Activity
From 2020-05-12 to 2020-06-10
2020-06-09
-
11:23 Revision 8637e392: [TASK] Set TYPO3 version to 10.4.5-dev
- Change-Id: Iee9c54c415d56a51b74073c6d060ef756432a9fb
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/648... -
- Change-Id: I1355e33fcc0474611b992a4fc10690b66d5884e8
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/648... -
- Change-Id: I53a1ee728a4c05f422ae8a8aa855d5cc94abbd24
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/648... -
- Change-Id: I35387b2f33eb82cc443556e5209e16ef77416d60
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/648... -
09:50 Revision 99bc093a: [BUGFIX] Ensure only empty route requirements for aspects are defined
- Overriding route requirements with `.+` allows to have slashes in route
parameters. This is different to Symfony's de... -
- Overriding route requirements with `.+` allows to have slashes in route
parameters. This is different to Symfony's de... -
- Overriding route requirements with `.+` allows to have slashes in route
parameters. This is different to Symfony's de...
2020-06-08
-
22:25 Revision 234d24b8: [BUGFIX] Show content for columns with colPos set only
- Setting up backend layouts with colPos not set will show the content of
column 0 because of an excplicit cast of the ... -
- Setting up backend layouts with colPos not set will show the content of
column 0 because of an excplicit cast of the ... -
- Direct hash comparison is replaced by cryptographic-safe `hash_equals`.
Changes in this patch set basically don't hav... -
- Direct hash comparison is replaced by cryptographic-safe `hash_equals`.
Changes in this patch set basically don't hav... -
- Direct hash comparison is replaced by cryptographic-safe `hash_equals`.
Changes in this patch set basically don't hav...
2020-06-07
-
12:42 Revision ee347761: [BUGFIX] Ensure PageContentErrorHandler content is served correctly
- Use only the body and the content-type header of the internal
sub-request. Everything else of the sub-request can be ... -
- Use only the body and the content-type header of the internal
sub-request. Everything else of the sub-request can be ...
2020-06-05
-
- TypoScriptFrontendController has had functionality to dynamically
load JavaScript and CSS code, also in non-cacheable... -
17:29 Revision 4b378e4b: [TASK] Use more specific array type annotations in GeneralUtility
- Having PHPDoc parameter and return type annotations like "string[]"
instead of the generic "array" will help both sta... -
- In order to reduce the amount of accessing
globals in the future, and especially TYPO3_REQUEST
which was born because... -
16:28 Revision 1c3b12f9: [BUGFIX] Allow multiline comments in SqlReader
- When using c-style multiline comments in the ext_tables.sql of an
extension, the SchemaMigrator would then ignore the... -
- Internal components using `unserialize` are enforced to disallow
classes in their internal state representation. This... -
- Internal components using `unserialize` are enforced to disallow
classes in their internal state representation. This... -
- In order to reduce the amount of accessing
globals in the future, and especially TYPO3_REQUEST
which was born because... -
15:25 Revision 412dbfd3: [BUGFIX] Search for site root only in default language pages
- Resolves: #91550
Releases: master, 10.4, 9.5
Change-Id: I1de1eadbac4b4973250bba2dbf887efb19df872d
Reviewed-on: https:... -
- Resolves: #91550
Releases: master, 10.4, 9.5
Change-Id: I1de1eadbac4b4973250bba2dbf887efb19df872d
Reviewed-on: https:... -
- PageRenderer does not need to care about the actual content.
Instead of re-running everything in PageRenderer, Module... -
- This leaves TYPO3 to only handle "XLF" files for language labels
natively.
Resolves: #91482
Related: #91473
Releases... -
- Resolves: #91550
Releases: master, 10.4, 9.5
Change-Id: I1de1eadbac4b4973250bba2dbf887efb19df872d
Reviewed-on: https:... -
- Internal components using `unserialize` are enforced to disallow
classes in their internal state representation. This... -
12:33 Revision 0914c0bc: [BUGFIX] Ensure linkText is returned for missing languages
- This patch ensures the linkText is returned and used if
the target page is not available in the current language.
