- Jul 06, 2015
-
-
Markus Klein authored
The configuration now works independently of RewriteBase, hence we must not define one. Resolves: #67922 Releases: master, 6.2 Change-Id: Ib1e14f808fbf2e7abd08a4e85d2a3d4e8509060a Reviewed-on: http://review.typo3.org/40929 Reviewed-by:
Frederic Gaus <frederic.gaus@flagbit.de> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
-
Frederic Gaus authored
Resolves: #65066 Releases: master, 6.2 Change-Id: If3d665b696f3847d91486afcffee7b62fd32b60a Reviewed-on: http://review.typo3.org/40801 Reviewed-by:
Wouter Wolters <typo3@wouterwolters.nl> Reviewed-by:
Stephan Großberndt <stephan@grossberndt.de> Reviewed-by:
Andreas Fernandez <typo3@scripting-base.de> Tested-by:
Markus Klein <markus.klein@typo3.org> Tested-by:
Alexander Opitz <opitz.alexander@googlemail.com> Tested-by:
-
Stefan Neufeind authored
Replace usages of "use TYPO3\CMS\Core\Utility;" with use-statements of the utility classes to be used. Change-Id: I6360790b41196387b6d411926cf120aa77d8b4f9 Resolves: #67908 Releases: master Reviewed-on: http://review.typo3.org/40919 Reviewed-by:
-
- Jul 04, 2015
-
-
Andreas Fernandez authored
Replace occurences of count() with matching empty() pendants. Resolves: #67774 Releases: master Change-Id: Ie75551a9410affe8840b521e15a0daf68655ba2a Reviewed-on: http://review.typo3.org/40683 Reviewed-by:
Markus Sommer <markussom@posteo.de> Tested-by:
Stefan Neufeind <typo3.neufeind@speedpartner.de> Tested-by:
-
- Jul 03, 2015
-
-
Andreas Fernandez authored
Errors in the Extension Manager (e.g. deleting an extension w/o proper file permissions) are now caught and displayed as a flash message. Resolves: #67898 Releases: master, 6.2 Change-Id: I8f8334f2f0ea1c2fcf3ab49122c2c52447efc904 Reviewed-on: http://review.typo3.org/40887 Reviewed-by:
Oliver Klee <typo3-coding@oliverklee.de> Reviewed-by:
Michael Oehlhof <typo3@oehlhof.de> Reviewed-by:
Nicole Cordes <typo3@cordes.co> Tested-by:
-
Alexander Opitz authored
The API returns TRUE on success and FALSE if something went wrong. So we need to prevent that the ErrorHandler comes up, as it throws Core\Error exceptions. Resolves: #67897 Releases: master, 6.2 Change-Id: I2912241dd3c9a1b9928b4449ebc16897699fa9b5 Reviewed-on: http://review.typo3.org/40914 Reviewed-by:
-
Andreas Fernandez authored
Replace occurences of count() with matching empty() pendants. Affected extensions: - aboutmodules - beuser - compatibility6 - cshmanual - css_styles_content - dbal - felogin - sys_action - t3editor - taskcenter - tstemplate Resolves: #67777 Releases: master Change-Id: I6986c71866c4f27f0c9bccc7d7d0dd14ea5695ac Reviewed-on: http://review.typo3.org/40685 Reviewed-by:
-
Andreas Fernandez authored
Resolves: #67786 Releases: master Change-Id: I5b8e088c8a6d33117aca9189ff1f6606b2ca7592 Reviewed-on: http://review.typo3.org/40693 Reviewed-by:
-
Patrick Broens authored
The configuration for the new content element wizard is defined in the extension frontend. The content elements which are defined are specifically to css_styled_content. For the new frontend rendering some content elements will not be used anymore. This patch moves this configuration from frontend to css_styled_content in a seperated file Resolves: #65901 Releases: master Change-Id: Idea403c64775ccdf1dd792229e594a470ad72ff9 Reviewed-on: http://review.typo3.org/38007 Reviewed-by:
Oliver Eglseder <oliver.eglseder@in2code.de> Tested-by:
-
Markus Klein authored
There is no good reason for this internal class to be a static utility. Move the code to a simple service class. Resolves: #63838 Releases: master Change-Id: Iff4d538b9ae01e64e9c3b4aa9b5a913d9fabd851 Reviewed-on: http://review.typo3.org/40766 Reviewed-by:
