==================== 2.0.1 ==================== ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Base Distribution ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [TASK] Fix create-branch dependency handling ----------------------------------------------------------------------------------------- * Commit: `7bdf476 `_ [TASK] Some tweaks to the release scripts ----------------------------------------------------------------------------------------- * Commit: `ef4373b `_ [BUGFIX] Fix commit links in create-changelog.sh script ----------------------------------------------------------------------------------------- Link to correct URI for git.typo3.org commit details. * Commit: `d7d0522 `_ [TASK] Tweak to create-changelog.sh script ----------------------------------------------------------------------------------------- Also link FLOW-SA-… bulletins * Commit: `5fc1627 `_ [TASK] Add suggestion for pdo_sqlite to composer manifest ----------------------------------------------------------------------------------------- For running the functional tests out-of-the-box pdo_sqlite is required, so inform about that during installation. * Commit: `b44f1fb `_ [TASK] Update vfsstream requirement to 1.2.* ----------------------------------------------------------------------------------------- This updates the requirement for mikey179/vfsstream from 1.1.* to 1.2.*. * Commit: `e8448da `_ [TASK] Tweak scripts to help with releases and branching ----------------------------------------------------------------------------------------- * Commit: `5c6251e `_ [TASK] Add scripts to help with releases and branching ----------------------------------------------------------------------------------------- This adds a number of scripts specific to the Flow distribution to aid with creating new branches and for releasing new versions. * Commit: `88d2676 `_ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ TYPO3.Flow ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [TASK] Update references in documentation ----------------------------------------------------------------------------------------- See http://ci.typo3.robertlemke.net/job/typo3-flow-release/7/ * Commit: `32fb9ef `_ [SECURITY] Remove possible XSS from ActionController Error output ----------------------------------------------------------------------------------------- The errorAction method in the ActionController base class of Flow returns error messages without properly encoding them. Because these error messages can contain user input, this could lead to a Cross-Site Scripting vulnerability in Flow driven applications. The offending output has been removed without substitution. Hint: If you have customized the error action in your Flow application, we advise you to check that the error messages returned in these actions only contain static strings and are not derived from any kind of user input. If you are not sure whether your code is fine in that regard, feel free to ask on a public mailing list or the forum. * Fixes: `#31206 `_ Security-Bulletin: TYPO3-FLOW-SA-2013-001 * Commit: `170b2b1 `_ [TASK] Update contributors list in guide ----------------------------------------------------------------------------------------- * Commit: `4e3b3c7 `_ [TASK] Improve documentation for excludeClasses setting ----------------------------------------------------------------------------------------- * Commit: `e5073a3 `_ [TASK] Mention PHP closing tag omission in CGL ----------------------------------------------------------------------------------------- This updates the Coding Guidelines to omit the PHP closing tag. * Commit: `843cae1 `_ [TASK] Replace some leftover FLOW3 in tests ----------------------------------------------------------------------------------------- * Commit: `eac16e7 `_ [BUGFIX] UUID Validator rejects too long UUIDs ----------------------------------------------------------------------------------------- Now the validation regex has start- and end of string boundaries, hence rejecting strings which only contain a valid UUID, but having extraordinary strings before or behind. * Fixes: `#52311 `_ * Commit: `0b91dd2 `_ [BUGFIX] Skip csrf protection for authenticate action ----------------------------------------------------------------------------------------- As the authenticate action is usually called by a POST request, this request is considered a non safe request. However, as you are most likely not logged in when calling authenticate, csrf protection is neither working nor needed. * Commit: `dac79bb `_ [BUGFIX] FileBasedSimpleKeyProvider has to authenticate an account with roles ----------------------------------------------------------------------------------------- To be able to use real role based authorization with the FileBasedSimpleKeyProvider, we have to authenticate an account which holds existing roles. * Commit: `d56e646 `_ [BUGFIX] Transient Properties should not be serialized ----------------------------------------------------------------------------------------- Properties annotated with the \\TYPO3\\Flow\\Annotations\\Transient annotation should not be serialized in the autogenerated __sleep method. * Fixes: `#52448 `_ * Commit: `26ee5d8 `_ [TASK] Make code migration checking roles in policies more robust ----------------------------------------------------------------------------------------- The migration checking for the use of globally defined roles identifier was a bit too eager in working on packages without Policy.yaml