Re... -
- This patch ensures the linkText is returned and used if
the target page is not available in the current language.
Re...
2020-06-04
-
- This is a preparation for starting with RIPS scanner.
Resolves: #91566
Releases: master, 10.4, 9.5
Change-Id: I6f994... -
- This is a preparation for starting with RIPS scanner.
Resolves: #91566
Releases: master, 10.4, 9.5
Change-Id: I6f994... -
- This is a preparation for starting with RIPS scanner.
Resolves: #91566
Releases: master, 10.4, 9.5
Change-Id: I6f994... - 21:05 Revision b83f0c03: [BUGFIX] Fix local path discovery for external files in indexed_search
- This fixes encoding issues in paths with URL-encoded spaces and other
characters when indexed_search translates index... - 20:51 Revision 735693ab: [BUGFIX] Fix local path discovery for external files in indexed_search
- This fixes encoding issues in paths with URL-encoded spaces and other
characters when indexed_search translates index... - 20:33 Revision 848d0680: [BUGFIX] Fix local path discovery for external files in indexed_search
- This fixes encoding issues in paths with URL-encoded spaces and other
characters when indexed_search translates index... -
- Common URLs like typo3.org, tools.ietf.org or php.net are nowadays
available as HTTPS, however some places in TYPO3 s... -
- The cObject "TEMPLATE" in TypoScript is now removed. It only had little
use without a given "FILE" cObject.
TEMPLATE... -
- Common URLs like typo3.org, tools.ietf.org or php.net are nowadays
available as HTTPS, however some places in TYPO3 s...
2020-06-03
-
23:34 Revision 1ca53019: [BUGFIX] Reintroduce filtering out non accessible pages on query time
- Filter out pages user has no access to on query time in page tree.
This patch reintroduce a change which was reverted... -
- Filter out pages user has no access to on query time in page tree.
This patch reintroduce a change which was reverted... -
- Filter out pages user has no access to on query time in page tree.
This patch reintroduce a change which was reverted... -
18:18 Revision 36a0dc60: [TASK] Move felogin pi_flexform into plugin tab
- The plugin configuration of felogin is moved to the
common used "Plugin" tab, to unify the position
through the core.... -
- The plugin configuration of felogin is moved to the
common used "Plugin" tab, to unify the position
through the core.... -
- Also fix misleading comment about permissions.
Resolves: #91454
Releases: 9.5, master
Change-Id: I1a399f1be613f00744... - 11:51 Revision abdc30ac: [!!!][TASK] Remove non-public extbase property injection
- The property injection with non-public properties had been
deprecated with #82975 and has been forgotten to be remove... -
11:47 Revision a4b7457e: [BUGFIX] Cast meta tag values to string in generateMetaTagHtml
- It is possible for values returned by stdWrap to be of type int.
RequestHandler->generateMetaTagHtml() expects meta t... -
- It is possible for values returned by stdWrap to be of type int.
RequestHandler->generateMetaTagHtml() expects meta t... -
- It is possible for values returned by stdWrap to be of type int.
RequestHandler->generateMetaTagHtml() expects meta t... -
- PageRepository->fixVersioningPid() needs "t3ver_wsid" and "t3ver_oid"
to resolve a version, otherwise previewing in w... -
- PageRepository->fixVersioningPid() needs "t3ver_wsid" and "t3ver_oid"
to resolve a version, otherwise previewing in w... -
09:25 Revision ef695e4f: [BUGFIX] Show hidden records that are unhidden in workspace
- When a live record that is hidden, but gets unhidden in a
workspace version, the record should also be resolved withi... -
- PageRepository->fixVersioningPid() needs "t3ver_wsid" and "t3ver_oid"
to resolve a version, otherwise previewing in w...
