tonyair
/
silverstripe-framework
mirror of https://github.com/silverstripe/silverstripe-framework
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
23,205 Commits 29 Branches 513 Tags 147 MiB
Commit Graph

23205 Commits

Author SHA1 Message Date
Steve Boyd b5abc38455 CVE-2021-41559 Disable xml entities 2022-06-28 17:04:34 +12:00
Steve Boyd 991aedf017 [CVE-2022-25238] Sanitise htmlfields serverside by default 2022-06-28 17:03:05 +12:00
Guy Sartorelli d2c58f3bbc [CVE-2022-28803] Block XSS in links and iframes. 2022-06-28 17:01:53 +12:00
Steve Boyd 73325f2186 MNT Added 4.11.0 changelog 2022-06-28 16:53:50 +12:00
Guy Sartorelli 8d698067a6
Merge pull request #10371 from bummzack/patch-2 
fix: Syntax for declaring enums in YML
 2022-06-28 16:36:46 +12:00
Guy Sartorelli 4d18d36625
DOC Remove pre-release warnings from GraphQL docs. (#10354) 2022-06-28 16:27:06 +12:00
Roman Schmid fbee03562b
fix: Syntax for declaring enums in YML 
Similar issue to #10223
 2022-06-27 16:23:26 +02:00
Steve Boyd c80e10f892
FIX PDO transaction in PHP 8, add GitHub Actions CI (#10360) 2022-06-27 15:30:03 +12:00
Sabina Talipova ad581d9673
Merge pull request #10365 from creative-commoners/pulls/4/docs-for-adding-backtrace-filters 
DOCS Encourage filtering sensitive arguments from logged backtraces.
 2022-06-27 14:18:37 +12:00
Sabina Talipova f63655bd40
Merge pull request #10364 from creative-commoners/pulls/4/update-backtrace-filter-methods 
ENH Update list of filtered backtrace methods
 2022-06-27 14:18:23 +12:00
Guy Sartorelli f276fccb78
DOC Review 4.11.0 changelog notes (#10356) 
* DOCS Add missing content from beta/rc changelogs

* DOCS Add documentation for report count limiting.

This was added to the report module README but really belongs here.

* DOCS Add information about some new features.

* DOCS Add and standardise anchor links.

* DOCS Various updates to wording and formatting in 4.11.0 changelog

* DOCS Move php changelog notes

This is consistent with their placement in the 4.10.0 changelogs.

* DOCS Requested PR changes

* DOCSUse relative URLs for links to docs from changelog.

* DOCS Use code blocks for terminal commands

* DOCS requested PR changes

* DOCS Don't need to inline recipe to downgrade graphql.

* DOCS Move php parts back where they were.

* DOCS Fix typos in changelog.
 2022-06-27 11:37:34 +12:00
Steve Boyd b7d0e9dc28 DOC Update github label definitions 2022-06-27 11:15:10 +12:00
Guy Sartorelli 6a8915b316 DOCS Encourage filtering sensitive arguments from logged backtraces. 2022-06-23 16:10:30 +12:00
Guy Sartorelli 86cf404944 MNT Add test for backtrace class checking method. 2022-06-23 15:54:36 +12:00
Guy Sartorelli 74e5a94b32 ENH Update list of methods to have filtered args in backtrace. 2022-06-23 15:18:28 +12:00
Guy Sartorelli d448622ff4 ENH Allow subclasses to be defined for backtrace filtered functions. 2022-06-23 15:17:33 +12:00
Guy Sartorelli 2b0df58176 ENH Minor performance enhancement for backtrace. 
Don't keep processing when we've found a match.
 2022-06-23 15:16:46 +12:00
Guy Sartorelli 268a66418b ENH Move backtrace ignored functions into yml config. 
Each module that adds its own methods will do it via yml. This keeps
framework consistent with the others.
 2022-06-23 14:24:23 +12:00
Guy Sartorelli 7f7feb8604 ENH Refactor Backtrace to be a bit more readable. 2022-06-23 13:57:08 +12:00
Guy Sartorelli 139fa07bcb
DOCS Remove backticks from gatsby metadata in docs. (#10357) 2022-06-15 13:33:11 +12:00
Loz Calver be19fa7f3d
Merge pull request #10352 from oddnoc/phan-help 
Correct declaration of variadic $args as array
 2022-06-13 09:18:14 +01:00
Loz Calver d2df0650db
Merge pull request #10355 from creative-commoners/pulls/4/group-title-test 
MNT Add test for programatically adding blank Group title.
 2022-06-13 09:17:06 +01:00
Guy Sartorelli e8194123a6 MNT Add test for programatically adding blank Group title. 2022-06-13 16:32:10 +12:00
Fred Condo f670eb4980 Correct declaration of variadic $args to mixed 
Declaring as array confuses static analyzers, specifically phan, which
throws PhanTypeMismatchArgument for every invocation of
Injectable::create(). Correcting this declaration in the doc block
prevents all those false positives.
 2022-06-09 14:27:42 -07:00
Paweł Suwiński 1c85d151a6
NEW Add factory_method configuration to Injector 
use callable as well as creator
 2022-06-09 13:57:47 +12:00
Maxime Rainville 3799bceff3
Merge pull request #10344 from creative-commoners/pulls/4/public-graphql-dir 
DOCS Update server requirements to account for public/_graphql/
 2022-06-08 22:03:28 +12:00
Maxime Rainville 22d992a22b
DOC Update documentation for GraphQL v4 (#10325) 
* DOC Add upgrade guidance for GraphQL v4

* Move docs around

The existing upgrading docs are for upgrading to v4, whereas the new docs are more about how to handle the new .graphql-generated directory.

