Activity
From 2019-06-08 to 2019-07-07
2019-07-05
- 19:15 Revision e0e0d2f3: [BUGFIX] Always use default language for fetching web mounts
- Fixes calculation of the rootline within web mounts for
translated pages to give editors access again.
Change-Id: I2... - 19:09 Revision 1411da63: [TASK] Add unit tests for PathUtility::isAbsolutePath()
- Resolves: #88116
Releases: master, 9.5
Change-Id: If7e84e2c8681b8cf52d513b9520564012d8f8b73
Reviewed-on: https://revi... - 19:06 Revision 11d62813: [TASK] Make use of PSR-7 request object in BE Template module
- Switch from GeneralUtility::_GP() to PSR-7 in EXT:tstemplate.
All occurrences are replaced by proper Object-Oriented... - 18:52 Revision bcdd1ab8: [TASK] Add unit tests for PathUtility::isAbsolutePath()
- Resolves: #88116
Releases: master, 9.5
Change-Id: If7e84e2c8681b8cf52d513b9520564012d8f8b73
Reviewed-on: https://revi... - 18:51 Revision d17b493e: [TASK] Harden \TYPO3\CMS\Extbase\SignalSlot\Dispatcher
- - Use strict type mode
- Use type hints whereever possible
Releases: master
Resolves: #87604
Change-Id: Iab0fbcd4594... - 18:41 Revision a341b835: [TASK] Deprecate usage of $GLOBALS[LOCAL_LANG]
- Instead of juggling with the globals, this should be handled within
the same LanguageService instance that knows the ... - 18:32 Revision d791f9ca: [BUGFIX] Multi-selection mode in List module
- $GLOBALS['SOBE'] is still used in DatabaseRecordList.
Regression from
https://review.typo3.org/c/Packages/TYPO3.CMS/... - 18:31 Revision b50f7f8b: [BUGFIX] Consider default recipients in preselection check
- When checking if a workspace stage has a preselection the
default recipients need to be considered, too.
Consequently... - 18:29 Revision 522b0731: [BUGFIX] Consider default recipients in preselection check
- When checking if a workspace stage has a preselection the
default recipients need to be considered, too.
Consequently... - 18:26 Revision 71acb536: [BUGFIX] Consider default recipients in preselection check
- When checking if a workspace stage has a preselection the
default recipients need to be considered, too.
Consequently... - 18:18 Revision 60f47bbf: [BUGFIX] Always use default language for fetching web mounts
- Fixes calculation of the rootline within web mounts for
translated pages to give editors access again.
Resolves: #87... - 17:43 Revision d5a90f0d: [TASK] Harden repositories in Extbase
- - Use strict type mode
- Use type hints whereever possible
Releases: master
Resolves: #88605
Change-Id: I749b356c9d7... - 17:39 Revision b9468434: [TASK] Harden \TYPO3\CMS\Extbase\Error\Message and its derivatives
- - Use strict type mode
- Use type hints whereever possible
- Avoid possibly failing dynamic access of properties and ... - 17:30 Revision 00878d3c: [!!!][TASK] Configure extbase request handlers via PHP
- This patch removes the ability to configure extbase
request handlers via typoscript. This is done because
typoscript ... - 17:26 Revision 65e4d55e: [BUGFIX] Always provide default language
- The TranslationConfigurationProvider should always provide the default
language, even if the backend user doesn't hav... - 16:40 Revision 2b8a9d2b: [BUGFIX] Always provide default language
- The TranslationConfigurationProvider should always provide the default
language, even if the backend user doesn't hav... - 16:15 Revision 11398a37: [BUGFIX] Use all available languages from all sites for permissions
- Since Pseudo-Sites have been removed,
sys_language is not the recommended way
anymore to detect available languages.
... - 16:12 Revision 15932f95: [TASK] Harden \TYPO3\CMS\Extbase\Persistence\Generic\Storage\Typo3DbBackend
- - Use strict type mode
- Use type hints whereever possible
- Use type casts according to phpstan results
Releases: m... - 15:32 Revision 66302a14: [!!!][TASK] Remove `additionalJavaScriptSubmit` from FormEngine
- With RequireJS in place, it is possible to minimize the amount of inline
JavaScript in the backend. This patch remove... - 15:25 Revision b72e2a51: [!!!][BUGFIX] Remove f:spaceless from default layout
- As the ViewHelper `f:spaceless` removes too many spaces it should not be
used in the default layouts.
Resolves: #868... - 15:23 Revision f274f58d: [TASK] Move "Refresh required" modal interception into JavaScript land
- The "Refresh required" is currently built in PHP and invoked when changing
a field that is explictly configured as "o... - 14:48 Revision 87268b67: [TASK] Streamline ClassSchema property api
- This patch tackles three different issues with the current
ClassSchema property api.
