Project

General

Profile

Activity

From 2022-12-04 to 2023-01-02

2022-12-29

12:01 Revision f87c8a72: [TASK] Task allow mariadb up to v10.10 and pg 15
Currently, mariadb is only supported up to v10.6.
This has been changed up to v10.10 and jobs have been
added to the ...
Jochen Roth
12:00 Revision 6c95da01: [TASK] Task allow mariadb up to v10.10 and pg 15
Currently, mariadb is only supported up to v10.6.
This has been changed up to v10.10 and jobs have been
added to the ...
Jochen Roth
08:36 Revision c8bb6eb9: [TASK] Drop dev dependency phpspec/prophecy
The mocking framework prophecy is considered dead and is already dropped
in phpunit. All occurrences in the codebase ...
Nikita Hovratov

2022-12-28

15:07 Revision 8825d26e: [TASK] Migrate TcaSelectItemsTest to functional
Resolves: #98853
Releases: main
Change-Id: I54db0e6ce480adfb03e2f4e5c10b3d3d5e9550af
Reviewed-on: https://review.typo...
Nikita Hovratov
11:53 Revision 5fe46963: [TASK] Migrate TcaSelectTreeItemsTest to functional
Resolves: #98844
Releases: main
Change-Id: I0d8acfbfee563d7e401b41e543cc0b413a33de69
Reviewed-on: https://review.typo...
Nikita Hovratov

2022-12-23

14:57 Revision 56972411: [TASK] Consolidate DocType handling as Enum
A new Enum "DocType" is introduced to finally streamline
the usage of various TypoScript options,
TSFE properties (xh...
Benni Mack
09:48 Revision 4c2fbbcb: [FEATURE] Add event to modify backend search results
A new event `ModifyResultItemInLiveSearchEvent` is added that allows to
modify search result items in a custom event ...
Andreas Fernandez

2022-12-22

20:39 Revision 8c7fadca: [TASK] Streamline the unit tests for ObjectStorage
Clean up the existing tests before adding new tests:
- split tests up to test for only one piece of behavior
where...
Oliver Klee
14:44 Revision 27c5ac8f: [TASK] Convert FrontendUserAuthenticationTest partially to functional
For the rest all prophecy usages have been replaced by native phpunit
mocks.
Resolves: #98727
Releases: main
Change-...
Nikita Hovratov
14:36 Revision e78c65fe: [TASK] Avoid usage of resetSingletonInstances in setup
Resolves: #99413
Releases: main
Signed-off-by: Torben Hansen <derhansen@gmail.com>
Change-Id: Ibb94bef3701e1eab20506a...
Torben Hansen
13:01 Revision 5a45b91b: [TASK] Fix typo in StringLength form validator
Releases: main
Resolves: #99398
Change-Id: If2346c6e29ea0c546b9ede8cad3e98b166893ef9
Reviewed-on: https://review.typo...
Andreas Förthner
12:55 Revision 7cb35771: [BUGFIX] Apply z-index to backend search action form
The element `.sticky-form-actions` now has a `z-index` applied to give
the search provider dropdown a higher priority...
Christoph Lehmann
12:44 Revision 022a6946: [BUGFIX] Always allow target attribute
TYPO3 included xhtml_11 (output doctype)
standard when the second revision of
XHTML 1.1 was not published yet.
TYPO3...
Benni Mack
12:17 Revision 3b362639: [BUGFIX] Remove unneeded quote
An unnecessary quote has been added with #91016 and should be removed
again.
Resolves: #99402
Releases: main, 11.5, ...
Georg Ringer
12:16 Revision 72b8883d: [BUGFIX] Remove unneeded quote
An unnecessary quote has been added with #91016 and should be removed
again.
Resolves: #99402
Releases: main, 11.5, ...
Georg Ringer
12:04 Revision 50d5c2f0: [TASK] Add missing unique link to recently added rst file
Resolves: #99407
Related: #98122
Releases: main, 11.5
Change-Id: Ie5a8e894e65669e9faa3d30f908040006a0345d7
Reviewed-o...
Nikita Hovratov
11:57 Revision e9fab6f2: [BUGFIX] Remove unneeded quote
An unnecessary quote has been added with #91016 and should be removed
again.
Resolves: #99402
Releases: main, 11.5, ...
Georg Ringer
11:43 Revision 0816ba59: [BUGFIX] Remove disabled button state after successful TCA Migrations check
Resolves: #99390
Releases: main
Signed-off-by: Torben Hansen <derhansen@gmail.com>
Change-Id: Ifd3e20e7350091335265c1...
Torben Hansen
11:41 Revision 362cfde5: [BUGFIX] Align variable name with flexform, template and docs
The showForgotPasswordLink setting was renamed to showForgotPassword
during the refactoring to fluid templates. It is...
André Buchmann