2020-06-02
-
- In change https://git.typo3.org/Packages/TYPO3.CMS.git/commit/e6e40cd214acc8581729ef9f6e98c5d9324ec11c
of bugfix #906... -
- All code that is using the constant TYPO3_MODE is hard to test,
as this needs to be encapsulated into various places.... -
- In change https://git.typo3.org/Packages/TYPO3.CMS.git/commit/e6e40cd214acc8581729ef9f6e98c5d9324ec11c
of bugfix #906... -
- All code that is using the constant TYPO3_MODE is hard to test,
as this needs to be encapsulated into various places.... -
07:31 Revision a104a8d9: [TASK] Provide acceptance test suite for stand alone Install Tool
- The acceptance tests folder 'InstallTool' holds tests that ensure
the proper display of options in the stand alone In... -
- Scalar values sent via HTTP query parameters to
FileSystemNavigationFrameController are using `json_encode` instead
o... -
- Scalar values sent via HTTP query parameters to
FileSystemNavigationFrameController are using `json_encode` instead
o... -
- Scalar values sent via HTTP query parameters to
FileSystemNavigationFrameController are using `json_encode` instead
o...
2020-06-01
-
- Resolves: #91551
Releases: master
Change-Id: If26ad358d0a8ef750d983a7221e4d000d4b8cd4f
Reviewed-on: https://review.ty... -
- When a live record that is hidden, but gets unhidden in a
workspace version, the record should also be resolved withi... -
- The T3_RETURN_URL and T3_THIS_LOCATION javascript constants
are removed, in addition to all code relevant in ModuleCo... -
- When a live record that is hidden, but gets unhidden in a
workspace version, the record should also be resolved withi... -
- Resolves: #91544
Related: #91473
Releases: master
Change-Id: I04ce71e83d6e98835c8a8c29e82398d43de2af5c
Reviewed-on: h... -
- [TASK] styleguide: New CI Setup + Cleanup
2020-05-31
-
- Various classes and methods are removed, that have been marked
as deprecated before.
Resolves: #91543
Related: #9147... -
- The feature "felogin.extbase" is now always activated.
The class
* TYPO3\CMS\Felogin\Controller\FrontendLoginControl... -
- This change aims to reduce the amount of inline JavaScript by
removing `onchange` or `onclick` events and dynamically... -
- This change aims to reduce the amount of inline JavaScript by
removing `onchange` or `onclick` events and dynamically... - 09:10 Revision 7ca6021e: [!!!][TASK] Remove deprecated autocomplete widget
- The Fluid widget <f:widget.autocomplete> has been deprecated in TYPO3
10 and is now removed without any replacement.
... -
08:37 Revision 98cf5d69: [!!!][TASK] Remove support for deprecated CLI command configuration
- Configuration via Commands.php had been superseded by tag based
DI service configuration which allowed to configure D... -
- eot, otf and ttf font formats were used to support very old browsers
like <= IE8. Since TYPO3 v10 does only support m... -
- eot, otf and ttf font formats were used to support very old browsers
like <= IE8. Since TYPO3 v10 does only support m...
2020-05-30
-
- If $TYPO3_CONF_VARS[FE][disableNoCacheParameter] is
set, then the backend view button in FormEngine should
not add th... -
- The following classes are removed:
- TYPO3\CMS\Extbase\Domain\Model\AbstractFileCollection
- TYPO3\CMS\Extbase\Domai... -
13:51 Revision 70a88b75: [TASK] Rephrase notifications in Admin Tools
- This patch rephrases the notifications rendered in the Admin Tools. Some
notifications now contain a better descripti... -
- The following FAL related core methods have been removed:
* Resource\File-> _getMetaData
* Resource\FileRepository->s... -
13:19 Revision f65802b8: [!!!][TASK] Remove deprecated class aliases
- The following class aliases are removed:
* `TYPO3\CMS\Frontend\Page\PageRepository`
* `TYPO3\CMS\Frontend\Page\PageR... -
- The unused properties are removed
* $TSFE->divSection
* $TSFE->domainStartPage
* $TSFE->fePreview
* $TSFE->sys_langu... -
- This patch rephrases the notifications rendered in the Admin Tools. Some
notifications now contain a better descripti... -
- Remove a stale comment wrt PackageManager->activePackageDuringRuntime()
as that method has been removed in #91477. Dr... -
- Scalar values sent via HTTP query parameters to ShowImageController
are using `json_encode` instead of `unserialize`.... -
- Scalar values sent via HTTP query parameters to ShowImageController
are using `json_encode` instead of `unserialize`.... -
- Scalar values sent via HTTP query parameters to ShowImageController
are using `json_encode` instead of `unserialize`.... -
- All deprecated code within ContentObjectRenderer is removed.