1) Due to the history and the r... - 14:26 Revision 19b5ee0f: [TASK] Switch to json_encode/json_decode for Extbase arguments
- Extbase argument mapping and request building can be optimized
by using json_encode instead of serialize which is a b... - 14:22 Revision 3b8a6dbc: [BUGFIX] Adapt SendEmailCommandTest for symfony/mailer
- The tests produced a warning which didn't cause CI to abort,
but the test was actually skipped:
1) TYPO3\CMS\Core\Te... - 14:15 Revision 3a2e6b2f: [TASK] Remove unneeded SingletonInstance resets in recent extbase tests
- These were introduced with the recent extbase configuration manager
hardening but are not needed, because there are n... - 13:04 Revision 211781a1: [!!!][TASK] Harden extbase configuration managers
- - Use strict type mode
- Use type hints whereever possible
Releases: master
Resolves: #87628
Change-Id: I97ccf3d4ca6... - 12:19 Revision 2da6a371: [!!!][TASK] Drop FormEngine popup configuration
- The options `options.popupWindowSize` and `options.rte.popupWindowSize`
used to configure popup sizes have been remov... - 10:27 Revision eff8bbd4: [TASK] Harden \TYPO3\CMS\Extbase\Persistence\Generic\Mapper\DataMapFactory
- - Use strict type mode
- Use type hints whereever possible
- Use type casts according to phpstan results
Releases: m... - 10:20 Revision f62d6f90: [TASK] Harden \TYPO3\CMS\Extbase\Utility\DebuggerUtility
- - Use strict type mode
- Use type hints whereever possible
- Use type casts according to phpstan results
Releases: m...
2019-07-04
- 10:54 Revision 9d797672: [TASK] Switch to json_encode/decode for state saving
- Various places (Trees, Inline Data) can be optimized by
using a more "space-saving" and faster approach.
By using js... - 09:56 Revision 2604de30: [!!!][FEATURE] Replace SwiftMailer with symfony/mailer and symfony/mime
- SwiftMailer is not in active development anymore
as the author created the successor symfony/mailer
and symfony/mime ...
2019-07-03
- 20:19 Revision b58f1f99: [!!!][TASK] Remove import of PHP files of admins from impexp
- The functionality, which was only allowed for admins, does not
consider FAL restrictions. In order to be consistent w... - 16:56 Revision 941c10c2: [TASK] Fix deprecation warning in idnaEncode
- __METHOD__ already includes the class name so __CLASS__ has to be
removed.
Resolves: #88679
Releases: master
Change-... - 16:43 Revision 72b3e9ea: [TASK] Streamline PageRenderer class
- Some methods are not in use anymore, and also
some FQCN can be shortened in order to
clean up this class for further ... - 13:24 Revision 16bfda49: [BUGFIX] Remove obsolete IRRE-related functions
- With the refactoring of client-side IRRE, some functions in TBE_EDITOR
became obsolete. Those are removed now.
Resol...
2019-07-02
- 20:04 Revision 6c48effe: [!!!][FEATURE] Introduce migration wizard for changed flexform fields
- Rename ext:felogin's flexform fields. Add prefix `settings.` to all of
them. This is for the later extbase change to ... - 16:30 Revision 1403ecff: [BUGFIX] Change comparison in BasicFileUtility
- Due to an unrelated change within #76257,
BasicFileUtility never accounts for proper
creating a randomly unique name.... - 09:35 Revision 21922d4f: [TASK] Improve ViewHelper documentation
- * Add examples to ViewHelpers that did not have any example yet.
* Add cross references between ViewHelpers where a d...
2019-07-01
- 23:30 Revision a9b1b61f: [TASK] Improve ViewHelper documentation
- * Add examples to ViewHelpers that did not have any example yet.
* Add cross references between ViewHelpers where a d... - 21:52 Revision a77d11ae: [BUGFIX] Change comparison in BasicFileUtility
- Due to an unrelated change within #76257,
BasicFileUtility never accounts for proper
creating a randomly unique name.... - 21:39 Revision ea616b5e: [BUGFIX] Send "Set-Cookie" HTTP header as multi line
- To set multiple cookies at the same request, the "Set-Cookie" header
must be sent as multi line. The default behavior... - 20:56 Revision b17c0e0e: [BUGFIX] Send "Set-Cookie" HTTP header as multi line
- To set multiple cookies at the same request, the "Set-Cookie" header
must be sent as multi line. The default behavior... - 20:39 Revision 3ff5d1a9: [BUGFIX] Fix syntax and logic errors in BE Fluid templates
- Fixes an invalid syntax occurrence in the "PageZero.html"
template from EXT:tstemplate. And fixes a logical error
plu... - 13:46 Revision fd8b3013: [TASK] Harden exceptions in Extbase
- - Use strict type mode
- Use type hints whereever possible
Releases: master
Resolves: #88606
Change-Id: I44ed34b1dc8... - 13:16 Revision 881409d4: [TASK] Follow-up: Replace config.persistence.classes typoscript
- With #87623, a couple of fixture classes have been added to the
Classes folder instead of the Tests folder. With this... - 11:27 Revision 32a7df99: [BUGFIX] Use correct QueryBuilder for NewRecord wizard
- A database querybuilder for sys_language is requested,
however the database query is made on the "pages" table.
