matched result is "0". The regular expression for doing so, is very exhaustive and greedy, and uses preg_match_all() however, preg_match() does the job as well. Additionally, the regular expression is changed to be less greedy (using *?). An example where this is necessary is the FileList search module where the additional namespaces are not resolved currently and the core icons are not shown, because of the memory - exhausting regular expression. Change-Id: Ia685091fe9fbcbb1520415ee5d48925852d1a400 Resolves: #75464 Releases: master Reviewed-on: https://review.typo3.org/47549 Reviewed-by:
Daniel Goerz <ervaude@gmail.com> Tested-by:
-
Benjamin Kott authored
Releases: master Resolves: #75554 Change-Id: Id9f971a36b3b8d91e7e80ec072370276551b1891 Reviewed-on: https://review.typo3.org/47631 Reviewed-by:
-
Morton Jonuschat authored
The QueryHelper deals with GROUP BY and ORDER BY strings coming from sources where the data format is not strictly defined and the input might be a string prefixes or otherwise unsuitable for immediate further usage. For GROUP BY strings the prefix is removed and the remainder of the string is treated as a comma separated list of column names that get parsed into an array. For ORDER BY strings the prefix is removed and the remainder of the string is treated as a list of comma separated column names, possibly with a sort direction separated from the column name, that gets parsed into an array. For WHERE SQL fragments leading the leading logical operators "AND" and "OR" get removed, no further modifications are performed on the string. Resolves: #75559 Releases: master Change-Id: I37016eda6597cab49b274f498188a8579dec7b2c Reviewed-on: https://review.typo3.org/47636 Reviewed-by:
Wouter Wolters <typo3@wouterwolters.nl> Tested-by:
Georg Ringer <georg.ringer@gmail.com> Tested-by:
-
- Apr 12, 2016
-
-
Susanne Moog authored
- add correct cache dependency for rebuilding of php on appveyor Change-Id: I3d88b4f3572b59ffe90b8ec0f670913f7f1763e4 Resolves: #75498 Releases: master Reviewed-on: https://review.typo3.org/47635 Reviewed-by:
-
Sascha Egerer authored
Fix bash syntax error in .travis.yml and install bz2 module in appvoyer Change-Id: I381b43485276958dfbb3a67f87bb9bdb1f85f95d Resolves: #75498 Releases: master Reviewed-on: https://review.typo3.org/47632 Reviewed-by:
-
Sascha Egerer authored
PhantomJS should be installed via composer to reduce the system requirements of acceptance tests. The PhantomJS server should also be started automatically when running acceptance tests. Change-Id: I416359484e923e2a04f5213fb7f221bc7d0111e1 Resolves: #75498 Releases: master Reviewed-on: https://review.typo3.org/47564 Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
-
Sascha Egerer authored
An admin and an editor actor has been added for the acceptance test suite. These actors are able to reuse a session that is imported in the fixture. Reusing the session does speed up the tests as to login process must not be done on every test. Change-Id: Ie20972c8b968ee8e986df0e0ee91460aa6dde68a Resolves: #75550 Releases: master Reviewed-on: https://review.typo3.org/47627 Reviewed-by:
-
Kay Strobach authored
This patch ensures that we do not display override "" but a more useful information. Additionally the checkboxes are enabled by default if no default value available to reduce the effort needed to provide an element specific value. Resolves: #75540 Releases: master Change-Id: I11667232761968c077f02ec18e6802d7e54fcc6f Reviewed-on: https://review.typo3.org/47618 Reviewed-by:
-
Andreas Fernandez authored
Resolves: #75526 Releases: master Change-Id: I944cc10e8b12e2d779db37a1afd8ebc737933714 Reviewed-on: https://review.typo3.org/47581 Reviewed-by:
-
Sascha Egerer authored
The logout action of the user acceptance tests must be executed on the main page frame. We must ensure that we are in the correct frame inside of this action. Change-Id: Ied588442516513138f16da4037e29fa56f3f1399 Resolves: #75528 Releases: master Reviewed-on: https://review.typo3.org/47585 Reviewed-by:
Sascha Egerer <sascha@sascha-egerer.de> Tested-by:
-
Morton Jonuschat authored
