2014-02-19 03:40:16 +01:00
|
|
|
# 3.1.3-rc1
|
2014-02-16 23:22:26 +01:00
|
|
|
|
|
|
|
|
## Overview
|
|
|
|
|
|
2014-02-19 03:23:42 +01:00
|
|
|
* Security: Require ADMIN for ?flush=1&isDev=1 ([SS-2014-001](http://www.silverstripe.org/ss-2014-001-require-admin-for-flush1-and-isdev1))
|
|
|
|
|
* Security: XSS in third party library (SWFUpload) ([SS-2014-002](http://www.silverstripe.org/ss-2014-002-xss-in-third-party-library-swfupload/))
|
|
|
|
|
* Security: SiteTree.ExtraMeta allows JavaScript for malicious CMS authors ([SS-2014-003](http://www.silverstripe.org/ss-2014-003-extrameta-allows-javascript-for-malicious-cms-authors-/))
|
|
|
|
|
* Better loading performance when using multiple `UploadField` instances
|
|
|
|
|
* Option for `force_js_to_bottom` on `Requirements` class (ignoring inline `<script>` tags)
|
|
|
|
|
* Added `ListDecorator->filterByCallback()` for more sophisticated filtering
|
|
|
|
|
* New `DataList` filters: `LessThanOrEqualFilter` and `GreaterThanOrEqualFilter`
|
|
|
|
|
* "Cancel" button on "Add Page" form
|
|
|
|
|
* Better code hinting on magic properties (for IDE autocompletion)
|
|
|
|
|
* Increased Behat test coverage (editing HTML content, managing page permissions)
|
|
|
|
|
* Support for PHPUnit 3.8
|
2014-02-16 23:22:26 +01:00
|
|
|
|
|
|
|
|
## Upgrading
|
|
|
|
|
|
2014-02-19 03:23:42 +01:00
|
|
|
### SiteTree.ExtraMeta allows JavaScript for malicious CMS authors
|
2014-02-16 23:22:26 +01:00
|
|
|
|
2014-02-19 03:23:42 +01:00
|
|
|
If you have previously used the `SiteTree.ExtraMeta` field for `<head>` markup
|
|
|
|
|
other than its intended use case (`<meta>` and `<link>`), please consult
|
2014-02-19 03:40:16 +01:00
|
|
|
[SS-2014-003](http://www.silverstripe.org/ss-2014-003-extrameta-allows-javascript-for-malicious-cms-authors-/).
|
|
|
|
|
|
|
|
|
|
## Changelog
|
|
|
|
|
|
|
|
|
|
* [framework](https://github.com/silverstripe/silverstripe-framework/releases/tag/3.1.3-rc1)
|
|
|
|
|
* [cms](https://github.com/silverstripe/silverstripe-framework/releases/tag/3.1.3-rc1)
|
|
|
|
|
* [installer](https://github.com/silverstripe/silverstripe-framework/releases/tag/3.1.3-rc1)
|
