silverstripe-framework

mirror of https://github.com/silverstripe/silverstripe-framework synced 2024-10-22 12:05:37 +00:00

Go to file

Ingo Schommer e1742760c0 BUGFIX Checking for existence of FormAction in Form->httpSubmission() to avoid bypassing $allowed_actions definitions in controllers containing this form

BUGFIX Checking for $allowed_actions in Form class, through Form->httpSubmission() (from r115182)

git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/sapphire/branches/2.3@115191 467b73ca-7a2a-4603-9d3b-597d59a354a9

2011-02-02 14:27:38 +13:00

api

BUGFIX Object subclasses with a constructor that didn't already will now call parent to respect inheritance

2011-02-02 14:27:31 +13:00

cli

API CHANGE: Replaced BasicAuth::enable() with BasicAuth::protect_entire_site()

2011-02-02 14:27:33 +13:00

conf

API CHANGE: Replaced BasicAuth::enable() with BasicAuth::protect_entire_site()

2011-02-02 14:27:33 +13:00

core

BUGFIX Checking for existence of FormAction in Form->httpSubmission() to avoid bypassing $allowed_actions definitions in controllers containing this form

2011-02-02 14:27:38 +13:00

css

BUGFIX: fixed clearing issue with IE7

2011-02-02 14:27:27 +13:00

dev

ENHANCEMENT Added SecurityToken to wrap CSRF protection via "SecurityID" request parameter (from r113272)

2011-02-02 14:27:36 +13:00

BUGFIX: Made use of new BasicAuth::protect_entire_site() consistent. (from r91658)

2011-02-02 14:27:34 +13:00

filesystem

API CHANGE Don't reflect changes in File and Folder property setters on filesystem before write() is called, to ensure that validate() applies in all cases. This fixes a problem where File->setName() would circumvent restrictions in File::$allowed_extensions (fixes #5693 )

2011-02-02 14:27:36 +13:00

forms

BUGFIX Checking for existence of FormAction in Form->httpSubmission() to avoid bypassing $allowed_actions definitions in controllers containing this form

2011-02-02 14:27:38 +13:00

images

FEATURE: added Smiliey support to BBCode / forum. Now BBCode supports :) :P :D :( 8-) and :^). Yays for icons. Should move from BBCodeParser to TextParser so its available in tinymce but this will do for the forum

2011-02-02 14:26:53 +13:00

integration

BUGFIX Disable Geoip if in CLI mode - this fixes the tests from breaking. The geoip command won't be available in CLI context

2011-02-02 14:27:18 +13:00

javascript

BUGFIX: convert ImageFormAction form prototype syntax to jQuery syntax

2011-02-02 14:27:34 +13:00

lang

MINOR Merged from trunk

2011-02-02 14:27:28 +13:00

parsers

Merging in refactored Translatable architecture from trunk, including related/required changesets like enhancements to Object static handling (see details below)

2011-02-02 14:27:16 +13:00

profiler

MINOR Removed whitespace after ?> end PHP tag

2011-02-02 14:26:45 +13:00

MINOR Merged from trunk

2011-02-02 14:27:25 +13:00

security

BUGFIX Avoid potential referer leaking in Security->changepassword() form by storing Member->AutoLoginHash in session instead of 'h' GET parameter (from r114758)

2011-02-02 14:27:38 +13:00

tasks

MINOR Merged from trunk

2011-02-02 14:27:25 +13:00

templates

BUGFIX Fixed Image_iframe.ss to use X-UA-Compatible IE7 emulation meta tag

2011-02-02 14:27:30 +13:00

tests

BUGFIX Checking for existence of FormAction in Form->httpSubmission() to avoid bypassing $allowed_actions definitions in controllers containing this form

2011-02-02 14:27:38 +13:00

thirdparty

MINOR Readded sapphire/thirdparty modules without svn:externals

2011-02-02 14:27:35 +13:00

widgets

Merged from trunk

2011-02-02 14:27:22 +13:00

_config.php

FEATURE: Allow access to the live site via RESTful api

2011-02-02 14:27:08 +13:00

.htaccess

BUGFIX Disallow web access to sapphire/silverstripe_version to avoid information leakage (from r114773)

2011-02-02 14:27:38 +13:00

cli-script.php

Removed #! entry from cli-script.php; its unreliable and cli-script.php should be called as 'php cli-script.php' instead

2008-10-13 21:25:30 +00:00

main.php

BUGFIX Disabled ?debug_profile=1 on live environment types (merged from r80057)

2011-02-02 14:27:34 +13:00

main.php5

Merging in refactored Translatable architecture from trunk, including related/required changesets like enhancements to Object static handling (see details below)

2011-02-02 14:27:16 +13:00

Makefile

MINOR Added querystring option to Makefile (from r103884)

2011-02-02 14:27:36 +13:00

sake

BUGFIX Supporting URLs with folder-structure in "sake -start <myprocessname> <myurl>"

2011-02-02 14:26:47 +13:00

silverstripe_version

fixed $

2007-12-14 04:35:28 +00:00

web.config

BUGFIX Disallow web access to sapphire/silverstripe_version to avoid information leakage (from r114773)

2011-02-02 14:27:38 +13:00