Activity
From 2024-01-31 to 2024-02-29
2024-02-29
-
17:31 Revision bd02b4b6: [BUGFIX] Honor workspace l10n_parent can point to live
- When a record localization is changed in workspaces,
`transOrigPointerField` ("l10n_parent") can point to
either the ... -
- When a record localization is changed in workspaces,
`transOrigPointerField` ("l10n_parent") can point to
either the ... -
12:58 Revision 5e856cc6: [BUGFIX] Streamline `typo3-spinner-icon` element with SVG asset
- The Lit element `typo3-backend-spinner` uses a hard-coded SVG string,
which has to be the same as the `spinner-circle... -
- The Lit element `typo3-backend-spinner` uses a hard-coded SVG string,
which has to be the same as the `spinner-circle...
2024-02-28
-
19:39 Revision 8eab4ba2: [BUGFIX] TreeNode creation and cleanup
- Correctly extend and show the children of the
parentnode when a node is added. Clean up
the parent node status when a... -
17:05 Revision 90a6c23b: [BUGFIX] Display error icon in folder field
- Resolves: #103221
Releases: main, 12.4
Change-Id: I4089a733f9ce2c888c05a4f1e4f7834a00ad1bfc
Reviewed-on: https://revi... -
- With all phpunit 11 deprecations being fixed,
we can raise from phpunit 10 to current major.
> composer req --dev ph... -
14:25 Revision f144c79d: [BUGFIX] Remove invalid flex form configuration
- Since #102970, it's no longer possible to use
DB relations in nested types for flex forms.
A forgotten TCA configura... -
- Resolves: #103221
Releases: main, 12.4
Change-Id: I4089a733f9ce2c888c05a4f1e4f7834a00ad1bfc
Reviewed-on: https://revi... -
- Deprecated with phpunit 11. Adapt to
fixture classes to test details of abstracts.
Resolves: #103228
Releases: main
... -
12:47 Revision 2319103e: [BUGFIX] Allow maxitems=1 for TCA type category
- In relation mode "manyToMany" it is okay to have
a limit of one.
Code-wise the FlexForm code is slightly simplified
... -
- In relation mode "manyToMany" it is okay to have
a limit of one.
Code-wise the FlexForm code is slightly simplified
... -
- In relation mode "manyToMany" it is okay to have
a limit of one.
Code-wise the FlexForm code is slightly simplified
... -
- Deprecated in phpunit 11. Used once.
We remove that test entirely since it
is a direct call to GU::formatSize()
which... -
- Deprecated with phpunit 11:
Use `$double->willReturn()` instead of
`$double->will($this->returnValue())`.
Resolves: ... -
- Phpunit 11 is a bit more picky with data providers:
If single data sets "name" their arguments, they
must match to th... -
- In order to deprecate the inferior Wizard component introduced back in
TYPO3 v7, the Localization wizard is migrated ...
2024-02-27
-
- Substitute with a PHP attribute.
Resolves: #103219
Releases: main
Change-Id: Ie589404f797a880fc8e27480a2dd95c3f04204... -
- phpunit 11 deprecates addMethods() on mocks.
There are various solutions:
* Use onlyMethods([]) instead of
addMeth... -
17:29 Revision ba4a9117: [TASK] Remove predefined Linkvalidator sender mailaddress
- In production environments the address is always wrong. By removing it the fallback MAIL/defaultMailFromAddress is us...
-
- The methods are no longer static in phpunit 11 and
should not be used in data providers. We split a data
provider to ... -
- * Less mocking
* Don't test AbstractFrontend but implementations
* Turn test-internal loops into data providers
* Gen... -
- Check $dataMap and $commandMap structure in start(),
type hint them to array. This is considered b/w
compatible since... -
- phpunit 11 deprecation:
Use `$double->willReturn()` instead of
`$double->will($this->onConsecutiveCalls())`.
Resolve...
2024-02-26
-
- Unblock phpunit 11.
> composer req --dev codeception/codeception:^5.1.1 codeception/module-webdriver:^4.0.1
> compos... -
- Unblocks phpunit 11.
> composer u typo3/testing-framework
Resolves: #103207
Releases: main
Change-Id: Iff3b1c026960... -
- Major version upgrade from v4. Unblocks phpunit 11.
Adapt various Build/ scripts and the extension scanner.
> compos... -
- Use the attribute in favor of `@dataProvider`
annotation. Adapt the acceptance test splitter
to deal with it.
Clean ... -
- Use the attribute in favor of `@dataProvider`
annotation. Adapt the acceptance test splitter
to deal with it.
Clean ... -
12:54 Revision 6c6a5ab2: [BUGFIX] Restore FileInterface::setContents() TODO comments
- Resolves: #103202
Releases: main, 12.4
Related: #40096
Change-Id: If64a5d16da9d500180d070b8d5f6a7fd96609010
Reviewed-... -
- Resolves: #103202
Releases: main, 12.4
Related: #40096
Change-Id: If64a5d16da9d500180d070b8d5f6a7fd96609010
Reviewed-... -
- Unblocks phpunit 11, backport to v12 to keep
php-cs-fixer in sync.
> composer req --dev friendsofphp/php-cs-fixer:^3... -
- Unblocks phpunit 11, backport to v12 to keep
php-cs-fixer in sync.
> composer req --dev friendsofphp/php-cs-fixer:^3... -
- phpunit 11 deprecates annotations like `@test` and
`@dataProvider` in favor of their attribute counterparts.