2022-12-21

16:33 Revision d4aa6e90: [TASK] Replace $.ajax in EXT:recycler
EXT:recycler is hopefully the last piece that used $.ajax instead of our
AJAX API. It's time to replace it there as w...
Andreas Fernandez
15:51 Revision 8346e2bc: [TASK] Add missing unique link to recently added rst file
Resolves: #99407
Related: #98122
Releases: main
Change-Id: Ie5a8e894e65669e9faa3d30f908040006a0345d7
Reviewed-on: htt...
Nikita Hovratov
15:38 Revision ade003f0: [DOCS] Update TypoScript documentation of Indexed Search
To update the Indexed Search TypoScript documentation the following tasks
have been completed:
* Use of `.. confva...
Eric Bode
12:45 Revision 169222d2: [DOCS] Update TypoScript documentation of Indexed Search
To update the Indexed Search TypoScript documentation the following tasks
have been completed:
* Use of `.. confva...
Eric Bode
11:28 Revision 7da70a57: [TASK] Replace prophecy in ServiceProviderCompilationPassTest
Resolves: #98761
Releases: main
Change-Id: Ib8fcb5af6b2ee38ac8796763977b5f801009780a
Reviewed-on: https://review.typo...
Nikita Hovratov
10:36 Revision 64752c95: [FEATURE] Overrule namespace configuration in ExtbasePluginEnhancer
Make ExtbasePluginEnhancer more consistent.
Ensure namespace option overrules other options
as this is the common use...
Daniel Siepmann
10:34 Revision 8e8b94b8: [BUGFIX] Align variable name with flexform, template and docs
The showForgotPasswordLink setting was renamed to showForgotPassword
during the refactoring to fluid templates. It is...
André Buchmann
08:16 Revision 2bfc6a02: [TASK] Replace prophecy in EXT:dashboard DashboardWidgetPassTest
Resolves: #98909
Releases: main
Change-Id: Ife3339d1902f306230394aef3d99d08da5dfcb31
Reviewed-on: https://review.typo...
Nikita Hovratov
07:59 Revision 746e17fb: [BUGFIX] Show errors in database check step again
Step 2 in the install process is to check the database
connection. If this fails, the corresponding flash
messages ar...
Oliver Bartsch

2022-12-20

17:18 Revision d383640f: [BUGFIX] Allow scrolling in GUI installer
Currently, it is not possible to scroll down
and fill in all required fields in the
installer.
This has been fixed b...
Jochen Roth
16:57 Revision 82fb1ad0: [FEATURE] Use password policies in installer and setup command
With #80793 it is now possible to use password policies.
So the setupDatabaseService has been changed to respect
the ...
Jochen Roth
16:52 Revision 9dc7eef0: [TASK] Update to PHPStan 1.9.4
The new version finds some more potential problems.
> composer req --dev phpstan/phpstan:^1.9.4
> composer req --dev...
Oliver Klee
16:05 Revision f7e3bc67: [TASK] Update to PHPStan 1.9.4
The new version finds some more potential problems.
> composer req --dev phpstan/phpstan:^1.9.4
> composer req --dev...
Oliver Klee

2022-12-19

11:54 Revision cc6c5748: [TASK] Localize text in modal JavaScript
Resolves: #98268
Releases: main
Change-Id: I77d858415b7bdf2a4c4f85bf94f3361f0b24cfff
Reviewed-on: https://review.typo...
Sybille Peters
09:24 Revision da89f5bf: [BUGFIX] Prevent undefined array key warning in DatabaseRecordList
Resolves: #99380
Releases: main, 11.5
Change-Id: I44a4a805b4848700e30ed7127a6da62c1f4cfdde
Reviewed-on: https://revie...
Oliver Bartsch

2022-12-18

22:17 Revision a6bcac18: [BUGFIX] Prevent undefined array key warning in DatabaseRecordList
Resolves: #99380
Releases: main, 11.5
Change-Id: I44a4a805b4848700e30ed7127a6da62c1f4cfdde
Reviewed-on: https://revie...
Oliver Bartsch

2022-12-16

17:07 Revision aaa76c26: [BUGFIX] styleguide: styleguide uses core dev-main for --dev
With v12.1 branching and releases, styleguide now
preferred 12.1 tags in it's testing dependencies.
Force ~12.2@dev ...
Christian Kuhn
14:34 Revision 6f5248cb: [TASK] Disable extension repository status check in composer mode
The extension repository status check in the
reports module is now skipped in composer mode.
Resolves: #99385
Releas...
Oliver Bartsch
14:13 Revision 9503bfa1: [TASK] Disable extension repository status check in composer mode
The extension repository status check in the
reports module is now skipped in composer mode.
Resolves: #99385
Releas...
Oliver Bartsch
12:37 Revision e24bcbe0: [TASK] styleguide: Happify phpstan
Build/Scripts/runTests.sh -p 8.1 -s phpstanGenerateBaseline Christian Kuhn
10:32 Revision dd4efcf9: [BUGFIX] Use locallang in history button in EditDocumentController
The "History" button in EditDocumentController now uses existing
locallang labels instead of a hardcoded string.
Res...
Andreas Fernandez
10:15 Revision f9b073be: [BUGFIX] Use locallang in history button in EditDocumentController
The "History" button in EditDocumentController now uses existing
locallang labels instead of a hardcoded string.
Res...
Andreas Fernandez
00:51 Revision 8440cb37: [TASK] Open Element Browser for avatars in modal window
To have a streamlined behavior across all Element Browser instances, the
remaining instance used for avatar selection...
Andreas Fernandez

