Ingo Schommer 190e0b8a47 Add ContentController->handleWidget() to $allowed_actions ...

Required by recent $allowed_actions security fix

2013-02-18 00:10:06 +01:00

..

ContentController.php

Add ContentController->handleWidget() to $allowed_actions

2013-02-18 00:10:06 +01:00

ContentNegotiator.php

BUGFIX Fixed ContentNegotiator to handle HTML and XHTML base tags properly when converting, regression from r108413

2011-02-02 14:19:42 +13:00

Controller.php

BUGFIX: Added condition to avoid error creating "PastMember" cookie on dev/build (ticket #5780) Thanks simon_w

2011-02-02 14:19:41 +13:00

Director.php

SECURITY More solid relative/site URL checks (related to "BackURL" redirection)

2012-10-16 10:17:07 +02:00

FormResponse.php

SECURITY: Ensure javascript content type is sent in form responses. If content type is html, and the javascript contains script tags within the content, this content will be executed.

2012-05-03 17:08:08 +02:00

HTTPRequest.php

BUGFIX: prevented HTTPRequest->shift() throwing notices when shifting multiple elements. APICHANGE: SS_HTTPRequest->shift($multiple) no longer returns an array of size $multiple spaced with nulls, it returns an array up to the size of $multiple.

2011-02-02 14:19:33 +13:00

HTTPResponse.php

ENHANCEMENT Added SS_HTTPResponse->setStatusDescription() as equivalent to setStatusCode(). Added documentation.

2011-02-02 14:20:02 +13:00

ModelAsController.php

BUGFIX: When finding an old page in the 404 handler, favour existing subpages over historical ones.

2011-02-02 14:19:21 +13:00

NestedController.php

MINOR Unified @package PHPdoc (added where missing, removed duplicates)

2008-06-15 13:33:53 +00:00

RequestHandler.php

BUG Undefined $allowed_actions overrides parent definitions, stricter handling of $allowed_actions on Extension

2013-02-17 23:16:22 +01:00

RootURLController.php

API CHANGE Removed deprecated function RootURLController::get_homepage_urlsegment(), please use RootURLController::get_homepage_link() instead!

2011-02-02 14:18:46 +13:00

SilverStripeNavigatorItem.php

SECURITY Escape links for SilverStripeNavigatorItem

2012-01-31 15:55:30 +01:00