tonyair/silverstripe-framework
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-framework synced 2024-10-22 14:05:37 +02:00
Code Issues Projects Releases Wiki Activity
ca63e33c19
silverstripe-framework/tests/forms
History
Ingo Schommer fb784af738 API Enforce $allowed_actions in RequestHandler->checkAccessAction() 
See discussion at https://groups.google.com/forum/?fromgroups#!topic/silverstripe-dev/Dodomh9QZjk

Fixes an access issue where all public methods on FormField were allowed,
and not checked for $allowed_actions. Before this patch you could e.g.
call FormField->Value() on the first field by using action_Value.

Removes the following assertion because it only worked due to RequestHandlingTest_AllowedControllerExtension
*not* having $allowed_extensions declared: "Actions on magic methods are only accessible if explicitly allowed on the controller."
2013-06-24 14:50:40 +02:00
..
gridfield API Enforce $allowed_actions in RequestHandler->checkAccessAction() 2013-06-24 14:50:40 +02:00
uploadfield Fixed scrutiniser issues 2013-05-27 15:42:10 +12:00
CheckboxFieldTest.php Merge remote-tracking branch 'origin/3.0' into 3.1 2013-04-12 01:13:32 +02:00
CheckboxSetFieldTest.php API Marked statics private, use Config API instead (#8317) 2013-03-24 17:20:53 +01:00
CheckboxSetFieldTest.yml Revert "ENHANCEMENT Support numeric array values in CheckboxSetField (?Field[]=val1&Field[]=val2 instead of ?Field[val1]=1&Field[val2]=1)" - data handling with numeric/associative arrays too clumsy, fixed up ListboxField instead 2012-03-05 10:55:44 +01:00
CompositeFieldTest.php Method visibility according to coding conventions 2012-09-20 10:46:59 +02:00
ConfirmedPasswordFieldTest.php FIX: ConfirmedPasswordField used to expose existing hash 2013-06-20 14:09:30 +12:00
CurrencyFieldTest.php Method visibility according to coding conventions 2012-09-20 10:46:59 +02:00
DateFieldTest.php API Marked statics private, use Config API instead (#8317) 2013-03-24 17:20:53 +01:00
DatefieldViewJQueryTest.php Method visibility according to coding conventions 2012-09-20 10:46:59 +02:00
DatetimeFieldTest.php API Marked statics private, use Config API instead (#8317) 2013-03-24 17:20:53 +01:00
DropdownFieldTest.php NEW Disable items in DropdownField and GroupedDropdownField 2013-01-11 16:32:20 +01:00
EmailFieldTest.php API Enforce $allowed_actions in RequestHandler->checkAccessAction() 2013-06-24 14:50:40 +02:00
FieldListTest.php API: Allow array of fields passed to FieldList::removeByName() 2013-05-25 15:31:30 +12:00
FileFieldTest.php Add codesniffer that ensures indentation is with tabs. 2012-12-12 17:33:31 +13:00
FormActionTest.php BUGFIX: Fix correct input type for ImageFormAction replaces. 2012-06-13 09:57:54 +02:00
FormFieldTest.php BUG Remove .ss-tabset class from CMS tabs to prevent rogue ajax load (#7980) 2012-11-01 00:25:13 +01:00
FormScaffolderTest.php API Marked statics private, use Config API instead (#8317) 2013-03-24 17:20:53 +01:00
FormScaffolderTest.yml FEATURE Added ForeignKey and used it in relation- and databasefield getters in DataObject 2008-10-13 22:20:41 +00:00
FormTest.php API Enforce $allowed_actions in RequestHandler->checkAccessAction() 2013-06-24 14:50:40 +02:00
FormTest.yml BUGFIX Adjusted FormTest->testLoadDataFromObject() to new assumptions about changed behaviour on loadDataFrom() from $loadBlanks to $clearMissingFields - which means that form fields are cleared regardless if they have blank values in the passed object or not 2008-10-09 14:40:13 +00:00
