==================== 2.1.0-beta1 ==================== ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Base Distribution ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [TASK] Fix version requirements on packages ----------------------------------------------------------------------------------------- * Commit: `243a603 `_ [TASK] Update composer manifest ----------------------------------------------------------------------------------------- See http://ci.typo3.robertlemke.net/job/typo3-flow-branch/3/ * Commit: `9ad8d71 `_ [BUGFIX] Fix commit links in create-changelog.sh script ----------------------------------------------------------------------------------------- Link to correct URI for git.typo3.org commit details. * Commit: `7a84b99 `_ [TASK] Tweak to create-changelog.sh script ----------------------------------------------------------------------------------------- Also link FLOW-SA-… bulletins * Commit: `953bb77 `_ [TASK] Add installer scripts for package installs ----------------------------------------------------------------------------------------- Add configuration to manifest that calls scripts on every package install. See also I06a2c5e35004f400291e7697c215bea8e685266b. * Commit: `a15031c `_ [TASK] Update vfsstream requirement to 1.2.* ----------------------------------------------------------------------------------------- This updates the requirement for mikey179/vfsstream from 1.1.* to 1.2.*. * Commit: `976ee75 `_ [TASK] Tweak scripts to help with releases and branching ----------------------------------------------------------------------------------------- * Commit: `a7a335b `_ [TASK] Add scripts to help with releases and branching ----------------------------------------------------------------------------------------- This adds a number of scripts specific to the Flow distribution to aid with creating new branches and for releasing new versions. * Commit: `543b408 `_ [BUGFIX] Use @dev version of TYPO3.Eel ----------------------------------------------------------------------------------------- * Related: `#42176 `_ * Commit: `0346b3e `_ [TASK] Add suggestion for pdo_sqlite to composer manifest ----------------------------------------------------------------------------------------- For running the functional tests out-of-the-box pdo_sqlite is required, so inform about that during installation. * Commit: `26b5162 `_ [TASK] Removed minimum stability setting ----------------------------------------------------------------------------------------- This removes the minimum-stability so tagged releases of dependencies are used. It explicitly allows dev versions for typo3/fluid, typo3/party (because we want to use them as dev-master) and doctrine/migrations (because no suitable stable release exists). This change speeds up installation (because zip archives will be used instead of git clones) and avoids surprises due to possibly unstable 3rd party code being pulled in. * Related: `#47808 `_ * Commit: `b748f0e `_ [TASK] Remove Jenkins repository from composer manifest ----------------------------------------------------------------------------------------- Since our packages are on Packagist now, the Satis repository on Jenkins should no longer be used by the public. * Resolves: `#44022 `_ * Commit: `035be38 `_ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ TYPO3.Eel ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ No changes ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ TYPO3.Flow ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [TASK] Update references in documentation ----------------------------------------------------------------------------------------- See http://ci.typo3.robertlemke.net/job/typo3-flow-release/4/ * Commit: `ae6e2b9 `_ [TASK] Fix version requirement on Fluid, Party, Eel ----------------------------------------------------------------------------------------- * Commit: `0734892 `_ [TASK] Update composer manifest ----------------------------------------------------------------------------------------- See http://ci.typo3.robertlemke.net/job/typo3-flow-branch/3/ * Commit: `47f7996 `_ [TASK] Update Readme.txt and Upgrading.txt for 2.1 ----------------------------------------------------------------------------------------- * Commit: `03bc52c `_ [!!!][FEATURE] Deprecated base tag ----------------------------------------------------------------------------------------- Currently the ``UriBuilder`` creates relative URLs with relative paths in the form "some/path.html" by default. This change adjusts the ``UriBuilder`` to prefix URLs with the scripts request path (usually "/" or "/document-root/"). This makes the ```` tag redundant for most scenarios, even when working with relative URLs. This is not a breaking change per se, because using the base tag doesn't break the behavior. But it has an impact on all relative URLs created by the ``UriBuilder``. If you expect the rendered HTML to contain URLs in the form "some/path.html" (that is: without leading slash) you might need to adjust your code or set the compatibilty flag that is introduced with this change:: TYPO3: Flow: compatibility: uriBuilder: createRelativePaths: TRUE NOTE: This flag will be deprecated with version 2.2 and removed with version 3.0 of Flow. It's recommended to adjust your code so that it does not rely on the generated URLs * Resolves: `#53827 `_ * Commit: `5d1a49f `_ [FEATURE] Support injecting Settings through annotation ----------------------------------------------------------------------------------------- This change extends the existing inject annotation with two new options. * setting: to specify a path to a setting that should be injected into that property * package: the package to load the setting from, by default the package that the class belongs to The main goal is to make the access to settings more convenient, because you currently need to inject the configurationManager and get the setting manually from it, even if you only need one simple string. As a best practice the user should add an setter for it's settings as well, but this is only to make more portable. This change does not need a setter. Example:: /** * @var string * @Flow\\Inject(setting="my.setting") */ protected $foo; /** * @var string * @Flow\\Inject(setting="core.phpBinaryPathAndFilename", package="TYPO3.Flow") */ protected $phpBinary; * Commit: `4637831 `_ [BUGFIX] Fix IdentityRoutePart unit tests ----------------------------------------------------------------------------------------- This