We'll a...
2024-02-25
-
- phpunit 11 deprecates annotations like `@test` and
`@dataProvider` in favor of their attribute counterparts.
We'll a... -
- Resolves: #103192
Releases: main, 12.4
Change-Id: I81c0c655b75332790243c05be14f24593c5b9d6a
Reviewed-on: https://revi... -
- Resolves: #103192
Releases: main, 12.4
Change-Id: I81c0c655b75332790243c05be14f24593c5b9d6a
Reviewed-on: https://revi...
2024-02-24
-
12:47 Revision f6ed5302: [TASK] Raise to phpstan/phpstan-phpunit:^1.3.16
- Due to a typo, #103193 downgraded the minimum required
phpstan/phpstan-phpunit version.
Executed command:
compo... -
- Due to a typo, #103193 downgraded the minimum required
phpstan/phpstan-phpunit version.
Executed command:
compo... -
- The new version changes the format of a warning.
Executed commands:
composer require --dev \
phpstan/ph... -
- The new version changes the format of a warning.
Executed commands:
composer require --dev \
phpstan/ph...
2024-02-23
-
- A couple of places (mostly paginations) are
using the action ViewHelpers without providing
the `action` argument. Tho... -
- A couple of places (mostly paginations) are
using the action ViewHelpers without providing
the `action` argument. Tho... - 20:15 Revision 549d1acb: [TASK] Fix example of adding custom table to create database record reactions
- fixes error introduced by
https://review.typo3.org/c/Packages/TYPO3.CMS/+/83080
Releases: main, 12.4
Resolves: #1031... - 20:15 Revision a9705a00: [TASK] Fix example of adding custom table to create database record reactions
- fixes error introduced by
https://review.typo3.org/c/Packages/TYPO3.CMS/+/83080
Releases: main, 12.4
Resolves: #1031... -
- We've enhanced the backend tree component by extending tree nodes to
incorporate status information. These details se... -
- phpunit 11 deprecates annotations like `@test` and
`@dataProvider` in favor of their attribute counterparts.
We'll a... - 14:18 Revision 20922f3b: [DOCS] Correct field name in reaction's example
- To add a custom table to the list of tables,
the corresponding TCA field name "table_name"
has to be used.
Releases:... - 14:18 Revision 3fea8533: [DOCS] Correct field name in reaction's example
- To add a custom table to the list of tables,
the corresponding TCA field name "table_name"
has to be used.
Releases:... -
- phpunit 11 deprecates annotations like `@test` and
`@dataProvider` in favor of their attribute counterparts.
We'll a... -
- A couple of tests are adding services to a
container instance. Since the `ContainerInterface`
does not define the use... -
- A couple of tests are adding services to a
container instance. Since the `ContainerInterface`
does not define the use... -
- Resolves: #103182
Releases: main, 12.4
Change-Id: If16e37c638a07e3afbb59d665141cc2ade583f4d
Reviewed-on: https://revi... -
- Resolves: #103182
Releases: main, 12.4
Change-Id: If16e37c638a07e3afbb59d665141cc2ade583f4d
Reviewed-on: https://revi... - 12:20 Revision e94271f6: [BUGFIX] Allow TCA resultArray modification via CustomFileControlsEvent
- The event provides access to the `$resultArray` and documents
that it can be modified to set `javaScriptModules`, but... - 12:20 Revision 93b77f6d: [BUGFIX] Allow TCA resultArray modification via CustomFileControlsEvent
- The event provides access to the `$resultArray` and documents
that it can be modified to set `javaScriptModules`, but... - 09:45 Revision 4e44ae83: [BUGFIX] Prevent possible browser freezes in FormEditor
- Using timestamps as array keys in form yaml configuration
can result in sparse [1] JavaScript arrays which contain
"e... - 09:22 Revision a9a8cfc3: [BUGFIX] Preserve ordering of prefixed CKEditor5 CSS stylesheets
- When CKEditor5 `contentsCss` configuration options references multiple
CSS, respective `fetch()` requests may finish ... - 09:22 Revision 5af07553: [BUGFIX] Preserve ordering of prefixed CKEditor5 CSS stylesheets
- When CKEditor5 `contentsCss` configuration options references multiple
CSS, respective `fetch()` requests may finish ... -
- The wizard component was introduced in EXT:workspaces back then as the
`Modal` component was not able to keep the cur...
2024-02-22
- 17:08 Revision a868e52d: [BUGFIX] Prevent possible browser freezes in FormEditor
- Using timestamps as array keys in form yaml configuration
can result in sparse [1] JavaScript arrays which contain
"e... - 17:08 Revision 01b133b0: [BUGFIX] Prevent possible browser freezes in FormEditor
- Using timestamps as array keys in form yaml configuration
can result in sparse [1] JavaScript arrays which contain
"e... -
- The method throws an exception on !is_numeric() already.
This includes float, which is bogus. We can simplify
with an... -
- Add test cases to see how canBeInterpretedAsInteger()
returns with bool input.