2022-12-15

22:44 Revision 75c2d51a: [TASK] Register flag icons automatically
The IconRegistry now scans the directory containing all flag icons and
automatically registers all found flags withou...
Andreas Fernandez
12:34 Revision ab11ebb3: [TASK] Set TYPO3 version to 12.1.4-dev
Change-Id: I2a6188a900409f4f1ccfcdc3ef2c857b774d7344
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/771...
Oliver Hader
12:34 Revision 65f886d2: [TASK] Set TYPO3 version to 11.5.22-dev
Change-Id: Ic9acc8a7130f9e848b6809af395ffdd4e130b33a
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/771...
Oliver Hader
12:33 Revision f94acb81: [TASK] Set TYPO3 version to 10.4.35-dev
Change-Id: I577c481866735d86d66c2c4247097687c07ef567
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/771...
Oliver Hader
11:57 Revision 531fbd1c: [RELEASE] Release of TYPO3 12.1.3
Change-Id: I10c10046567972486eb29bd995b7535b9bab00ee
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/771...
Oliver Hader
11:30 Revision f6d61172: Revert "[RELEASE] Release of TYPO3 12.1.3"
This reverts commit 5f34155e9e854ce2b79b22df2ae36a0aa16f6a98.
Reason for revert: Release Script stopped during the p...
Oliver Hader
11:23 Revision 5f34155e: [RELEASE] Release of TYPO3 12.1.3
Change-Id: I1893ec416ee302dfc9b1187afda7fffff9351b22
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/771...
Oliver Hader
11:20 Revision 39b888cf: [RELEASE] Release of TYPO3 11.5.21
Change-Id: Ic870e4d6af389ad9bfefe445cec780d60364230d
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/771...
Oliver Hader
11:15 Revision 1c9ada1d: [RELEASE] Release of TYPO3 10.4.34
Change-Id: Id505113baa28f559ad94a479fea62151648f3789
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/771...
Oliver Hader
10:06 Revision 8153feb7: [BUGFIX] Fix absolute backend URL generation in frontend context
$normalizedParams->getRequestDir() returns '/' for frontend
requests and `/typo3/` for backend requests. This results...
Benjamin Franzke
10:03 Revision 678035c7: [BUGFIX] Fix absolute backend URL generation in frontend context
$normalizedParams->getRequestDir() returns '/' for frontend
requests and `/typo3/` for backend requests. This results...
Benjamin Franzke
09:58 Revision c9eceb15: [BUGFIX] Catch any transfer exception in HTTP host header check
ServerResponseCheck triggers a HTTP host header check which is
expected to fail. The more generic TransferException i...
Oliver Hader
09:58 Revision ee661a68: [BUGFIX] Catch any transfer exception in HTTP host header check
ServerResponseCheck triggers a HTTP host header check which is
expected to fail. The more generic TransferException i...
Oliver Hader
09:58 Revision e721e134: [BUGFIX] Catch any transfer exception in HTTP host header check
ServerResponseCheck triggers a HTTP host header check which is
expected to fail. The more generic TransferException i...
Oliver Hader
09:57 Revision 60bcbf2c: [BUGFIX] Catch any transfer exception in HTTP host header check
ServerResponseCheck triggers a HTTP host header check which is
expected to fail. The more generic TransferException i...
Oliver Hader
09:52 Revision 61fa8706: [BUGFIX] Use fallback method to get dbname
The fallback chain for determination of the
dbname in the SetupCommand is now using the
dedicated fallback method to ...
Jochen Roth

2022-12-14

17:27 Revision 0fe03225: [TASK] Add backward compatibility handling for frontend login signing
The security fix for TYPO3-CORE-SA-2022-013 enforced the `pid`
HTTP parameter to be signed via HMAC during the fronte...
Oliver Hader
17:27 Revision 89da5ba3: [TASK] Remove panel class usage in About module
Bootstrap removed panel classes in version 4 and the
backend mostly has appropriate styles for the card
component now...
Andreas Nedbal
17:26 Revision cfe6d10c: [BUGFIX] Fix regex in message event handler for avatars
The regex used in setup-module.ts to get the `avatar` field name
is adapted to match the object group changed in #993...
Andreas Fernandez
15:53 Revision 1ae6588a: [TASK] Remove panel class usage in About module
Bootstrap removed panel classes in version 4 and the
backend mostly has appropriate styles for the card
component now...
Andreas Nedbal
15:04 Revision 36657e2d: [TASK] Add backward compatibility handling for frontend login signing
The security fix for TYPO3-CORE-SA-2022-013 enforced the `pid`
HTTP parameter to be signed via HMAC during the fronte...
Oliver Hader
15:04 Revision 30831c74: [TASK] Avoid empty ul tag if no submodules are available
If no submodule are available, the ul tag around should not be rendered.
Resolves: #99363
Releases: main
Change-Id: ...
Georg Ringer
13:25 Revision 9a906220: [TASK] Add static backdrop to "Refresh required" modal
If the FormEngine needs an update due to a changed field, the "Refresh
required" modal appears. It may happen easily ...
Andreas Fernandez
13:10 Revision 363ac2ee: [BUGFIX] Prevent undefined global variable in BackendConfigurationManager
$GLOBALS['TYPO3_REQUEST'] might be undefined,
e.g. in CLI context. This is now handled properly.
Resolves: #99307
Re...
Oliver Bartsch
13:01 Revision db00eb40: [BUGFIX] Use correct element browser config in "Setup" module
The configuration for the element browser used for the avatar field in
the "Setup" module is now properly composed to...
Andreas Fernandez
13:00 Revision ed7c9c03: [TASK] Ensure proper gitlab ci configuration for branch `12.1`
Adjustes gitlab workflow configurations to match branch
`12.1` testing. This includes dedicated cache keys and
settin...
Stefan Bürk
12:03 Revision c3a10187: [TASK] Allow custom tables in create record reaction
Extension authors can now add tables to the create record
reaction via ExtensionManagementUtility::addTcaSelectItem()...
Oliver Bartsch
11:20 Revision ad3a7c45: [DOCS] Correct some cookie and parameter names
Resolves: #99361
Related: #97305
Releases: main
Change-Id: Id78dfe0db043cf01551078853fd1eec1d3375044
Reviewed-on: htt...
Nikita Hovratov
11:07 Revision 9c4ea51d: [BUGFIX] Provide signed storage folders for legacy frontend login
Resolves: #99358
Releases: 10.4
Change-Id: I028b0016a005acdcb79725600b29b2c8dbbc939d
Reviewed-on: https://review.typo...
Oliver Hader
08:48 Revision e83a20c8: [TASK] Remove sys_action leftovers
The previous system extension EXT:sys_action
has been moved from core to FriendsOfTYPO3
in v10. However, since the ex...
Oliver Bartsch
08:37 Revision 2fb8b444: [TASK] Update PHPStan & friends
PHPStan 1.9.3 finds another potential problem and brings
some performance improvements.
Run commands:
> composer re...
Oliver Klee
08:10 Revision ac5fddb7: [TASK] Update PHPStan & friends
PHPStan 1.9.3 finds another potential problem and brings
some performance improvements.
Run commands:
> composer re...
Oliver Klee

