Commit Graph

3579 Commits

Author SHA1 Message Date
Stephen Shkardoon
114df8a3a5 FIX Prevent SQLi when no URL filters are applied 2014-03-19 19:09:58 +13:00
Ingo Schommer
b6194c304d Default CMSMain to Versioned::reading_stage("Stage")
Regression caused by https://github.com/silverstripe/silverstripe-framework/pull/2585
2013-11-20 14:26:48 +13:00
Ingo Schommer
92e0c410b8 Fixed report link escaping 2013-10-02 12:19:23 +02:00
Ingo Schommer
daf92e6ce0 FIX ReportAdmin report links regression
Regression from 79996a76fe,
escaped quotes are no longer necessary because the string
doesn't get eval'ed.
2013-10-01 11:17:36 +02:00
Ingo Schommer
30cf08b27e CMSMain assertion fail due to escaping
Validation messages are now HTML entity escaped when output to the user,
the assertion needs to reflect that
2013-09-27 19:38:12 +02:00
Ingo Schommer
0b073d2d0f Merge tag '3.0.6' into 3.0 2013-09-27 00:20:35 +02:00
Ingo Schommer
fbb9a4449d Removed stale salad tests, got behat now 2013-09-26 10:53:19 +02:00
Simon Welsh
cec5aa5ff1 Merge pull request #854 from chillu/pulls/escape-3.0
Escaping 3.0
2013-09-24 12:40:40 -07:00
Ingo Schommer
86339a551d Clearer escaping in CMSMain
No direct security issue, but makes intent clearer
2013-09-24 21:37:26 +02:00
Ingo Schommer
e170f4c21b FIX Escaping in "dependent pages" (SS-2013-009) 2013-09-24 21:37:26 +02:00
Ingo Schommer
79996a76fe Clearer escaping in ReportAdmin
No direct security issue since report titles can't be set by the user
2013-09-24 21:37:26 +02:00
Ingo Schommer
29e502a63a Hints for SiteTree.TreeTitle casting
Relates to SS-2013-009
2013-09-24 21:37:26 +02:00
Ingo Schommer
65939e1ede Tagged 3.0.6-rc2 2013-09-12 16:48:20 +02:00
Ingo Schommer
a2342ce1ff Updated translations 2013-09-12 16:37:43 +02:00
Ingo Schommer
2b20a02735 Merge pull request #840 from halkyon/compositefield_assetadmin_warning
AssetAdmin: PHP warning trying to add empty values into CompositeField
2013-08-28 06:44:09 -07:00
Sean Harvey
27749fdb7a AssetAdmin: PHP warning trying to add empty values into CompositeField
If the logged in user doesn't have permission to add a Folder record,
AssetAdmin::getEditForm() tries to enter an empty value into the
children of a ComposteField. This breaks SSViewer with a
call_user_func invalid args PHP warning.

