Daniel Hensby
|
686db04a0a
|
Update translations
|
2016-05-05 02:05:54 +01:00 |
|
Daniel Hensby
|
92599727b9
|
Merge remote-tracking branch 'security/patch/3.1/ss-2016-006' into 3.1.19
|
2016-05-05 01:01:49 +01:00 |
|
Daniel Hensby
|
7af7f8dd65
|
Merge remote-tracking branch 'security/patch/3.1/ss-2016-005' into 3.1.19
|
2016-05-05 01:01:44 +01:00 |
|
Daniel Hensby
|
e8cfe1cc72
|
Merge remote-tracking branch 'security/patch/3.1/ss-2016-004' into 3.1.19
|
2016-05-05 01:01:37 +01:00 |
|
Daniel Hensby
|
09370290dc
|
Merge remote-tracking branch 'security/patch/3.1/ss-2016-001' into 3.1.19
|
2016-05-05 01:01:27 +01:00 |
|
Daniel Hensby
|
47c3165aa3
|
Merge remote-tracking branch 'security/patch/3.1/ss-2015-029' into 3.1.19
|
2016-05-05 01:01:15 +01:00 |
|
Damian Mooyman
|
71a4f1e605
|
Merge branch 'pull/5384' into 3.1
|
2016-05-02 18:16:41 +12:00 |
|
Damian Mooyman
|
a38eb8b784
|
Fix incorrect logic check
|
2016-05-02 18:15:39 +12:00 |
|
Damian Mooyman
|
e88a40853a
|
Merge pull request #3772 from phptek/cms/1054
FIX: Fixes CMS errors when viewing history on "Deleted" pages.
|
2016-04-26 17:21:19 +12:00 |
|
Daniel Hensby
|
fde6376996
|
FIX Admin bloacklisted messages using correct $.inArray check
|
2016-04-24 08:57:45 +01:00 |
|
Daniel Hensby
|
1ccd3926e3
|
[SS-2016-001] FIX Properly check backurl on CMSSecurity@success
|
2016-04-20 23:58:50 +01:00 |
|
Daniel Hensby
|
a6bd22ab2f
|
[SS-2016-006] FIX dont disable XSS for login forms
|
2016-04-20 23:57:59 +01:00 |
|
Daniel Hensby
|
a24c8260b1
|
[SS-2016-004] FIX Store current page IDs as ints
|
2016-04-20 23:55:59 +01:00 |
|
Daniel Hensby
|
f32c893546
|
[SS-2016-005] FIX Apply brute force protection to default admin
|
2016-04-19 23:20:29 +01:00 |
|
Daniel Hensby
|
3c0f2e8e11
|
[SS-2015-029] FIX Add CSFR protection to tree reorganise
|
2016-04-19 00:01:04 +01:00 |
|
Michael Strong
|
1f820b0b1c
|
DOCS allowed_actions access control (#5333)
|
2016-04-18 17:49:30 +12:00 |
|
Loz Calver
|
69858760e1
|
Merge pull request #5312 from dhensby/pulls/3.1/fix-5281
FIX Stop "success" message showing in CMS
|
2016-04-12 16:56:06 +01:00 |
|
Daniel Hensby
|
36283b86d5
|
FIX Stop "success" message showing in CMS
fixes #5281
|
2016-04-12 16:14:31 +01:00 |
|
Sean Harvey
|
3b7cfd0118
|
Merge pull request #5256 from tractorcow/pulls/3.1/fix-error-displayed
BUG fix ErrorControlChain causing errors to be displayed if display_errors in php.ini is false
|
2016-04-01 12:10:22 +13:00 |
|
Damian Mooyman
|
6ec2656201
|
BUG fix ErrorControlChain causing errors to be displayed if display_errors in php.ini is false
Fixes #5250
|
2016-04-01 11:04:06 +13:00 |
|
Loz Calver
|
20d116757a
|
Merge pull request #5217 from dhensby/pulls/3.1/docs-csv-parser
DOCS Fixing CSV Parser docs - fixes #5004
|
2016-03-21 15:02:56 +00:00 |
|
Daniel Hensby
|
c8f2e6702b
|
DOCS Fixing CSV Parser docs - fixes #5004
|
2016-03-21 14:22:43 +00:00 |
|
Daniel Hensby
|
863b737717
|
Merge pull request #5214 from tractorcow/pulls/3.1/fix-array-values
Do not hang on nested parameters in search context
|
2016-03-21 09:21:33 +00:00 |
|
Damian Mooyman
|
94b0f61957
|
Merge pull request #3494 from dnadesign/tabForceActive
fixing issue where 'ss-tabs-force-active' wasn't actually working
|
2016-03-21 16:53:49 +13:00 |
|
Nicola Fontana
|
11561aeb54
|
Do not hang on nested parameters in search context
Backport of 0b5a573 for 3.2 that does not add a new API, as
required by #5056 to be semver compatible.