GridFieldTest.php API Marked statics private, use Config API instead (#8317) 2013-03-24 17:20:53 +01:00
HtmlEditorConfigTest.php Method visibility according to coding conventions 2012-09-20 10:46:59 +02:00
HtmlEditorFieldTest.php API Marked statics private, use Config API instead (#8317) 2013-03-24 17:20:53 +01:00
HtmlEditorFieldTest.yml ENHANCEMENT Inserting image via new dialog with ajax field retrieval and GridField file selection. Rewritten to jQuery.entwine and using the new HTML editor abstraction layer. 2012-02-14 13:53:35 +01:00
ListboxFieldTest.php API Marked statics private, use Config API instead (#8317) 2013-03-24 17:20:53 +01:00
ListboxFieldTest.yml ENHANCEMENT Relationship saving in ListboxField (preparing for chosen.js usage), escaping commas in payload when serialising multiple values into a single field 2012-03-05 10:55:09 +01:00
LookupFieldTest.php FIX: Add support for multi dimensional source arrays in LookupField (open/6132) 2013-05-11 00:01:39 +12:00
LookupFieldTest.yml BUGFIX Added support for array values in LookupField, to ensure it works correctly when used as a readonly representation of ListboxField (AIR-39) 2011-10-07 14:12:49 +02:00
MemberDatetimeOptionsetFieldTest.php API Marked statics private, use Config API instead (#8317) 2013-03-24 17:20:53 +01:00
MemberDatetimeOptionsetFieldTest.yml ENHANCEMENT #5352 Decouple date display from i18n locales, users now have access to change their date and time formats in Member::getCMSFields() using Member_DatetimeOptionsetField field (from r107326) 2010-10-15 03:23:02 +00:00
MoneyFieldTest.php API Marked statics private, use Config API instead (#8317) 2013-03-24 17:20:53 +01:00
NullableFieldTests.php Method visibility according to coding conventions 2012-09-20 10:46:59 +02:00
NumericFieldTest.php FIX: NumericField should work with numbers like 54,6 2013-05-11 22:51:39 +12:00
OptionsetFieldTest.php Method visibility according to coding conventions 2012-09-20 10:46:59 +02:00
RequirementsTest_a.css ENHANCEMENT Using namespaces for filenames in RequirementsTest 2008-11-01 14:04:31 +00:00
RequirementsTest_a.js ENHANCEMENT Using namespaces for filenames in RequirementsTest 2008-11-01 14:04:31 +00:00
RequirementsTest_b.css ENHANCEMENT Using namespaces for filenames in RequirementsTest 2008-11-01 14:04:31 +00:00
RequirementsTest_b.js ENHANCEMENT Using namespaces for filenames in RequirementsTest 2008-11-01 14:04:31 +00:00
RequirementsTest_c.css ENHANCEMENT Using namespaces for filenames in RequirementsTest 2008-11-01 14:04:31 +00:00
RequirementsTest_c.js ENHANCEMENT Using namespaces for filenames in RequirementsTest 2008-11-01 14:04:31 +00:00
RequirementsTest_print_a.css API Add possibility to combine media-targeting stylesheets. 2013-02-13 11:04:05 +13:00
RequirementsTest_print_b.css API Add possibility to combine media-targeting stylesheets. 2013-02-13 11:04:05 +13:00
RequirementsTest.php Removed stray ampersand in Requirements (fixes #1809) 2013-04-30 00:35:25 +02:00
SelectionGroupTest.php SimpleXML string casting in tests for older PHPUnit 2012-12-17 15:46:09 +01:00
TextareaFieldTest.php FIX Remove instances of lines longer than 120c 2012-09-30 17:18:13 +13:00
TimeFieldTest.php API Marked statics private, use Config API instead (#8317) 2013-03-24 17:20:53 +01:00