* Update graphql documentation

* More updates to doc

Co-authored-by: Guy Sartorelli <guy.sartorelli@silverstripe.com>
 2022-06-08 17:23:48 +12:00
Guy Sartorelli 0bd3fae7e1 DOCS Update server requirements to account for public/_graphql/ 2022-06-08 09:12:03 +12:00
Jonathan Copson 2c30438b01
DOCS Add missing colon to CORS docs example 2022-06-07 14:00:29 +12:00
Guy Sartorelli 40ba78fd63
Merge pull request #10348 from AntonyThorpe/patch-2 
Updated 2_configuring_your_schema.md
 2022-06-05 19:22:21 +12:00
Antony Thorpe ab3375ce26
Updated 2_configuring_your_schema.md 
Fixed tiny inconsistency in `Namespacing by directory name`
 2022-06-05 18:40:24 +12:00
Guy Sartorelli 5a4b35875a
Merge pull request #10346 from AntonyThorpe/patch-1 
Updated 07_nested_definitions.md
 2022-06-04 23:32:14 +12:00
Antony Thorpe 1c88e989e2
Updated 07_nested_definitions.md 
Missing colon
 2022-06-04 21:56:51 +12:00
Guy Sartorelli fa3556746f
Merge pull request #10335 from creative-commoners/pulls/4/samesite-cookies 
ENH Add samesite attribute to cookies.
 2022-06-02 12:49:34 +12:00
Guy Sartorelli 31c974c528 ENH Add samesite attribute to cookies. 
Co-authored-by: pine3ree <pine3ree@gmail.com>
 2022-06-02 12:01:03 +12:00
Maxime Rainville 6c09173647
Merge pull request #10339 from creative-commoners/pulls/4/graphql-generated-docs 
DOCS Correct references to graphql v4 schema build dir
 2022-06-01 21:09:10 +12:00
Guy Sartorelli c8990e6949
Merge pull request #10340 from creative-commoners/pulls/4/rc1-changelog 
DOC Add 4.11.0-rc1 changelog
 2022-05-30 16:45:41 +12:00
Steve Boyd 112284975a DOC Add 4.11.0-rc1 changelog 2022-05-30 16:43:09 +12:00
Christian Bünte d37ddedd90
Fix i18nTextCollector produces corrupt output / namespaces when running under PHP8.0 (#10228) 
* FIX i18nTextCollector produces corrupt output / namespaces when running under PHP8.0
 2022-05-30 15:04:51 +12:00
Guy Sartorelli 413897503d DOCS Correct references to graphql v4 schema build dir 2022-05-30 12:12:04 +12:00
Guy Sartorelli 8ae7f30c41 Merge branch '4.11' into 4 2022-05-27 15:19:51 +12:00
Guy Sartorelli dec85819bd Merge branch '4.10' into 4.11 2022-05-27 15:19:39 +12:00
Guy Sartorelli 0bc3ed4d2c Merge branch '4.9' into 4.10 2022-05-27 15:19:17 +12:00
Guy Sartorelli 2cf1725ba6
Merge pull request #10317 from silverstripe-terraformers/feature/mock-sleep 
NEW: Mock sleep unit test utility.
 2022-05-27 13:52:01 +12:00
Guy Sartorelli 9d73b7b4bd Merge branch '4.11' into 4 2022-05-27 12:55:53 +12:00
Guy Sartorelli 972a77f4d3 Merge branch '4.10' into 4.11 2022-05-27 12:55:35 +12:00
Steve Boyd 825dd4b10d
Merge pull request #10333 from creative-commoners/pulls/4.10/fix-group-code-dedupe 
FIX Resolve deduping problem with group codes.
 2022-05-27 12:22:36 +12:00
Guy Sartorelli e0c4f01c11 FIX Resolve deduping problem with group codes. 
Also remove dead validation code.
 2022-05-27 11:19:32 +12:00
Steve Boyd 6f27dadae8 Merge branch '4.11' into 4 2022-05-26 12:39:09 +12:00
Steve Boyd dccaa9135e
Merge pull request #10334 from creative-commoners/pulls/4.11/mysql8-pdo-test 
MNT Update utf8 aliases for mysql 8 and mariadb 10.6
 2022-05-26 12:38:18 +12:00