mirror of
https://github.com/silverstripe/silverstripe-framework
synced 2024-10-22 14:05:37 +02:00
49 lines
4.6 KiB
Markdown
49 lines
4.6 KiB
Markdown
# 4.4.3
|
|
|
|
Embedding files with shortcodes (`FileShortcodeProvider`) no longer provides a session grant
|
|
by default. This is because it has the potential to escalate file access
|
|
to users who otherwise should not have viewing permissions for the file.
|
|
|
|
There is a minor performance trade-off for disabling these grants. If you have a page with a lot of
|
|
images that are in a draft state or have custom viewing permissions, it adds an extra database
|
|
query for each embedded image. With session grants enabled, the first permission check persists
|
|
the grant into the session, meaning there is no need to query the database on every single file.
|
|
|
|
Unless you have a lot of shortcode images embedded with protected or draft status on a single page,
|
|
this setting is best left to its default value of `false`.
|
|
|
|
To revert to the old behaviour:
|
|
|
|
```
|
|
SilverStripe\Assets\Shortcodes\FileShortcodeProvider:
|
|
allow_session_grant: true
|
|
```
|
|
|
|
## Change Log
|
|
|
|
### Bugfixes
|
|
|
|
* 2019-08-19 [9796bba](https://github.com/silverstripe/silverstripe-admin/commit/9796bbae0a7645c47aab43bfb47dd5810ad5e019) Ensure IE renders the CMS UI at full width consistently (Garion Herman)
|
|
* 2019-08-18 [0d18858](https://github.com/silverstripe/silverstripe-versioned-admin/commit/0d18858397d16abd6629a780fede11a67101157c) Keep CompareWarningComponent DOM placement consistent to fix… (#128) (Guy Marriott)
|
|
* 2019-08-18 [0bf673b](https://github.com/silverstripe/silverstripe-admin/commit/0bf673bfba83e666b031c2be738404a9d1b8f5e7) Use 0% rather than auto as flex-basis to render correct widt… (#934) (Guy Marriott)
|
|
* 2019-08-18 [aa5b046](https://github.com/silverstripe/silverstripe-versioned-admin/commit/aa5b04618886a1e90ec8f7694b794c3fa2d64358) Keep CompareWarningComponent DOM placement consistent to fix IE 11 (Garion Herman)
|
|
* 2019-08-18 [4ec8b1b](https://github.com/silverstripe/silverstripe-admin/commit/4ec8b1b82d4ad2e5bdd864f259c40f8c7dc9d921) Use 0% rather than auto as flex-basis to render correct widths (Garion Herman)
|
|
* 2019-08-15 [8ba44433](https://github.com/silverstripe/silverstripe-cms/commit/8ba444332adc11bd1d4453e6b966ef737199d20b) pull up anchors that have been added for linking to (Dylan)
|
|
* 2019-08-15 [bae7e3268](https://github.com/silverstripe/silverstripe-framework/commit/bae7e3268016c2ccb9d77b72eef22cf778149c15) Member::changePassword() no longer applies password validation rules to the hashed value (Robbie Averill)
|
|
* 2019-08-15 [f354e2018](https://github.com/silverstripe/silverstripe-framework/commit/f354e2018df29da8c4484577bd9356f6bc8c694c) Set minimum test scores and password length for Members while running fixtured DataObject tests (Robbie Averill)
|
|
* 2019-08-14 [9889015](https://github.com/silverstripe/silverstripe-admin/commit/9889015eccd05c099e3d8b3d3ce52f179b5b9933) Display breadcrumb element from left to right (#925) (Guy Marriott)
|
|
* 2019-08-13 [b239b8b](https://github.com/silverstripe/silverstripe-admin/commit/b239b8b00399f0aa6047dcd858f4db1ca04c0637) re-enable ability to insert anchors (Dylan Wagstaff)
|
|
* 2019-08-12 [65f4ec5e](https://github.com/silverstripe/silverstripe-cms/commit/65f4ec5e37c3255bb46afa24286a3e34f6ba8f01) IE 11 rendering issues in Page Editor UI (Garion Herman)
|
|
* 2019-08-12 [2fd980f](https://github.com/silverstripe/silverstripe-admin/commit/2fd980f967a28defd1d737a19d77c9f3769adb07) IE 11 rendering issues in ModelAdmin UIs (Garion Herman)
|
|
* 2019-08-09 [a2e98dc](https://github.com/silverstripe/silverstripe-admin/commit/a2e98dcf71353951055cb0f2da286a0455a66ebe) Display breadcrumb element from left to right (Maxime Rainville)
|
|
* 2019-08-09 [3d989a6ea](https://github.com/silverstripe/silverstripe-framework/commit/3d989a6eae979f2671889376179dfdc7085658ac) Use content generated by DataColumns component for print and csv export (Guy Marriott)
|
|
* 2019-07-25 [40cd66852](https://github.com/silverstripe/silverstripe-framework/commit/40cd66852e8d3a5d56c56b9d279cb89a98e3c16d) Fixed issue where multiple relationship sort order columns would be lost in favor of only the last relationship column in the sort order (UndefinedOffset)
|
|
* 2019-06-05 [bcc55e2](https://github.com/silverstripe/silverstripe-admin/commit/bcc55e212384cdc36728224730dbf6db320acb10) Update modal designs to match design pattern library (Guy Marriott)
|
|
|
|
### Other changes
|
|
|
|
* 2019-08-15 [11a7d6ccb](https://github.com/silverstripe/silverstripe-framework/commit/11a7d6ccb4c2bb416dd58261d46b6e70fa8ad0d9) Rename test to be clearer about its intent (Robbie Averill)
|
|
* 2019-07-29 [c1ffc4edf](https://github.com/silverstripe/silverstripe-framework/commit/c1ffc4edfb4c2c06da5a6a04ba5b9ea3fcc60f1a) Added unit tests for multiple relationship sorting (UndefinedOffset)
|
|
|
|
<!--- Changes above this line will be automatically regenerated -->
|