History

TYPO3 v4 Status Meeting (August 8th 2011)

Date/Time

August 8th 2011
19:00 - 20:40 CEST

Participants

  • Steffen Gebert
  • Stefan Neufeind
  • Oliver Hader
  • Felix Oertel
  • Anja Leichsenring
  • Helmut Hummel
  • Susanne Moog
  • Steffen Ritter
  • Kay Strobach

General

The meeting was separated into two parts - one for short status reports and the other one for general topics. Participants were asked to put their topics they wanted to talk about to the iEtherPad SketchPad before during the meeting or during the meeting.

Status Reports

Steffen Gebert

Susanne Moog

  • Friendly Ghost this week
  • Closing "Needs Feedback" issues older than 60 days without feedback
  • One problem with new BBB left - API problems "not found"
  • RFC http://forge.typo3.org/issues/28839

Stefan Neufeind

  • worked on some reviews
  • no big things on the list yet
  • IE7-problems in connection with ExtJS to debug, which unfortunately takes some work to track down to a minimal example (to file bugs against Sencha etc.), e.g. some click events not caught
  • would be great to get reviews rolling on some issues (needing reviews, ...)

Helmut Hummel

  • DBAL fixes done
  • Working on https://review.typo3.org/3996 with low priority (to be discussed, if it can go into 4.6)
  • TODO:
    • saltedpasswords (needs a check concerning openssl configuration on the server, e.g. also on Windows hosts)
    • formprotection is currently only implemented for alt_doc, e.g. file, user admin and template module are still missing here (however the default case is that referrers are checked in TYPO3 which offers a "basic XSRF protection")
    • session behaviour changed, what to do?
    • worked with Stucki on improving security fix "Unprivileged backend user can read arbitrarily from database" to be backward-compatible (see https://review.typo3.org/#change,4225)

Steffen Ritter

  • tested card layout intensively [FF current stable, no plugins (fresh install)]--> really needs some work
    • if connection to server is not stable (thin line), this leads to massive problems (list for Kay: got 2 different loading masks, finish loading not correctly detected, changing modules/page without waiting for load sometimes got weird experiences, especially I saw loaded stuff through the mask, but it didnt went away - seems that the events of "finally loaded" are not handled anymore if loading lasts a minute :P)
    • if clicking too fast, the backend is stucked (this also happens on switching from modules wiht pagetree to modules without), stuck means loading masks reside, too. Or module/page combination (marked active) does not match the module in the content area
    • http://forge.typo3.org/issues/28851
  • investigated Patricks Accessibility Stuff
    • motivate people to participate in discussions
    • Patrick posts a lot of threads to news list typo3.projects.content-rendering
    • suggestion: have a blog post on buzz.typo3.org
  • found some bugs in 4.6beta1, will try to reproduce
  • will be more active again after the exams

Kay Strobach

  • will recheck the problems with card layout in TYPO3 4.6
  • however for some cases feedback and detailed description is missing
  • needs reviews https://review.typo3.org/4109 (card layout)
  • idea: Click in a tree -> set all invisible iframes related to the tree to about:blank

General Topics

Breaking changes in security fixes

  • should announce special changes (e.g. breaking changes) in annoucment mail to typo3-announce mailing list
  • maybe we can improve the communication on security issues
  • improve review process (e.g. 5 reviews? discuss in groups?)
  • solution could be to run automatic test cases for those fixes (testing functionality and checks against the attack vector - besides that different operating systems could be considerred)

Forge: Add IM information (like Skype-Id, etc. to Forge-User-Page)

  • user profiles are maintained on typo3.org and synchronized from there
  • hiding mail addresses is a setting for each user on forge.typo3.org
  • however it seems good to have the user profile basically on typo3.org
  • "send message to user" would be cool (this allows to still hide the mail address) http://www.redmine.org/issues/2336

Have a look at http://forge.typo3.org/issues/28839

  • was extended by Http_Request2
  • we will not start to introduce new function arguments for additional possibilities
  • we will have a separate meeting on these Http_Request things
  • HOMEWORK: everybody has a look into the current implementation
  • TODO Olly will take care and send invitations

How does t3editor "learn" new TS options?

  • typo3/master/typo3/sysext/t3editor/res/tsref
  • "update automatically after release" vs "manually editing tsref.xml"
  • idea for the future: automatically generate from DocBook documentation
  • TODO Olly will take care and ask Tobi about current process

Suggestions for improvements for forge?

Comments on this time's Feature Freeze?

  • short discussion about the last-minute pushes

More prominently announce new features with an frequently scheduled blogpost during the year

  • features shall be shown in a nice way
  • screencasts/podcasts are missing to get more insight in new things
  • writing articles on buzz.typo3.org is "pain in the ass" since formatting options are missing (e.g. nice styles for code blocks etc.)
  • TODO Olly takes care and discussed in R&D team or marketing team

Next meetings

  • Saturday, August 13th 2011, 16:00 CEST
  • Friday, August 19th 2011, 17:00 CEST

You can subscribe to the TYPO3 Meeting calendar (HTML | iCal) to get the dates on the meetings.