Reso... - 11:13 Revision f865cded: [BUGFIX] Use correct QueryBuilder for NewRecord wizard
- A database querybuilder for sys_language is requested,
however the database query is made on the "pages" table.
Reso... - 09:31 Revision b4c6b926: [BUGFIX] ImmediateResponseException needs to be relayed
- ImmediateResponseException were not handled correctly during content
object rendering when running in a production en... - 09:11 Revision c82de6d0: [BUGFIX] ImmediateResponseException needs to be relayed
- ImmediateResponseException were not handled correctly during content
object rendering when running in a production en... - 07:57 Revision 59d2df16: [BUGFIX] Menu of updated pages skips current page
- When using beginAtLevel = 1 is set, then HMENU
should not include the current page at all, so this
is now fixed by "g... - 06:27 Revision 78893b32: [BUGFIX] Menu of updated pages skips current page
- When using beginAtLevel = 1 is set, then HMENU
should not include the current page at all, so this
is now fixed by "g...
2019-06-29
- 13:58 Revision d9c63075: [BUGFIX] Code block in docs regarding site base variants
- Do not use inline notion of providing a whole block of code.
Relates: #88630
Releases: master, 9.5
Change-Id: I2f691... - 13:30 Revision 4759ea70: [BUGFIX] Code block in docs regarding site base variants
- Do not use inline notion of providing a whole block of code.
Relates: #88630
Releases: master, 9.5
Change-Id: I2f691... - 13:09 Revision 4378d5ce: [BUGFIX] Fix syntax and logic errors in BE Fluid templates
- Fixes an invalid syntax occurrence in the "PageZero.html"
template from EXT:tstemplate. And fixes a logical error
plu...
2019-06-28
- 20:42 Revision 9cc2fec9: [TASK] Harden \TYPO3\CMS\Extbase\Utility\FrontendSimulatorUtility
- - Use strict type mode
- Use type hints whereever possible
Releases: master
Resolves: #88604
Change-Id: Ie2641c04a7e... - 20:41 Revision 6dc4145d: [BUGFIX] Prevent scrollbar in "Environment Overview" modal
- Wrap potentially long version strings to prevent a horizontal
scrollbar in the modal content.
Introduces CSS class "... - 20:41 Revision 9becb03c: [BUGFIX] Use correct PHP syntax in code example
- Releases: master, 9.5
Resolves: #88591
Change-Id: I45588bfd8f1dd26debec6e06d6a3466a7458496a
Reviewed-on: https://revi... - 20:40 Revision ec36a0d5: [BUGFIX] Add tests for email via typolink
- Resolves: #88287
Releases: master
Change-Id: I4e6efbd00caca8c1ed01252f1dde30f36330640e
Reviewed-on: https://review.ty... - 17:53 Revision 002ad206: [BUGFIX] Use correct PHP syntax in code example
- Releases: master, 9.5
Resolves: #88591
Change-Id: I45588bfd8f1dd26debec6e06d6a3466a7458496a
Reviewed-on: https://revi... - 17:49 Revision 28b478a2: [BUGFIX] Prevent scrollbar in "Environment Overview" modal
- Wrap potentially long version strings to prevent a horizontal
scrollbar in the modal content.
Introduces CSS class "... - 17:35 Revision dfbee191: [!!!][TASK] Remove "sys_template.nextLevel"
- The special handling "nextLevel" in TypoScript templates
to only load a specific sys_template on the next level (subp... - 17:14 Revision e87eb75a: [BUGFIX] Convert class aliases of switchable controller actions to FQCN's
- When the patch https://forge.typo3.org/issues/87550 changed the controller
configuration of plugins and modules to us... - 16:49 Revision 39e8ccd5: [TASK] Replace `TYPO3/CMS/Backend/SplitButtons`
- Since FormEngine doesn't use split buttons anymore with TYPO3 v9, the
JavaScript module `TYPO3/CMS/Backend/SplitButto... - 16:39 Revision e13e3047: [TASK] Install Tool: Move action buttons into modal footer
- Resolves: #88523
Releases: master
Change-Id: I26404c120702bac669b3ad3aaf9280a76eb8f0e2
Reviewed-on: https://review.ty... - 15:47 Revision e4cc43a4: [BUGFIX] Improve performance with symfony/property-info
- With the introduction of symfony/property-info, the class
\Symfony\Component\PropertyInfo\Extractor\PhpDocExtractor
h... - 14:03 Revision f0f87876: [FEATURE] Set Twitter Card Type in page properties
- This option will make it possible to select a type of Twitter Card
that should be used when your page is shared on Tw... - 13:07 Revision a6bc0045: [!!!][TASK] Remove AbstractService inheritance from AbstractAuthService
- The current Authentication Service API looks like this:
AbstractService
-> AbstractAuthenticationService
-> Authenti... - 13:05 Revision af696c1d: [!!!][TASK] Remove 4th parameter of enableFields
- Since Versioning is completely handled via
the Context API and set within PageRepository
directly since TYPO3 v9, usi... - 13:04 Revision 9b6936a5: [BUGFIX] Add documentation for site-language base variants
- Since bugfix #87831 it is possible to also add base variants
for specific languages, however this was not documented.... - 12:47 Revision 8628e7c5: [BUGFIX] Use correct PHP syntax in code example
- Releases: master,9.5
Resolves: #88589
Change-Id: If71c06dd3033e7d73abc2baf3cf3b786cd45e331
Reviewed-on: https://revie... - 12:31 Revision a3fa9879: [BUGFIX] Add documentation for site-language base variants