Only include these buttons when they're available to the user.
2013-08-27 14:30:39 +12:00
Sam Minnée
d7d0cb45ae Merge pull request #824 from hafriedlander/fix/archivedate
FIX ArchiveDate enforcement
2013-08-08 17:38:53 -07:00
Sam Minnée
e922717b42 Merge pull request #825 from simonwelsh/canview
FIX Check for stage and drafts in SiteTree::canView()
2013-08-08 17:38:27 -07:00
Simon Welsh
b1664f86a4 FIX Check for stage and drafts in SiteTree::canView() 2013-08-09 10:45:09 +12:00
Hamish Friedlander
2fae9280e5 FIX ArchiveDate enforcement 2013-08-08 17:17:35 +12:00
Ingo Schommer
d01728675d Merge pull request #820 from chillu/pulls/transifex-3.0
Translations: Switch to Transifex format (3.0)
2013-08-07 08:09:11 -07:00
Ingo Schommer
3f118ef08f Translations: Switch to Transifex format
- Based on new (last) translation download from getlocalization.com
- Removed untranslated strings. Getlocalization started including those at some point
which is highly annoying, unnecessary and breaks the new transfix system,
since it'll mark all of the english strings as actual translations
- Avoid dots in entities. It confuses the Transifex YML parser
- Removed some locales unknown to Transifex which didn't have any translations anyway
- Removed "lolcat" locale, uses custom notation (en@lolcal)
  which SilverStripe's i18n system can't handle
  (needs mapping from SS naming to Zend naming)
- Renamed "Te Reo/Maori" locale from "mi_NZ" to "mi" (Transifex/CLDR notation)
- Namespaced all entities used in templates (deprecated usage)
- Converted dots to underscores where template filenames are used for namespaces,
since Transifex YML parsing handles them as separate YML keys otherwise
- Removed whitespace in entity names, SilverStripe i18n can't handle it
2013-08-04 12:28:07 +02:00
Simon Welsh
3a3e8f2faa Adds LoginForm as an allowed action
Behaves as a form method defined on ContentController
2013-07-14 17:21:59 +12:00
Simon Welsh
094039dbc8 Remove PHP 5.5 from allowed failures 2013-07-14 17:21:18 +12:00
Ingo Schommer
e194b962db PHP 5.5 CI, don't allow failures for sqlite3 and postgres 2013-07-04 23:01:09 +02:00
Mike Parkhill
c7f14129ea FIX #651 Broken redirection after creating new folder in assets 2013-06-13 14:58:09 +02:00
Ingo Schommer
d2105ef7a6 More verbose fixture step definitions
Too many clashes with other steps otherwise,
e.g. with 'And the preview contains "You can fill"'.
Also removed some duplicated code no longer necessary
because we use inheritance rather than composition
2013-06-05 14:25:29 +02:00
Ingo Schommer
8bd1e4373d Behat: Fixed spelling in test 2013-06-05 13:37:19 +02:00
Ingo Schommer
47d7a19a23 Behat: Replace @database-defaults with explicit fixtures 2013-06-05 13:30:15 +02:00
Ingo Schommer
e7cc08f6ae Behat: Auto-publishing SiteTree fixtures, RedirectorPage fixtures
They can be unpublished through an explicit step.
Extending from base FeatureContext in order to easily
share the same FixtureFactory but still add new blueprints to it.
2013-06-05 13:29:48 +02:00
Ingo Schommer
46d62efd81 Updated translations 2013-06-03 00:14:09 +02:00
Will Rossiter
2809b009a1 Merge pull request #186 from silverstripe-rebelalliance/api/translation_priority
Add config fragment for new i18n ordering system
2013-05-25 00:59:08 -07:00
Ingo Schommer
f64488b0d8 Merge pull request #751 from madmatt/fix_for_cms_issue_750
Fix Issue #750
2013-05-22 12:21:09 -07:00
Matt Peel
3cc6485c14 Add default params to _t() calls to ensure if a translation isn't found, it falls back to a useful English string 2013-05-21 14:57:29 +12:00
Ingo Schommer
041a8bd5a7 Update github path 2013-05-17 13:30:33 +02:00
Ingo Schommer
d7c937710a Merge remote-tracking branch 'origin/2.4' into 3.0
Conflicts:
	.travis.yml
	composer.json
2013-05-17 00:38:26 +02:00
Ingo Schommer
f8cfb5afd6 composer/installers dep workaround
Moved to end of requirements, to work around a bug in composer - see https://github.com/composer/composer/issues/1147. This caused the dependencies to be installed in the wrong folder because the custom 'silverstripe-module' instructions hadn't been loaded at the time the core modules were installed via composer.
2013-04-30 19:09:16 +03:00
Ingo Schommer
04bb85a78d Removed LOLCAT locale - sadly not supported by our translation infrastructure
It breaks the CMS when selected. If there's interest in maintaining it,
we can re-add. Fixes https://github.com/silverstripe/sapphire/issues/1457
2013-04-04 10:58:11 +02:00
Ingo Schommer
b872714082 Added installer link to readme 2013-04-02 01:52:17 +02:00
Ingo Schommer
babdcc9eea Updated bugtracker links 2013-04-02 01:19:03 +02:00
Ingo Schommer
c62eb05518 More straightfoward travis include/exclude 2013-03-28 22:54:32 +01:00
Ingo Schommer
36352fdc68 Fixed missing cmd in travis setup 2013-03-28 21:31:27 +01:00
Ingo Schommer
b23c9bba82 Simplified travis builds (external setup scripts) 2013-03-28 21:15:11 +01:00
Ingo Schommer
f212ebe0f0 Simplified travis builds (external setup scripts) 2013-03-28 21:11:38 +01:00
Ingo Schommer
0ebd52516b FIX Unset "underneath page" title when switching to "top" in "add page" 2013-03-25 23:41:21 +01:00
Ingo Schommer
0aeace2aec Merge remote-tracking branch 'origin/2.4' into 3.0
Conflicts:
	code/CommentAdmin.php
2013-03-19 13:51:22 +01:00
Ingo Schommer
79c9d31099 Merge pull request #303 from uniun/patch-1
BUG SilverStripeNavigator shows wrong message.
2013-03-19 01:23:21 -07:00
uniun
e8f7f3db7f Make message always visible at the top of the page
Make message always visible at the top of the page like the message in CMS preview iframe.
2013-03-18 16:29:10 +02:00
uniun
db853f2c3c Make message always visible at the top of the page
Make message always visible at the top of the page like the message in CMS preview iframe.
2013-03-18 16:28:28 +02:00
uniun
5c933b40e5 BUG SilverStripeNavigator shows wrong message.
The message was always 'Published Site'.
Also there were no 'active' class on links.
2013-03-18 15:57:20 +02:00