Mathias Brodala <mbrodala@pagemachine.de> Reviewed-by:
-
Markus Klein authored
Resolves: #67903 Releases: master Change-Id: I73cb32a8cf591ccf4e07454efc06e5430c8dfec1 Reviewed-on: http://review.typo3.org/40910 Reviewed-by:
Frank Nägler <frank.naegler@typo3.org> Tested-by:
-
- Jul 02, 2015
-
-
Markus Klein authored
The cookie's expire time is changed from session to +90 days as otherwise the cookie makes no sense. Resolves: #67891 Releases: master Change-Id: I778b096c21a48be9e601ea0d03ca57eec263dd40 Reviewed-on: http://review.typo3.org/40859 Reviewed-by:
-
Helmut Hummel authored
Version 1.2.1 of the composer installer fixes an important bug regarding symlinking the autoload.php file. See: https://github.com/TYPO3/CmsComposerInstallers/commit/f631d729928ce569994ea8e5088491b3eb41f697 Releases: master Resolves: #67892 Change-Id: I709cc5086d5866b6aae50059a3d74905c8ad79b3 Reviewed-on: http://review.typo3.org/40869 Reviewed-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Tested-by:
Alexander Stehlik <alexander.stehlik@gmail.com> Tested-by:
Helmut Hummel <helmut.hummel@typo3.org> Tested-by:
-
Sascha Egerer authored
* initialize variables before they are used * do not use FQ namespaces if not required * fix PHPDocs * add missing return statements Resolves: #67797 Releases: master Change-Id: I581ae9ac8c0a277a415d9ba69812305951a86464 Reviewed-on: http://review.typo3.org/40705 Reviewed-by:
-
Helmut Hummel authored
During bootstrap refactoring, additional methods have been added and / or made public. Mark all of them as internal to make clear this is no public API Resolves: #67877 Releases: master Change-Id: I3d5a047e0dde5ca729438dc368357fe05032625b Reviewed-on: http://review.typo3.org/40836 Reviewed-by:
Daniel Maier <dani-maier@gmx.de> Reviewed-by:
Benjamin Mack <benni@typo3.org> Tested-by:
-
Andreas Fernandez authored
Fix invalid syntax for mod_filter on apache 2.4 and mismatching comment endings. Resolves: #66235 Releases: master Change-Id: Id4a67dab8f2fbf4d4bf9e2da4ac1c83d06b93388 Reviewed-on: http://review.typo3.org/40793 Reviewed-by:
-
- Jul 01, 2015
-
-
Helmut Hummel authored
The baseSetup call for the bootstrap was forgotten during the Application/ Bootstrap refactoring. Add this call to the console application to fix the fatals. Resolves: #67878 Related: #67808 Releases: master Change-Id: Ic6a05b3d605a9f7cbde0b23e9d4417ef2d9c35fe Reviewed-on: http://review.typo3.org/40837 Reviewed-by:
-
Mathias Brodala authored
The request format needs to be respected when rendering partials, otherwise the same partial cannot be rendered in different formats in the same request. An example is rendering mails in plain text and HTML. Resolves: #60338 Releases: master, 6.2 Change-Id: I118ee0a535d0f06391cd802c10d7c3c5129c2a2c Reviewed-on: http://review.typo3.org/35475 Reviewed-by:
-
Bernhard Kraft authored
To make debugging this easier and as a stale lock file really represents an error in the locking mechanism the severity being used for logging stale lockfiles should get raised. This applies to the old locking API only. Change-Id: I94b91d10411e60bfe944445865f5cb630e988701 Resolves: #67227 Releases: master, 6.2 Reviewed-on: http://review.typo3.org/39871 Reviewed-by:
-
Wouter Wolters authored
This commit also removes the sources because they are not maintained anymore. Resolves: #67458 Releases: master, 6.2 Security-Bulletin: TYPO3-CORE-SA-2015-007 Change-Id: I0813656e3617cb7944d0e620aa3e2863cc614d16 Reviewed-on: http://review.typo3.org/40810 Reviewed-by:
-
Nicole Cordes authored