This also includes hooks
* $GLOBALS['TYPO3_CONF_VARS']... -
- Upgrade wizards created to upgrade from v8 to v9
are removed now.
Resolves: #91478
Releases: master
Change-Id: I12ec... -
- Constant should have been removed within #91474
Resolves: #91540
Related: #91474
Releases: master
Change-Id: I45081c... -
- AssetCollector takes over logic that was previously built in TSFE, to decouple
more functionality from TSFE going mor...
2020-05-29
- 23:08 Revision 16735394: [!!!][TASK] Remove deprecated web response class
- The Web Response subclass of Extbase's MVC framework is removed
in favor of the main base Response object, which serv... -
- The public property "forceTemplateParsing" in TSFE and TemplateService
is substituted in favor of the Context API (Ty... - 22:20 Revision 8a4acb72: [!!!][TASK] Remove deprecated web request class
- The Web request class is removed in favor of Extbase's
base request object.
For this change, the testing framework h... - 21:36 Revision d4d97e2b: [!!!][TASK] Remove deprecated method ObjectAccess::buildSetterMethodName
- Releases: master
Resolves: #91535
Related: #91473
Change-Id: I98db08e8fef297b47bd11fed13d3fe91af3ba1cd
Reviewed-on: h... -
- The cHash options in ViewHelpers and UriBuilders were a no-op
in TYPO3 v10 and Site Handling, and triggered deprecati... -
- Resolves: #91486
Releases: master
Change-Id: I4767e5395aad52fbe14f37d74af37609cd69e4ff
Reviewed-on: https://review.ty... -
- The global variable 'LOCAL_LANG' is now removed, as all labels
should always be fetched via LanguageService.
In addi... -
- The Permission handling within DataHandler has been migrated
into PagePermissionAssembler in TYPO3 v10.
All other pr... - 17:47 Revision a957a676: [!!!][TASK] Remove deprecated AbstractController
- The class AbstractController is removed in favor of
ActionController within Extbase, where all extension
controllers ... - 17:32 Revision 3738e1bd: [!!!][TASK] Remove deprecated method TypeHandlingUtility::hex2bin
- The method is removed in favor of PHP's native hex2bin()
function.
Releases: master
Resolves: #91529
Related: #91473... -
- Since TYPO3 v10 the god-object TSFE is now built with
everything that is mandatory for rendering the Frontend:
* Cont... -
- Resolves: #91510
Releases: master, 10.4, 9.5
Change-Id: I5bfda8310342718dc696b182fd87b1954a6cdc39
Reviewed-on: https:... -
- Resolves: #91510
Releases: master, 10.4, 9.5
Change-Id: I5bfda8310342718dc696b182fd87b1954a6cdc39
Reviewed-on: https:... -
16:35 Revision ca44f463: [TASK] styleguide: New CI Setup + Cleanup
- - Github CI Setup
- CGL Fixes
- Github Issue Templates
- PHPLint
- new Acceptance Test setup (incl. CodeCeption Upgrade) -
- The following deprecated methods are now removed:
- \TYPO3\CMS\Core\Utility\GeneralUtility::compressIPv6
- \TYPO3\CM... -
- Resolves: #91510
Releases: master, 10.4, 9.5
Change-Id: I5bfda8310342718dc696b182fd87b1954a6cdc39
Reviewed-on: https:... -
12:31 Revision 8a24c013: [BUGFIX] Fix typo in exception of TcaRadioItems
- Resolves: #91501
Releases: master, 10.4, 9.5
Change-Id: I7b77a3ee8aceac2cbdb6f3d4e0a02930b66eb863
Reviewed-on: https:... -
- Resolves: #91520
Related: #62085
Releases: master
Change-Id: I7bdda47bf1906fe4ad085265ef67fdcaa9a39380
Reviewed-on: h... -
- Resolves: #91501
Releases: master, 10.4, 9.5
Change-Id: I7b77a3ee8aceac2cbdb6f3d4e0a02930b66eb863
Reviewed-on: https:... -
- One of the marker-based legacy class DocumentTemplate is now
removed for TYPO3 v11.