2022-12-13

14:57 Revision 1006f66f: [BUGFIX] Use correct flag of Zimbabwe
The icon set used for the flags in TYPO3 accidentally used the flag of
Andorra for Zimbabwe. Unfortunately, it's not ...
Andreas Fernandez
14:36 Revision b96de44e: [BUGFIX] Use correct flag of Zimbabwe
The icon set used for the flags in TYPO3 accidentally used the flag of
Andorra for Zimbabwe. Unfortunately, it's not ...
Andreas Fernandez
12:44 Revision 2291ffc6: [TASK] Set TYPO3 version to 12.1.3-dev
Change-Id: Ic308b48271458c44b8861377409d6b1672a45070
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/771...
Oliver Hader
12:25 Revision f6a2689a: [RELEASE] Release of TYPO3 12.1.2
Change-Id: Ia9164267c573cb87019e6d3e20c4d76b384259a4
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/771...
Oliver Hader
12:17 Revision a6641769: [BUGFIX] Replace undefined variable with locallang key
The title of the "edit column" button in the page
module is now using the correct locallang key
instead of an undefin...
Oliver Bartsch
12:09 Revision c28d5247: [BUGFIX] Prevent undefined global variable in BackendConfigurationManager
$GLOBALS['TYPO3_REQUEST'] might be undefined,
e.g. in CLI context. This is now handled properly.
Resolves: #99307
Re...
Oliver Bartsch
12:03 Revision 7cd61c02: [BUGFIX] Replace undefined variable with locallang key
The title of the "edit column" button in the page
module is now using the correct locallang key
instead of an undefin...
Oliver Bartsch
11:57 Revision ba34796f: [FEATURE] Create new folder in modal dialog
This change moves the "Create folder" route to the modal, so that
editors do not lose the focus when working with the...
Andreas Fernandez
11:34 Revision a909535c: [BUGFIX] Avoid double UTF-8 encoded PDF metadata in file indexer
There are different versions of pdfinfo available and used
by different providers/distributions.
a) Debian/Fedora us...
Benjamin Franzke
11:33 Revision db50a316: [TASK] Add HTTP host header injection check to reports module
In case the web server scenario is not properly configured to deny
HTTP host header injection, and the trustedHostsPa...
Oliver Hader
11:16 Revision 645c9cab: [TASK] Introduce string fragment extraction
When working with variable interpolation and similar scenarios, in
most cases variables, constants, expressions, ... ...
Oliver Hader
10:52 Revision 4560c9d4: [TASK] Set TYPO3 version to 12.1.2-dev
Change-Id: I79122f0822f037be6f445ee3e5a29f3e14556161
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/771...
Oliver Hader
10:51 Revision 9a4fed43: [TASK] Set TYPO3 version to 11.5.21-dev
Change-Id: I46e19a332d7067961066da9d1fa91ad546bc3d11
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/771...
Oliver Hader
10:51 Revision 55aaacd6: [TASK] Set TYPO3 version to 10.4.34-dev
Change-Id: I0549fe21ad21b7e61ec747a936b49968fce0642d
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/771...
Oliver Hader
10:23 Revision 81926063: [RELEASE] Release of TYPO3 12.1.1
Change-Id: Ibb0e1812db973817a5c79cc83d72a43b2ec1a3d8
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/771...
Oliver Hader
10:07 Revision 7dd79841: [RELEASE] Release of TYPO3 11.5.20
Change-Id: I2d0ca5bacc7de24d933e2d05a7edae59e6e229a3
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/771...
Oliver Hader
09:53 Revision 8a90081d: [RELEASE] Release of TYPO3 10.4.33
Change-Id: I0fb42b9563e80b9e5d4b6d303edb6d6bfe7f1c25
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/771...
Oliver Hader
09:22 Revision 7d9591fe: [SECURITY] Upgrade to typo3/html-sanitizer v2.1.1
see https://github.com/TYPO3/html-sanitizer/releases/tag/v2.1.1
composer req typo3/html-sanitizer:^2.1.1
composer re...
Oliver Hader
09:22 Revision d1e627ff: [SECURITY] Disallow introducing Yaml placeholders in user interface
Introducing Yaml placeholders in backend user interface can lead to
information disclosure and denial-of-service sena...
Oliver Hader
09:21 Revision 1302e885: [SECURITY] Prohibit TypoScript in form yaml files
Only evaluate TypoScript-like instructions like
```
submitButtonLabel = TEXT
submitButtonLabel.value = Bar
```
defi...
Ralf Zimmermann
09:21 Revision d9ffbf24: [SECURITY] Destroy user sessions on password change
The password reset process for TYPO3 backend and
frontend users does not destroy possible existing
user sessions afte...
Torben Hansen
09:21 Revision 28be9cdb: [SECURITY] Use signed storage PID during frontend authentication
This change ensures that individual storage page ids are
valid by signing corresponding values with an HMAC.
Resolve...
Oliver Hader
09:21 Revision fe9d229f: [SECURITY] Upgrade to typo3/html-sanitizer v2.1.1
see https://github.com/TYPO3/html-sanitizer/releases/tag/v2.1.1
composer req typo3/html-sanitizer:^2.1.1
composer re...
Oliver Hader
09:21 Revision 49a3b33e: [SECURITY] Disallow introducing Yaml placeholders in user interface
Introducing Yaml placeholders in backend user interface can lead to
information disclosure and denial-of-service sena...
Oliver Hader