The Doctrine DBAL library is added as a composer dependency as a foundation to replace the current DatabaseConnection class, EXT:dbal and EXT:adodb. Doctrine DBAL is encapsulated within a ConnectionPool class that manages the connections to all defined database connections. The main parts of the patch consist of the connection management, convenience methods for simple SQL queries, a QueryBuilder to build complex queries in a database platform independent way and a QueryRestriction Builder that aims to replace deleteClause and BEenableFields in the backend context as well as enableFields in frontend context. Documentation and an example implementation of using the API will follow in separate patches. Releases: master Resolves: #75454 Change-Id: I47837d9e77331132807bbb7fb956c359031b4f16 Reviewed-on: https://review.typo3.org/47111 Reviewed-by:
-
Helmut Hummel authored
In case a backend or frontend user is stored in the database with an empty string as password (not possible through backend UI), it is possible to authenticate this user using an empty password with the standard TYPO3 username/password authentication services. By definition this should be prohibited. Resolves: #75055 Releases: master, 7.6, 6.2 Security-Bulletins: TYPO3-CORE-SA-2016-009, 010, 011, 012 Change-Id: I4ca1b7d80c04de86d6ff1ef6e99a4a57b97ed948 Reviewed-on: https://review.typo3.org/47611 Reviewed-by:
Oliver Hader <oliver.hader@typo3.org> Tested-by:
-
Nicole Cordes authored
To view a preview of a workspace page a backend user is simulated. Currently the user who created the preview link is taken into account. This patch creates a limited backend user to be able to process the web request. Resolves: #28175 Releases: master, 7.6, 6.2 Security-Commit: f0445be5322b4c0e4b1c0900542aca4e00a39f46 Security-Bulletins: TYPO3-CORE-SA-2016-009, 010, 011, 012 Change-Id: I80dd9168b22bf62b2a2ed4a264240d07f056cc73 Reviewed-on: https://review.typo3.org/47610 Reviewed-by:
-
Nicole Cordes authored
In Javascript context the title attribute of a selected option is passed as unescapd HTML argument to the function. Creating a new option tag without title validation results in a XSS possibility. This patch removes hardcoded attribute setting and uses jQuery function which take care of proper escaping. Resolves: #75164 Releases: master, 7.6, 6.2 Security-Commit: c6ec139a9ad69db67c17b1f3688b07e65f8898cc Security-Bulletins: TYPO3-CORE-SA-2016-009, 010, 011, 012 Change-Id: Ie664fdaf71f4f28f66b0e7cde42da1d6284b1f02 Reviewed-on: https://review.typo3.org/47609 Reviewed-by:
-
Frank Naegler authored
This patch fix a XSS vulnerability in TCA type inline. Resolves: #73460 Releases: master, 7.6 Security-Commit: 8f178b4a68cbb50a55e0864b3f3c9989aa415ab3 Security-Bulletins: TYPO3-CORE-SA-2016-009, 010, 011, 012 Change-Id: I7a39d3d6717b3edb02f6a7ee82675279d7ebf940 Reviewed-on: https://review.typo3.org/47608 Reviewed-by:
-
Andreas Fernandez authored
Since the XEE security fix (I26701fc2ffb5aed7ccbd96c168aef571d012091e), the XML files in the Extension Manager may are not loaded anymore, depending on the machine. Change the way how the files are loaded to fix the issue. Change-Id: I2a3dffd089ed427b965bcbae8aa596c26a81770b Resolves: #75022 Releases: master, 7.6, 6.2 Reviewed-on: https://review.typo3.org/47196 Reviewed-by:
Daniel Maier <dani-maier@gmx.de> Reviewed-by:
Mathias Schreiber <mathias.schreiber@wmdb.de> Tested-by:
Stephan Großberndt <stephan@grossberndt.de> Reviewed-by:
-
Georg Ringer authored
Change width of the textarea to edit file's content in the file list module if EXT:t3editor is not installed. Resolves: #75495 Releases: master, 7.6 Change-Id: I5b05f753cae8a11a7889a6391521fcfd7c0aef51 Reviewed-on: https://review.typo3.org/47586 Reviewed-by:
Andreas Fernandez <typo3@scripting-base.de> Reviewed-by:
Benni Mack <benni@typo3.org> Reviewed-by:
Michael Oehlhof <typo3@oehlhof.de> Tested-by:
-
- Apr 11, 2016
-
-
Frank Naegler authored
Move description field into own tab and display description column as callout. Resolves: #75515 Releases: master Change-Id: I552b814d1ea06b02a2b34653bca09769c656fa48 Reviewed-on: https://review.typo3.org/47565 Reviewed-by:
-
Frank Naegler authored
A new renderType was added to render the backend layout wizard inline in FormEngine. Resolves: #75497 Releases: master Change-Id: If26ff91e2c35a692f27b4fd55debbc69027d754a Reviewed-on: https://review.typo3.org/47563 Tested-by:
-
Jan Helke authored
As decided during the last RL Product Team meeting in Dusseldorf, the upgrade wizards from the install tool should stay for two generations of LTS versions. This reverts commit 021237d5. Releases: master Resolves: #75485 Related: #72367 Change-Id: I2f9d52a5bf0ffeca6843780354e349a5151ddb07 Reviewed-on: https://review.typo3.org/47556 Reviewed-by:
-
Benjamin Kott authored