In addition, some tests regardin... -
- The acceptance tests folder 'InstallTool' holds tests that ensure
the proper display of options in the stand alone In... -
- Resolves: #91501
Releases: master, 10.4, 9.5
Change-Id: I7b77a3ee8aceac2cbdb6f3d4e0a02930b66eb863
Reviewed-on: https:... -
- The library md5.js has been removed in favor of the
TYPO3/CMS/Backend/Hashing/Md5 module.
Resolves: #91485
Releases:...
2020-05-28
-
- Resolves: #91484
Releases: master
Change-Id: Ic589bd298b4f6892bb0459a1396d2d2b95d456f7
Reviewed-on: https://review.ty... -
- The module `jquery.clearable` has been removed in favor of
TYPO3/CMS/Backend/Input/Clearable.
Resolves: #91483
Relea... -
- The following previously deprecate static methods
are now removed:
- TYPO3\CMS\Backend\Utility\BackendUtility::getRa... -
- The TCA schema and the database of page translations within "pages_language_overlay"
was still available for legacy r...
2020-05-26
-
- This change removes the unneeded public constants
- FILE_DENY_PATTERN_DEFAULT
- PHP_EXTENSIONS_DEFAULT
- TYPO3_copyr... -
- This change removes deprecated hooks and methods from TSFE
related to output:
* TSFE->isOutputting()
* TSFE->process... -
- This change removes all triggers ("SlotReplacement classes") to Signals
that were used until TYPO3 v10 LTS.
The Sign... -
- Used composer command:
composer req "friendsoftypo3/phpstan-typo3:^0.3.0" --dev
Resolves: #91494
Releases: master... -
12:59 Revision d73681a6: [BUGFIX] Add FIRST_INSTALL to .gitignore
- In order to avoid accidentally committing a FIRST_INSTALL
for developers starting to contribute to TYPO3 Core
and usi... -
- In order to avoid accidentally committing a FIRST_INSTALL
for developers starting to contribute to TYPO3 Core
and usi... -
- In order to avoid accidentally committing a FIRST_INSTALL
for developers starting to contribute to TYPO3 Core
and usi... -
- This change reflects the master branch to be targeted to v11.
Testing framework is raised as well to support v11.
T...
2020-05-25
-
- Resolves: #91472
Releases: 10.4
Change-Id: I1a28d8a1f3d42bcc4e6fbbf0c328cd712927bb72
Reviewed-on: https://review.typo... -
- Resolves: #91471
Releases: master, 10.4, 9.5
Change-Id: Ib008a46cc2edb368fed3fc937858f1f3870938b5
Reviewed-on: https:... -
- Resolves: #91471
Releases: master, 10.4, 9.5
Change-Id: Ib008a46cc2edb368fed3fc937858f1f3870938b5
Reviewed-on: https:... -
- Resolves: #91471
Releases: master, 10.4, 9.5
Change-Id: Ib008a46cc2edb368fed3fc937858f1f3870938b5
Reviewed-on: https:... -
- Deleting an extension in Extension Manager doesn't make much sense in a
Composer-based installation. For this reason,... -
- TYPO3 v9 is loaded with nikic/php-parser 4.2.2, however
only 4.3.0 or higher fixed some PHP 7.4 compatibility
issues.... -
- Also fix misleading comment about permissions.
Resolves: #91454
Releases: 9.5, master
Change-Id: I1a399f1be613f00744... -
- Deleting an extension in Extension Manager doesn't make much sense in a
Composer-based installation. For this reason,...
2020-05-23
-
10:19 Revision f2b9dacb: [BUGFIX] Correctly evaluate PageTS in TemplateModule
- Set the current page id early, so that PageTS is fetched
from the correct page instead of id 0.