Change-Id: I7b0c8e959660170ee20e845d9... -
11:10 Revision 792fb2ba: [TASK] Prevent undefined encryptionKey in tests
- With #103046, `encryptionKey` has been removed from
`DefaultConfiguration.php`. This leads to PHP array
key warnings ... -
- With #103046, `encryptionKey` has been removed from
`DefaultConfiguration.php`. This leads to PHP array
key warnings ... -
- With #103046, `encryptionKey` has been removed from
`DefaultConfiguration.php`. This leads to PHP array
key warnings ... -
10:30 Revision 90cb7cff: [TASK] Use correct command dispatch in `runTests.sh`
- The command dispatch for `-s phpstanGenerateBaseline`
is modified to a simple command dispatch instead of
the bash ex... -
- The command dispatch for `-s phpstanGenerateBaseline`
is modified to a simple command dispatch instead of
the bash ex... -
- The command dispatch for `-s phpstanGenerateBaseline`
is modified to a simple command dispatch instead of
the bash ex... -
07:20 Revision cd85d907: [DOCS] Add AfterFormDefinitionLoadedEvent to EXT:form documentation
- Resolves: #102964
Resolves: https://github.com/TYPO3-Documentation/Changelog-To-Doc/issues/812
Related: #102865
Relea...
2024-02-21
-
- In TYPO3 versions before v9, the mailtest showed the configured
sender email address. This has been removed due to a ... -
- In TYPO3 versions before v9, the mailtest showed the configured
sender email address. This has been removed due to a ... -
13:56 Revision c4b58ae4: [BUGFIX] Avoid notice in template module by an early return
- Return early in the template module on root page if a sys_template
record is retrieved from a page which itself is de... -
- The DataHandler has a major structural flaw by not handing
over known record state to sub methods. It thus tends to
f... -
13:15 Revision d6146559: [TASK] Add better PHPStan annotation for method getRepositoryClassName
- Resolves: #103170
Releases: main, 12.4, 11.5
Change-Id: Ic7f63f6c55b832af27e9e30a0711ba042df42aa3
Reviewed-on: https:... -
- Resolves: #103170
Releases: main, 12.4, 11.5
Change-Id: Ic7f63f6c55b832af27e9e30a0711ba042df42aa3
Reviewed-on: https:... -
- Resolves: #103170
Releases: main, 12.4, 11.5
Change-Id: Ic7f63f6c55b832af27e9e30a0711ba042df42aa3
Reviewed-on: https:... -
10:24 Revision 126ff8f0: [TASK] Clean up legacy cache_treelist leftovers
- Using cache_treelist has been avoided with #103139
since it was broken. v13 now goes ahead and removes
the clearing l... -
- The cache_treelist handling in PageRepository is broken
for a long time already: Entries are get() with an expiry
tim... -
- The cache_treelist handling in PageRepository is broken
for a long time already: Entries are get() with an expiry
tim... -
- Resolves: #103167
Releases: main
Change-Id: Ic890b2b5ea50bd4410709912316e3da7ac0cad38
Reviewed-on: https://review.typ... -
- Resolves: #103166
Releases: main
Change-Id: I8ee238e46ba7589e32917d2ac26ee0aa6860c014
Reviewed-on: https://review.typ...
2024-02-20
-
- The dataHandler hook implementation `BackendUserPasswordCheck` sets
a random password for a new backend user, if the ... -
- Some modal windows rendered in the workspace management module had
hard-coded strings. This commit replaces such usag... -
- The dataHandler hook implementation `BackendUserPasswordCheck` sets
a random password for a new backend user, if the ... -
- Some modal windows rendered in the workspace management module had
hard-coded strings. This commit replaces such usag... - 14:02 Revision 983b7163: [TASK] Use first class closures for service provider factories
- Adapt the service provider compiler to perform the same level of
optimization as for the array-based callable syntax:... - 14:02 Revision bbeceef6: [TASK] Use first class closures for service provider factories
- Adapt the service provider compiler to perform the same level of
optimization as for the array-based callable syntax:... -
- The code of the form creation wizard is cleaned up a bit. The nested
`then()` callback hell is replaced with proper a... -
08:54 Revision 76b20cc9: [TASK] Set TYPO3 version to 11.5.37-dev
- Change-Id: Icbc9a048e82113dce433a1059ed0f53727b44e28
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/830... -
- Change-Id: Ic9729e15cf60d56f5fc1ecb63dfd0a9545b92104
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/830...
2024-02-19
-
- Drop down menus, used in the docheader (e.g. the
language selection in then page module) do no longer
get cut off on ... -
- Drop down menus, used in the docheader (e.g. the
language selection in then page module) do no longer
get cut off on ... - 14:44 Revision 5aceacdf: [DOCS] Update CKEditor5 CSS styling limitations section
- With #100768 the CKEeditor5 CSS scoping was migrated from server-side
SCSS preprocessing to a JavaScript based CSS pr... - 14:44 Revision effbd5b4: [DOCS] Update CKEditor5 CSS styling limitations section
- With #100768 the CKEeditor5 CSS scoping was migrated from server-side
SCSS preprocessing to a JavaScript based CSS pr... -
- Resolves: #103142
Releases: main, 12.4, 11.5
Change-Id: I31e5af71aa0e1a9104f8c154a6f0e34f29c90a77
Reviewed-on: https:... -
- Resolves: #103142
Releases: main, 12.4, 11.5
Change-Id: I31e5af71aa0e1a9104f8c154a6f0e34f29c90a77
Reviewed-on: https:... -
- Resolves: #103142
Releases: main, 12.4, 11.5
Change-Id: I31e5af71aa0e1a9104f8c154a6f0e34f29c90a77
Reviewed-on: https:... - 04:47 Revision 476b197d: [BUGFIX] Add font plugin to CKEditor5
- Add the configuration to the "Full" RTE preset, and also
include some modules that missed in Full preset since #10209... - 04:47 Revision f2c27868: [BUGFIX] Add font plugin to CKEditor5
- Add the configuration to the "Full" RTE preset, and also
include some modules that missed in Full preset since #10209...
