Commit Graph

3592 Commits

Author SHA1 Message Date
Uncle Cheese 6565aa87e0 Remove .tx folder 2017-04-24 14:49:48 +12:00
Hamish Friedlander 581cd3179b Merge pull request #1177 from tractorcow/pulls/3.0/fix-page-create
BUG Fix SiteTree / SiteConfig permissions (3.0 backport version)
2015-03-19 16:36:31 +13:00
Damian Mooyman 79ad7c38b7 Ensure SiteConfig::canView 2015-03-19 16:17:54 +13:00
Damian Mooyman 64955e57d1 BUG Fix SiteTree / SiteConfig permissions 2015-03-19 13:38:48 +13:00
Hamish Friedlander a495385ee5 Merge pull request #1058 from ss23/infinite_loop_test
Fix #776 - Change how can_edit works
2014-07-24 11:16:32 +12:00
Stephen Shkardoon d5634147b0 Fix #776 - Change how can_edit works
Will now check the Stage recursivly, then Live.
This is still in need of refactoring, but fixes the immediate issue.
2014-07-23 11:29:21 +12:00
Will Rossiter 405c3d314f Merge pull request #1009 from tractorcow/pulls/3.0-travis
Update travis configuration to use composer phpunit
2014-07-02 09:31:05 +12:00
Damian Mooyman a0c0e2d922 Merge pull request #1033 from stojg/broken-links-dep-pages-3.0
BUG: Broken links in the 'Dependent pages' tab
2014-06-16 08:20:31 +12:00
Stig Lindqvist 0f74d8c004 BUG: Broken links in the 'Dependent pages' tab
The double quotes in links href is 'escaped' even though the surrounding quotes are single quotes
2014-06-13 17:49:33 +12:00
Damian Mooyman 24fec3aeb7 Update travis configuration to use composer phpunit 2014-05-05 17:17:33 +12:00
Damian Mooyman 28043317bb Merge pull request #978 from ss23/SS2014005-3-0
FIX Do now allow arbitary class creation in CMS
2014-03-27 12:25:18 +13:00
Stephen Shkardoon bf9b22fd43 FIX Do now allow arbitary class creation in CMS 2014-03-27 11:37:45 +13:00
Damian Mooyman 43d308cd1b Merge pull request #976 from ss23/SS2014004-3-0
FIX Prevent SQLi when no URL filters are applied
2014-03-27 11:23:20 +13:00
Stephen Shkardoon 114df8a3a5 FIX Prevent SQLi when no URL filters are applied 2014-03-19 19:09:58 +13:00
Ingo Schommer b6194c304d Default CMSMain to Versioned::reading_stage("Stage")
Regression caused by https://github.com/silverstripe/silverstripe-framework/pull/2585
2013-11-20 14:26:48 +13:00
Ingo Schommer 92e0c410b8 Fixed report link escaping 2013-10-02 12:19:23 +02:00
Ingo Schommer daf92e6ce0 FIX ReportAdmin report links regression
Regression from 79996a76fe,
escaped quotes are no longer necessary because the string
doesn't get eval'ed.
2013-10-01 11:17:36 +02:00
Ingo Schommer 30cf08b27e CMSMain assertion fail due to escaping
Validation messages are now HTML entity escaped when output to the user,
the assertion needs to reflect that
2013-09-27 19:38:12 +02:00
Ingo Schommer 0b073d2d0f Merge tag '3.0.6' into 3.0 2013-09-27 00:20:35 +02:00
Ingo Schommer fbb9a4449d Removed stale salad tests, got behat now 2013-09-26 10:53:19 +02:00
Simon Welsh cec5aa5ff1 Merge pull request #854 from chillu/pulls/escape-3.0
Escaping 3.0
2013-09-24 12:40:40 -07:00
Ingo Schommer 86339a551d Clearer escaping in CMSMain
No direct security issue, but makes intent clearer
2013-09-24 21:37:26 +02:00
Ingo Schommer e170f4c21b FIX Escaping in "dependent pages" (SS-2013-009) 2013-09-24 21:37:26 +02:00
Ingo Schommer 79996a76fe Clearer escaping in ReportAdmin
No direct security issue since report titles can't be set by the user
2013-09-24 21:37:26 +02:00
Ingo Schommer 29e502a63a Hints for SiteTree.TreeTitle casting
Relates to SS-2013-009
2013-09-24 21:37:26 +02:00
Ingo Schommer 65939e1ede Tagged 3.0.6-rc2 2013-09-12 16:48:20 +02:00
Ingo Schommer a2342ce1ff Updated translations 2013-09-12 16:37:43 +02:00
Ingo Schommer 2b20a02735 Merge pull request #840 from halkyon/compositefield_assetadmin_warning
AssetAdmin: PHP warning trying to add empty values into CompositeField
2013-08-28 06:44:09 -07:00
Sean Harvey 27749fdb7a AssetAdmin: PHP warning trying to add empty values into CompositeField
If the logged in user doesn't have permission to add a Folder record,
AssetAdmin::getEditForm() tries to enter an empty value into the
children of a ComposteField. This breaks SSViewer with a
call_user_func invalid args PHP warning.

