tonyair/silverstripe-framework
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-framework synced 2024-10-22 14:05:37 +02:00
Code Issues Projects Releases Wiki Activity
16,884 Commits 31 Branches 527 Tags 162 MiB
074b28cf93
Commit Graph

16884 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Maxime Rainville
074b28cf93 [CVE-2019-19326] Add changelog for CVE-2019-19326 2020-07-14 13:26:46 +12:00
Maxime Rainville
98926e4e6c [CVE-2019-19326] Stop honouring X-HTTP-Method-Override header, X-Original-Url header and _method POST variable. Add SS_HTTPRequest::setHttpMethod(). 2020-07-14 13:25:55 +12:00
Maxime Rainville
d3b23e7024 [CVE-2020-9311] Escape First Name when displaying re-login screen 2020-07-14 13:24:12 +12:00
Serge Latyntcev
8f9bb9d03a Merge tag '3.7.4' into 3.7 
Release 3.7.4
 2020-06-30 11:14:16 +12:00
Robbie Averill
b1adf2190b
Merge pull request #9535 from td204/3.7 
array_key_exists() on objects is deprecated
 2020-06-03 10:36:11 -07:00
terry
b175798fab array_key_exists() on objects is deprecated 2020-06-03 15:24:30 +02:00
Loz Calver
5fbfd4f84c
Merge pull request #9449 from dhensby/pulls/php74-support 
Fix deprecated php syntax
 2020-04-01 14:24:15 +01:00
Dan Hensby
6c8dc0fd99
Fix deprecated php syntax 2020-04-01 14:03:03 +01:00
Robbie Averill
3f3f6854fe
Merge pull request #9437 from indygriffiths/patch-1 
DOCS Fix formatting and syntax of YAML configuration page
 2020-03-19 19:25:25 -07:00
Indy Griffiths
fdefa50a19
DOCS Fix formatting and syntax of YAML configuration page 2020-03-20 14:54:17 +13:00
Maxime Rainville
a381c787b8
Merge pull request #9343 from creative-commoners/v3.7.3-is-php7.3-compatible 
DOCS include mention of PHP 7.3 compatibility for v3.7.3+
 2019-12-06 17:52:26 +13:00
brynwhyman
efd68473f8 DOCS include mention of 7.3 compatibility 
Version 3.7.3 is compatible with <=7.3
 2019-12-02 11:44:54 +13:00
Robbie Averill
c61a9e3f26
DOCS Fix "Configure Nginx" page title, was Lighttpd 2019-11-29 10:42:03 -08:00
Aaron Carlino
42ab512306 Fix broken callout tags 2019-11-20 10:45:27 +13:00
Aaron Carlino
54e7223d98 NEW: Docs rebuild for compliance with Gatsby (#9316) 
* Rewrite callout blocks

* Rewrite frontmatter

* Replace missing frontmatter

* Replace note callouts

* Fix icons

* Hide children

* Tidy up code blocks

* Replace legacy code blocks with fenced
 2019-11-20 10:44:53 +13:00
Aaron Carlino
b1dc89ef8a Added 3.7.4 changelog 2019-09-24 16:51:42 +12:00
Serge Latyntcev
e7469dadb0 Merge branch '3.6' into 3.7 2019-09-24 14:26:53 +12:00
Aaron Carlino
a6763298fe
Merge pull request #92 from silverstripe-security/pulls/3.6/cve-2019-12203 
[CVE-2019-12203] Session fixation in "change password" form
 2019-09-24 11:00:22 +12:00
Serge Latyntcev
a86093fee6 [CVE-2019-12203] Session fixation in "change password" form 
A potential account hijacking may happen if an attacker has physical access to
victim's computer to perform session fixation. Also possible if the targeted application contains an XSS vulnerability.
Requires the victim to click the password reset link sent to their email.
If all the above happens, attackers may reset the password before the actual user does that.
 2019-09-24 10:57:40 +12:00
Aaron Carlino
afcd966740
MINOR: Fix travis. Use trusty (#9256) 2019-09-24 10:56:44 +12:00
Serge Latyntcev
014c99a128 Merge branch '3.6' into 3.7 2019-09-23 13:54:16 +12:00
Garion Herman
53f5c3d0e5
Merge pull request #9196 from creative-commoners/pulls/3.7/pass-member-to-access 
FIX Member argument is now passed to LeftAndMain::alternateAccessCheck()
 2019-08-27 14:35:39 +12:00
Robbie Averill
7d901a6d9b FIX Member argument is now passed to LeftAndMain::alternateAccessCheck() 2019-08-27 11:23:02 +12:00
Robbie Averill
8c41dbb8b4
Merge pull request #9110 from open-sausages/pulls/3.7/boldy-into-the-php74-futur-goes-silverstripe-iii 
BUG Require a PHP7.4 compatible fork of phpunit-mock-objects
 2019-07-19 14:38:41 +02:00
Robbie Averill
f72e80689e DOCS Move PHP 7.4 notes to an unreleased 3.7.4 changelog file 2019-07-19 14:13:51 +02:00
Maxime Rainville
329fcfd700 DOC Add a note about our PHP 7.4 fork of phpunit/phpunit-mock-objects 2019-07-15 13:34:08 +12:00
Maxime Rainville
b250e14ace BUG Require PHP7.4 compatible fork of phpunit-mock-objects 2019-07-12 14:45:06 +12:00
Robbie Averill
d8014d3110 DOCS Update PHPdoc on Authenticator::set_default_authenticator() to show param name 2019-07-01 11:58:30 +12:00
Loz Calver
0692e26cc7
Bump Travis memory limit 2019-05-13 10:26:30 +01:00
Loz Calver
49cafeeaf1
Merge pull request #8855 from sminnee/ss3-php74 
NEW: Add PHP 7.4’s daily snapshot to the travis suite (SS 3.7)
 2019-05-13 09:45:18 +01:00
Robbie Averill
e57beefb43
Merge pull request #8920 from tractorcow/pulls/3.7/backport-parsererror-fix 
BUG Back-port silverstripe-admin#769 to 3.7
 2019-04-15 14:38:17 +12:00
Damian Mooyman
ad3c58f2d8
BUG Back-port https://github.com/silverstripe/silverstripe-admin/pull/769 to 3.7, fix parsererror issue 2019-04-15 14:02:40 +12:00
Sam Minnee
0bf03a3e77 NEW: Add PHP 7.4’s daily snapshot to the travis suite. 
Also clean up the PHP 7.3 build.