Currently only the backend login is protected with an implement sleep time after login failure. This patch adds a new hook which can be used to implement a protection functionality (e.g. for detecting brute force) and moves the sleep time as default protection in the abstract user authentication class. Resolves: #59231 Releases: master, 6.2 Security-Bulletin: TYPO3-CORE-SA-2015-006 Change-Id: I1fd1ebdc32ce7797651b5ead284dcff1eb511b94 Reviewed-on: http://review.typo3.org/40809 Reviewed-by:
-
Nicole Cordes authored
All users with access to the filelist module are able to display the content of the document root folder by spoofing the url. This patch prevents any rendering from that storage and throws an error. Resolves: #67538 Releases: master, 6.2 Security-Bulletin: TYPO3-CORE-SA-2015-005 Change-Id: I59cc315e913c02001efdad23e2ded7385502c5f2 Reviewed-on: http://review.typo3.org/40808 Reviewed-by:
-
Nicole Cordes authored
If the to be linked text is empty the ContentObjectRenderer chooses an appropriate link text but doesn't encode it properly. As hsc() was abandoned before this patch adds the parseFunc functionality to keep common html tags which might be used by the editor but escapes unknown characters and tags. Resolves: #34107 Releases: master, 6.2 Security-Bulletin: TYPO3-CORE-SA-2015-004 Change-Id: I9730cb81c315a76a8fc0ef184362cabb9a59f2e5 Reviewed-on: http://review.typo3.org/40807 Reviewed-by:
-
Markus Bucher authored
Properly escape user input when showing error messages during file renaming. Resolves: #59211 Releases: master, 6.2 Security-Bulletin: TYPO3-CORE-SA-2015-004 Change-Id: Iffafad7282445d51fa244f3b31e6886b0b0f65b6 Reviewed-on: http://review.typo3.org/40806 Reviewed-by:
-
Helmut Hummel authored
When authenticating as a frontend user with a previously present anonymous session, the session id is not regenerated which leads to a possible session fixation. This is now fixed by re-generating a new id when a user is just authenticated but no new session id is generated during this process. Resolves: #59258 Releases: master, 6.2 Security-Bulletin: TYPO3-CORE-SA-2015-003 Change-Id: Ia52b17e95cf8074b0f569cf025eab4d041d1677f Reviewed-on: http://review.typo3.org/40805 Reviewed-by:
-
Marc Bastian Heinrichs authored
By forging edit URLs it was possible to edit meta data records of files which were not within a user mount. Implement several hooks to check access to the file and only grant access to a meta data record if the user has access to the file. Resolves: #56644 Releases: master, 6.2 Security-Bulletin: TYPO3-CORE-SA-2015-002 Change-Id: I0f0704af2e7f01d16b9420f9ba4ac1a7846b5270 Reviewed-on: http://review.typo3.org/40804 Reviewed-by:
-
Andreas Fernandez authored
Improve the example .htaccess file by adding rules for caching, MIME types and CORS. Also, the rewrite rules are extended to block access to certain files and folders. Additionally all rules are made compatible for Apache 2.4 as well. Resolves: #23078 Resolves: #66235 Releases: master, 6.2 Change-Id: I629f524b5a209769601f04a74bb7434736058ab8 Reviewed-on: http://review.typo3.org/39254 Reviewed-by:
-
Andreas Fernandez authored
Use single quotes for values in the query executed in WorkspaceService::isOldStyleWorkspaceUsed(). In ANSI SQL, single quotes have to be used for values. Resolves: #67835 Releases: master, 6.2 Change-Id: I5bf598d9acdbc7d2db6d5b8b6f1a4c668fe13ccb Reviewed-on: http://review.typo3.org/40748 Reviewed-by:
-
Xavier Perseguers authored
Change-Id: I691706710f9bfe3294c59010fa0fd3fdb21f6a3e Releases: master, 6.2 Resolves: #67867 Reviewed-on: http://review.typo3.org/40785 Reviewed-by:
Xavier Perseguers <xavier@typo3.org> Tested-by:
-
Nicole Cordes authored
