silverstripe-framework

mirror of https://github.com/silverstripe/silverstripe-framework synced 2024-10-22 12:05:37 +00:00

Go to file

Ingo Schommer 4b2c64c843 BUGFIX Avoid potential referer leaking in Security->changepassword() form by storing Member->AutoLoginHash in session instead of 'h' GET parameter

git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/sapphire/trunk@114758 467b73ca-7a2a-4603-9d3b-597d59a354a9

2010-12-09 21:18:49 +00:00

api

MINOR Setting Content-Type to text/plain in various error responses for RestfulServer

2010-12-09 08:40:28 +00:00

cache

MINOR Documentation in SS_Cache

2010-12-05 19:46:21 +00:00

cli

MINOR Cleaned up tabbing and code formatting in automated task classes (from r99753)

2010-05-25 02:58:59 +00:00

conf

ENHANCEMENT: new schema constant supported, used by Postgres at the moment

2010-11-25 03:50:11 +00:00

core

ENHANCEMENT 'bypassStaticCache' cookie set in Versioned is limited to httpOnly flag (no access by JS) to improve clientside security

2010-12-06 00:29:20 +00:00

css

ENHANCEMENT Using jQuery UI datepicker in DateField and DatetimeField instead of outdated DHTML calendar.js (fixes #5397 )

2010-10-15 03:48:39 +00:00

dev

MINOR Fixed PHP strict standard where non-variables cannot be passed by reference (from r113968)

2010-12-05 08:39:31 +00:00

BUGFIX: Applied/edited paradigmincarnate's patch to quote plaintext email with htmlEmail (#5120 ) (from r108396)

2010-10-18 22:51:54 +00:00

filesystem

BUGFIX: Don't include web.config in the assets tracked in the File table.

2010-12-05 00:05:05 +00:00

forms

BUGFIX Better checking of file validity (#6093 ) Thanks Pigeon (from r113419)

2010-12-05 08:34:42 +00:00

images

MINOR merged from branches/2.3

2009-01-07 23:00:54 +00:00

integration

BUGFIX: removed taiwans province of china (from r113193)

2010-12-05 08:17:34 +00:00

javascript

MINOR Updated cs_CZ and sk_SK translations in sapphire/javascript (fixes #6085 , thanks Pike) (from r113690)

2010-12-05 08:36:57 +00:00

lang

ENHANCEMENT: user-friendly error now present for unwanted upload file types

2010-11-24 06:23:47 +00:00

parsers

MINOR: Fix links etc, and remove www. from SS urls (from r109105)

2010-10-19 00:56:25 +00:00

profiler

MINOR: Misc merges from branches/2.4

2010-10-13 03:53:12 +00:00

BUGFIX: 'Relevance' column now quoted

2010-11-10 03:39:02 +00:00

security

BUGFIX Avoid potential referer leaking in Security->changepassword() form by storing Member->AutoLoginHash in session instead of 'h' GET parameter

2010-12-09 21:18:49 +00:00

tasks

MINOR Checking for class_exists() before SapphireTest::is_running_tests() to avoid including the whole testing framework, and triggering PHPUnit to run a performance-intensive directory traversal for coverage file blacklists

2010-11-30 05:13:09 +00:00

templates

MINOR: Remove empty legend on search form. It should be description or no tag at all

2010-11-24 06:23:53 +00:00

tests

BUGFIX Avoid potential referer leaking in Security->changepassword() form by storing Member->AutoLoginHash in session instead of 'h' GET parameter

2010-12-09 21:18:49 +00:00

thirdparty

BUGFIX More common defaults for en_US.xml used by Zend_DateFormat (and DateField/DatetimeField), with less error prone numerical format replacing the Zend default of shortened month names (fixes #6071 , thanks dalesaurus)

2010-10-19 05:01:18 +00:00

widgets

Revert "BUGFIX: sort order of widgets is now fixed."

2010-10-19 01:21:10 +00:00

_config.php

BUGFIX EMAIL_BOUNCEHANDLER_KEY cannot be defined (from r108513)

2010-10-19 00:46:46 +00:00

_register_database.php

MINOR: repair installer for sqlite (from r109787)

2010-10-19 01:26:27 +00:00

.htaccess

MINOR Disallowing more potentially active file extensions in cms/.htaccess

2010-10-18 22:48:58 +00:00

cli-script.php

BUGFIX Fixed spelling error of $databaseConfig in cli-script.php causing database configuration to not load (thanks aimcom!) (from r107369)

2010-10-15 03:23:57 +00:00

main.php

MINOR Database quoting in TreeDropdownField (fixes #5484 ) (from r103515)

2010-10-13 03:56:48 +00:00

main.php5

MINOR phpdoc documentation

2009-03-22 22:59:14 +00:00

Makefile

BUGFIX Removed references to "php5" and replace with "php" in Makefile (it's now consistent with 2.4 build branch)

2010-10-12 00:53:53 +00:00

sake

ENHANCEMENT Making "sake" script more portable by using "/usr/bin/env" shebang instead of "/bin/bash" (fixes #6045 , thanks sychan) (from r111495)

2010-10-19 04:50:34 +00:00

silverstripe_version

fixed $

2007-12-14 04:35:28 +00:00

static-main.php

BUGFIX Bypass static caching through static-main.php when GET or POST parameters are set (regression from 2.3 API, fixes #5519 , thanks ktauber) (from r103961)

2010-10-14 23:52:30 +00:00