silverstripe-framework/core
Ingo Schommer ac4c207846 ENHANCEMENT Session::start() forces PHPSESSID cookies to be httpOnly (no access by JS) to improve clientside security (from r114567)
git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/sapphire/branches/2.4@114571 467b73ca-7a2a-4603-9d3b-597d59a354a9
2011-02-02 14:20:04 +13:00
..
control BUGFIX Don't allow HTML formatting in RequestHandler->httpError() by sending "Content-Type: text/plain" response headers. (from r114444) 2011-02-02 14:20:03 +13:00
model BUGFIX Escaping $locale values in Translatable->augmentSQL() in addition to the i18n::validate_locale() input validation (from r114515) 2011-02-02 14:20:04 +13:00
ArrayData.php ENHANCEMENT: added getter to get array back out of an ArrayData instance. MINOR: updated docblocks in ArrayData 2011-02-02 14:19:39 +13:00
ArrayLib.php ENHANCEMENT Use array_combine() instead of custom logic for ArrayLib::valuekey() (thanks paradigmincarnate!) 2011-02-02 14:19:35 +13:00
ClassInfo.php ENHANCEMENT #5977 Added optional argument to ClassInfo::getValidSubClasses() and removed harcoded SiteTree 2011-02-02 14:19:49 +13:00
Convert.php ENHANCEMENT: html2raw now properly replace strong tag with asterix #5494 2011-02-02 14:19:37 +13:00
Cookie.php BUGFIX Cookies set to a value other than NULL (effectively unsetting the cookie) will now use the httpOnly parameter by default for better XSS protection (from r101045) 2011-02-02 14:19:00 +13:00
Core.php BUGFIX #6201 Use of set_include_path() did not always include sapphire paths in some environments 2011-02-02 14:20:02 +13:00
Extension.php API CHANGE: Extension no longer inherits from Object. 2009-08-11 08:35:14 +00:00
HTTP.php BUGFIX: added optional separator for http_build_query in HTTP:setGetVar(). this fixes sorting columns in ModelAdmin (ticket #5325). 2011-02-02 14:19:12 +13:00
i18n.php BUGFIX Check for valid locale in i18n::set_locale()/set_default_locale()/include_locale_file()/include_by_locale() (as defined in i18n::$allowed_locales). Implicitly sanitizes the data for usage in controllers. (from r114469) 2011-02-02 14:20:03 +13:00
i18nEntityProvider.php Merged changes from 2.3 branch 2009-02-01 23:49:53 +00:00
i18nTextCollector.php ENHANCEMENT Allowing i18nTextCollector to discover entities in templates stored in themes/ directory (thanks nlou) (from r113918) 2011-02-02 14:20:01 +13:00
i18nTextCollectorTask.php MINOR Unified permission control for i18nTextCollectorTask, TaskRunner, TestRunner, ModelViewer, DevelopmentAdmin, TestViewer, MigrateTranslatableTask 2009-09-10 01:49:56 +00:00
ManifestBuilder.php MINOR Moved class-specific documentation from doc.silverstripe.org back into class-level PHPDoc 2011-02-02 14:19:38 +13:00
Object.php BUGFIX #5337: Allow decoration of DataObject 2011-02-02 14:19:11 +13:00
Requirements.php ENHANCEMENT: in referencing a file in combine_files() it should fall back to standard requirement tags if combining has been disabled eg dev mode 2011-02-02 14:19:33 +13:00
Session.php ENHANCEMENT Session::start() forces PHPSESSID cookies to be httpOnly (no access by JS) to improve clientside security (from r114567) 2011-02-02 14:20:04 +13:00
SSViewer.php ENHANCEMENT #6023 Shorten SSViewer cached template path for readability of the filenames, and also so Windows doesn't break on long paths 2011-02-02 14:19:52 +13:00
TokenisedRegularExpression.php Merged in parent::__construct() additions from branches/2.3 - r83580 and r83587 2009-09-18 03:02:19 +00:00
ValidationException.php MINOR phpdoc documentation 2009-03-22 22:59:14 +00:00
ValidationResult.php MINOR Removed message alteration from ValidationResult->error() to make it more predictable for string matching in unit tests like SecurityTest 2011-02-02 14:18:25 +13:00
ViewableData.php MINOR Using SecurityToken in ViewableData->getSecurityID() 2011-02-02 14:19:58 +13:00