09:20 Revision aebad35a: [SECURITY] Prohibit TypoScript in form yaml files
Only evaluate TypoScript-like instructions like
```
submitButtonLabel = TEXT
submitButtonLabel.value = Bar
```
defi...
Ralf Zimmermann
09:20 Revision 0bfaa63e: [SECURITY] Destroy user sessions on password change
The password reset process for TYPO3 backend and
frontend users does not destroy possible existing
user sessions afte...
Torben Hansen
09:20 Revision aa47dcc5: [SECURITY] Use signed storage PID during frontend authentication
This change ensures that individual storage page ids are
valid by signing corresponding values with an HMAC.
Resolve...
Oliver Hader
09:20 Revision f34511b7: [SECURITY] Upgrade to typo3/html-sanitizer v2.1.1
see https://github.com/TYPO3/html-sanitizer/releases/tag/v2.1.1
composer req typo3/html-sanitizer:^2.1.1
composer re...
Oliver Hader
09:20 Revision e271621f: [SECURITY] Disallow introducing Yaml placeholders in user interface
Introducing Yaml placeholders in backend user interface can lead to
information disclosure and denial-of-service sena...
Oliver Hader
09:20 Revision fb74f1d6: [SECURITY] Prohibit TypoScript in form yaml files
Only evaluate TypoScript-like instructions like
```
submitButtonLabel = TEXT
submitButtonLabel.value = Bar
```
defi...
Ralf Zimmermann
09:20 Revision 4a41c71b: [SECURITY] Destroy user sessions on password change
The password reset process for TYPO3 backend and
frontend users does not destroy possible existing
user sessions afte...
Torben Hansen
09:19 Revision 640a6f62: [SECURITY] Use signed storage PID during frontend authentication
This change ensures that individual storage page ids are
valid by signing corresponding values with an HMAC.
Resolve...
Oliver Hader
09:19 Revision 1e5f4441: [SECURITY] Avoid DoS when generating Error pages
TYPO3 now uses a lock strategy to avoid having to many request
waiting for the generation of the error page (which ca...
Benni Mack
09:19 Revision c86cfb3e: [SECURITY] Upgrade to typo3/html-sanitizer v2.1.1
see https://github.com/TYPO3/html-sanitizer/releases/tag/v2.1.1
composer req typo3/html-sanitizer:^2.1.1
composer re...
Oliver Hader
09:19 Revision 091735d6: [SECURITY] Disallow introducing Yaml placeholders in user interface
Introducing Yaml placeholders in backend user interface can lead to
information disclosure and denial-of-service sena...
Oliver Hader
09:19 Revision edf344bf: [SECURITY] Prohibit TypoScript in form yaml files
Only evaluate TypoScript-like instructions like
```
submitButtonLabel = TEXT
submitButtonLabel.value = Bar
```
defi...
Ralf Zimmermann
09:19 Revision 4ad50927: [SECURITY] Destroy user sessions on password change
The password reset process for TYPO3 backend and
frontend users does not destroy possible existing
user sessions afte...
Torben Hansen
09:18 Revision 96ed3e62: [SECURITY] Use signed storage PID during frontend authentication
This change ensures that individual storage page ids are
valid by signing corresponding values with an HMAC.
Resolve...
Oliver Hader
09:18 Revision 73b46b6a: [SECURITY] Avoid DoS when generating Error pages
TYPO3 now uses a lock strategy to avoid having to many request
waiting for the generation of the error page (which ca...
Benni Mack
09:12 Revision 5e3e54d2: [TASK] Add HTTP host header injection check to reports module
In case the web server scenario is not properly configured to deny
HTTP host header injection, and the trustedHostsPa...
Oliver Hader
09:12 Revision 6c6f137e: [TASK] Add HTTP host header injection check to reports module
In case the web server scenario is not properly configured to deny
HTTP host header injection, and the trustedHostsPa...
Oliver Hader
09:12 Revision 194fc85f: [TASK] Add HTTP host header injection check to reports module
In case the web server scenario is not properly configured to deny
HTTP host header injection, and the trustedHostsPa...
Oliver Hader
09:11 Revision a136e6b7: [BUGFIX] Avoid double UTF-8 encoded PDF metadata in file indexer
There are different versions of pdfinfo available and used
by different providers/distributions.
a) Debian/Fedora us...
Benjamin Franzke
09:11 Revision 22d777eb: [BUGFIX] Avoid double UTF-8 encoded PDF metadata in file indexer
There are different versions of pdfinfo available and used
by different providers/distributions.
a) Debian/Fedora us...
Benjamin Franzke
08:48 Revision 0196f562: [BUGFIX] Avoid double UTF-8 encoded PDF metadata in file indexer
There are different versions of pdfinfo available and used
by different providers/distributions.
a) Debian/Fedora us...
Benjamin Franzke
07:34 Revision 42271d9b: [DOCS] Add example for hook modifyBlindedConfigurationOptions
Releases: main, 11.5, 10.4
Resolves: #99348
Change-Id: I43d305b0f02bd6049f32e65c95184a2d5bfa4fe5
Reviewed-on: https:/...
Stephan Großberndt
07:33 Revision 19e0b195: [DOCS] Add example for hook modifyBlindedConfigurationOptions
Releases: main, 11.5, 10.4
Resolves: #99348
Change-Id: I43d305b0f02bd6049f32e65c95184a2d5bfa4fe5
Reviewed-on: https:/...
Stephan Großberndt