Releases: 9.5, maste...
2020-05-22
-
- The PSR-14 event "AfterFileCopiedEvent" in FAL now also
has the possibility to return the newly created file
and the ... - 20:51 Revision 287e14c3: [BUGFIX] Allow to set replyTo email address in ext:felogin
- If the TypoScript variable `plugin.tx_felogin_pi1.replyTo` was set to
an email address, it triggered the following er... -
- Git converts CRLF to LF when plaintext files are staged. The existing
copies of the rte_ckeditor Contrib/* sources ha... -
- Git converts CRLF to LF when plaintext files are staged. The existing
copies of the rte_ckeditor Contrib/* sources ha... -
16:26 Revision 4055defe: [BUGFIX] Respect showHiddenFiles in filelist module
- Activating "showHiddenFilesAndFolders" in BE User
settings shows hidden files and folders also when
navigating throug... -
- The point of repeatable update wizards is that they are not
marked executed and thus always checked for possible upda... -
- Activating "showHiddenFilesAndFolders" in BE User
settings shows hidden files and folders also when
navigating throug... -
- Resolves: #91457
Releases: master
Change-Id: I29009a9498b050942e34a27815acdf996e6f0539
Reviewed-on: https://review.ty... -
- Resolves: #91459
Relates: #91302
Releases: master
Change-Id: Ic4af3247d7557a6c12a8d538e85795c507eab69a
Reviewed-on: h... -
- With the removal of `selicon_field_path` in #87937 also the
automatic record type icon mapping was removed.
As a res... -
- To highlight difference between BackendUtility::BEgetRootLine()
and RootlineUtility->get()
Resolves: #91455
Releases...
2020-05-21
-
- To highlight difference between BackendUtility::BEgetRootLine()
and RootlineUtility->get()
Resolves: #91455
Releases... -
- Resolves: #91345
Releases: master
Change-Id: I54ab67e85b3bf24b06916b674765ed22fb5de76c
Reviewed-on: https://review.ty... -
- If an action in the Install Tool is executed that is related to an
inline module or an interactable module (a.k.a "mo... -
- When initializing the configuration for a cache any existing
configuration under its old name (cache_ prefixed) is ap...
2020-05-20
-
- The documentation for lowlevel commands are optimized so they make
more sense:
* Nightly checks are run with a --dry... -
- The documentation for lowlevel commands are optimized so they make
more sense:
* Nightly checks are run with a --dry... -
11:52 Revision 1f5a5087: [TASK] Consistent version restrictions for PSR packages
- composer require "psr/http-message":"^1.0"
composer require "psr/log":"^1.0"
Releases: master, 9.5
Resolves: #89... -
- Set the current page id early, so that PageTS is fetched
from the correct page instead of id 0.
Releases: 9.5, maste...
2020-05-19
-
- Change-Id: I22eb57766cd6ddd8aa31447ccd374e52920c2010
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/645... -
- Change-Id: I1b2efe8dc2ea1b559e5720984c9f9a8f7bf0fa4e
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/645... -
- Change-Id: Ifd8e3cc62c5b0a27b0bc938e5dbc8cb136a1d07c
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/645... -
- Change-Id: I0f60f14a729ee231f6faa9e8bb1aa56e742cca15
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/645... -
- When saving a record on a page that is not part of a site,
the slug field of this record, despite being set to "uniqu... -
- When saving a record on a page that is not part of a site,
the slug field of this record, despite being set to "uniqu... -
- Re-added `$this->where_groupAccess` to init method.
Resolves: #91429
Releases: master, 9.5
Change-Id: Ibd9b169e8d11e... -
13:39 Revision 5ccf6b21: [BUGFIX] Fixed order-by while querying old realurl table for slugs
- The old tx_realurl_pathcache does not have a uid field, but uses the
field cache_id. The order-by now uses a differen... -
12:54 Revision 78ea2ce3: [BUGFIX] Re-add initialization of PageRepository::$where_groupAccess
- Re-added `$this->where_groupAccess` to init method.
