Dan Hensby
e328d6f0d9
Merge branch '4.2' into 4.3
2020-04-27 09:51:24 +01:00
Robbie Averill
8180aa508c
Merge pull request #9497 from dhensby/pulls/bigint-rename
...
Rename DBBigint.php for composer autoloading compatability
2020-04-24 16:51:33 -07:00
Dan Hensby
b9f8ab44ac
Rename DBBigint.php for composer autoloading compatability
2020-04-24 23:15:42 +01:00
Steve Boyd
0f7fd35926
Merge pull request #9458 from creative-commoners/pulls/4/doc-versioned-file-migration
...
DOC CMS 3.x file migration section about versioned files
2020-04-14 11:31:43 +12:00
Serge Latyntcev
eaa69530be
DOC CMS 3.x file migration section about versioned files
2020-04-14 10:53:21 +12:00
Stevie Mayhew
92acc764f7
Merge pull request #9327 from kinglozzer/9259-session-restart
...
FIX: Session::restart() didn't correctly restart session (fixes #9259 )
2019-11-21 11:52:36 +13:00
Loz Calver
453945da14
FIX: Session::restart() didn't correctly restart session ( fixes #9259 )
2019-11-20 14:21:30 +00:00
Robbie Averill
bd658ca745
Merge pull request #9305 from tractorcow/pulls/4.3/action-title
...
BUG FormAction title property cannot be set if useButtonTag is false
2019-11-14 09:06:46 -08:00
Damian Mooyman
e76601e5c8
BUG FormAction title property cannot be set if useButtonTag is false
2019-10-29 17:21:45 +13:00
Serge Latyntsev
c7597ad265
Merge pull request #9293 from open-sausages/pulls/4.3/psr2-fix
...
PSR2 linting fixes
2019-10-18 15:52:06 +13:00
Serge Latyntcev
46b9530d88
PSR2 linting fixes
2019-10-18 15:31:39 +13:00
Serge Latyntsev
71f810516c
Merge pull request #9275 from open-sausages/pulls/4.3/obfuscated-email-names
...
FIX DebugViewFrendlyErrorFormatter handle of admin_email
2019-10-04 11:27:17 +13:00
Serge Latyntcev
7db524bd90
FIX DebugViewFrendlyErrorFormatter handle of admin_email
2019-10-04 10:26:54 +13:00
Serge Latyntcev
26a4fb38ba
Added 4.3.6 changelog
2019-09-24 17:20:48 +12:00
Aaron Carlino
8ee5e621fd
DOCS: Add docs for versioned files migration
2019-09-24 16:00:51 +12:00
Serge Latyntcev
5af205993d
[CVE-2019-12617] Fix access escalation for CMS users with limited access through permission cache pollution
2019-09-24 16:00:51 +12:00
Serge Latyntcev
569237c0f4
[CVE-2019-12203] Session fixation in "change password" form
...
A potential account hijacking may happen if an attacker has physical access to
victim's computer to perform session fixation. Also possible if the targeted application contains an XSS vulnerability.
Requires the victim to click the password reset link sent to their email.
If all the above happens, attackers may reset the password before the actual user does that.
2019-09-24 16:00:51 +12:00
Aaron Carlino
99ab3c6421
DOCS: Add FileShortcodeProvider change to changelog
2019-09-24 16:00:51 +12:00
Guy Marriott
aa7c057422
FIX: Don't force-add view button to readonly GridField (fixes #… ( #9254 )
...
FIX: Don't force-add view button to readonly GridField (fixes #9249 )
2019-09-23 10:31:25 -07:00
Guy Marriott
190b2f2842
FIX: run member CMS validator when editing via groups (fixes #9… ( #9255 )
...
FIX: run member CMS validator when editing via groups (fixes #9184 )
2019-09-23 10:28:38 -07:00
Loz Calver
efdb9cc718
FIX: run member CMS validator when editing via groups ( fixes #9184 )
2019-09-23 16:59:58 +01:00
Loz Calver
d85ff3bc44
FIX: Don't force-add view button to readonly GridField ( fixes #9249 )
2019-09-23 16:52:47 +01:00
Guy Marriott
109ac3f75f
Allow non summary fields to be used as grid field export fields ( #9248 )
...
Allow non summary fields to be used as grid field export fields
2019-09-18 15:33:25 -07:00
Hayden Shaw
daf9d55ecb
Allow non summary fields to be used as export fields
...
Fixes regression in 3d989a6eae
.
2019-09-19 10:00:54 +12:00
Robbie Averill
066ce8e01c
Merge branch '4.2' into 4.3
...
