silverstripe-framework

mirror of https://github.com/silverstripe/silverstripe-framework synced 2024-10-22 12:05:37 +00:00

Go to file

Sam Minnee 38601b96f8 BUGFIX Fixed ComplexTableField and TableListField GET actions against CSRF attacks (with Form_SecurityToken->checkRequest()) (from r113276)

git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/sapphire/trunk@114529 467b73ca-7a2a-4603-9d3b-597d59a354a9

2010-12-05 08:26:03 +00:00

api

BUGFIX #6096 RSSFeed::feedContent() restores previous state of SSViewer::get_source_file_comments() after temporarily disabling it (thanks paradigmincarnate!) (from r111914)

2010-10-19 05:06:53 +00:00

cache

MINOR: updated typo in comment for Cache. (from r112982)

2010-12-05 08:16:59 +00:00

cli

MINOR Cleaned up tabbing and code formatting in automated task classes (from r99753)

2010-05-25 02:58:59 +00:00

conf

ENHANCEMENT: new schema constant supported, used by Postgres at the moment

2010-11-25 03:50:11 +00:00

core

MINOR Using SecurityToken in ViewableData->getSecurityID() (from r113274)

2010-12-05 08:24:37 +00:00

css

ENHANCEMENT Using jQuery UI datepicker in DateField and DatetimeField instead of outdated DHTML calendar.js (fixes #5397 )

2010-10-15 03:48:39 +00:00

dev

ENHANCEMENT Added SecurityToken to wrap CSRF protection via "SecurityID" request parameter (from r113272)

2010-12-05 08:22:57 +00:00

BUGFIX: Applied/edited paradigmincarnate's patch to quote plaintext email with htmlEmail (#5120 ) (from r108396)

2010-10-18 22:51:54 +00:00

filesystem

BUGFIX: Don't include web.config in the assets tracked in the File table.

2010-12-05 00:05:05 +00:00

forms

BUGFIX Fixed ComplexTableField and TableListField GET actions against CSRF attacks (with Form_SecurityToken->checkRequest()) (from r113276)

2010-12-05 08:26:03 +00:00

images

MINOR merged from branches/2.3

2009-01-07 23:00:54 +00:00

integration

BUGFIX: removed taiwans province of china (from r113193)

2010-12-05 08:17:34 +00:00

javascript

BUGFIX #6089 Avoid javascript error when "Allow drag & drop reordering" enabled, and attempt to drag a file from one folder to another is performed (from r111932)

2010-10-19 05:07:06 +00:00

lang

ENHANCEMENT: user-friendly error now present for unwanted upload file types

2010-11-24 06:23:47 +00:00

parsers

MINOR: Fix links etc, and remove www. from SS urls (from r109105)

2010-10-19 00:56:25 +00:00

profiler

MINOR: Misc merges from branches/2.4

2010-10-13 03:53:12 +00:00

BUGFIX: 'Relevance' column now quoted

2010-11-10 03:39:02 +00:00

security

BUGFIX Using current controller for MemberTableField constructor in Group->getCMSFields() instead of passing in a wrong instance (Group) (from r113273)

2010-12-05 08:24:12 +00:00

tasks

MINOR Checking for class_exists() before SapphireTest::is_running_tests() to avoid including the whole testing framework, and triggering PHPUnit to run a performance-intensive directory traversal for coverage file blacklists

2010-11-30 05:13:09 +00:00

templates

MINOR: Remove empty legend on search form. It should be description or no tag at all

2010-11-24 06:23:53 +00:00

tests

ENHANCEMENT Added SecurityToken to wrap CSRF protection via "SecurityID" request parameter (from r113272)

2010-12-05 08:22:57 +00:00

thirdparty

BUGFIX More common defaults for en_US.xml used by Zend_DateFormat (and DateField/DatetimeField), with less error prone numerical format replacing the Zend default of shortened month names (fixes #6071 , thanks dalesaurus)

2010-10-19 05:01:18 +00:00

widgets

Revert "BUGFIX: sort order of widgets is now fixed."

2010-10-19 01:21:10 +00:00

_config.php

BUGFIX EMAIL_BOUNCEHANDLER_KEY cannot be defined (from r108513)

2010-10-19 00:46:46 +00:00

_register_database.php

MINOR: repair installer for sqlite (from r109787)

2010-10-19 01:26:27 +00:00

.htaccess

MINOR Disallowing more potentially active file extensions in cms/.htaccess

2010-10-18 22:48:58 +00:00

cli-script.php

BUGFIX Fixed spelling error of $databaseConfig in cli-script.php causing database configuration to not load (thanks aimcom!) (from r107369)

2010-10-15 03:23:57 +00:00

main.php

MINOR Database quoting in TreeDropdownField (fixes #5484 ) (from r103515)

2010-10-13 03:56:48 +00:00

main.php5

MINOR phpdoc documentation

2009-03-22 22:59:14 +00:00

Makefile

BUGFIX Removed references to "php5" and replace with "php" in Makefile (it's now consistent with 2.4 build branch)

2010-10-12 00:53:53 +00:00

sake

ENHANCEMENT Making "sake" script more portable by using "/usr/bin/env" shebang instead of "/bin/bash" (fixes #6045 , thanks sychan) (from r111495)

2010-10-19 04:50:34 +00:00

silverstripe_version

fixed $

2007-12-14 04:35:28 +00:00

static-main.php

BUGFIX Bypass static caching through static-main.php when GET or POST parameters are set (regression from 2.3 API, fixes #5519 , thanks ktauber) (from r103961)

2010-10-14 23:52:30 +00:00