Releases: master, 7.6 Resolves: #74324 Change-Id: I3432881a896accf94d5a0a101dbcbecbe6027320 Reviewed-on: https://review.typo3.org/47566 Reviewed-by:
-
Christian Kuhn authored
Fixes a circular dependency if local core dev version is not a release branch. Change-Id: Iff1e08bdf5345a3de133c879f87f7b922c0e5b0e Releases: master Resolves: #75516 Reviewed-on: https://review.typo3.org/47568 Reviewed-by:
-
Christian Kuhn authored
Adds styleguide as require-dev composer dependency and call the data generator for acceptance tests. Change-Id: I917b732face3c9d194ef88bada18e3195562a6dc Resolves: #75481 Releases: master Reviewed-on: https://review.typo3.org/47541 Reviewed-by:
-
Nicole Cordes authored
Currently the CropViewHelper is not able to return HTML as the output is always escaped. This patch corrects escaping for children and output. Resolves: #75459 Related: #75133 Releases: master Change-Id: I5b9aae67f4550b2923424ae2690084f8849c12a9 Reviewed-on: https://review.typo3.org/47547 Reviewed-by:
Helmut Hummel <helmut.hummel@typo3.org> Tested-by:
Stefan Neufeind <typo3.neufeind@speedpartner.de>
-
Sascha Egerer authored
The composer package for selenium standalone is deprecated and must be updated to support the current Firefox version. Change-Id: I1c0e5a2c010b5f154b44ee80253cbe4e43f4279a Resolves: #75492 Releases: master Reviewed-on: https://review.typo3.org/47560 Reviewed-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Tested-by:
-
Gianluigi Martino authored
Ensure that access settings are shown after clicking on visibility settings in language view (Clickmenu) Change-Id: If674e4328086edcc83386539851a42b6b95a1c84 Resolves: #75476 Releases: master, 7.6 Reviewed-on: https://review.typo3.org/47552 Reviewed-by:
Riccardo De Contardi <erredeco@gmail.com> Reviewed-by:
-
- Apr 10, 2016
-
-
Benjamin Kott authored
Releases: master Resolves: #75491 Change-Id: Ie1daec9744b89d9082d8bd3820fe023b3e540991 Reviewed-on: https://review.typo3.org/47559 Reviewed-by:
-
Frank Naegler authored
This patch adds a button to lock the install tool again, also without login. Resolves: #56640 Releases: master, 7.6 Change-Id: I6a4368376082288955eb20197ab437e893c93ffc Reviewed-on: https://review.typo3.org/47555 Reviewed-by:
Kay Strobach <typo3@kay-strobach.de> Tested-by:
Benjamin Kott <info@bk2k.info> Tested-by:
-
Benjamin Kott authored
Releases: master Resolves: #75483 Change-Id: Ia525a19d87be6a99ca2cc48b8561ebc800e9e34e Reviewed-on: https://review.typo3.org/47554 Reviewed-by:
-
- Apr 08, 2016
-
-
Andreas Fernandez authored
``PageRenderer:: addRequireJsConfiguration`` does now load RequireJS in the backend, as this method is called before ``loadRequireJs()`` otherwise, colliding with how ``loadRequireJs()`` handles RequireJS. This is not done in frontend, as the output could get broken. Resolves: #75353 Releases: master, 7.6 Change-Id: I7a1140036dcbf9ab869b361c40fedc3813a887d3 Reviewed-on: https://review.typo3.org/47478 Reviewed-by:
Markus Sommer <markussom@posteo.de> Tested-by:
Markus Klein <markus.klein@typo3.org> Tested-by:
-
Benni Mack authored
Allow pageTSconfig option to hide all tables at once. Example: mod.web_list { hideTables = * table.pages.hideTable = 0 } Resolves: #27471 Releases: master Change-Id: I9d64b63e09efcafe20ef614c16cf3f523d6d323c Reviewed-on: https://review.typo3.org/47535 Reviewed-by: -
Daniel Goerz authored
Change-Id: I9b33a34ab76b2dd3da0b25763e1b97f845383824 Resolves: #67699 Releases: master, 7.6 Reviewed-on: https://review.typo3.org/47542 Reviewed-by:
Morton Jonuschat <m.jonuschat@mojocode.de> Tested-by:
-
Christian Kuhn authored
This brings a list of bug fixes and better PHP7 compatibility. This is a "hacked" version from vanilla 5.20.3 where some local changes are applied that were not yet fixed upstream, see forge for a diff. Change-Id: I16a3d601bc0b1bf77ab3bd35311a57df6595a1ed Resolves: #75447 Releases: master, 7.6 Reviewed-on: https://review.typo3.org/47537 Reviewed-by:
-
Wouter Wolters authored
Resolves: #75192 Releases: master Change-Id: I9640e0a037074598fd0ac10346825d16fbbd7afe Reviewed-on: https://review.typo3.org/47524 Reviewed-by:
Nicole Cordes <typo3@cordes.co> Tested-by:
-
- Apr 07, 2016
-
-
Susanne Moog authored
Use OS independent temp directory. Change-Id: Idb6f0a0d9f5666ca84ec10d9a342bf29c0571068 Resolves: #75388 Releases: master Reviewed-on: https://review.typo3.org/47536 Reviewed-by:
-
Helmut Hummel authored
Releases: master Resolves: #75133 Change-Id: Ibc215db42f7822798a7e4d34b91aa87b6019981c Reviewed-on: https://review.typo3.org/47532 Reviewed-by:
-
