mattclegg
dbecdd52d2
DOCS: Add reference for undocumented TEMP_FOLDER
2020-04-28 17:51:25 +05:45
mattclegg
df8cb9e010
DOCS: Update filter to use correct class
2020-04-28 17:50:40 +05:45
mattclegg
76bc7524a7
DOCS: Fix typos & grammer
2020-04-28 17:50:39 +05:45
Daniel Hensby
99b63b6bb8
Merge pull request #9471 from mattclegg/1587213647
...
BUGFIX: Ensure realpath returns a string for stripos
2020-04-19 10:01:52 +01:00
mattclegg
2169891651
BUGFIX: Ensure realpath returns a string for stripos
...
[Deprecated] stripos(): Non-string needles will be interpreted as strings in the future. Use an explicit chr() call to preserve the current behavior
2020-04-19 11:21:34 +05:45
Serge Latyntcev
a9c05f3287
Merge branch '4.4' into 4.5
2020-04-15 14:48:59 +12:00
Serge Latyntcev
cf898a2672
Merge branch '4.3' into 4.4
2020-04-15 14:47:59 +12:00
Daniel Hensby
cd1bd2a5a7
Merge pull request #9464 from mattclegg/1586149337
...
DOCS: Minor changes
2020-04-14 11:42:56 +01:00
mattclegg
60e670176a
DOCS: Correct spelling
2020-04-14 15:00:08 +05:45
mattclegg
5585f6633f
DOCS: Update typos
2020-04-14 15:00:08 +05:45
mattclegg
e968f5cb86
DOCS: Remove outdated TODO
2020-04-14 15:00:08 +05:45
Maxime Rainville
14bbaac1cb
Merge tag '4.5.3' into 4.5
...
Release 4.5.3
2020-04-14 14:23:57 +12:00
Maxime Rainville
de8fd82c55
Merge branch '4.4' into 4.5
2020-04-14 14:18:18 +12:00
Maxime Rainville
1fe6255f9b
Merge tag '4.4.6' into 4.4
...
Release 4.4.6
2020-04-14 14:13:59 +12:00
Steve Boyd
0f7fd35926
Merge pull request #9458 from creative-commoners/pulls/4/doc-versioned-file-migration
...
DOC CMS 3.x file migration section about versioned files
2020-04-14 11:31:43 +12:00
Maxime Rainville
10c32aaa28
Added 4.5.2 changelog
2020-04-14 11:02:06 +12:00
Maxime Rainville
092acc7112
Added 4.4.6 changelog
2020-04-14 10:59:19 +12:00
Serge Latyntcev
eaa69530be
DOC CMS 3.x file migration section about versioned files
2020-04-14 10:53:21 +12:00
Steve Boyd
956f312a37
Merge pull request #9465 from mattclegg/1586758562
...
DOCS: Update to show default functionality of VersionedGridfieldDetailForm
2020-04-14 09:48:11 +12:00
mattclegg
6a640f1498
DOCS: Example should show how to disable VersionedGridfieldDetailForm as it's enabled by default
2020-04-13 17:34:55 +05:45
Serge Latyntcev
9779e42963
BUG Register new sub tasks to fix files affected by CVE-2020-9280 and CVE-2019-12245
2020-04-13 19:43:53 +12:00
Maxime Rainville
052ce6916c
DOC Explain how to use the new file migation sub tasks in the 4.4.6/4.5.2 changelogs
2020-04-13 19:39:24 +12:00
Serge Latyntcev
b269d87490
BUG Register new sub tasks to fix files affected by CVE-2020-9280 and CVE-2019-12245
2020-04-13 17:16:57 +12:00
Maxime Rainville
4b0345bee7
DOC Explain how to use the new file migation sub tasks in the 4.4.6/4.5.2 changelogs
2020-04-13 17:16:29 +12:00
Loz Calver
39fab1974a
Merge pull request #9435 from unclecheese/pulls/4.5/wha-diff
...