|
2016-03-21 15:54:22 +13:00 |
|
Damian Mooyman
|
cdedee130a
|
Merge pull request #5200 from dhensby/pulls/fix-token-redirect
FIX Parameter tokens now redirect to correct url if mod_rewrite is off
|
2016-03-21 14:45:03 +13:00 |
|
Daniel Hensby
|
add2ecdf8b
|
FIX Parameter tokens now redirect to correct url if mod_rewrite is off
|
2016-03-18 15:56:39 +00:00 |
|
Damian Mooyman
|
ba8f984940
|
Merge pull request #5121 from dhensby/pulls/3.1/fix-ip-from-LB
FIX getIP from behind a load-balancer that adds many IPs to the header
|
2016-03-02 10:25:02 +13:00 |
|
Daniel Hensby
|
817b836870
|
FIX getIP from behind a load-balancer that adds many IPs to the header
|
2016-03-01 21:07:48 +00:00 |
|
Ingo Schommer
|
8f0bbcbc7b
|
Merge pull request #4889 from dhensby/pulls/docs-version
DOCS Explicitly noting lack of PHP 7 support
|
2016-03-02 07:58:06 +13:00 |
|
Daniel Hensby
|
b8c8875303
|
DOCS Explicitly noting lack of PHP 7 support
|
2016-03-01 10:14:14 +00:00 |
|
Damian Mooyman
|
71bf14d590
|
Merge remote-tracking branch 'origin/3.1.18' into 3.1
|
2016-02-29 16:49:25 +13:00 |
|
Damian Mooyman
|
2147205dc1
|
Added 3.1.18 changelog
|
2016-02-29 15:10:05 +13:00 |
|
Damian Mooyman
|
31e04862a8
|
Update translations
|
2016-02-29 14:57:30 +13:00 |
|
Damian Mooyman
|
cd05068814
|
Merge branch '3.1.18' into 3.1
|
2016-02-27 20:59:51 +13:00 |
|
Damian Mooyman
|
b77acaeeb7
|
Added 3.1.18-rc2 changelog
|
2016-02-27 20:53:23 +13:00 |
|
Damian Mooyman
|
9d9a6fc0e8
|
Added 3.1.18-rc2 changelog
|
2016-02-27 20:53:15 +13:00 |
|
Damian Mooyman
|
387264fbbb
|
Update translations
|
2016-02-27 20:53:15 +13:00 |
|
Daniel Hensby
|
bd48d89642
|
FIX undeclared constant issue
|
2016-02-27 20:53:15 +13:00 |
|
Damian Mooyman
|
4d6e8a4dbd
|
Merge pull request #5102 from dhensby/pulls/fix-proxy-host-header
BUG Fixing undeclared constant issue
|
2016-02-27 20:19:11 +13:00 |
|
Daniel Hensby
|
3d2fcf9087
|
Fixing undeclared constant issue
|
2016-02-26 14:45:07 +00:00 |
|
Damian Mooyman
|
a2c7524b85
|
Merge branch '3.1.18' into 3.1
|
2016-02-26 17:39:06 +13:00 |
|
Damian Mooyman
|
9e0037d43e
|
Added 3.1.18-rc1 changelog
|
2016-02-26 17:13:49 +13:00 |
|
Damian Mooyman
|
cc95703b18
|
BUG Fix regressions in missing CSRF on print button
|
2016-02-26 16:59:40 +13:00 |
|
Damian Mooyman
|
3dc0d0ee89
|
BUG Fix regression in gridfield get actions
|
2016-02-26 16:59:25 +13:00 |
|
Damian Mooyman
|
06d5050321
|
Merge remote-tracking branch 'origin/3.1.17' into 3.1
|
2016-02-24 16:54:18 +13:00 |
|
Damian Mooyman
|
1fe7d029db
|
Added 3.1.17 changelog
|
2016-02-24 15:31:12 +13:00 |
|
Damian Mooyman
|
01c13bf6b3
|
Update translations
|
2016-02-24 15:20:40 +13:00 |
|
Damian Mooyman
|
9a4f0b48df
|
Added 3.1.17-rc2 changelog
|
2016-02-24 12:38:54 +13:00 |
|
Ingo Schommer
|
37059eb6b3
|
[ss-2016-003] Hostname, IP and Protocol Spoofing through HTTP Headers
|
2016-02-24 11:47:16 +13:00 |
|