2024-02-18
-
- Resolves: #103145
Related: #102628
Releases: main
Change-Id: Ib629563e5289e2dc459b042fe8c5fb7c54beb829
Reviewed-on: h... -
- Additionally, avoid double "see" in consecutive sentences.
Resolves: #103146
Related: #102875
Releases: main
Change-...
2024-02-17
-
- New core-testing-* images have been build and published in
the TYPO3 testing-infrastructure repository and pulled to
... -
- New core-testing-* images have been build and published in
the TYPO3 testing-infrastructure repository and pulled to
... -
- New core-testing-* images have been build and published in
the TYPO3 testing-infrastructure repository and pulled to
... -
- New core-testing-* images have been build and published in
the TYPO3 testing-infrastructure repository and pulled to
... - 08:06 Revision 37103199: [TASK] Enable tablecaption in CKEditor5
- CKEditor5 renders tablecaptions as figcaption elements,
therefore we allow them to be included in RTE and
in frontend... - 08:06 Revision 49b5e95b: [TASK] Enable tablecaption in CKEditor5
- CKEditor5 renders tablecaptions as figcaption elements,
therefore we allow them to be included in RTE and
in frontend...
2024-02-16
-
- This `@internal` property and method is another "has
never been used" detail: It dates back to very early
TYPO3 versi... -
- Some cleanup of the class with obvious things:
* Add ConnectionPool, CacheManager and runtime cache as
property, c... -
- Since FileInterface->getPublicUrl() might return
`NULL`, corresponding constructor arguments are
updated to now expec... -
- Since FileInterface->getPublicUrl() might return
`NULL`, corresponding constructor arguments are
updated to now expec... -
- In v11, extension authors were able to enhance the site configuration
"TCA" with richtext fields. Since v12, this is ... -
- In v11, extension authors were able to enhance the site configuration
"TCA" with richtext fields. Since v12, this is ... -
- To allow `BackendUtility::getProcessedValue()` to properly
resolve the labels for select options, added via TSconfig,... -
- To allow `BackendUtility::getProcessedValue()` to properly
resolve the labels for select options, added via TSconfig,... -
- Similar to #103132. This time, public `@internal`
property $data_disableFields is only read, but
never written.
Read...
2024-02-15
-
- In this episode of 'Cracking the Cryptic' we are
looking at the DataHandler puzzle ;)
Let's get some obvious things d... -
- Resolves: #103131
Releases: main
Change-Id: I19617a4b2610bd622a887c0a2c1b974ca7617d01
Reviewed-on: https://review.typ... -
- Argument 3 $data of `checkRecordUpdateAccess()` is
funny: It is only used if argument 4 is given as
well. This is onl... -
- There is no point to substitute GU::trimExplode() of
the rather short TCA 'eval' string by substituting
it with an md... -
- There is no point to substitute GU::trimExplode() of
the rather short TCA 'eval' string by substituting
it with an md... -
- The EXT:form "version2" is using bootstrap 5,
which requires <select> elements to use the
`form-select` class. This i... -
- The EXT:form "version2" is using bootstrap 5,
which requires <select> elements to use the
`form-select` class. This i... -
- Install tool suggests to set
`$GLOBALS['TYPO3_CONF_VARS']['GFX']['processor_colorspace'] = sRGB`
if images appear too... -
- Install tool suggests to set
`$GLOBALS['TYPO3_CONF_VARS']['GFX']['processor_colorspace'] = sRGB`
if images appear too... -
- The method `FileLinkHandler->getSelectedFolder()` may return either an
instance of `Folder` or a blunt `false`, where...
2024-02-14
-
- Since the node is `collapsed` on initial
rendering, the `aria-expanded` attribute
is set to "false".
Resolves: #1031... -
- Due to the previously used pagination, the
"items per page" option has been reset when
searching in the record list.
... -
- Due to the previously used pagination, the
"items per page" option has been reset when
searching in the record list.
... -
- With #103015 the table definition merge has been moved
to an earlier point, providing an associative array
with the t... -
12:05 Revision 6208b54f: [BUGFIX] Fix mixed up `$cachingEnabled` property in BootCompletedEvent
- The BootCompletedEvent receives the constructor argument
`$cachingEnabled`. However, the variable `$disableCaching` w... -
- The BootCompletedEvent receives the constructor argument
`$cachingEnabled`. However, the variable `$disableCaching` w... -
- It's now possible to use a TCA type `group`
field as `foreign_selector` together with
the `useCombination` functional... -
- It's now possible to use a TCA type `group`
field as `foreign_selector` together with
the `useCombination` functional... -
06:54 Revision 5935e2d0: [DOCS] Correctly state "bigint signed" as datetime default
- The original patch in [1] wrongly stated that the column
type was changed to "bigint unsigned", when in fact it
is "b...
2024-02-13
-
- This commit updates ckeditor5 to v41.1. See changelog at
https://github.com/ckeditor/ckeditor5/releases/tag/v41.1.0.
... -
- This commit updates ckeditor5 to v41.1. See changelog at
https://github.com/ckeditor/ckeditor5/releases/tag/v41.1.0.
