Guy Sartorelli
1a5bb4cbec
[CVE-2023-22729] Escaped double slash is absolute URL
2023-04-26 09:49:59 +12:00
Guy Sartorelli
fd5d8217e8
[CVE-2023-22728] Check canView before printing from GridField
2023-04-26 09:45:34 +12:00
Sabina Talipova
341ea4b0e1
Merge pull request #10758 from creative-commoners/pulls/5.0/cms5-readme
...
DOC Update README.md for CMS 5
2023-04-21 15:35:46 +12:00
Guy Sartorelli
9a6414a840
DOC Update README.md for CMS 5
2023-04-19 17:39:47 +12:00
Michal Kleiner
b085e2df31
Merge pull request #10755 from creative-commoners/pulls/5.0/themed-resource-url
2023-04-13 00:01:13 +12:00
Guy Sartorelli
bdcb57ec2b
NEW Add a cascading theme version of $resourceURL
2023-04-12 17:29:59 +12:00
Florian Thoma
1dbb2bc5ba
remove manually added config values in test
2023-04-12 14:11:08 +10:00
Florian Thoma
c0722308af
add loading of automatic ORM field labels to i18nTextCollector
2023-04-12 11:11:26 +10:00
Florian Thoma
41c4b4ee02
make Group use tri-state can* extension hooks, fixes #9580
2023-04-11 10:18:21 +10:00
Steve Boyd
3d03a93b8f
Merge branch '4.12' into 4.13
2023-04-11 10:55:17 +12:00
Dylan Wagstaff
92061a3ba6
FIX stabilise typed APIs ( #10740 )
...
Since 4.12 the use of typehints and return types has caused issues with
values fetched directly from config without validation. This has lead to
upgrade woes in a minor version (#10721 ) with no immediate recourse
other than manual system intervention.
To use types, we should ensure types, leaving a stable API that won't
error on a bad value - or should give a thoughtful and directive error
message if so.
Issue #10721 summary:
SessionMiddleware runs before FlushMiddleware
SessionMiddleware causes a PHP fatal error passing `null` to a `string`
parameter.
`null` comes from config, because default string value doesn't exist. We
need flush for this - but system execution never makes it that far.
2023-04-11 10:52:41 +12:00
elliot sawyer
0d9724c708
Update tests/php/Forms/TreeDropdownFieldTest.php
...
Co-authored-by: Guy Sartorelli <36352093+GuySartorelli@users.noreply.github.com>
2023-04-11 10:43:47 +12:00
Guy Sartorelli
a42bb856c3
Merge pull request #10750 from xini/patch-6
...
FIX: Group visibility for SITETREE_GRANT_ACCESS permissions
2023-04-11 09:58:43 +12:00
Florian Thoma
cd946b6c80
Group visibility for SITETREE_GRANT_ACCESS permissions
...
Make groups visible if member has SITETREE_GRANT_ACCESS permissions, otherwise the dropdown for selecting the group is empty
2023-04-05 16:33:41 +10:00
Guy Sartorelli
2c874a1e94
ENH Exclude a list of models for checking and repairs ( #10746 )
2023-04-04 14:22:00 +12:00
Steve Boyd
c1427ff9c4
Merge branch '5.0' into 5
2023-03-30 13:20:24 +13:00
Steve Boyd
63c2460f72
Merge branch '4' into 5.0
2023-03-30 13:20:03 +13:00
Guy Sartorelli
d30cd6f68e
Merge pull request #10736 from creative-commoners/pulls/pulls/5.0/double-sort/pulls/5.0/double-filter
...
FIX Remove legacy filter icon
2023-03-29 10:37:50 +13:00
Steve Boyd
c278576996
Merge branch '4.13' into 4
2023-03-29 09:52:38 +13:00
Guy Sartorelli
600f188287
MNT Revert erroneous dependency changes ( #10739 )
2023-03-28 16:46:46 +13:00
elliot sawyer
280354df08
NEW: Allow different search filters on TreeDropdownField
2023-03-27 18:50:54 +13:00
Steve Boyd
84273b8045
FIX Remove legacy filter icon
2023-03-27 17:57:02 +13:00
Maxime Rainville
3a7fd429a9
Merge pull request #10731 from creative-commoners/pulls/4/dispatch-ci
...