This will help avoid any inadvertent 7.4 failures; IMO the sooner we
add new releases to the test mix the better.

If this ends up creating intermittent failures outside of our control
I would recommend rolling back entirely rather than adding to
allowed_failures.

The main goal of testing PHP 7.4 on SS3 sites is to let us keep 
upgrading PHP versions regularly until the end of SS3’s life.
 2019-03-13 14:21:21 +13:00
Robbie Averill
e968454465
Merge pull request #8821 from open-sausages/pulls/3.6/restore-dynamic-field-assigment 
BUG Renable the ability to do dynamic assignment with DBField
 2019-02-27 09:52:21 +11:00
Maxime Rainville
bd92969418 FIX Use a function common to MySQL, SQLite and PostgreSQL to test dynamic DBFIeld assigment 2019-02-26 14:20:14 +13:00
Maxime Rainville
adbc560bd7 BUG Address PR feedback. 2019-02-25 15:16:26 +13:00
Maxime Rainville
4ec1a682cf BUG Renable the ability to do dynamic assignment with DBField 2019-02-22 12:09:15 +13:00
Aaron Carlino
5123361b5b Merge branch '3.6' into 3.7 2019-02-20 11:45:46 +13:00
Maxime Rainville
ab5f09a9f3 FIX Updated unit test were targeting Float/Int which don't exist on PHP7 (#8810) 2019-02-20 11:44:45 +13:00
Robbie Averill
9e45ff17df Merge branch '3.6' into 3.7 2019-02-19 08:33:33 +07:00
Aaron Carlino
8c9e8fb5f3 Added 3.6.7 changelog 2019-02-12 22:02:19 +13:00
Aaron Carlino
c44f06cdf1 [SS-2018-021] Patch SQL Injection vulnerability when arrays are assigned to DataObject Fields 2019-02-12 21:58:27 +13:00
Aaron Carlino
bb5701b73d Added 3.7.3 changelog 2019-02-12 21:44:41 +13:00
Aaron Carlino
6bf9542d66 [SS-2018-021] Patch SQL Injection vulnerability when arrays are assigned to DataObject Fields 2019-02-12 21:36:50 +13:00
Guy Marriott
11b87a430c
Merge pull request #8772 from webbuilders-group/block-manifest-of-object 
FIX: Block Manifest of the compatibility class Object and lean on the compatibility auto loader
 2019-02-08 10:47:04 +13:00
UndefinedOffset
8e6e703358 FIX: Block Manifest of the compatibility class Object and lean on model/fieldtypes/compat/autoload.php 2019-01-30 10:25:02 -04:00
Robbie Averill
4182d1b60c Merge branch '3.6' into 3.7 2019-01-29 13:59:56 +02:00
Robbie Averill
6eff32b7ab
Merge pull request #8747 from kinglozzer/defaults-i-got-em-from-my-momma-class 
FIX: Injector may instantiate prototypes as if they're singletons (fixes #8567)
 2019-01-29 13:57:48 +02:00
Loz Calver
746c0679ad FIX: Injector may instantiate prototypes as if they're singletons (fixes #8567) 2019-01-23 11:47:28 +00:00
Robbie Averill
1c18d9505f
Merge pull request #8722 from lerni/fix-Warning]-on-count()-with-PHP->=-7.2 
fix [Warning] on count() with PHP >= 7.2
 2019-01-11 17:59:17 +01:00