... - 14:38 Revision 6cc92701: [TASK] Add missing RST for #102799
- The RST and some templates adaptions have been missed in the
11.5 backport of #102799.
Resolves: #103109
Related: #1... -
- The database column defined by TCA ctrl 'origUid'
('t3_origuid') had a bumpy ride over the years.
It was mostly obso... -
- The constant editor has been revamped with #98357 using the
new TypoScript parser introduced with TYPO3 v12 under the... -
- The constant editor has been revamped with #98357 using the
new TypoScript parser introduced with TYPO3 v12 under the... -
10:27 Revision 19363517: [TASK] Set TYPO3 version to 13.0.2-dev
- Change-Id: I098521a44a34a15787fb547f760e508be96dc63a
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/829... -
- Change-Id: I706b9d7328f06eff3e7f7fb86ae3a3138615bfd4
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/829... -
- Change-Id: I6aa8b241cbb0e433928b252a613fb4ecc5f0e7bb
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/829... -
- Change-Id: I020a5c47684aa4e9cc375a0ab2753f891d79f55b
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/829... -
- Change-Id: Ibd1ea27ced45de785a6a417758b33a0461a97d97
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/829... -
- Change-Id: I38cbdb269558b2e823a16ba7b8f4abb3895466e8
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/829... -
- Write access to table `sys_file` is denied per default, unless data
is being imported. In addition, write access to r... - 09:08 Revision 5c5a0953: [SECURITY] Prevent arbitrary access to privileged resources via t3://
- Resolves: #93571
Releases: main, 13.0, 12.4, 11.5
Change-Id: I9622bfa47ef9637cecaff4a790f742445f598682
Security-Bulle... - 09:08 Revision e297e235: [SECURITY] Do not disclose encryptionKey via InstallTool
- The encryptionKey is a secret that must never be sent within any
request, therefore it is now dropped from the editin... -
- Backend form fields of TCA `type=password` should never expose
the persisted value - especially, in case the value is... - 09:08 Revision 07f7ceca: [SECURITY] Prevent RCE via install tool settings
- Resolves: #102799
Releases: main, 13.0, 12.4, 11.5
Change-Id: I673b6fbac853b0a977a5e5833a683c6952a55458
Security-Bull... -
- The File Abstraction Layer Local Driver did not verify whether
a given absolute file path is allowed, and made it pos... -
- Write access to table `sys_file` is denied per default, unless data
is being imported. In addition, write access to r... - 09:07 Revision ae0dfc4c: [SECURITY] Prevent arbitrary access to privileged resources via t3://
- Resolves: #93571
Releases: main, 13.0, 12.4, 11.5
Change-Id: I9622bfa47ef9637cecaff4a790f742445f598682
Security-Bulle... - 09:07 Revision 14d10135: [SECURITY] Do not disclose encryptionKey via InstallTool
- The encryptionKey is a secret that must never be sent within any
request, therefore it is now dropped from the editin... -
- Backend form fields of TCA `type=password` should never expose
the persisted value - especially, in case the value is... - 09:06 Revision 47e897f8: [SECURITY] Prevent RCE via install tool settings
- Resolves: #102799
Releases: main, 13.0, 12.4, 11.5
Change-Id: I673b6fbac853b0a977a5e5833a683c6952a55458
Security-Bull... -
- The File Abstraction Layer Local Driver did not verify whether
a given absolute file path is allowed, and made it pos... -
- Write access to table `sys_file` is denied per default, unless data
is being imported. In addition, write access to r... - 09:06 Revision 33f4d279: [SECURITY] Prevent arbitrary access to privileged resources via t3://
- Resolves: #93571
Releases: main, 13.0, 12.4, 11.5
Change-Id: I9622bfa47ef9637cecaff4a790f742445f598682
Security-Bulle... - 09:06 Revision df486372: [SECURITY] Do not disclose encryptionKey via InstallTool
- The encryptionKey is a secret that must never be sent within any
request, therefore it is now dropped from the editin... -
- Backend form fields of TCA `type=password` should never expose
the persisted value - especially, in case the value is... - 09:05 Revision 6cc11761: [SECURITY] Prevent RCE via install tool settings
- Resolves: #102799
Releases: main, 13.0, 12.4, 11.5
Change-Id: I673b6fbac853b0a977a5e5833a683c6952a55458
Security-Bull... -
- The File Abstraction Layer Local Driver did not verify whether
a given absolute file path is allowed, and made it pos... -
- Write access to table `sys_file` is denied per default, unless data
is being imported. In addition, write access to r... - 09:05 Revision 2de87ff1: [SECURITY] Prevent arbitrary access to privileged resources via t3://
- Resolves: #93571
Releases: main, 13.0, 12.4, 11.5
Change-Id: I9622bfa47ef9637cecaff4a790f742445f598682
Security-Bulle... - 09:04 Revision fa12667c: [SECURITY] Do not disclose encryptionKey via InstallTool
- The encryptionKey is a secret that must never be sent within any
request, therefore it is now dropped from the editin... -
- Backend form fields of TCA `type=password` should never expose
the persisted value - especially, in case the value is... - 09:04 Revision 84e07e35: [SECURITY] Prevent RCE via install tool settings
- Resolves: #102799
Releases: main, 13.0, 12.4, 11.5
Change-Id: I673b6fbac853b0a977a5e5833a683c6952a55458
Security-Bull... -
- The File Abstraction Layer Local Driver did not verify whether
a given absolute file path is allowed, and made it pos... -
- The style guide should aid in testing and constructing backend components.