If an incompatible extension is trying to be installed, a popup opens with the possibility to skip dependency checks and retry the installation. Currently the skipping is only implemented for system checks (TYPO3 and PHP versions). This patch adds the missing skip method during extension dependency resolving. Resolves: #67863 Releases: master Change-Id: Idbd4bc649a83a8e8a98652ffb8bd8081a7c65192 Reviewed-on: http://review.typo3.org/40775 Reviewed-by:
Florian Weiss <typo3org@leblanc.at> Tested-by:
-
Morton Jonuschat authored
Deprecate MetaType() which always returned an empty meta fieldtype with DBAL and move function to getMetadata(). The signature for getMetadata() includes the field information for the query so that the cached field metatype can be used before resorting to querying the DBMS. Resolves: #67288 Releases: master Change-Id: I57dbd7501c9e7a62f2164fb755f1d1a73da01a05 Reviewed-on: http://review.typo3.org/39941 Reviewed-by:
-
Andreas Fernandez authored
Replace occurences of count() with matching empty() pendants. Resolves: #67778 Releases: master Change-Id: I16c0299db8afda4c0fe406f7465a41d5eee3dd88 Reviewed-on: http://review.typo3.org/40686 Reviewed-by:
-
Frederic Gaus authored
Cleanup \TYPO3\CMS\IndexedSearch\Domain\Repository\IndexSearchRepository Resolves: #67857 Releases: master Change-Id: I696b996d0f517a87deec7ba54cff46be5f069571 Reviewed-on: http://review.typo3.org/40768 Reviewed-by:
-
Mathias Brodala authored
Counting the results of the ``QueryResultInterface`` proxy returned by Repository finder methods always executed a ``COUNT query`` even if the results had been fetched or counted already. With this patch the number of results is cached as soon as the result is initialized and/or counted once. Resolves: #67837 Releases: master, 6.2 Change-Id: I98f680372b845f992ad3d436647b0cf5e460b606 Reviewed-on: http://review.typo3.org/40750 Reviewed-by:
-
Wouter Wolters authored
Resolves: #67847 Releases: master Change-Id: Ia76a7166a7da9b1663acd8cd40edb6fe040f0f67 Reviewed-on: http://review.typo3.org/40763 Reviewed-by:
-
Frederic Gaus authored
Resolves: #67861 Releases: master Change-Id: I18531f6ef4d9541e9ef1163c3b4703f6b37bc84c Reviewed-on: http://review.typo3.org/40769 Reviewed-by:
-
- Jun 30, 2015
-
-
Benjamin Mack authored
As the autoloader is now always present through the bootstrap and Composer class loader, the fallback of manually requiring classes can be removed. Resolves: #36061 Releases: master Change-Id: I299232630a0390688bd683b64e5d31c422baa444 Reviewed-on: http://review.typo3.org/40759 Reviewed-by:
-
Wouter Wolters authored
Resolves: #67849 Releases: master Change-Id: I9b532c45322bad3e9d776326a3d9aa9257325175 Reviewed-on: http://review.typo3.org/40764 Reviewed-by:
-
Benjamin Mack authored
In an effort to move away from TYPO3_MODE and global code an instance that acts as an entry point has been introduced. The Application class which serves as a wrapper for setting up the Bootstrap and calling the request has been introduced. Additionally, new Applications (like typo3_console) can benefit from the flexible way of registering RequestHandlers on their own while still using the bootstrap or only parts of it. Resolves: #67808 Releases: master Change-Id: I20c92d0bc8df5d50d76922a8dfe1cbd898e6f1dd Reviewed-on: http://review.typo3.org/40493 Reviewed-by:
-
Romain L authored
workspace The SYS_LASTCHANGED field was updated whenever which workspace was loaded, leading to SYS_LASTCHANGED being updated while no content was published yet. This patch changes this behavior by updating SYS_LASTCHANGED only if page is viewed from the live workspace or no workspace at all. Resolves: #42158 Releases: master Change-Id: I09aca547a7b22ba1699f521ea7609053991fed4c Reviewed-on: http://review.typo3.org/40259 Reviewed-by:
Jan Helke <typo3@helke.de> Reviewed-by:
-