fixes unit tests that fail since merging of I071ae923924f3a98c673b79ef969a9a31c3f4942 * Commit: `b143947 `_ [BUGFIX] Package Manager needs to sort active packages in dependency order ----------------------------------------------------------------------------------------- Problem: If being in production context and the configuration cache is still empty, it might happen that $this->activePackages is not sorted in the correct order of package dependencies, but $this->packages is. This leads to wrongly merged configuration, which is then cached. This problem might also occur in development context, but only on first hit. After a reload it is gone. This change is a fix which makes sure the order in activePackages is the same as in packages. * Commit: `4554800 `_ [FEATURE] documentation of the authentication process ----------------------------------------------------------------------------------------- * Commit: `184a0ec `_ [BUGFIX] Composer installer scripts create a .Packages folder ----------------------------------------------------------------------------------------- The composer installer scripts create a .Packages folder inside the root of the Flow project. This is incorrect as the created directory should be inside the Packages folder. * Related: `#53961 `_ * Commit: `340139c `_ [BUGFIX] ActionRequest should not serialize parent HTTP request ----------------------------------------------------------------------------------------- When working with WebRedirects and authentication, the intercepted request is serialized with the security context. While it makes sense to do so, we should *not* include the reference to the base HTTP request in this case, as this includes lots of cruft like $_SERVER etc. In order to test this, just look at the serialized session files when a web redirect is taking place. * Resolves: `#53931 `_ * Commit: `6ec233e `_ [BUGFIX] Fix wrong order of conditions for Request port check ----------------------------------------------------------------------------------------- In the last patch set of change I4fae171d701c060841b154362644611602b60da0 I broke the actual functionality be choosing the wrong order for the if conditions. * Commit: `9f3b313 `_ [FEATURE] Acknowledge X-FORWARDED-PORT header sent by proxy ----------------------------------------------------------------------------------------- This adjusts Http\\Uri and Http\\Request to detect and acknowledge an X-FORWARDED-PORT header sent by a proxy. It also introduces a new method getPort() to the Request object. * Commit: `6949e14 `_ [TASK] Remove persistAll() from IdentityRoutePart ----------------------------------------------------------------------------------------- Having IdentityRoutePart call persistAll() could have very weird and unexpected side effects, not even mentioning “safe request”. This change limits the persist operation to the items managed by the ObjectPathMappingRepository. * Commit: `6dad43e `_ [BUGFIX] Fix broken unit test for ConfigurationManager ----------------------------------------------------------------------------------------- Fixes a unit test that broke with a previous commit * Commit: `52e2d76 `_ [TASK] Add additional safeguard for corrupt user sessions ----------------------------------------------------------------------------------------- This adds an additional check into Context->getPartyByType() to avoid "called member function on a non-object" errors if a user seems to be authenticated but, for some reason, the token could not provide the respective account. * Commit: `b8cec90 `_ [TASK] Remove left over PHP closing tags ----------------------------------------------------------------------------------------- * Commit: `2e1edd6 `_ [BUGFIX] Fix wrong exception class name ----------------------------------------------------------------------------------------- In change I048360fc8883942d6561be92c2d0ad915e9f164e an exception was moved around and not adjusted in all places. * Commit: `3fd5ad9 `_ [TASK] Remove unused use statements ----------------------------------------------------------------------------------------- * Commit: `5e1a859 `_ [TASK] CGL Fixes ----------------------------------------------------------------------------------------- * Removes indent from inline comments * Fixes several docblock issues * Fixes inline conditions * Commit: `e53648c `_ [TASK] Mention PHP closing tag omission in CGL ----------------------------------------------------------------------------------------- This updates the Coding Guidelines to omit the PHP closing tag. * Commit: `d9d6ff9 `_ [TASK] Remove PHP closing tag ----------------------------------------------------------------------------------------- * Commit: `181a01b `_ [BUGFIX] var_dump() is unstyled if Flow is not in docroot ----------------------------------------------------------------------------------------- If TYPO3 Flow is not directly in the document root the var_dump output is unstyled as the path to the external CSS can not be loaded. By loading all CSS inline and replacing the background image by CSS there's no need to load external resources anymore. * Related: `#52711 `_ * Commit: `e7499ac `_ [BUGFIX] Safeguard against illegal filenames below Classes ----------------------------------------------------------------------------------------- If a filename below Classes in a package contains dots, Flow breaks when it tries to flush caches during startup. See https://phpexcel.codeplex.com/workitem/20336 for an example of such a filename, even though PSR-0 does not allow such names. * Commit: `cebda03 `_ [TASK] Update commit message documentation ----------------------------------------------------------------------------------------- Tweaks the documentation for proper git commit messages and adds some examples. * Commit: `7534a58 `_ [TASK] Improve documentation for excludeClasses setting ----------------------------------------------------------------------------------------- * Commit: `be54ffb `_ [BUGFIX] Request::getRelativePath() must not return FALSE ----------------------------------------------------------------------------------------- This makes sure that ``Request::getRelativePath()`` always returns a string. This getter has been introduced with I48548b6f1465d6b509298d42cff39242040e7782, but it returned FALSE if the base URI path was longer or as long as the current URI path which is the case for the root URI. * Commit: `2955be4 `_ [BUGFIX] Expose more details in MappingExceptions ----------------------------------------------------------------------------------------- This adds a try/catch block to the FlowAnnotationDriver adding the affected class name to the message of the thrown exception. Before if ``evaluatePropertyAnnotations`` threw an exception during the ``flow:doctrine:compileproxies`` command the exception did not contain details about the affected class (see #52907). * Fixes: `#52907 `_ * Commit: `7e0c425 `_ [FEATURE] Add tagging to router cache ----------------------------------------------------------------------------------------- This adjusts the RouterCachingService to tag every Routing cache entry with any UUID the routeValues/matchResult contain. This will make it possible to flush caches only for affected entities. * Related: `#29972 `_ * Commit: `2b702b0 `_ [TASK] Get rid of RouterCachingAspect ----------------------------------------------------------------------------------------- This moves code from the RouterCache AOP aspect to the Router itself making the aspect redundant. Before the cache handling of the Routing Framework has been extracted to an AOP aspect in order to keep the Router code simple. Since the introduction of the RouterCachingService (#52452) this is no longer required. * Resolves: `#52704 `_ * Related: `#52452 `_ * Commit: `d645b05 `_ [TASK] Cleanup RouterCachingService ----------------------------------------------------------------------------------------- Some (mostly cosmetic) adjustments to our CGL and some renamings to increase readability. This also renames the misleading method Route::getMatchingUri() by Route::getResolvedUriPath(). The old method is still available as deprecated alias. * Related: `#52452 `_ * Commit: `2a4a7f4 `_ [TASK] Move isConnected from role repository to persistence manager ----------------------------------------------------------------------------------------- To make isConnected api, we have to move it to some central place. The persistence manager seems to be a lot better place, than the persistence repository, as it is not reference as much in user code. * Resolves: `#52846 `_ * Commit: `2df9c7c `_ [BUGFIX] Role handling depends on an active database connection ----------------------------------------------------------------------------------------- The PolicyService now depends on having an active database connection. This connection is not always available (like in the Neos setup) and is not required at all for authentication using in memory roles like the system roles. This change updates the PolicyService to ignore synchronization if the RoleRepository has no active database connection, and makes the FileBasedSimpleKeyProvider use a Role object which only exists in memory. * Commit: `3ba15f0 `_ [BUGFIX] Don't catch security exceptions during property mapping ----------------------------------------------------------------------------------------- As security exceptions will be handled by the security framework, we have to let them bubble up instead of converting them into an property mapping exception. * Commit: `5438318 `_ [TASK] Cleanup usage of return value on @return void method ----------------------------------------------------------------------------------------- The renderStatically() method does not return a value, and thus the echo can be removed. * Commit: `39cfef5 `_ [BUGFIX] HTTP_X_HTTP_METHOD_OVERRIDE is incorrect ----------------------------------------------------------------------------------------- In the test the HTTP_X_HTTP_METHOD header is not set, but the HTTP_X_HTTP_METHOD_OVERRIDE is set twice. This causes the test to prove that HTTP_X_HTTP_METHOD_OVERRIDE is used, but not necessarily means that HTTP_X_HTTP_METHOD is overridden. * Commit: `932eb5e `_ [BUGFIX] Roles are not always correctly initialized ----------------------------------------------------------------------------------------- Due to #47975 it happens, that packageKey and name are not correctly set in role objects. This change is a quick workaround, which can be removed once the above issues are solved. * Commit: `e566a56 `_ [BUGFIX] Injected properties are not available in initializeObject() ----------------------------------------------------------------------------------------- This fixes an issue where properties injected to the parent class A were not available when the initializeObject() method of sub class B was called. The root cause of this bug was that, in order to avoid double injection, injectProperties() was only called in the constructor of sub class B and not in the constructor of parent class A. The initializeObject() methods however, were still executed in both constructors. * Resolves: `#43659 `_ * Commit: `6d2ea6b `_ [FEATURE] Add a new system role "AuthenticatedUser" ----------------------------------------------------------------------------------------- This role will always be active as soon as some token could be authenticated. * Commit: `875bc80 `_ [TASK] Add getter for relative path to Http\\Request class ----------------------------------------------------------------------------------------- Also refactors the routing to use this getter. * Commit: `0583f79 `_ [BUGFIX] Append Views configurations instead of merging them ----------------------------------------------------------------------------------------- Configurations from Views.yaml are merged together leading to mixed up configurations and invalid options. This adds a new processing type CONFIGURATION_PROCESSING_TYPE_APPEND that does not merge configurations from packages & contexts recursively but appends them into a flat array. * Fixes: `#52635 `_ * Commit: `dbd2f26 `_ [BUGFIX] Wrong media type on non-lower case filenames ----------------------------------------------------------------------------------------- This fixes an issue in the getMediaTypeFromFilename() function which returned application/octet-stream on any filename specified which contained a non-lowercase file extension. * Commit: `6b6ae5a `_ [BUGFIX] Object Route Parts fall back to technical identifier ----------------------------------------------------------------------------------------- As described in the routing section of the documentation, the `Object Route Parts`` should use the technical identifier to represent an object if no uriPattern is specified and the specified object does not contain any identity properties. Instead an exception was thrown if no uriPattern could be determined because ``ClassSchema::getIdentityProperties()`` doesn't return the property name of the technical