Resolves: #91429
Releases: master, 9.5
Change-Id: Ibd9b169e8d11e... -
- The old tx_realurl_pathcache does not have a uid field, but uses the
field cache_id. The order-by now uses a differen... -
- With TYPO3-CORE-SA-2020-006 (SSRF via XSS) a strict referrer handling
has been introduced to avoid the install tool b...
2020-05-18
-
- With TYPO3-CORE-SA-2020-006 (SSRF via XSS) a strict referrer handling
has been introduced to avoid the install tool b... -
- The generated cache identifier may get very long in case a page has many
frontend groups configured and may exceeds t... -
- The generated cache identifier may get very long in case a page has many
frontend groups configured and may exceeds t... -
- The manual backport of #91208 missed to actually write the calculcated
condition into the cache.
This patch adds the... -
- The PSR-11 container instance was not cleared upon serialization which
caused an exception when Closures in the conta... -
- With TYPO3-CORE-SA-2020-006 (SSRF via XSS) a strict referrer handling
has been introduced to avoid the TYPO3 backend ... -
- Resolves: #91417
Releases: master, 9.5
Change-Id: I690cf19965310cdb8612dca3b34f751aafb4c550
Reviewed-on: https://revi... - 14:22 Revision eda9a9a4: [BUGFIX] Properly (un)serialize ReflectionService
- The ReflectionService usually doesn't get serialized by users
directly but since Extbase has an unclean dependency ch... -
- Resolves: #91417
Releases: master, 9.5
Change-Id: I690cf19965310cdb8612dca3b34f751aafb4c550
Reviewed-on: https://revi... - 12:27 Revision 7c4699b2: [BUGFIX] Set controller object name for widget request
- While introducing the fully qualified controller class names
in the extbase plugin configuration the originally used ... - 12:13 Revision b9ace2c1: [BUGFIX] Properly (un)serialize ReflectionService
- The ReflectionService usually doesn't get serialized by users
directly but since Extbase has an unclean dependency ch... -
- TYPO3-CORE-SA-2020-005 cause side-effects on Fluid AJAX widgets which
unfortunatelly support any class instance to be... -
- TYPO3-CORE-SA-2020-005 caused side-effects on Fluid AJAX widgets which
unfortunatelly support any class instance to b... -
10:52 Revision 794c2286: [DOCS] Fix table syntax in changelog
- Resolves: #91411
Releases: master
Change-Id: If9850f683e1f6e72e62fcfdb41802430d1888f69
Reviewed-on: https://review.ty... -
- With TYPO3-CORE-SA-2020-006 (SSRF via XSS) a strict referrer handling
has been introduced to avoid the TYPO3 backend ... -
- The PasswordRecovery template misses a layout which results in an empty
HTML part being rendered. This patch adds the...
2020-05-17
-
11:23 Revision 33187ea8: [DOCS] Correctly close tags in changelogs
- Releases: master
Resolves: #91395
Change-Id: If1c5c896c519aa5cf5ff35072bb101f718f8cdcb
Reviewed-on: https://review.ty...
2020-05-15
- 15:32 Revision 110985c1: [TASK] Namespaces for PSR-14 events corrected
- The namespaces for the PSR-14 events are not working. Removed /Login -
path since this is not existing.
Releases: ma... -
- When a null placeholder checkbox is changed, the linked form field is
now marked as "changed", which triggers the con... -
- When a null placeholder checkbox is changed, the linked form field is
now marked as "changed", which triggers the con... -
- HTML element with identifier `t3js-login-url` is used to check whether
referrer handling is activated and suported. I... -
- HTML element with identifier `t3js-login-url` is used to check whether
referrer handling is activated and suported. I...
2020-05-14
-
23:12 Revision ccd6da50: [BUGFIX] Exclude current record when checking slug's uniqueness
- The current record constraint was forgotten in the
implementation of uniqueInTable and is now added.