- Since bugfix #87831 it is possible to also add base variants
for specific languages, however this was not documented.... - 12:29 Revision 025bcf6a: [BUGFIX] Use correct PHP syntax in code example
- Releases: master,9.5
Resolves: #88589
Change-Id: If71c06dd3033e7d73abc2baf3cf3b786cd45e331
Reviewed-on: https://revie... - 09:50 Revision 2bdaf3ae: [!!!][TASK] Drop DB field sys_language.static_lang_isocode
- The database field "static_lang_isocode" in the DB table
"sys_language" is configured via static_info_tables, however... - 09:45 Revision 0c4c9bc1: [TASK] Deprecate TSFE->sys_language_isocode
- Due to the introduction of Site Handling, the public property
`$TSFE->sys_language_isocode` is not necessary anymore,... - 09:32 Revision 70d546f0: [!!!][TASK] Handle SoftRefParser without references
- The softRefParser logic previously contained its own
factory within BackendUtility with a magic singleton
logic built... - 08:58 Revision be107d95: [TASK] fix list formatting
- Add some empty lines to allow correct list formatting, like on
https://github.com/TYPO3-Documentation/TYPO3CMS-Refere... - 08:41 Revision 9f475e3f: [TASK] fix list formatting
- Add some empty lines to allow correct list formatting, like on
https://github.com/TYPO3-Documentation/TYPO3CMS-Refere... - 06:43 Revision f2e5d2c6: [TASK] Removed leftovers of AltPageTitleProvider
- Removed the mention of altPageTitleProvider that were left on some
places after removing this deprecated provider.
R...
2019-06-27
- 19:36 Revision 2e4e8e07: [TASK] Open ElementBrowser event based in FormEngine
- Currently, the ElementBrowser is used in three different places in
FormEngine, all of them trigger it differently. Th... - 18:53 Revision d4533ea2: [TASK] Remove special singleton handling of makeInstanceService
- Calling GeneralUtility::makeInstanceService() stores
the instance as "persistent object". Since TYPO3 4.x this has be... - 15:50 Revision b5c403b0: [BUGFIX] Correct global/multiple icon in listview
- Resolves: #88620
Releases: master, 9.5
Correct global/multiple icon in listview
Change-Id: Id613f06d24148851d428c61... - 15:32 Revision 8b25cbb0: [BUGFIX] Consider translated pages in workspaces
- This issue was raised that translated pages do not
show up in the list of records to be published/staged,
as translat... - 15:16 Revision 91637f78: [BUGFIX] Decouple ColorPicker from FormEngine
- Since #87031 the color picker is tightly coupled to FormEngine, causing
issues if not used in FormEngine context, e.g... - 15:10 Revision 54858f11: [BUGFIX] Correct global/multiple icon in listview
- Resolves: #88620
Releases: master, 9.5
Correct global/multiple icon in listview
Change-Id: Id613f06d24148851d428c61... - 14:57 Revision a3b5f1cf: [BUGFIX] Consider translated pages in workspaces
- This issue was raised that translated pages do not
show up in the list of records to be published/staged,
as translat... - 14:54 Revision aa98f0f2: [BUGFIX] Do not rely on TYPO3_MODE for FE/BE checks
- In order to run a subrequest in Frontend,
TYPO3_MODE kills most of the functionality.
Although it is clear, that TYP... - 14:34 Revision e1eec036: [BUGFIX] Display titles of changelog properly
- As `\` is escaping, there has to be an additional `\` in front, in
order to display the `\` as expected.
Resolves: ... - 14:23 Revision 9235eafd: [BUGFIX] Do not rely on TYPO3_MODE for FE/BE checks
- In order to run a subrequest in Frontend,
TYPO3_MODE kills most of the functionality.
Although it is clear, that TYP... - 14:07 Revision 48ced589: [BUGFIX] Display titles of changelog properly
- As `\` is escaping, there has to be an additional `\` in front, in
order to display the `\` as expected.
Resolves: ... - 14:04 Revision 723204bc: [BUGFIX] Use late static binding return type for Enumeration::cast
- The return type annotation must be `static` instead of `self` as the
method returns an instance of the inheriting cla... - 14:03 Revision 54ddc9bb: [BUGFIX] Use Context API for TemplateService->versionOL
- The Context API can be used now within
TemplateService to fetch a version overlay, which now
only relies on the PageR... - 13:56 Revision dddf0243: [BUGFIX] Simplify item states in Menu Generation
- The same if() loop is used for checking menu generation item states
(ACT/IFSUB etc), this can be very much simplified... - 13:43 Revision 5a6b0610: [BUGFIX] Fix ExtensionScanner mismatch
- Due to #88498 a bug within the Extension
Scanner was introduced where the scanner
did not find the expected results d... - 13:28 Revision 09383275: [BUGFIX] Use late static binding return type for Enumeration::cast
- The return type annotation must be `static` instead of `self` as the
method returns an instance of the inheriting cla... - 13:07 Revision 92bcb1c8: [BUGFIX] Use late static binding return type for Enumeration::cast
- The return type annotation must be `static` instead of `self` as the
method returns an instance of the inheriting cla...