2022-12-12

21:01 Revision 229d778b: [DOCS] Add example for hook modifyBlindedConfigurationOptions
Releases: main, 11.5, 10.4
Resolves: #99348
Change-Id: I43d305b0f02bd6049f32e65c95184a2d5bfa4fe5
Reviewed-on: https:/...
Stephan Großberndt
20:17 Revision b6a3ed5e: [TASK] Set TYPO3 version to 12.1.1-dev
Releases: 12.1
Change-Id: Ic62d5e750cc67fc6ad4e27c4c23df6655ca69ac6
Reviewed-on: https://review.typo3.org/c/Packages/...
Oliver Hader
16:23 Revision b2293342: [BUGFIX] Properly respect allowEdit setting in PasswordGenerator
When "allowEdit" is disabled in the PasswordGenerator
field control, this is now properly respected also
on initial l...
Oliver Bartsch
16:22 Revision d4c70810: [DOCS] Document no longer evaluated TCA type "group" options
Adds two TCA options to the changelog, which are no
longer evaluated due to the introduction of TCA type
"file". Thos...
Oliver Bartsch
15:16 Revision 0332bf51: [TASK] Migrate WidgetRegistryTest to functional
Resolves: #98910
Releases: main
Change-Id: Icefa048c401cd2b6f49be10b7aa4e2fe76379068
Reviewed-on: https://review.typo...
Torben Hansen
10:57 Revision e90dbe4e: [BUGFIX] Allow auto-registration also for non-composer mode
Using the "_instanceof" definition to auto-tag
reactions does not work for installations in
non-composer mode.
This ...
Oliver Bartsch
09:56 Revision 5048d7ce: [TASK] Align error responses in ReactionResolver
Error responses now use the same format in
ReactionResolver as well as in the reaction.
Additionally, a new method a...
Oliver Bartsch
09:51 Revision fafe38af: [FEATURE] Add Fluid TrimViewHelper
This adds a <f:format.trim> ViewHelper
that trims a string with the option
to trim characters off a string from
the e...
Benjamin Kott
08:58 Revision e4964fe5: [DOCS] Update TypoScript info on file includes within curly braces
Clearly state
foo {
@import '...'
}
is not relative to 'foo' anymore and a construct
like this must be avoided or...
Christian Kuhn
07:59 Revision b1b4c6c1: [TASK] Add "Reload" button in "Page" module
The "Page" module now also has a "Reload" button in the top right
corner to allow users to reload the module easily.
...
Andreas Fernandez

2022-12-10

21:21 Revision 3e022165: [BUGFIX] Adapt minor typo in .rst file
syl vs sql.
Resolves: #99334
Related: #99282
Releases: main
Change-Id: I1f69c7eadffc2f579982acbfb0badc548fd92d10
Rev...
Christian Kuhn
21:10 Revision ff9aade2: [BUGFIX] Allow relative @import wildcard includes
Scenario:
sys_template record
@import 'EXT:core/Configuration/TypoScript/foo.typoscript'
File EXT:core/Configuration...
Christian Kuhn
15:14 Revision 63f967eb: [BUGFIX] Handle reaction records with missing reaction class
When reaction records are present in a system and their
corresponding implementation class is not, the reaction
modul...
Oliver Bartsch
15:04 Revision 781c164f: [BUGFIX] Respect ReactionDemand for shortcuts
Especially for detailed filters, the shortcut button
does now respect the current demand.
Resolves: #99310
Related: ...
Oliver Bartsch
14:41 Revision 4b47665e: [BUGFIX] Honor shift-reload in FE TypoScript
The patch fixes that pressing "shift-reload" in a
Frontend request with a logged in Backend user no
longer honored ch...
Christian Kuhn
14:25 Revision 226d88a1: [TASK] Replace prophecy in EXT:extbase LocalizationUtilityTest
Resolves: #98889
Releases: main
Change-Id: I93d7f0d08de4bf399dc681f8f9fb35f9150bee59
Reviewed-on: https://review.typo...
Torben Hansen
14:10 Revision 2781bc58: [TASK] Rename module "Template" to "TypoScript"
This is long overdue: Even though we call
"TypoScript templates" "Templates", the word
"template" is usually more con...
Christian Kuhn
14:07 Revision a2aeca72: [BUGFIX] Avoid invalid cache identifier in SchemaInformation
The database may contain special characters (e.g. dots) that are
considered invalid by the caching framework, potenti...
Andreas Fernandez
14:03 Revision 2c593c05: [BUGFIX] Dynamically set 'clear' TypoScript flag
Not too many people know and understand the details
of the 'clear constants' and 'clear setup' flags in
TypoScript sy...
Christian Kuhn
10:19 Revision 4ca6a0c0: [TASK] Replace prophecy in EXT:core ServiceProviderRegistryTest
Resolves: #98762
Releases: main
Change-Id: I023bca3867aa19d95c84b5a877e404a7fd3ee4a6
Reviewed-on: https://review.typo...
Torben Hansen
10:02 Revision ac29feb0: [TASK] Replace prophecy in EXT:core ConsoleCommandPassTest
Resolves: #98764
Releases: main
Change-Id: I3a2f1f95efeb3e555936b98e5b1620c9b02cfbd6
Reviewed-on: https://review.typo...
Torben Hansen