identifier. This change fixes this by falling back by skipping the ObjectPathMapping if no uriPattern is defined. * Fixes: `#51082 `_ * Commit: `3ca2385 `_ [BUGFIX] Respect case-sensitivity in object routing ----------------------------------------------------------------------------------------- By default dynamic route parts are lower-cased unless the "toLowerCase" flag is set to TRUE for the route or a single route part. This change makes sure that this flag is actually taken into account for routes using the ObjectPathMapping. * Fixes: `#44521 `_ * Commit: `9ec9717 `_ [BUGFIX] "Required option" flag in AbstractValidator works correct ----------------------------------------------------------------------------------------- This fix adds a boolean condition to the "Required option" flag condition. With this fix the flag can also be FALSE. * Fixes: `#52425 `_ * Commit: `9e5f2e4 `_ [BUGFIX] Skip csrf protection for authenticate action ----------------------------------------------------------------------------------------- As the authenticate action is usually called by a POST request, this request is considered a non safe request. However, as you are most likely not logged in when calling authenticate, csrf protection is neither working nor needed. * Commit: `02d5c01 `_ [BUGFIX] Do not calculate effective privileges, if runtime evaluations are in place ----------------------------------------------------------------------------------------- In this case the effective privileges can not be calculated. Therefore we have to skip it. * Commit: `5518aad `_ [BUGFIX] Security has to be bypassed if testableSecurity is disabled ----------------------------------------------------------------------------------------- If testable security is not switched on in a functional test, skip any checks by overriding in the AccessDecisionManager. * Commit: `f5fcc77 `_ [TASK] initializeAction methods have to be protected ----------------------------------------------------------------------------------------- * Commit: `7ebecd4 `_ [!!!][TASK] Add method "hasAccessToResource" to the access decision manager ----------------------------------------------------------------------------------------- This is a convenience method to avoid a try/catch in userland code. Breaking only for those who implemented AccessDecisionManagerInterface on their own. * Commit: `85b1d10 `_ [!!!][TASK] Refactor and clarify the database exception handling ----------------------------------------------------------------------------------------- This change differentiates between connection errors and missing tables in the database which were before handled equally. It also writes the full exception to the log for debugging. The former DatabaseConnectionException has been moved to Exception\\DatabaseConnectionException, a code migration is provided with the change. * Commit: `0591fcd `_ [TASK] Replace some leftover FLOW3 in tests ----------------------------------------------------------------------------------------- * Commit: `4e6ce44 `_ [TASK] Warn that a package is not available on (de)activate ----------------------------------------------------------------------------------------- Flow now specifically warns about a package not being available when the activate or deactivate command for a package is called. * Commit: `c9776cf `_ [TASK] Refactor router caching logic into a service ----------------------------------------------------------------------------------------- This change removes most of the logic from the RouterCachingAspect and introduces it in the form of a new RouterCachingService. * Resolves: `#52452 `_ * Commit: `a60ef3c `_ [BUGFIX] Fix case resolving for methods in security commands ----------------------------------------------------------------------------------------- We are now using reflection classes to resolve the case sensitive method names, as this more reliably includes really all methods of the given class including inherited methods. * Commit: `963ecb3 `_ [FEATURE] Add command to list methods matched by a policy resource ----------------------------------------------------------------------------------------- Using this command one can list methods that are included in a resource definition:: ./flow security:showmethodsforresource TYPO3_Neos_Service * Commit: `0adfb88 `_ [FEATURE] Add Package Filtering by Path and Type ----------------------------------------------------------------------------------------- This makes getting a particular kind of package, by path or type, or first class Flow feature. The docs say that you can put packages in any subdirectory of Packages/, but if you want to get a list of packages in any one of those directories, you had to do your own filter the list of packages yourself. For example: Neos can use this to get typo3-flow-site packages in Packages/Sites/. Builders can use this to get a list of typo3-flow-boilerplate packages. This change is backwards compatible since it doesn't change any behavior, it just adds some additional methods to the PackageManager. * Commit: `d95e1c0 `_ [BUGFIX] FileBasedSimpleKeyProvider has to authenticate an account with roles ----------------------------------------------------------------------------------------- To be able to use real role based authorization with the FileBasedSimpleKeyProvider, we have to authenticate an account which holds existing roles. * Commit: `d3f504f `_ [BUGFIX] Fix validation if nested properties of same type are present ----------------------------------------------------------------------------------------- The performance optimization in #46340 changed the isValid() method of the GenericObjectValidator to use the result property while recursing through the properties of the to be validated object. Since GenericObjectValidator is reused, it could be the case that this result set is reset to empty value. Revert this change and set the result property *after* all properties of the to be validated object are validated. * Resolves: `#50585 `_ * Related: `#46340 `_ * Commit: `09756f3 `_ [FEATURE] Add policy analysis commands ----------------------------------------------------------------------------------------- With the new commands it is possible to check for unprotected commands and see the effective policy rules for a given role:: ./flow security:showunprotectedactions ./flow security:showeffectivepolicy * Commit: `77e8282 `_ [TASK] Clarify Configuration subdirectory usage ----------------------------------------------------------------------------------------- * Commit: `7e9e3d7 `_ [BUGFIX] Transient Properties should not be serialized ----------------------------------------------------------------------------------------- Properties annoated with the \\TYPO3\\Flow\\Annotations\\Transient annotation should not be serialized in the autogenerated __sleep method. * Fixes: `#52448 `_ * Commit: `791b570 `_ [TASK] Allow package installer actions / scripts ----------------------------------------------------------------------------------------- Allow packages to register scripts and resources to be executed or installed upon composer install and update. * Commit: `0dd80fb `_ [TASK] PhpFrontend has a method to return original code ----------------------------------------------------------------------------------------- With this change the PhpFrontend has the added method getWrappend(), which returns the code including the automatically added php opening tag and ending line. The method get() returns exactly the same string that was stored in the cache. * Resolves: `#50474 `_ * Commit: `bdebde0 `_ [BUGFIX] UUID Validator rejects too long UUIDs ----------------------------------------------------------------------------------------- Now the validation regex has start- and end of string boundaries, hence rejecting strings which only contain a valid UUID, but having extraordinary strings before or behind. * Fixes: `#52311 `_ * Commit: `52b1862 `_ [TASK] Remove arbitrary limit on Resource filename/extension ----------------------------------------------------------------------------------------- The DB columns for those properties are VARCHAR(255), so the validation limit of 100 makes no sense. * Commit: `9b0a1a3 `_ [FEATURE] Flexible array sorter ----------------------------------------------------------------------------------------- Introduces a new utility class ``PositionalArraySorter`` that can be used to sort an array based on a "position string". This feature is especially useful for sorting configuration options with multiple sources. Example:: SomeSetting: 'key1': foo: 'bar' position: 'start' 'key2': foo: 'baz' position: 'after key1' 'key3': foo: 'quux' position: 'end' possible position strings are: * start () * end () * before () * after () * Usage:: $arraySorter = new PositionalArraySorter($unorderedArray); $orderedArray = $arraySorter->toArray(); * Resolves: `#52074 `_ * Commit: `69bd32c `_ [FEATURE] Add AnsiConsoleBackend for logging ----------------------------------------------------------------------------------------- Taken from TYPO3.Surf. * Commit: `637d173 `_ [BUGFIX] Dynamic RouteParts should be urldecoded ----------------------------------------------------------------------------------------- This makes sure that request path segments are urldecoded during matching and urlencoded during resolving of Routes. Previously An URI ``/some.package/sub%5Csomecontroller`` was not decoded correctly leading to a 404. Now the value is correctly decoded to "sub\\somecontroller". * Resolves: `#46449 `_ * Commit: `b4c6e7e `_ [BUGFIX] Fix resolving of relative namespaces in parent classes ----------------------------------------------------------------------------------------- With I28fd7c7993ea79714cc62032fcc332ac8cf9d4bc the ReflectionService resolves relative and aliased namespaces automatically. This doesn't work for inherited classes though because the code only considered the current class, not it's parents. With this change code like this will work:: use TYPO3\\Flow\\Security\\Context; class SomeParentClass { /** * @var Context * @Flow\\Inject */ protected $securityContext; // ... } class SomeChildClass extends SomeParentClass { } * Fixes: `#50909 `_ * Related: `#46008 `_ * Commit: `751b4b5 `_ Revert "[BUGFIX] Published resources don't support symlinks" ----------------------------------------------------------------------------------------- This reverts commit 64480cd47066458bfd9a15a9a10f1760e5a0a3b4 * Commit: `b7ac599 `_ [TASK] More meaningful error message for connection errors ----------------------------------------------------------------------------------------- This patch provides more meaning full exception messages for database connection errors. Now the message distinguishes between "no database selected", "wrong credentials" and "unknown" database. * Commit: `35936c5 `_ [FEATURE] Let cache:warmup warm up every configured configuration type ----------------------------------------------------------------------------------------- When having done a flow:cache:warmup, the Configuration Manager only cached the configurations which were necessary during the CLI command invocation, so, for example, Routes, Views, NodeTypes etc. were not cached. This change introduces a SignalSlot listening to the warmupCache signal, and touching every configured configuration type in order to make it present in the configurations array, ready for later storing. * Resolves: `#51652 `_ * Commit: `88dd9ed `_ [BUGFIX] Ignore unreflectable classes ----------------------------------------------------------------------------------------- Classes that cannot be reflected will make the automatic configuration choke. This happens quite often when using 3rd party components. Make the reflection system mark the class unconfigurable, to allow the configurator to ignore the class. * Commit: `ad7fbeb `_ [FEATURE] Improve rendering of large exceptions ----------------------------------------------------------------------------------------- Splits exception messages containting multiple sentences and/or line breaks into "subject" and "body" and renders the body with nl2br(). * Resolves: `#51713 `_ * Commit: `ebfb00b `_ [BUGFIX] Published resources don't support symlinks ----------------------------------------------------------------------------------------- Fixes an issue with the publication of persistent resources which resulted in inaccessible resources after a few deployments with TYPO3.Surf. TYPO3.Surf heavily relies on symbolic links for pointing to the currently active release. The key problem was that the symbolic link which is put into the Web/_Resources folder used an absolute path (realpath) to the resource file in Data/Persistent/ rather than a possible symbolic link. This worked fine as long as the actual directory (previous release) exists, but breaks as soon as old releases have been removed. * Resolves: `#51676 `_ * Commit: `64480cd `_ [FEATURE] Allow String source for ArrayConverter ----------------------------------------------------------------------------------------- ArrayConverter can now convert strings to arrays. It uses explode internally with a default delimiter of ",". The delimiter is configurable with the key "stringDelimiter" in propertyMapping configuration for the ArrayConverter. * Resolves: `#48148 `_ * Commit: `af81029 `_ [FEATURE] Allow arbitrary request methods in HTTP\\Request ----------------------------------------------------------------------------------------- This patch removes a check in the HTTP Request class which previously disallowed custom HTTP request methods such as "COPY". * Resolves: `#50637 `_ * Commit: `1b756e9 `_ [BUGFIX] BooleanConverter considers "false" TRUE ----------------------------------------------------------------------------------------- The BooleanConverter provided by Flow simply casts the $source to a boolean using boxing. With this change a string "false" (case insensitive) is considered FALSE. * Fixes: `#51255 `_ * Fixes: `#51385 `_ * Commit: `8207a13 `_ [BUGFIX] CurlEngine tries to rewind stream ----------------------------------------------------------------------------------------- This fixes an issue with the CurlEngine which executes a rewind() if the given request content is a stream resource. This is not necessary and is especially harmful if a stream resource is provided which does not support seek operations. * Resolves: `#50636 `_ * Commit: `5d9b98f `_ [BUGFIX] Test fails since I72b943a63a88bd1620951b1d12c648b4433339db ----------------------------------------------------------------------------------------- Change I72b943a63a88bd1620951b1d12c648b4433339db broke one of the unit tests. * Commit: `03df9d1 `_ [FEATURE] Catch and log exceptions occurring in echoExceptionWeb ----------------------------------------------------------------------------------------- If, during the rather complex process of custom exception renderings, again an exception occurs, this exception is again caught silently and logged. In such a case there won't be anything output (white page), but still a 500 Internal Server Error is sent, and the actual reason for the exception can still be found in the log. * Commit: `ac9f348 `_ [BUGFIX] Treat namespaces with underscores correctly ----------------------------------------------------------------------------------------- The actual classloading does not handle the presence of underscores in namespaces correctly. * Fixes: `#49847 `_ * Commit: `ced8e0b `_ [TASK] Improved error message for unresolved route ----------------------------------------------------------------------------------------- This change adds information about the request method and the originally called URI to the error message which is displayed when no route matched. * Commit: `09f3030 `_ [BUGFIX] RoutePath command shows the format name again ----------------------------------------------------------------------------------------- This is just a minor fix. Instead of printing out whether the format is set or not, the actual name is now shown again. This was introduced by 07ab7988577c6a2c8656707820d8db1a5f08545b. * Fixes: `#51257 `_ * Commit: `0a35aa5 `_ [TASK] Clean up tests and fix for PHPUnit 3.8 ----------------------------------------------------------------------------------------- * Commit: `600bf48 `_ [BUGFIX] buildSubprocessCommand fails with multiple arguments ----------------------------------------------------------------------------------------- Fixes an issue where the buildSubprocessCommand() function returned an invalid command line which lacked spaces between command options. * Resolves: `#49503 `_ * Commit: `c016792 `_ [FEATURE] Files::removeEmptyDirectoriesOnPath() ----------------------------------------------------------------------------------------- This change introduces a new utility function which removes all empty directories on a given path. * Commit: `7765d86 `_ [TASK] Fix typo in name of "Joel on Software" ----------------------------------------------------------------------------------------- * Commit: `c720e84 `_ [BUGFIX] Fix a serialization problem with intercepted request ----------------------------------------------------------------------------------------- This change fixes a recursive serialization problem where the ActionRequest is serialized multiple times in a session entry. * Resolves: `#49289 `_ * Commit: `65fa532 `_ [TASK] Fix license in file level docblocks ----------------------------------------------------------------------------------------- * Related: `#50835 `_ * Commit: `1c315de `_ [TASK] Cosmetic & typographical fixes in documentation ----------------------------------------------------------------------------------------- Fixes some spelling errors in the ModelViewController chapter and adjusts the indention of a YAML example. * Commit: `623ff49 `_ [BUGFIX] Broken annotation in documentation ----------------------------------------------------------------------------------------- * Commit: `a9b92c7 `_ [BUGFIX] Replace wrong keyword in documentation ----------------------------------------------------------------------------------------- * Commit: `8f1d91f `_ [FEATURE] New Doctrine data type "objectarray" ----------------------------------------------------------------------------------------- This type should be used for any array properties that might contain objects. It has two advantages over the standard Doctrine array type: * stores only type/identifier for persisted objects * uses BLOB on the database level instead of CLOB The latter makes it actually work with PostgreSQL (or other RDBMS that do not allow NUL bytes in CLOB columns). * Resolves: `#42167 `_ * Commit: `c78cf9a `_ [FEATURE] Allow view configuration via Views.yaml ----------------------------------------------------------------------------------------- This patch adds a new Configuration called ``Views.yaml`` to set/override various settings for Views, just like the template path to use or controller options. Example ``Views.yaml``:: - requestFilter: 'isPackage("My.Package")' viewClassName: 'TYPO3\\TypoScript\\View\\TypoScriptView' options: typoScriptPathPattern: 'resource://My.Package/Private/TypoScripts' Change I7596f6fc7f8349f3c43d05e6b5916b7946d412d5 in Fluid takes care about this with rearranging the TemplateView. Additionally this change introduces a dependency to TYPO3.Eel. * Resolves: `#42176 `_ * Commit: `dc39b58 `_ [BUGFIX] Corrected Security documentation regarding EntryPoints ----------------------------------------------------------------------------------------- This