2019-06-26
- 17:27 Revision fe6a9208: [BUGFIX] Remove non-existing "pseudo-site" logic
- There are some leftovers where PseudoSite is mentioned.
Since TYPO3 v10.0 is built on Site Handling completely,
this... - 17:26 Revision 1312352f: [TASK] Ensure PageArgumentValidator is not dependent on TSFE
- Checking if cHash matches any GET parameters can be
done without $TSFE->cHash_array and $TSFE->hash as
all data is bu... - 06:32 Revision 351e83fd: [TASK] Unify Backend Route paths for modules
- Modules which do not set a proper route path themselves
now have a different route path, basically "/module/file/list... - 06:18 Revision c66ca856: [TASK] Use generators for service objects in Authentication
- The introduction of the Session Framework API in v8
introduced generators for fetching authentication service
objects...
2019-06-25
- 12:14 Revision a91d53aa: [TASK] Set TYPO3 version to 9.5.9-dev
- Change-Id: I9dbcd01c99fcb821b3f3a35a8a0654a371075b27
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/611... - 11:49 Revision e986f19c: [TASK] Set TYPO3 version to 8.7.28-dev
- Change-Id: I36faba6258e6f11f928ebe78dab4ac2e40d7c9e8
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/611... - 10:28 Revision 16a8bcab: [RELEASE] Release of TYPO3 9.5.8
- Change-Id: Ic26ed3a5335e342bc845d11fa56b411c70e75030
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/611... - 10:24 Revision 5664a903: [RELEASE] Release of TYPO3 8.7.27
- Change-Id: If87d516b294383acdcb97c1f760be09efbb2f5c9
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/611... - 08:42 Revision 647aa7af: [SECURITY] Disallow insecure deserialization for l18n_diffsource
- Serialized values in l18n_diffsource are vulnerable to insecure
deserialization when being invoked in FormEngine or D... - 08:42 Revision 75cc3d6b: [SECURITY] Deny pages' TSconfig and tsconfig_includes for non-admins
- Fields `TSconfig` and `tsconfig_includes` of table `pages` can be
misused by restricted users to contain malicious in... - 08:42 Revision 3a48bb6c: [!!!][SECURITY] Disallow session data transfer on frontend user logout
- When frontend users logged out their session data (e.g. shopping cart)
was transfered into an anonymous session. This... - 08:41 Revision 4bdd03fb: [SECURITY] Deny access to import module for non-admin users
- Due to an incomplete condition it was possible for regular
backend users to make use of the import module - which onl... - 08:41 Revision 807b0e5d: [SECURITY] Conflict insecure versions symfony/cache component
- The symfony/cache component is not directly used by the core but
is a dependency of symfony/expression-language which... - 08:41 Revision 4c003f80: [SECURITY] Disallow javascript & data scheme in URL link handler
- URLs defined using TYPO3's internal t3://url/?url=... notation are
now hardened against using `javascript:` and`data:... - 08:41 Revision d593a69c: [SECURITY] Check record permissions in record information popup
- The ElementInformationController now checks a backend user has sufficient
permissions to see each referenced record.
... - 08:40 Revision 555e0dd2: [SECURITY] Disallow insecure deserialization for l18n_diffsource
- Serialized values in l18n_diffsource are vulnerable to insecure
deserialization when being invoked in FormEngine or D... - 08:40 Revision 802e0567: [SECURITY] Deny pages' TSconfig and tsconfig_includes for non-admins
- Fields `TSconfig` and `tsconfig_includes` of table `pages` can be
misused by restricted users to contain malicious in... - 08:40 Revision 9ce811c6: [!!!][SECURITY] Disallow session data transfer on frontend user logout
- When frontend users logged out their session data (e.g. shopping cart)
was transfered into an anonymous session. This... - 08:40 Revision df33c7ee: [SECURITY] Deny access to import module for non-admin users
- Due to an incomplete condition it was possible for regular
backend users to make use of the import module - which onl... - 08:40 Revision e355cd97: [SECURITY] Conflict insecure versions symfony/cache component
- The symfony/cache component is not directly used by the core but
is a dependency of symfony/expression-language which... - 08:39 Revision 6dcbf981: [SECURITY] Disallow javascript & data scheme in URL link handler
- URLs defined using TYPO3's internal t3://url/?url=... notation are
now hardened against using `javascript:` and`data:... - 08:39 Revision 41e4afb5: [SECURITY] Check record permissions in record information popup
- The ElementInformationController now checks a backend user has sufficient
permissions to see each referenced record.
