silverstripe-framework/docs/en/04_Changelogs/rc/3.5.0-rc3.md
2016-11-22 14:53:03 +00:00

1.9 KiB

3.5.0-rc3

Change Log

Security

  • 2016-11-11 4440b88 Form@httpSubmission will no longer load submitted data to disabled or readonly fields (Daniel Hensby) - See ss-2016-010
  • 2016-11-11 61e4055 Cast FormField values as Text to prevent readonly fields embeding rogue HTML (Daniel Hensby) - See ss-2016-010
  • 2016-10-27 17097a4 Properly escape backURL for template injection (Daniel Hensby) - See ss-2016-016
  • 2016-07-14 ca526b0 Missing ACL check on ReportAdmin (Daniel Hensby) - See ss-2016-012
  • 2016-07-14 04b4453 Missing ACL check on ReportAdmin (Daniel Hensby) - See ss-2016-012

API Changes

  • 2016-11-15 f43a91a Add FormField::canSubmitValue() (Damian Mooyman)

Bugfixes

  • 2016-10-22 bec5adf Versioned sort by ID (Jonathon Menz)