Ingo Schommer 475e0772a2 SECURITY Sanitize messages passed to generated JS calls in FormResponse::status_message(), e.g. to avoid XSS on 'Successfully published <page title>' messages

2012-01-31 15:16:28 +01:00

api

BUGFIX Object subclasses with a constructor that didn't already will now call parent to respect inheritance

2011-02-02 14:27:31 +13:00

cli

API CHANGE: Replaced BasicAuth::enable() with BasicAuth::protect_entire_site()

2011-02-02 14:27:33 +13:00

conf

API CHANGE: Replaced BasicAuth::enable() with BasicAuth::protect_entire_site()

2011-02-02 14:27:33 +13:00

core

SECURITY Sanitize messages passed to generated JS calls in FormResponse::status_message(), e.g. to avoid XSS on 'Successfully published <page title>' messages

2012-01-31 15:16:28 +01:00

css

BUGFIX: fixed clearing issue with IE7

2011-02-02 14:27:27 +13:00

dev

MINOR Added deprecated SapphireTest->assertType() in order to support PHPUnit 3.5 or newer, but stay backwards compatible to PHPUnit 3.4

2011-02-21 19:00:00 +13:00

docs

MINOR Fixing image links in docs/en/tutorials/

2011-02-07 20:09:28 +13:00

email

BUGFIX: Made use of new BasicAuth::protect_entire_site() consistent. (from r91658)

2011-02-02 14:27:34 +13:00

filesystem

BUGFIX Consistently using Convert::raw2sql() instead of DB::getConn()->addslashes() or PHP's deprecated addslashes() for database escaping

2011-09-15 14:40:21 +02:00

forms

BUGFIX Checking for existence of FormAction in Form->httpSubmission() to avoid bypassing $allowed_actions definitions in controllers containing this form

2011-02-02 14:27:38 +13:00

images

FEATURE: added Smiliey support to BBCode / forum. Now BBCode supports :) :P :D :( 8-) and :^). Yays for icons. Should move from BBCodeParser to TextParser so its available in tinymce but this will do for the forum

2011-02-02 14:26:53 +13:00

integration

BUGFIX Disable Geoip if in CLI mode - this fixes the tests from breaking. The geoip command won't be available in CLI context

2011-02-02 14:27:18 +13:00

javascript

BUGFIX: convert ImageFormAction form prototype syntax to jQuery syntax

2011-02-02 14:27:34 +13:00

lang

MINOR Merged from trunk

2011-02-02 14:27:28 +13:00

parsers

Merging in refactored Translatable architecture from trunk, including related/required changesets like enhancements to Object static handling (see details below)

2011-02-02 14:27:16 +13:00

profiler

MINOR Removed whitespace after ?> end PHP tag

2011-02-02 14:26:45 +13:00

search

BUGFIX Consistently using Convert::raw2sql() instead of DB::getConn()->addslashes() or PHP's deprecated addslashes() for database escaping

2011-09-15 14:40:21 +02:00

security

BUGFIX Avoid privilege escalation from EDIT_PERMISSIONS to ADMIN through TreeMultiselectField (in Member->getCMSFields()) by checking for admin groups in Member->onChangeGroups()

2011-10-18 09:56:00 +02:00

tasks

MINOR Merged from trunk

2011-02-02 14:27:25 +13:00

templates

BUGFIX Fixed Image_iframe.ss to use X-UA-Compatible IE7 emulation meta tag

2011-02-02 14:27:30 +13:00

tests

MINO Switching 'rewriteHashlinks' sanitization from Convert::raw2att() to strip_tags() to make the resulting PHP more portable when mode is set to 'php'

2011-10-18 11:27:32 +02:00

thirdparty

MINOR Readded sapphire/thirdparty modules without svn:externals

2011-02-02 14:27:35 +13:00

widgets

Merged from trunk

2011-02-02 14:27:22 +13:00

_config.php

FEATURE: Allow access to the live site via RESTful api

2011-02-02 14:27:08 +13:00

.htaccess

BUGFIX Disallow web access to sapphire/silverstripe_version to avoid information leakage (from r114773)

2011-02-02 14:27:38 +13:00

cli-script.php

Removed #! entry from cli-script.php; its unreliable and cli-script.php should be called as 'php cli-script.php' instead

2008-10-13 21:25:30 +00:00

main.php

BUGFIX Disabled ?debug_profile=1 on live environment types (merged from r80057)

2011-02-02 14:27:34 +13:00

main.php5

Merging in refactored Translatable architecture from trunk, including related/required changesets like enhancements to Object static handling (see details below)

2011-02-02 14:27:16 +13:00

Makefile

MINOR Added querystring option to Makefile (from r103884)

2011-02-02 14:27:36 +13:00

sake

BUGFIX Supporting URLs with folder-structure in "sake -start <myprocessname> <myurl>"

2011-02-02 14:26:47 +13:00

silverstripe_version

fixed $

2007-12-14 04:35:28 +00:00

web.config

BUGFIX Disallow web access to sapphire/silverstripe_version to avoid information leakage (from r114773)

2011-02-02 14:27:38 +13:00

Description

No description provided

162 MiB

Languages

PHP 99.4%

Scheme 0.5%