2022-12-09

14:15 Revision 1a2c7069: [TASK] Use RouteResult in EXT:reactions resolver
The new Backend Routing feature
with dynamic placeholders was added
just before EXT:reactions was
introduced. This wa...
Benni Mack
11:48 Revision c4c07fbf: [DOCS] Fix links of "Edit on GitHub" button
Resolves: #99299
Releases: main, 11.5
Change-Id: I1b4e7d16cf32bfbcda757685c8b3759bb052a867
Reviewed-on: https://revie...
Chris Müller
11:35 Revision 51bc7e74: [BUGFIX] Re-add "Reload" button in record list
The "reload" button went missing in the record list with #98320 by
accident. This patch re-adds the button again.
Re...
Andreas Fernandez
11:29 Revision dea88988: [TASK] Streamline Locale + LanguageService initialization calls
This change optimizes the calls to LanguageService,
adding some types to internal / protected methods,
while also str...
Benni Mack
09:54 Revision dd04b45e: [DOCS] Fix links of "Edit on GitHub" button
Resolves: #99299
Releases: main, 11.5
Change-Id: I1b4e7d16cf32bfbcda757685c8b3759bb052a867
Reviewed-on: https://revie...
Chris Müller
09:18 Revision a5fe2e29: [BUGFIX] Properly consider else condition in TypoScript
When establishing the TypoScript condition verdict visitors,
the tstemplate related "fake" IncludeTreeConditionEnforc...
Christian Kuhn

2022-12-08

16:53 Revision 131452d0: [TASK] Remove obsolete test related PageHelloWorld.typoscript
Seems this slipped through with #98571 - the fixture file
is not used. Remove it.
Resolves: #99318
Related: #98571
R...
Christian Kuhn
15:35 Revision 8dcdb59f: [BUGFIX] Correctly turn nodes into TypoScript references
Given TypoScript:
foo = foo
foo.childfoo = childfoo
source = source
foo =< source
Current AST builde...
Christian Kuhn
12:03 Revision bb91ad79: [TASK] Deprecate old TypoScriptParser
The main goal of this patch is to avoid last usages
of old TypoScriptParser and to substitute it with
usages of the n...
Christian Kuhn

2022-12-07

19:43 Revision 2aa2206c: [BUGFIX] Avoid exceptions / PHP 8 error with empty list_type
Resolves: #99296
Releases: main, 11.5
Change-Id: I7c7182b107afe30def50bf10f73018df2c888958
Reviewed-on: https://revie...
Benni Mack
19:30 Revision 48ba2f1a: [BUGFIX] Avoid exceptions / PHP 8 error with empty list_type
Resolves: #99296
Releases: main, 11.5
Change-Id: I7c7182b107afe30def50bf10f73018df2c888958
Reviewed-on: https://revie...
Benni Mack
19:25 Revision e027f968: [TASK] Convert DataMapperTest to functional
Resolves: #98897
Releases: main
Change-Id: I5f4d861dc67a6858050564b5ec31a88383d01e2a
Reviewed-on: https://review.typo...
Nikita Hovratov
17:24 Revision 47d1bb4b: [TASK] Mark LegacyClassesForIde entries @deprecated
The point of these files is to hint IDE's for
deprecation usages. The classes need an @deprecated
annotation.
Resolv...
Christian Kuhn
17:19 Revision 2831344b: [TASK] Remove useless information in save file message
When saving a file in the filelist module, a flashmessage
is shown containing the filename, bytes written and md5
has...
Torben Hansen
14:14 Revision 1c2e1265: [BUGFIX] Fix addService PHP 8 warning
If a service is registered with ExtensionManagementUtility::addService(),
that does not have a "os" flag, then a PHP ...
Benni Mack
14:13 Revision c6e5be19: [BUGFIX] Fix addService PHP 8 warning
If a service is registered with ExtensionManagementUtility::addService(),
that does not have a "os" flag, then a PHP ...
Benni Mack
13:30 Revision f1e1e0bb: [TASK] Introduce string fragment extraction
When working with variable interpolation and similar scenarios, in
most cases variables, constants, expressions, ... ...
Oliver Hader
13:30 Revision 5488994d: [TASK] Introduce string fragment extraction
When working with variable interpolation and similar scenarios, in
most cases variables, constants, expressions, ... ...
Oliver Hader
13:28 Revision 36459901: [TASK] Introduce string fragment extraction
When working with variable interpolation and similar scenarios, in
most cases variables, constants, expressions, ... ...
Oliver Hader

2022-12-06

20:31 Revision 16f905ac: [DOCS] Add changelog folder for v12.2
Resolves: #99293
Releases: main
Change-Id: I64fd454f3c8e24389aeda8312e1a68398afb4d02
Reviewed-on: https://review.typo...
Chris Müller
13:38 Revision 253fd15d: [TASK] Highlight content elements in inconsistent translation state
In the "Page" module, translated content elements without a connection
to the original language are highlighted, when...
Annett Jähnichen
10:55 Revision 3402b305: [BUGFIX] Cast integer values in Fluid ViewHelpers
Cast decimals input arguments to integer before using them in
number_format().
Resolves: #99283
Releases: main, 11.5...
Achim Fritz
10:01 Revision e764a7b5: [BUGFIX] Cast integer values in Fluid ViewHelpers
Cast decimals input arguments to integer before using them in
number_format().
Resolves: #99283
Releases: main, 11.5...
Achim Fritz
08:25 Revision 1ccf8df8: [BUGFIX] Add figure tag to external blocks in rte parsing
Resolves: #99281
Releases: main, 11.5, 10.4
Change-Id: Ic65f08aa0bb67f97880d0ff5bb4c692fe7e6ffde
Reviewed-on: https:/...
Benjamin Kott
08:25 Revision cc19dbdd: [BUGFIX] Add figure tag to external blocks in rte parsing
Resolves: #99281
Releases: main, 11.5, 10.4
Change-Id: Ic65f08aa0bb67f97880d0ff5bb4c692fe7e6ffde
Reviewed-on: https:/...
Benjamin Kott
08:18 Revision 2e14c410: [TASK] Set TYPO3 version to 12.2.0-dev
Change-Id: I206be78ca4e53366c8ded19ebbabdf6ec4047471
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/769...
Benni Mack
08:00 Revision 0767f2b8: [RELEASE] Release of TYPO3 12.1.0
Change-Id: Ica979328b58e9d44ae8703a67ed7d5c9218afe3c
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/769...
Benni Mack
07:52 Revision 35772ce9: [BUGFIX] Add figure tag to external blocks in rte parsing
Resolves: #99281
Releases: main, 11.5, 10.4
Change-Id: Ic65f08aa0bb67f97880d0ff5bb4c692fe7e6ffde
Reviewed-on: https:/...
Benjamin Kott