In this change, we're removing the mandato... - 07:41 Revision e72b7c6c: [BUGFIX] Avoid autocompletion in TCA type password
- The autocomplete="off" parameter is ignored by current browsers,
autocomplete="new-password" is to be used for disabl... - 07:40 Revision fd81d1bf: [BUGFIX] Avoid autocompletion in TCA type password
- The autocomplete="off" parameter is ignored by current browsers,
autocomplete="new-password" is to be used for disabl... -
- A new PHPStan version has been releases,
which is pulled in automatically in the
composerInstallMax nightly test.
Th... -
- A new PHPStan version has been released,
which is pulled in automatically in the
composerInstallMax nightly test.
Th... -
- A new PHPStan version has been released,
which is pulled in automatically in the
composerInstallMax nightly test.
Th...
2024-02-12
-
- Executed command:
composer update composer/composer
see https://github.com/advisories/GHSA-7c6p-848j-wh5h
Resolves:... -
- Executed command:
composer update composer/composer
see https://github.com/advisories/GHSA-7c6p-848j-wh5h
Resolves:... -
- Executed command:
composer update composer/composer
see https://github.com/advisories/GHSA-7c6p-848j-wh5h
Resolves:... -
- Executed command:
composer update composer/composer
see https://github.com/advisories/GHSA-7c6p-848j-wh5h
Resolves:... -
- This fixes several bugs in FileList:
1. Properly initializing the `searchTerm` ensures
it is kept while sorting.
... -
- This fixes several bugs in FileList:
1. Properly initializing the `searchTerm` ensures
it is kept while sorting.
... -
08:44 Revision a97cc736: [DOCS] Document how to replace a linktype
- Since the linktypes are automatically registered in Linkvalidator,
it is no longer quite as easy to replace the "exte... -
- Since the linktypes are automatically registered in Linkvalidator,
it is no longer quite as easy to replace the "exte...
2024-02-11
-
- The query for fetching extension versions is extended to
also find "outdated" extension versions (review_state = -2).... -
- The query for fetching extension versions is extended to
also find "outdated" extension versions (review_state = -2).... -
- The query for fetching extension versions is extended to
also find "outdated" extension versions (review_state = -2)....
2024-02-10
-
- The language labels for `noPluginSelected` and `edit` in
StandardContentPreviewRenderer can not be resolved, because ... -
- The language labels for `noPluginSelected` and `edit` in
StandardContentPreviewRenderer can not be resolved, because ... -
- Resolves: #103097
Releases: 12.4, 11.5
Change-Id: I9280a8489cd0b301a1d9c66efc8428bad206cb8c
Reviewed-on: https://revi... -
- Resolves: #103097
Releases: 12.4, 11.5
Change-Id: I9280a8489cd0b301a1d9c66efc8428bad206cb8c
Reviewed-on: https://revi... -
- New core-testing-* images have been build and published in
the TYPO3 testing-infrastructure repository and pulled to
... -
- New core-testing-* images have been build and published in
the TYPO3 testing-infrastructure repository and pulled to
... -
- New core-testing-* images have been build and published in
the TYPO3 testing-infrastructure repository and pulled to
... -
- New core-testing-* images have been build and published in
the TYPO3 testing-infrastructure repository and pulled to
...
2024-02-09
- 22:19 Revision fe1cdae9: [BUGFIX] Mitigate a TypeError in `StandardContentPreviewRenderer`
- An editor can trigger a TypeError exception leading to a 503 error
message `trim() expects parameter 1 to be string, ... - 22:19 Revision 09a8aa23: [BUGFIX] Mitigate a TypeError in `StandardContentPreviewRenderer`
- An editor can trigger a TypeError exception leading to a 503 error
message `trim() expects parameter 1 to be string, ... - 22:19 Revision fda71f80: [BUGFIX] Mitigate a TypeError in `StandardContentPreviewRenderer`
- An editor can trigger a TypeError exception leading to a 503 error
message `trim() expects parameter 1 to be string, ... -
- The "Export" button in the list module, used to
trigger exporting a table does now also respect
the `options.impexp.e... -
- The "Export" button in the list module, used to
trigger exporting a table does now also respect
the `options.impexp.e... -
- Resolves: #103094
Releases: main
Change-Id: Ib755aacd6f3e9a8149691957c08151b36144325b
Reviewed-on: https://review.typ... -
- The ExtendedFileUtility component provides the file
name as argument for the `fileNotDeletedHasReferences`
label. Thi... -
- The ExtendedFileUtility component provides the file
name as argument for the `fileNotDeletedHasReferences`
label. Thi... - 14:07 Revision 8a9e926d: [BUGFIX] Ensure database port as int in setup command
- Releases: main, 13.0
Resolves: #102994
Related: #102959
Change-Id: I9fbb13d333cf9a773d5cfa3742d693595f694aec
Reviewed... -
- Lit elements need to get created in the correct browser scope
(i.e. frame) to get rendered in Firefox, which is a hug... -
- Resolves: #103089
Releases: main
Change-Id: I87cfaf2baeafb290930cb6142e80ad490fb1a05c
Reviewed-on: https://review.typ... -
- The identifier in the `AsEventListener` PHP attribute uses a space.