... - 08:39 Revision 1f748c76: [SECURITY] Disallow insecure deserialization for l18n_diffsource
- Serialized values in l18n_diffsource are vulnerable to insecure
deserialization when being invoked in FormEngine or D... - 08:39 Revision fde7576f: [SECURITY] Deny pages' TSconfig and tsconfig_includes for non-admins
- Fields `TSconfig` and `tsconfig_includes` of table `pages` can be
misused by restricted users to contain malicious in... - 08:39 Revision 9837ae34: [!!!][SECURITY] Disallow session data transfer on frontend user logout
- When frontend users logged out their session data (e.g. shopping cart)
was transfered into an anonymous session. This... - 08:38 Revision 96105753: [SECURITY] Disallow javascript & data scheme in URL link handler
- URLs defined using TYPO3's internal t3://url/?url=... notation are
now hardened against using `javascript:` and`data:... - 08:38 Revision 61805ff7: [SECURITY] Check record permissions in record information popup
- The ElementInformationController now checks a backend user has sufficient
permissions to see each referenced record.
... - 07:57 Revision 8028f2fd: [!!!][TASK] Remove TCEMAIN.previewDomain
- The functionality to set a custom TCEMAIN.previewDomain via
PageTS is not in use anymore as SiteHandling
is using the...
2019-06-24
- 20:37 Revision 44fe4992: [BUGFIX] Remove caches for page title and meta tag
- By concept for frontend rendering the page title and meta tags
are not meant to be stored in page cache in order to a... - 13:33 Revision 7c4a63bd: [TASK] Follow-up: Change BitSet class doc block
- In order to have a meaningful class doc block for the
BitSet class, the former doc block has been replaced
with an ex... - 12:14 Revision 3c2e5173: [BUGFIX] Fix comment in ViewHelper action.link
- Correct closing tag in PHP comment example.
Resolves: #88619
Releases: master, 9.5
Change-Id: Ic90351399eccc4435231b... - 11:54 Revision 452af940: [TASK] Remove backend user ID from workspace preview config
- The configuration within `sys_preview` contained the
Backend User ID. Previously, until TYPO3 v9, this was
used to si... - 11:43 Revision 5c2c3e10: [BUGFIX] Fix comment in ViewHelper action.link
- Correct closing tag in PHP comment example.
Resolves: #88619
Releases: master, 9.5
Change-Id: Ic90351399eccc4435231b...
2019-06-21
- 19:13 Revision 9930ae46: [TASK] Move BitSet class into different namespace
- The BitSet class has been put into a DataStructure
namespace although the core puts classes of these
kind into a Type... - 18:28 Revision 5c81be0f: [TASK] Rename "view helper" to "ViewHelper"
- As this is what its called. This also should make searches easier, as
there is only one way to write it.
Relates: #8... - 16:20 Revision 8d5657d4: [TASK] Rename "view helper" to "ViewHelper"
- As this is what its called. This also should make searches easier, as
there is only one way to write it.
Relates: #8... - 15:01 Revision d05865f7: [BUGFIX] Remove caches for page title and meta tag
- By concept for frontend rendering the page title and meta tags
are not meant to be stored in page cache in order to a... - 12:39 Revision f04022b6: [BUGFIX] Use var path from Environment in tests
- Some tests still use hardcoded 'typo3temp' for creating files and folders.
Where possible, this has been changed to u... - 06:42 Revision cfab7cc0: [TASK] Update symfony components
- In preparation for our next maintenance
release, symfony components are updated
to their latest versions.
Composer C... - 06:09 Revision 702aa389: [TASK] Update symfony components
- In preparation for our next maintenance
release, symfony components are updated
to their latest versions.
Composer C...
2019-06-19
- 14:22 Revision 022b0de9: [BUGFIX] Speed up SiteConfiguration loading
- Profiling shows that when linking to 100
pages, SiteFinder (which instantiates SiteConfiguration)
is instantiated 100... - 13:23 Revision 972df083: [BUGFIX] Remove "cache_" prefix from cache configuration keys
- With #88366 "cache_" prefix has been deprecated. However, when
retrieving a deprecated cache like "cache_subject" its... - 13:20 Revision b5539e3d: [BUGFIX] Speed up SiteConfiguration loading
- Profiling shows that when linking to 100
pages, SiteFinder (which instantiates SiteConfiguration)
is instantiated 100... - 12:02 Revision 7f5597e8: [BUGFIX] Use proper configuration when processing FlexForms in DataHandler
- This change removes the "TCEforms" option when parsing
FlexForms data in DataHandler, when dealing with FlexForms
tha... - 09:51 Revision eb8842b8: [BUGFIX] Use proper configuration when processing FlexForms in DataHandler
- This change removes the "TCEforms" option when parsing
FlexForms data in DataHandler, when dealing with FlexForms
tha... - 09:02 Revision fa73763a: [BUGFIX] Add additional GetVars to workspace preview url
- Resolves: #87147
Releases: master, 9.5
Change-Id: Ia909104bc663d4191f21cb1bf0e25c0212388e2f
Reviewed-on: https://revi... - 08:44 Revision 4ec169f2: [BUGFIX] Add additional GetVars to workspace preview url
- Resolves: #87147
Releases: master, 9.5
Change-Id: Ia909104bc663d4191f21cb1bf0e25c0212388e2f
Reviewed-on: https://revi... - 08:42 Revision d44e84fc: [BUGFIX] Use proper configuration when processing FlexForms in DataHandler
- This change removes the "TCEforms" option when parsing
FlexForms data in DataHandler, when dealing with FlexForms
tha...