updates the section about the WebRedirect EntryPoint and mentions the obsolescence of the uri key and its superseding option routeValues. * Commit: `74c2023 `_ [TASK] use 'note' to make statement more catching ----------------------------------------------------------------------------------------- * Commit: `568b614 `_ [TASK] Fix broken links in documentation ----------------------------------------------------------------------------------------- * Commit: `2abf69b `_ [TASK] Add CGL PDF to Flow package ----------------------------------------------------------------------------------------- Includes the "TYPO3 Flow Coding Guidelines on one page" PDF as asset to the Flow documentation. This also links the CGL thumbnail with the PDF and moves images two levels up in the directory structure. * Commit: `e8e4976 `_ [BUGFIX] Fix index number regarding upload fields in definitiv guide ----------------------------------------------------------------------------------------- The docs state a wrong number on the generated tags. Though this is small, the docs state that translates to Obviously, this is not the case. Second index is 1. * Resolves: `#50181 `_ * Commit: `d4448a6 `_ [TASK] Fix documentation version ----------------------------------------------------------------------------------------- Sets the version of this documentation to "2.1" so that it is rendered correctly at docs.typo3.org * Commit: `8e65980 `_ [TASK] Update documentation CGL Thumbnail ----------------------------------------------------------------------------------------- * Commit: `e1591ea `_ [TASK] Update Coding Guidelines on One Page ----------------------------------------------------------------------------------------- Updates Coding Guidelines on One Page to include information on relative namespaces and other CGL changes from: Idd4f6a5ea2f24ccd6368c3e43bff57355c5baa4b Also updates the coloring and styles to match the code hiliting on docs.typo3.org, as well as using TYPO3 Orange instead of red. * Commit: `24bb59a `_ [TASK] Update version branch to dev-master ----------------------------------------------------------------------------------------- This updates the constant FLOW_VERSION_BRANCH to version "dev-master". * Commit: `0640b2a `_ [TASK] Update CGL to recent changes ----------------------------------------------------------------------------------------- Adjusts the "PHP Coding Guidelines & Best Practices" to additions that have been agreed on during our "TYPO3 Neos Technical Discussion" meetup. In addition this tweaks and fixes some parts of the existing guidelines. * Resolves: `#50032 `_ * Commit: `3fb0ca3 `_ [FEATURE] Resolve relative namespaces and use statements in @var & @param annotations ----------------------------------------------------------------------------------------- Reflection should expand shortened or namespaced @var & @param annotations to their fully qualified class name. This has a direct benefit in the following areas (all covered by tests): * Reflection returns the fully qualified class name for @var and @param annotations * Reflection returns the fully qualified property types for Domain Models inside the class schema * Dependency Injection using @Flow\\Inject works with shortened class names * Property mapping works for shortened class names in type hint & @param annotation * Resolves: `#46008 `_ * Commit: `bc8f716 `_ [BUGFIX] ControllerContext constructor has 4 arguments ----------------------------------------------------------------------------------------- ControllerContext constructor has no flashMessageContainer argument, 5th argument. * Fixes: `#49923 `_ * Commit: `d905ae0 `_ [BUGFIX] Allow arbitrary setters in PersistentObjectConverter ----------------------------------------------------------------------------------------- This change supports additional setters in entities by implementing a fallback to the reflection service if the class schema does not contain a property. * Resolves: `#49815 `_ * Commit: `8c28a58 `_ [TASK] Use better matching 'note' instead of 'tip' in documentation ----------------------------------------------------------------------------------------- * Commit: `0f5de19 `_ [BUGFIX] Use consistent spelling of dependency to avoid confusion ----------------------------------------------------------------------------------------- * Commit: `a092959 `_ [BUGFIX] Write TYPO3 CMS instead of just TYPO3 in documentation ----------------------------------------------------------------------------------------- * Commit: `7b108b5 `_ [FEATURE] Allow configurable doctrine event subscribers ----------------------------------------------------------------------------------------- This change allows doctrine event subscribers and listeners to be configured via the options TYPO3.Flow.persistence.doctrine.eventSubscribers and TYPO3.Flow.persistence.doctrine.eventListeners respectively. This feature allows doctrine extensions to be used with Flow, that depend on the doctrine event system, like the gedmo behavioral extension. * Resolves: `#47228 `_ * Commit: `5540b3c `_ [TASK] Fix broken links in documentation ----------------------------------------------------------------------------------------- This fixes links that were mostly broken due to the renamed git repositories / Flow packages. * Resolves: `#49963 `_ * Commit: `4061f2b `_ [BUGFIX] Behave silently if no translation unit elements are present ----------------------------------------------------------------------------------------- If a translation source does not contain any translationUnit elements, which is allowed in XLIFF for elements inside //file/body, now there is no Undefined Index error anymore, but the incident is silently logged to the system logger as every other translation-related incident. * Fixes: `#47058 `_ * Commit: `06a1694 `_ [TASK] Extract MediaType handling from HTTP request ----------------------------------------------------------------------------------------- Currently the HTTP Request contains several methods interacting with media types (aka MIME types). This change extract those methods to the MediaTypes utility class to purge the request class and to make media type handling easier reusable for other components. * Resolves: `#48615 `_ * Commit: `19cf544 `_ [TASK] Add 'www-data' (debian,ubuntu) to examples of webserver users in documentation ----------------------------------------------------------------------------------------- * Commit: `20636f1 `_ [BUGFIX] Roles are not