Resolves: #9137... -
- The SMTP SSL/TLS migration introduced in #91070 does not take the case
into account when no SMTP encryption was used ... -
- Using `<div />` as template to be used in jQuery worked previously,
but is not supported with jQuery 3.5.x anymore. O... -
- Using `<div />` as template to be used in jQuery worked previously,
but is not supported with jQuery 3.5.x anymore. O... -
- With security advisory TYPO3-CORE-SA-2020-004 new
`BlockSerializationTrait` has been introduced blocking serializatio... -
- The current record constraint was forgotten in the
implementation of uniqueInTable and is now added.
Resolves: #9137... -
- With security advisory TYPO3-CORE-SA-2020-004 new
`BlockSerializationTrait` has been introduced blocking serializatio... - 09:29 Revision e413054c: [BUGFIX] Prevent PHP type error and stale language cache
- PHP is raising an error if $pageId cannot be resolved to an
integer value as required by method signature.
Additiona... -
- A context can be provided, when opening the CSH (Context Sensitive Help).
E.g. when opening the CSH for a backend mo... - 06:24 Revision 984a3609: [BUGFIX] Fix "see also" links in CSH entries
- The "see also" links, used for cross referencing
different CSH entries are fixed. Cross referencing
links are now bui...
2020-05-13
-
- Some methods have been added for this matcher,
which are actually not deprecated/removed as a
whole. Only the usage o... -
- As GeneralUtility::getContainer is marked internal, we do now avoid
to use this method in core tests in order to demo...
2020-05-12
-
- Change-Id: Iadabfec179a236eac6cad0c89c32fe2a4d42e200
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/644... -
- Change-Id: I6e8b59634266786e07a0d80a6271914a26a7d7e4
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/644... -
- Change-Id: I22d5494ecd9cf12efbd6a7acec0b23b000340905
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/644... -
- Change-Id: I8491411d8175bfb72212f1d7e3cf9722f404cc0e
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/644... -
- Prevent XSS by escaping the shortened placeholder text for various
Backend form elements properly.
Resolves: #90817
... -
- Cross-site scripting in same-site/same-origin context most probably
allows bypassing tokens that usually protects aga... -
- General and unscoped collection of user settings in $BE_USER->uc is
vulnerable to insecure deserialization, triggered... -
- Deserialization of objects could lead to arbitrary removal of resources
as well as sending out message via mail.
Res... -
- HTML entities being used in link tags created with `typolink` have
to be encoded correctly again after entities have ... -
- To prevent a time based information disclosure in backend password reset,
this patch adds a random delay between 200 ... -
- Cross-site scripting in same-site/same-origin context most probably
allows bypassing tokens that usually protects aga... -
- General and unscoped collection of user settings in $BE_USER->uc is
vulnerable to insecure deserialization, triggered... -
- Deserialization of objects could lead to arbitrary removal of resources
as well as sending out message via mail.
Res... -
- HTML entities being used in link tags created with `typolink` have
to be encoded correctly again after entities have ... -
- Prevent XSS by escaping the shortened placeholder text for various
Backend form elements properly.
Resolves: #90817
... -
- In order to evaluate potential server misconfigurations and to reduce
the potential of security implications in gener... -
- In order to evaluate potential server misconfigurations and to reduce
the potential of security implications in gener... -
- Patch files for fixing security issues are provided and applied after
installing the modules via `yarn install`.
htt... -
- This commit introduces live-patching of node_modules, which applies
patch files to specific modules (similar to compo... -
- In order to allow non-admins to fetch nodes which have no "pid=0"
the change to only fetch pages with access, the cha... -
- Internal and external links have been incorrectly processed
by the legacy link notation converter which removed the
f... -
- In order to allow non-admins to fetch nodes which have no "pid=0"
the change to only fetch pages with access, the cha... -
- Internal and external links have been incorrectly processed
by the legacy link notation converter which removed the
f... -
- When using e.g. PageTypeDecorator in conjunction with mountpoints
and other Enhancers, the MP parameter was not added... -
09:10 Revision d5b5b26c: [BUGFIX] Allow more characters for MySQL / MariaDB database name
- With this change it is possible to use a wider set of characters.
Please have a look at the official documentation of... -
- The system extension ext:dashboard provides a way to register presets of
dashboards.
These presets can be configured ...
Also available in: Atom