# Conflicts:
# src/View/ThemeResourceLoader.php
2019-09-13 18:10:37 -07:00
Andre Kiste
cf90cfdd2a
Merge pull request #9221 from open-sausages/pulls/4.3/recursive-writeComponent
...
BUG Allow infinite loop when calling DataObject::writeComponent() recursively
2019-09-12 17:18:08 +12:00
Maxime Rainville
591b88a9bc
BUG Allow infinite loop when calling DataObject::writeComponent() recursively
2019-09-10 14:15:28 +12:00
Robbie Averill
41a766d135
Merge pull request #9085 from kinglozzer/9084-path-join-exception
...
Catch Path::join() exceptions in findTemplate() (fixes #9084 )
2019-09-06 12:00:39 -07:00
Robbie Averill
aec5051a24
Merge pull request #9206 from creative-commoners/pulls/4.3/strip-bom-on-csv-import
...
FIX Byte Order Marks (BOM) are now stripped when importing CSV files
2019-09-03 09:55:38 -07:00
Robbie Averill
0b991cc039
Merge pull request #9198 from elabuwa/pulls/4.3/bug-fix-html-entities-breadcrumbs-in-group
...
Bug : Add html_entity_decode to group parents
2019-08-30 09:51:52 +12:00
Dileep Ratnayake
fe4eb5dd2a
Update src/Security/Group.php
...
Co-Authored-By: Maxime Rainville <maxime@rainville.me>
2019-08-29 15:44:41 +12:00
Robbie Averill
77ba8391c4
FIX Byte Order Marks (BOM) are now stripped when importing CSV files
2019-08-29 14:54:57 +12:00
Maxime Rainville
4cfce30842
Merge pull request #9204 from open-sausages/pulls/4.3/remove-dumb-place-holder-text
...
BUG Remove placeholder text on new group form
2019-08-29 09:05:38 +12:00
Maxime Rainville
73f43c6f42
BUG Remove placeholder text on new group form
2019-08-28 17:14:19 +12:00
Dileep Ratnayake
9b7075ed5d
Update Group.php
2019-08-27 16:22:00 +12:00
Dileep Ratnayake
a976a1688b
Update Group.php
...
move to private method
2019-08-27 16:21:08 +12:00
Dileep Ratnayake
40e5c4ec59
Update Group.php
...
use of convert::raw2xml, rename $grp to $group
2019-08-27 16:19:40 +12:00
Dileep Ratnayake
4f8240bd48
Update src/Security/Group.php
...
Co-Authored-By: Andre Kiste <bergice@users.noreply.github.com>
2019-08-27 12:19:03 +12:00
Dileep Ratnayake
f7a602137a
add html_entity_decode to breadcrumbs
2019-08-27 11:49:17 +12:00
Robbie Averill
d63e4b520c
Merge branch '4.2' into 4.3
2019-08-14 09:30:41 +12:00
Robbie Averill
2e2c56249e
Merge pull request #9147 from webbuilders-group/sort-order-fix
...
BUGFIX: Fixed issue where multiple relationship sort order columns would be lost in favor of only the last relationship column in the sort order
2019-08-14 09:29:20 +12:00
Robbie Averill
05d5db43f3
Merge pull request #9173 from creative-commoners/pulls/4.3/column-content-for-print-csvs
...
FIX Use content generated by DataColumns component for print and csv export
2019-08-09 15:21:50 +12:00
Guy Marriott
3d989a6eae
FIX Use content generated by DataColumns component for print and csv export
2019-08-09 15:04:38 +12:00
Loz Calver
6f19cb3a83
Merge pull request #9152 from creative-commoners/pulls/4.3/session-exists-check
...
FIX Prevent setting session value when no session exists yet
2019-07-30 09:42:45 +01:00
Robbie Averill
5c794dfcdd
FIX Prevent setting session value when no session exists yet
2019-07-29 17:16:01 +02:00
UndefinedOffset
c1ffc4edfb
Added unit tests for multiple relationship sorting
2019-07-29 10:45:10 -03:00
UndefinedOffset
40cd66852e
BUGFIX: Fixed issue where multiple relationship sort order columns would be lost in favor of only the last relationship column in the sort order
2019-07-26 11:54:10 -03:00
Robbie Averill
2d2b0b82f0
DOCS Fix incorrect rendering of note on list item
...
[ci skip]
2019-07-25 12:03:12 +02:00
Robbie Averill
c7b15eaef5
Merge branch '4.2' into 4.3
2019-07-19 10:45:29 +02:00
Garion Herman
9efe9e96eb
Merge pull request #9123 from open-sausages/pulls/4.3/increase-memory-limit-max
...
FIX core memory limit test
2019-07-12 17:08:42 +12:00