2019-06-18
- 20:42 Revision 8f7ac7be: [TASK] Install Tool: Move common code into abstract class
- All modules of the Install Tool used in modal windows now share a common
abstract class that contains some boilerplat... - 11:54 Revision 6805f471: [TASK] Upgrade TYPO3 testing framework
- composer require --dev typo3/testing-framework:~5.0.10
Releases: master
Resolves: #88580
Change-Id: I1dcef11cee0caa7... - 11:25 Revision b3a592f2: [TASK] Update doctrine/dbal to ^2.9
- doctrine/dbal 2.8.x ran into unmaintained mode:
https://www.doctrine-project.org/projects/dbal.html
We should upgrad... - 09:49 Revision 02efc2c2: [BUGFIX] Fix comment in ViewHelper page.link
- Resolves: #88578
Releases: master, 9.5
Change-Id: I5fc57a9c61d5f02838f3afd3c305ae0b7b037dfc
Reviewed-on: https://revi... - 09:26 Revision f0ea7f20: [BUGFIX] Fix comment in ViewHelper page.link
- Resolves: #88578
Releases: master, 9.5
Change-Id: I5fc57a9c61d5f02838f3afd3c305ae0b7b037dfc
Reviewed-on: https://revi... - 08:47 Revision c4dd8ff8: [BUGFIX] Fix getSiteFinder() mocking in SiteProcessorTest
- As it produced a warning:
1) TYPO3\CMS\Frontend\Tests\Unit\DataProcessing\SiteProcessorTest::
nullIsProvidedIfSiteC...
2019-06-17
- 23:24 Revision 2b972169: [BUGFIX] Improve wording in Install Tool
- Rephrases button title and success message for user preference
reset.
Resolves: #88520
Releases: master, 9.5
Change-... - 23:03 Revision ba732d9c: [BUGFIX] Improve wording in Install Tool
- Rephrases button title and success message for user preference
reset.
Resolves: #88520
Releases: master, 9.5
Change-... - 19:12 Revision c62ae81f: [TASK] Update doctrine/dbal to ^2.8.1
- doctrine/dbal 2.8.x ran into unmaintained mode:
https://www.doctrine-project.org/projects/dbal.html
We should upgrad... - 18:13 Revision 2f930178: [TASK] Update doctrine/dbal to ^2.8.1
- doctrine/dbal 2.8.x ran into unmaintained mode:
https://www.doctrine-project.org/projects/dbal.html
We should upgrad... - 16:02 Revision 749e4222: [TASK] Switch Locales to regular singleton instance
- Locales resolves the user-defined TYPO3-languages and
its dependencies via TYPO3_CONF_VARS, which are only
finally av... - 15:42 Revision bc6969fe: [TASK] Replace SiteMatcher with SiteFinder where applicable
- SiteMatcher is a container around SiteFinder now as PseudoSite
handling was removed, so SiteFinder can be used direct... - 14:30 Revision 7f21ba47: [!!!][TASK] Do not magically register validators
- This patch removes the automatical registration of two types
of validators.
- model validators
- type validators
Mo... - 11:48 Revision 72d857f3: [BUGFIX] Fix tests on windows
- Some unit tests still have problems on Windows.
- setlocale will not error even if the locale is not found
- file per... - 07:12 Revision 19babcf8: [!!!][TASK] Drop PageTS "TSFE.constants" functionality
- When parsing TypoScript, PageTSconfig and UserTSconfig
is taking into account for evaluting if "TSFE.constants" is
se...
2019-06-14
- 21:45 Revision 79825a69: [BUGFIX] t3editor: Harden some checks for TS parsing
- Resolves: #88262
Resolves: #85346
Releases: master, 9.5
Change-Id: Ia72ef1b670841d90ec0251c99b7f4d3dc1e7770a
Reviewed... - 21:44 Revision d2f7199a: [TASK] Deprecate unused methods of VersionNumberUtility
- The following methods of `\TYPO3\CMS\Core\Utility\VersionNumberUtility`
are unused and can be deprecated:
- `splitVe... - 21:32 Revision 4e48cad9: [!!!][TASK] Re-organize variable initialization for User Authentication
- There are a lot of places where AbstractUserAuthentication
and the dependents (BE/FE user auth) set various settings,... - 21:14 Revision 9441ed24: [BUGFIX] t3editor: Harden some checks for TS parsing
- Resolves: #88262
Resolves: #85346
Releases: master, 9.5
Change-Id: Ia72ef1b670841d90ec0251c99b7f4d3dc1e7770a
Reviewed... - 15:10 Revision b36be531: [BUGFIX] Fix page caching with tree.rootLineIds condition check
- Conditions with `tree.rootLineIds` if matched caused page cache
regeneration on each request.