MNT Use gha-dispatch-ci
2023-03-23 14:10:11 +13:00
Guy Sartorelli
a62e554409
Merge pull request #10733 from creative-commoners/pulls/4.13/searchable
...
FIX Respect searchable_fields
2023-03-23 11:51:02 +13:00
Steve Boyd
0f40cc38ec
FIX Respect searchable_fields
2023-03-23 10:57:03 +13:00
Guy Sartorelli
0d041e7d7d
Merge pull request #10730 from creative-commoners/pulls/4.13/fix-depr
...
FIX Reduce array method calls
2023-03-22 11:34:10 +13:00
Maxime Rainville
62f6177ec1
Merge pull request #10732 from creative-commoners/pulls/5.0/embed
...
API Remove configurability of attributes
2023-03-22 11:30:34 +13:00
Steve Boyd
41bb35f3f3
FIX Reduce array method calls
2023-03-22 11:06:23 +13:00
Steve Boyd
b4f330d734
API Remove configurability of attributes
2023-03-21 16:38:05 +13:00
Steve Boyd
241b58cd65
MNT Use gha-dispatch-ci
2023-03-21 14:22:01 +13:00
Guy Sartorelli
e47eedff7d
Merge pull request #10725 from zemiacsik/patch-ArrayList-fix
...
FIX property_exists() parameters mixup
2023-03-20 18:52:02 +13:00
Guy Sartorelli
f7e86812df
Merge pull request #10726 from creative-commoners/pulls/5.0/pdo
...
MNT Remove references to PDO
2023-03-20 11:20:51 +13:00
Steve Boyd
9f250cf772
MNT Remove references to PDO
2023-03-16 10:59:34 +13:00
zemiacsik
d60af9d16e
FIX property_exists() parameters mixup
...
ensure that property parameter is a string
2023-03-14 08:42:22 +01:00
zemiacsik
5b8d61b55b
FIX property_exists() parameters mixup
...
property_exists() has first parameter "object_or_class" and second is a property to check
2023-03-13 13:51:48 +01:00
Guy Sartorelli
77cbe20ba9
MNT Update development dependencies
2023-03-10 16:29:44 +13:00
Guy Sartorelli
75b7622a21
MNT Update release dependencies
2023-03-10 16:29:40 +13:00
Guy Sartorelli
a387c9b9e4
MNT Update development dependencies
2023-03-10 12:21:27 +13:00
Guy Sartorelli
a4929a171e
Merge pull request #10697 from creative-commoners/pulls/4/nicer-deprecations
...
ENH Improve deprecation logging
2023-03-09 14:39:51 +13:00
Steve Boyd
adec1b51a7
Merge branch '5.0' into 5
2023-03-08 12:21:09 +13:00
Steve Boyd
d860cb6556
Merge branch '4' into 5.0
2023-03-08 12:20:24 +13:00
Guy Sartorelli
f29577853a
Merge pull request #10720 from creative-commoners/pulls/4/tx-1678079865
...
ENH Update translations
2023-03-08 10:25:02 +13:00
Steve Boyd
a37be27bd7
ENH Update translations
2023-03-06 18:17:45 +13:00
Guy Sartorelli
a0b3eaddc0
Merge pull request #10719 from creative-commoners/pulls/5.0/remove-depr
...
API Remove deprecated code
2023-03-06 14:44:33 +13:00
Steve Boyd
6d239d0b88
API Remove deprecated code
2023-03-06 14:06:02 +13:00
Guy Sartorelli
046befc4ba
ENH Improve deprecation logging
2023-03-06 13:25:44 +13:00
Guy Sartorelli
128b327c6d
API Add method to check if env var is set
2023-03-06 11:49:22 +13:00
Guy Sartorelli
bdf90fb80d
Merge pull request #10716 from creative-commoners/pulls/5.0/remove-deprecation
...
MNT Remove old deprecation warnings
2023-03-03 11:21:09 +13:00
Maxime Rainville
9868eca7eb
DEP Bump masterminds/html5 to 2.7.6 to fix deperaction warning ( #10714 )
2023-03-03 10:48:49 +13:00
Steve Boyd
5dd6e3f8f1
MNT Remove old deprecation warnings
2023-03-03 10:34:10 +13:00