BUGFIX: Ensure diff arrays are one-dimensional
2020-04-01 09:16:20 +01:00
Robbie Averill
5002f514b3
FIX Capitalisation fixes in welcome back message ( #9439 )
2020-03-23 15:54:30 +13:00
Aaron Carlino
37e8720fe5
Linting
2020-03-17 16:21:46 +13:00
Aaron Carlino
7ad5f1bb14
BUGFIX: Ensure diff arrays are one-dimensional
2020-03-17 15:57:28 +13:00
Garion Herman
88660e6435
Merge pull request #9426 from creative-commoners/pulls/4.5/change-atomic-job-title
...
DOC Update atomic MigrationTask description
2020-03-16 15:19:33 +13:00
Steve Boyd
687435a2f1
Merge branch '4.4' into 4.5
2020-03-06 10:52:22 +13:00
Steve Boyd
2e875a04ae
Merge pull request #9381 from webbuilders-group/bugfix-timefield-readonly
...
BUGFIX: Fixed issue where TimeField_Readonly would only show "(not set)"
2020-03-06 10:38:57 +13:00
Steve Boyd
6d6cc65927
Update description
2020-03-06 09:57:31 +13:00
UndefinedOffset
bba0f2f72f
BUGFIX: Fixed issue where TimeField_Readonly would only show "(not set)" instead of the value
2020-02-24 09:59:00 -04:00
Robbie Averill
2936f6e0d2
Merge pull request #9412 from creative-commoners/pulls/4.5/php-7.4-stable-build
...
Update Travis config to use stable PHP 7.4 release
2020-02-20 16:22:48 +13:00
Garion Herman
a65e65409f
Upgrade Travis config to Xenial
2020-02-20 16:07:14 +13:00
Garion Herman
d5149a8e38
Update Travis config to use stable PHP 7.4 release
2020-02-20 14:01:22 +13:00
Serge Latyntcev
6c2f179a43
Merge branch '4.4' into 4.5
2020-02-19 10:20:50 +13:00
Serge Latyntsev
91f091f418
Merge pull request #9410 from blueo/patch-1
...
Update CVE number to CVE-2019-19325
2020-02-19 10:15:52 +13:00
Bernard Hamlin
765810b013
Update CVE number to CVE-2019-19325
2020-02-19 09:58:12 +13:00
Maxime Rainville
5fd16cd7e1
Add 4.5.1 changelog
2020-02-17 17:47:23 +13:00
Maxime Rainville
d95e911f1d
Update translations
2020-02-17 02:29:18 +00:00
Maxime Rainville
7ce2abf74d
Merge remote-tracking branch 'origin/4.4' into 4.5
2020-02-17 14:43:38 +13:00
Maxime Rainville
a9598eec3f
Added 4.4.5 changelog
2020-02-17 14:02:57 +13:00
Maxime Rainville
0a9866c087
Update translations
2020-02-17 14:01:02 +13:00
Maxime Rainville
acd7d94167
Merge branch '4.4' into 4.5
2020-02-17 13:07:26 +13:00
Maxime Rainville
49fda52b12
Merge pull request #94 from silverstripe-security/fix/cve-2019-19325
...
CVE-2019-1935
2020-02-17 12:54:40 +13:00
Serge Latyntcev
ad1b00ec7d
[CVE-2019-19325] XSS through non-scalar FormField attributes
...
Silverstripe Forms allow malicious HTML or JavaScript to be inserted
through non-scalar FormField attributes, which allows performing XSS (Cross-Site Scripting)
on some forms built with user input (Request data). This can lead to phishing attempts
to obtain a user's credentials or other sensitive user input.
There is no known attack vector for extracting user-session information or credentials automatically,
it required a user to fall for the phishing attempt.
XSS can also be used to modify the presentation of content in malicious ways.
2020-02-17 09:58:29 +13:00
Steve Boyd
9d5c3ef20e
Merge branch '4.4' into 4.5
2020-02-11 16:45:15 +13:00
Steve Boyd
8dcaed25f4
Merge pull request #9386 from silverstripe-terraformers/feature/orm-column
...
ORM bugfix and enhancement
2020-02-11 15:56:03 +13:00
Mojmir Fendek
285e6caafa
PR fixes
2020-02-11 10:43:01 +13:00