Only include these buttons when they're available to the user.
2013-08-27 14:30:39 +12:00
Sam Minnée d7d0cb45ae Merge pull request #824 from hafriedlander/fix/archivedate
FIX ArchiveDate enforcement
2013-08-08 17:38:53 -07:00
Sam Minnée e922717b42 Merge pull request #825 from simonwelsh/canview
FIX Check for stage and drafts in SiteTree::canView()
2013-08-08 17:38:27 -07:00
Simon Welsh b1664f86a4 FIX Check for stage and drafts in SiteTree::canView() 2013-08-09 10:45:09 +12:00
Hamish Friedlander 2fae9280e5 FIX ArchiveDate enforcement 2013-08-08 17:17:35 +12:00
Ingo Schommer d01728675d Merge pull request #820 from chillu/pulls/transifex-3.0
Translations: Switch to Transifex format (3.0)
2013-08-07 08:09:11 -07:00
Ingo Schommer 3f118ef08f Translations: Switch to Transifex format
- Based on new (last) translation download from getlocalization.com
- Removed untranslated strings. Getlocalization started including those at some point
which is highly annoying, unnecessary and breaks the new transfix system,
since it'll mark all of the english strings as actual translations
- Avoid dots in entities. It confuses the Transifex YML parser
- Removed some locales unknown to Transifex which didn't have any translations anyway
- Removed "lolcat" locale, uses custom notation (en@lolcal)
  which SilverStripe's i18n system can't handle
  (needs mapping from SS naming to Zend naming)
- Renamed "Te Reo/Maori" locale from "mi_NZ" to "mi" (Transifex/CLDR notation)
- Namespaced all entities used in templates (deprecated usage)
- Converted dots to underscores where template filenames are used for namespaces,
since Transifex YML parsing handles them as separate YML keys otherwise
- Removed whitespace in entity names, SilverStripe i18n can't handle it
2013-08-04 12:28:07 +02:00
Simon Welsh 3a3e8f2faa Adds LoginForm as an allowed action
Behaves as a form method defined on ContentController
2013-07-14 17:21:59 +12:00
Simon Welsh 094039dbc8 Remove PHP 5.5 from allowed failures 2013-07-14 17:21:18 +12:00
Ingo Schommer e194b962db PHP 5.5 CI, don't allow failures for sqlite3 and postgres 2013-07-04 23:01:09 +02:00
Mike Parkhill c7f14129ea FIX #651 Broken redirection after creating new folder in assets 2013-06-13 14:58:09 +02:00
Ingo Schommer d2105ef7a6 More verbose fixture step definitions
Too many clashes with other steps otherwise,
e.g. with 'And the preview contains "You can fill"'.
Also removed some duplicated code no longer necessary
because we use inheritance rather than composition
2013-06-05 14:25:29 +02:00
Ingo Schommer 8bd1e4373d Behat: Fixed spelling in test 2013-06-05 13:37:19 +02:00
Ingo Schommer 47d7a19a23 Behat: Replace @database-defaults with explicit fixtures 2013-06-05 13:30:15 +02:00
Ingo Schommer e7cc08f6ae Behat: Auto-publishing SiteTree fixtures, RedirectorPage fixtures
They can be unpublished through an explicit step.
Extending from base FeatureContext in order to easily
share the same FixtureFactory but still add new blueprints to it.
2013-06-05 13:29:48 +02:00
Ingo Schommer 46d62efd81 Updated translations 2013-06-03 00:14:09 +02:00
Will Rossiter 2809b009a1 Merge pull request #186 from silverstripe-rebelalliance/api/translation_priority
Add config fragment for new i18n ordering system
2013-05-25 00:59:08 -07:00
Ingo Schommer f64488b0d8 Merge pull request #751 from madmatt/fix_for_cms_issue_750
Fix Issue #750
2013-05-22 12:21:09 -07:00
Matt Peel 3cc6485c14 Add default params to _t() calls to ensure if a translation isn't found, it falls back to a useful English string 2013-05-21 14:57:29 +12:00
Ingo Schommer 041a8bd5a7 Update github path 2013-05-17 13:30:33 +02:00
Ingo Schommer d7c937710a Merge remote-tracking branch 'origin/2.4' into 3.0
Conflicts:
	.travis.yml
	composer.json
2013-05-17 00:38:26 +02:00
Ingo Schommer f8cfb5afd6 composer/installers dep workaround
Moved to end of requirements, to work around a bug in composer - see https://github.com/composer/composer/issues/1147. This caused the dependencies to be installed in the wrong folder because the custom 'silverstripe-module' instructions hadn't been loaded at the time the core modules were installed via composer.
2013-04-30 19:09:16 +03:00