2022-12-05

23:07 Revision 0840414d: [BUGFIX] Allow <figure> tag outside of paragraph tags
<figure> is allowed in HTML5 outside of paragraphs,
thus it should also be configured like that out-of-the-box
See h...
Benni Mack
23:07 Revision 96846de7: [BUGFIX] Allow <figure> tag outside of paragraph tags
<figure> is allowed in HTML5 outside of paragraphs,
thus it should also be configured like that out-of-the-box
See h...
Benni Mack
22:38 Revision a88edb5a: [TASK] Streamline ext:redirects auto-create chain
Changing the slugs of pages automatically creates
redirects, if ext:redirects is installed and
that feature has not b...
Stefan Bürk
22:36 Revision 9f87b5ec: [BUGFIX] Allow <figure> tag outside of paragraph tags
<figure> is allowed in HTML5 outside of paragraphs,
thus it should also be configured like that out-of-the-box
See h...
Benni Mack
22:35 Revision aa3ee0e8: [BUGFIX] Ensure inserted json data is properly checked in DataHandler
Native JSON field support along with a custom TCA user dbType
`json` has been added as new features. This has been us...
Stefan Bürk
16:28 Revision cc60fe25: [BUGFIX] Minor fixes in EXT:reactions
- Use TYPO3.Icons
- Make reactionTypes accessible to fluid
- Allow type sorting and use correct field
- Add contextme...
Benjamin Kott
15:24 Revision 47b29e8d: [BUGFIX] Fix typo in `drapUploader`
Resolves: #99274
Releases: main
Change-Id: Ib8e51718d1abf51cf74ebb5ab0d8693efab13cde
Reviewed-on: https://review.typo...
Andreas Fernandez
14:12 Revision e537029c: [BUGFIX] Ensure correct page-section cache identifier calculation
Way back until early stage of v11 development the page section
cache entry included only the rootline of the default ...
Stefan Bürk
14:09 Revision aff13f4b: [TASK] Update @typo3/icons to 3.4.0
Executed commands:
npm install @typo3/icons@^3.4.0
npm run build
Resolves: #99272
Releases: main
Change-Id: I915ff22...
Benjamin Kott
13:42 Revision bce091f4: [TASK] Upgrade to typo3/html-sanitizer v2.1.0
see https://github.com/TYPO3/html-sanitizer/releases/tag/v2.1.0
composer req typo3/html-sanitizer:^2.1.0
composer re...
Oliver Hader
13:42 Revision 4e884800: [TASK] Upgrade to typo3/html-sanitizer v2.1.0
see https://github.com/TYPO3/html-sanitizer/releases/tag/v2.1.0
composer req typo3/html-sanitizer:^2.1.0
composer re...
Oliver Hader
13:19 Revision 0a413341: [TASK] Upgrade to typo3/html-sanitizer v2.1.0
see https://github.com/TYPO3/html-sanitizer/releases/tag/v2.1.0
composer req typo3/html-sanitizer:^2.1.0
composer re...
Oliver Hader
09:13 Revision 2469eef8: [TASK] Add event to intercept/adjust request-token
Add new BeforeRequestTokenProcessedEvent, allowing to intercept
or adjust a RequestToken during active user authentic...
Oliver Hader
09:12 Revision 52024675: [TASK] Display language label keys in configuration module
To improve the listing of mfa providers in the configuration
module are possible language label keys now displayed,
n...
Oliver Bartsch
09:10 Revision 932c387e: [TASK] Use unified buttons in Scheduler docheader
The 'SchedulerTask' module should use
same buttons in docheader as in other modules, therefore
use only 'Close', 'Sav...
Annett Jähnichen
08:48 Revision 0cd44957: [TASK] Display language label keys in configuration module
To improve the listing of mfa providers in the configuration
module are possible language label keys now displayed,
n...
Oliver Bartsch
08:36 Revision fc1108db: [FEATURE] Display registered reactions in configuration module
Resolves: #99245
Related: #98373
Releases: main
Change-Id: I1c82965240149b88f9b1b21adfbc65814eca0fd0
Reviewed-on: htt...
Oliver Bartsch
06:49 Revision 9cb5a10b: [BUGFIX] Avoid invalid orderBy for count query in EXT:reactions
Avoid an exception if using PostgreSQL because there
must not be a orderBy part if building a count query.
PostgreSQL...
Georg Ringer

2022-12-04

20:51 Revision f86ad5e3: [DOCS] Review changelogs for v12.1 release
Resolves: #99266
Releases: main
Change-Id: Ife02422e05d88ea8935c020ccf785aa0a014e9da
Reviewed-on: https://review.typo...
Chris Müller
20:24 Revision 7706ee16: [TASK] Replace prophecy in ExtensionManagementServiceTest
Note, that this patch also fixes some useless prophecy
`->willReturn()` calls, which did not test something. Actually...
Torben Hansen
 

Also available in: Atom