Resolves: #88374
Relea... - 14:31 Revision 4c446751: [TASK] Create Redirect instead of silently ignoring superfluous cHash
- Introduced with https://review.typo3.org/c/Packages/TYPO3.CMS/+/60895
cHash's that are used within the URL but not ne... - 12:56 Revision 6c0d2134: [TASK] Create Redirect instead of silently ignoring superfluous cHash
- Introduced with https://review.typo3.org/c/Packages/TYPO3.CMS/+/60895
cHash's that are used within the URL but not ne...
2019-06-13
- 16:31 Revision fc86b98f: [!!!][TASK] Remove config.htmlTag TypoScript properties
- The two TypoScript options
* config.htmlTag_langKey
* config.htmlTag_dir
have been removed, as they have no effect ... - 15:13 Revision 180fe535: [BUGFIX] DragUploader: Remove trailing comma in ternary operation
- This patch removes a trailing comma in a ternary operation, as this causes
a JavaScript error in Internet Explorer 11... - 14:54 Revision 2c163afa: [TASK] Streamline TSFE/RequestHandler for "Page Generation"
- Various documentation in TSFE is updated,
in addition to having $TSFE->setAbsRefPrefix()
to be set within the postPro... - 14:26 Revision 6d808707: [BUGFIX] Fix page caching with tree.rootLineIds condition check
- Conditions with `tree.rootLineIds` if matched caused page cache
regeneration on each request.
Resolves: #88374
Relea... - 12:19 Revision 4d1c1604: [BUGFIX] Allow same configuration key in multiple extensions
- Fix two issues in the extension configuration tool if more than one
extension is using the same configuration key:
*... - 11:29 Revision 0d2e6169: [!!!][TASK] Move Frontend User session saving into Middleware
- For further TSFE-related changes, the frontend request
workflow now stores user-/session-related information
in the m... - 10:29 Revision 0567ec3b: [BUGFIX] Ignore cHash when given but not needed
- If a cHash GET parameter is given, but there
are no GET parameters that are relevant, a
hash_calc() call against an e... - 08:05 Revision e9d6db23: [TASK] Set 'loginSecurityLevel' to normal by default
- The only occurrence for 'loginSecurityLevel' checks for empty and falls back
to 'normal' (also defined in #81852 this...
2019-06-12
- 15:33 Revision d13b2f3d: [TASK] Update composer root version for Bamboo builds
- This patch updates the COMPOSER_ROOT_VERSION environment variable to the
current TYPO3 version. This ensures all comp... - 07:56 Revision 166cbdf0: [TASK] Add title to topbar buttons
- Add title to the two topbar buttons on the left:
- Minimize/maximize module menu
- Collapse page tree
Resolves: #883... - 07:54 Revision 314c18da: [!!!][TASK] Remove "createDirs" directive of extension installation
- Extensions should make use of TYPO3's native functionality for
using FAL-based folders, or the Environment API and TY... - 06:46 Revision 71cb708d: [!!!][TASK] Drop image support in RTE handling
- With the introduction of CKEditor in TYPO3 v8, the support
for images in RTEs is dropped, however functionality was k... - 06:18 Revision 7fdb0f0b: [BUGFIX] Allow same configuration key in multiple extensions
- Fix two issues in the extension configuration tool if more than one
extension is using the same configuration key:
*...
2019-06-11
- 13:32 Revision 41813a47: [BUGFIX] Tests broken with phpunit 8.2
- Switching from accessibleMock to prophecy resolves
a lot of failures.
Also, using a concrete instance instead accessi...
2019-06-10
- 18:15 Revision db0fa467: [TASK] Update GitHub description in CONTRIBUTING.md
- Releases: master
Resolves: #88535
Change-Id: Ibeb645965840c8c4e78f5e4d13272db32e9fc308
Reviewed-on: https://review.ty...
2019-06-09
- 22:12 Revision e85c77c7: [BUGFIX] Allow adding content without page edit permissions in record list
- If a backend usergroup has no permission to edit page properties, the
wizard for content element creation is not rend... - 21:55 Revision 0d69e757: [BUGFIX] Allow adding content without page edit permissions in record list
- If a backend usergroup has no permission to edit page properties, the
wizard for content element creation is not rend... - 15:28 Revision 1703acca: [BUGFIX] Allow adding content without page edit permissions
- Resolves: #87687
Releases: master, 9.5
Change-Id: I8113f3fa2facf6b21bc19ee1c445265c5ff4f4b4
Reviewed-on: https://revi...
2019-06-08
- 06:07 Revision f070cd9b: [BUGFIX] Ignore cHash when given but not needed
- If a cHash GET parameter is given, but there
are no GET parameters that are relevant, a
hash_calc() call against an e... - 05:52 Revision 15e264de: [!!!][TASK] Streamline TimeTracker global information
- This patch removes unused variables:
$GLOBALS['TYPO3_MISC']['microtime_BE_USER_start']
$GLOBALS['TYPO3_MISC']['micro...
Also available in: Atom