Allthough this technically works, we do not use s... -
- `argon2id` is available since PHP 7.3. Since this version requirement
is fulfilled for quite some time already, it's ... - 11:29 Revision 1487caf2: [TASK] Replace former extension packages using self.version
- The so called "death star" range for replacements has to be
used with caution [1] as it replaces all versions of the
... - 11:29 Revision 484796b6: [TASK] Replace former extension packages using self.version
- The so called "death star" range for replacements has to be
used with caution [1] as it replaces all versions of the
... - 11:29 Revision fce8221d: [TASK] Replace former extension packages using self.version
- The so called "death star" range for replacements has to be
used with caution [1] as it replaces all versions of the
... - 11:29 Revision 3e497b76: [TASK] Replace former extension packages using self.version
- The so called "death star" range for replacements has to be
used with caution [1] as it replaces all versions of the
... -
- The lower part of the node name was inadvertently truncated.
This patch ensures that the text is no longer cut off.
... -
- In some cases it was missed to enable modal actions again after their
execution in the Install Tool. This patch adds ... -
- In some cases it was missed to enable modal actions again after their
execution in the Install Tool. This patch adds ... -
- With the move to native drag and drop in the tree component #103043,
d3js became obsolete and is now removed.
Resolv... -
- Executed commands:
npm install --save sortablejs@^1.15.2
npm run build
Resolves: #103064
Releases: main, 12... -
- Executed commands:
npm install --save sortablejs@^1.15.2
npm run build
Resolves: #103064
Releases: main, 12... -
- Executed commands:
npm install --save alwan@^2.0.2
npm run build
Resolves: #103038
Releases: main
Change-Id... -
- This change ensures that `?id=` only
validates against an integer-interpreted
value, disallowing `?id=nonsense23` whi... -
- This change ensures that `?id=` only
validates against an integer-interpreted
value, disallowing `?id=nonsense23` whi...
2024-02-08
-
- The configured browser capabilities (`chromeOptions`) are passed by
`codeception/module-webdriver` to `php-webdriver`... -
- The configured browser capabilities (`chromeOptions`) are passed by
`codeception/module-webdriver` to `php-webdriver`... -
- When copy a file corresponding metadata
are now also copied, preserving existing
properties like "file" or "uid".
Re...
2024-02-07
- 16:22 Revision bd4f2f48: [BUGFIX] Undefined array index for TCA without ctrl
- A new test case is added to cover the case when a TCA definition exists
without `ctrl`. The test case has been added ... - 16:22 Revision bf7bb906: [BUGFIX] Undefined array index for TCA without ctrl
- A new test case is added to cover the case when a TCA definition exists
without `ctrl`. The test case has been added ... - 16:21 Revision 86f63757: [BUGFIX] Undefined array index for TCA without ctrl
- A new test case is added to cover the case when a TCA definition exists
without `ctrl`. The test case has been added ... -
- The SVG based renderer for the page, file and select trees has been
replaced by a HTML based one. It uses reactive re... -
- This change adds a composer command dispatcher to
`Build/Scripts/runTests.sh` to allow the execution
of any composer ... -
- This change adds a composer command dispatcher to
`Build/Scripts/runTests.sh` to allow the execution
of any composer ... -
- This change adds a composer command dispatcher to
`Build/Scripts/runTests.sh` to allow the execution
of any composer ... -
- The COMPOSER_ROOT_VERSION environment variable in
`Build/Scripts/runTests.sh` has not been updated.
This change corr... -
- Doctrine DBAL released the stable version for
the next major version, v4.0.0. [1]
This change upgrades to the stable... -
- Change-Id: I64a8cd93fb691c59d0eee3982ab3d9fb2bc9975b
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/828... -
- Releases: 13.0
Change-Id: If27d16bd41456ea8b542399cfece21b56c0d9cbf
Reviewed-on: https://review.typo3.org/c/Packages/... -
- During branching for TYPO3 v13 the GitLab workflow
cache keys has been adjusted. However, the generic
cache key has b... -
- Executed commands:
npm install --save-dev sass@^1.17.0
npm run build
Resolves: #103065
Releases: main, 12.4... -
- Executed commands:
npm install --save-dev sass@^1.17.0
npm run build
Resolves: #103065
Releases: main, 12.4...
2024-02-06
-
- This finediff minor raise alignes supported
PHP versions >=8.2 with core, symfony, phpunit v11.
Releases: main
Resol... -
11:52 Revision dfa3a35d: [BUGFIX] Reverse rootline for PageLayoutResolver calls
- There have been quite a lot of patches around the pagelayout
condition, which was introduced in early TYPO3 v11. It w... -
- There have been quite a lot of patches around the pagelayout
condition, which was introduced in early TYPO3 v11. It w... -
- Doctrine DBAL 3.8.x comes with further deprecations, but
also with the new `QueryBuilder::reset*()` methods as a
miti... -
- Resolves: #103055
Releases: main, 12.4
Change-Id: If1c9f1dee8952faba5ed65bf54770a51aefdd37d
Reviewed-on: https://revi... -
- Resolves: #103055
Releases: main, 12.4
Change-Id: If1c9f1dee8952faba5ed65bf54770a51aefdd37d
Reviewed-on: https://revi...