and/or role definitions, plus it did not skip local roles in ACLs. * Commit: `85556d0 `_ [BUGFIX] Allow access to resources GRANTED to "Everybody" ----------------------------------------------------------------------------------------- PolicyEnforcement does no longer throw an AccessDenied exception if not logged in before checking the actual ACLs for the resource in question. This allows creating resources and granting access to them for "Everybody" which was not possible before. * Fixes: `#46036 `_ * Commit: `b6768cc `_ [TASK] Clean up tests and fix for PHPUnit 3.8 ----------------------------------------------------------------------------------------- * Commit: `10b33e8 `_ [TASK] Fix typo in name of "Joel on Software" ----------------------------------------------------------------------------------------- * Commit: `8880548 `_ [BUGFIX] Fix race condition when setting cache entries ----------------------------------------------------------------------------------------- This change adds the uniqid() to the temporary filename again and adds the process id (if the function "posix_getpid" is present) as another unique identifier. * Fixes: `#33621 `_ * Commit: `54486a0 `_ [TASK] Update and fix CGL, add PDF to Flow package ----------------------------------------------------------------------------------------- Updates and fixes the CGL to be on par with the master version, only the namespace handling is omitted as it is not supported in 2.0. Includes the "TYPO3 Flow Coding Guidelines on one page" PDF as asset to the Flow documentation, fixing the download. This also links the CGL thumbnail with the PDF and moves images two levels up in the directory structure. * Commit: `c50e02f `_ [TASK] Fix license in file level docblocks ----------------------------------------------------------------------------------------- * Related: `#50835 `_ * Commit: `a0af240 `_ [TASK] use 'note' to make statement more catching ----------------------------------------------------------------------------------------- * Commit: `cedb88e `_ [BUGFIX] Broken annotation in documentation ----------------------------------------------------------------------------------------- * Commit: `2a9d929 `_ [BUGFIX] Replace wrong keyword in documentation ----------------------------------------------------------------------------------------- * Commit: `deef437 `_ [BUGFIX] ControllerContext constructor has 4 arguments ----------------------------------------------------------------------------------------- ControllerContext constructor has no flashMessageContainer argument, 5th argument. * Fixes: `#49923 `_ * Commit: `5829189 `_ [BUGFIX] Cache Management Exception when files changed but no classes ----------------------------------------------------------------------------------------- When classes did not change, but other files did, an exception occurs because $modifiedClassNamesWithUnderscores does not exist, as it can be seen when reading the source code. * Resolves: `#49571 `_ * Commit: `7948698 `_ [TASK] Document translated validation error messages ----------------------------------------------------------------------------------------- This adds documentation on how to use translated validation error messages. * Resolves: `#48251 `_ * Commit: `405cf6d `_ [TASK] Add german translation for validation error messages ----------------------------------------------------------------------------------------- This adds german translatsions for bundled validation error messages. * Resolves: `#48254 `_ * Related: `#45279 `_ * Commit: `205a369 `_ [BUGFIX] Comment now references to the correct method name ----------------------------------------------------------------------------------------- * Fixes: `#48557 `_ * Commit: `0c04d16 `_ [BUGFIX] Use deterministic join aliases ----------------------------------------------------------------------------------------- Before this change, we used uniqid() for building join aliases. This prevented the doctrine DQL cache to work correctly. We found this change during profiling TYPO3 Neos, where it led to about 10% performance increase in frontend rendering. * Resolves: `#49569 `_ * Commit: `95032c6 `_ [BUGFIX] Behave silently if no translation unit elements are present ----------------------------------------------------------------------------------------- If a translation source does not contain any translationUnit elements, which is allowed in XLIFF for elements inside //file/body, now there is no Undefined Index error anymore, but the incident is silently logged to the system logger as every other translation-related incident. * Fixes: `#47058 `_ * Commit: `850bd55 `_ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ TYPO3.Fluid ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [TASK] Fix license in file level docblocks ----------------------------------------------------------------------------------------- * Related: `#50835 `_ * Commit: `b7c8a29 `_ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ TYPO3.Kickstart ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [TASK] Fix license in file level docblocks ----------------------------------------------------------------------------------------- * Related: `#50835 `_ * Commit: `7eeeb6d `_ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ TYPO3.Party ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ No changes ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ TYPO3.Welcome ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ No changes