2024-02-05
-
- The version was outdated and is removed as it
is not needed, since there is no intent to
publish the build-folder as-... -
- The version was outdated and is removed as it
is not needed, since there is no intent to
publish the build-folder as-... -
- To give extensions the ability to change the expected
database schema, adding or changing columns of existing
TYPO3 C... -
- With #100759, f:translate has been changed to use the
extbase LocalizationUtility in all scopes. This
triggers the Co... -
- The element browsers, such as file browser,
folder browser or the create folder browser
are rendering the FileList in... -
- The element browsers, such as file browser,
folder browser or the create folder browser
are rendering the FileList in... -
- This change adds further MySQL Server versions to the
`Build/Scripts/runTests.sh` to allow executing local
functional... -
- This change adds further MySQL Server versions to the
`Build/Scripts/runTests.sh` to allow executing local
functional... -
- This change adds further MySQL Server versions to the
`Build/Scripts/runTests.sh` to allow executing local
functional... -
07:20 Revision 871f0acb: [TASK] Increase test coverage of ImageViewHelper
- This patch should cover all of the arguments and variants both
<f:image /> and <f:uri.image /> offer to generate imag...
2024-02-04
-
- Executed commands:
npm install --save \
@lit/reactive-element@^2.0.4 \
lit@^3.1.2 \
lit-... -
- Executed commands:
npm install --save \
@lit/reactive-element@^2.0.4 \
lit@^3.1.2 \
lit-...
2024-02-03
-
- Doctrine DBAL released the stable version for
the next major version, v4.0.0. [1]
This change upgrades to the stable... -
- This change now checks for a records' sys_language_uid field
before doing overlays, and is only doing overlays when
t... -
- TYPO3 uses a composer package [1] to import
locales along with translations and a custom
script has been added to cre... -
- TYPO3 uses a composer package [1] to import
locales along with translations and a custom
script has been added to cre... -
- The `Symfony\Component\Translation\Dumper\XliffFileDumper` is extended
to add processing workflowes needed to update ... -
- The `Symfony\Component\Translation\Dumper\XliffFileDumper` is extended
to add processing workflowes needed to update ... - 07:39 Revision 9f8400cd: [BUGFIX] Add fallback for language config
- Currently, having a inlineLanguageLabelFiles
defined without passing any additional config
leads to an undefined key ...
2024-02-02
-
- Executed commands:
npm install --save \
@codemirror/autocomplete@^6.12.0 \
@codemirror/lang-html... -
- Executed commands:
npm install --save \
@codemirror/autocomplete@^6.12.0 \
@codemirror/lang-html... -
16:22 Revision 9a5b9ec4: [DOCS] Remove outdated number from logicalAnd() and logicalOr() PHPdoc
- The methods `logicalAnd()` and `logicalOr()` allow any number of
constraints as parameters. The outdated PHPdoc comme... -
- The methods `logicalAnd()` and `logicalOr()` allow any number of
constraints as parameters. The outdated PHPdoc comme... -
- The `Build/Scripts/runTests.sh` supports `podman` and `docker`
as container cli binary since quite a while now, albei... -
- The `Build/Scripts/runTests.sh` supports `podman` and `docker`
as container cli binary since quite a while now, albei... -
- The `Build/Scripts/runTests.sh` supports `podman` and `docker`
as container cli binary since quite a while now, albei...
2024-02-01
-
- There is no valid reason to force a
minimum amount of 5 records to be
displayed in the list view.
Therefore, the ran... -
- There is no valid reason to force a
minimum amount of 5 records to be
displayed in the list view.
Therefore, the ran... -
- Used command(s):
> composer req --dev \
"typo3/testing-framework":"^8.0.9"
[1] https://github.com/TYPO3/testing... -
- In case modules do not provide a "shortDescription" the module card is
now rendered without title in the "About" modu... -
- In case modules do not provide a "shortDescription" the module card is
now rendered without title in the "About" modu...
2024-01-31
-
11:13 Revision 2e0fd8c0: [TASK] Remove unused resolveResourcePaths() in EXT:form
- Resolves: #102999
Related: #98545
Releases: main
Change-Id: I0d8b4f6d05cf77dee49265912029b8257e7b92e7
Reviewed-on: ht... -
- The first argument after processing defined options has been
stored into the variable `TEST_FILE`. This value was pas... -
- The first argument after processing defined options has been
stored into the variable `TEST_FILE`. This value was pas... -
- The first argument after processing defined options has been
stored into the variable `TEST_FILE`. This value was pas... - 08:50 Revision 4e256206: [TASK] Revert "[TASK] Add title and aria-label to clear input button"
- This reverts commit dba95382f4b2306080ace62a75a68a1e7b44fb63.
Reason for revert:
* The close button has tabIndex -1... -
07:41 Revision dba95382: [TASK] Add title and aria-label to clear input button
- Add a title and aria-label to the clear input button added
on all input fields with the class t3js-clearable.
Resolv... -
- To prevent PHP from encoding the numeric keys
of the available languages as string, which would
lead to JavaScript er... -
- To prevent PHP from encoding the numeric keys
of the available languages as string, which would
lead to JavaScript er... -
- The element browser string (bparams), forwarding
different information between states is using the
pipe ("|") charact... -
- The element browser string (bparams), forwarding
different information between states is using the
pipe ("|") charact... -
- When fetching a lot of records from database the memory is nearly
doubled in the fetchAll function. It seems php keep... -
- When fetching a lot of records from database the memory is nearly
doubled in the fetchAll function. It seems php keep... -
- When fetching a lot of records from database the memory is nearly
doubled in the fetchAll function. It seems php keep... -
- The index file in its current state does not has any value to the user.
Mostly numbers are displayed as reference.
R... -
- The index file in its current state does not has any value to the user.
Mostly numbers are displayed as reference.
R...
Also available in: Atom