synchronized after database migrate ----------------------------------------------------------------------------------------- The roles are not synchronized from the Policy.yaml files to the database after the database migration, but only after rebuilding the cache. This causes problems in the setup package where the database migration is run and the next step fails in reading the roles from the database. By adding a signal to the doctrine migration command we can run the synchronization after database migration so the roles in the database will always be up to date after migration. This change makes the initializeRolesFromPolicy method public which does not cause issues as the method won't perform any actions if the rolesFromPolicyUpToDate flag in the cache is set. * Commit: `43fe1a3 `_ [BUGFIX] Cache Management Exception when files changed but no classes ----------------------------------------------------------------------------------------- When classes did not change, but other files did, an exception occurs because $modifiedClassNamesWithUnderscores does not exist, as it can be seen when reading the source code. * Resolves: `#49571 `_ * Commit: `dce0d7b `_ [BUGFIX] Use deterministic join aliases ----------------------------------------------------------------------------------------- Before this change, we used uniqid() for building join aliases. This prevented the doctrine DQL cache to work correctly. We found this change during profiling TYPO3 Neos, where it led to about 10% performance increase in frontend rendering. * Resolves: `#49569 `_ * Commit: `4b2e5ca `_ [FEATURE] Bind routes to HTTP request methods ----------------------------------------------------------------------------------------- This change allows routes to be limited to certain request methods. This is especially useful for REST services where you often need the same URI to invoke different actions depending on the HTTP method. Usage:: - uriPattern: 'foo/bar' defaults: '@package': 'Some.Package' '@controller': 'Standard' '@action': 'first' httpMethods: ['GET'] - uriPattern: 'foo/bar' defaults: '@package': 'Some.Package' '@controller': 'Standard' '@action': 'second' httpMethods: ['POST', 'PUT'] * Resolves: `#27117 `_ * Commit: `07ab798 `_ [BUGFIX] ORM fails on databases with low maximum length for table names ----------------------------------------------------------------------------------------- This fixes a bug that creates too long database identifiers on systems where maxIdentifierLength is less than 31 as Oracle has. This patch fixes the bug in a backwards compatible way. * Fixes: `#49007 `_ * Commit: `e7f4df6 `_ [BUGFIX] Exception in ProxyClassBuilder cannot be thrown because wrong exception message ----------------------------------------------------------------------------------------- This leads to weird exceptions such as: Notice: Undefined variable: TYPO3\\Flow\\Command\\ConfigurationCommandController * Resolves: `#49370 `_ * Commit: `54ed453 `_ [FEATURE] Iterator support for APC cache backend ----------------------------------------------------------------------------------------- This adds support for iterating over entries of an APC cache. * Related: `#49185 `_ * Commit: `119ac7c `_ [BUGFIX] Session storage has poor performance for hundreds of sessions ----------------------------------------------------------------------------------------- Fixes an issue with the storage backend for sessions which resulted in a bad overall performance when hundreds of sessions were active simultaneously. The improved implementation is now based on two separate cache storages and a new garbage collector which allows for more fine grained tuning. If you previously used a different than the default cache backend for sessions, you will need to adjust your configuration because this implementation is based on two distinct cache backend configurations (see updated Caches.yaml). The option name for setting the garbage collection probability has changed: the settings now come with a dedicated section for garbage collection which contains the probability and, added by this patch, the maximum number of old sessions which may be removed by the garbage collector during one invocation. You need to flush caches with --force after applying this change set. * Fixes: `#49189 `_ * Resolves: `#49190 `_ * Commit: `d84108f `_ [FEATURE] Iterator support for Cache Frontends / Backends ----------------------------------------------------------------------------------------- This adds support for iterating over entries of a cache. In this particular patch only support for the VariableFrontend and the file based backends is included. Further implementations will be part of separate commits. * Resolves: `#49185 `_ * Commit: `ebb8851 `_ [BUGFIX] Session garbage collection is non-functional ----------------------------------------------------------------------------------------- Fixes an issue with the newly introduced session handling which resulted in a big amount of orphaned cache entries due to a non-functional garbage collection. In combination with a non-optimized implementation of the garbage collector, this resulted in very long request times if thousands of entries existed. * Resolves: `#49021 `_ * Commit: `f243be4 `_ [BUGFIX] Property introduction is broken ----------------------------------------------------------------------------------------- This change fixes property introduction through aspects by adding missing checks for available property introductions. * Fixes: `#39413 `_ * Commit: `915b71c `_ [BUGFIX] Provide working apache settings in documentation ----------------------------------------------------------------------------------------- The provided AllowOverride is now matching the needs of Flow. * Fixes: `#48951 `_ * Commit: `f91bbc8 `_ [TASK] Small documentation correction ----------------------------------------------------------------------------------------- * Commit: `cf9e888 `_ [TASK] Tiny CGL cleanup ----------------------------------------------------------------------------------------- * Commit: `83d2cad `_ [BUGFIX] Cache is not flushed for changes in sub routes ----------------------------------------------------------------------------------------- The CacheManager automatically flushes routing caches in Development context if a Routes.yaml file was changed. This extends the behavior to flush caches even if a custom sub route (Routes.xyz.yaml) was modified. * Fixes: `#47255 `_ * Related: `#43966 `_ * Commit: `7ca72da `_ [BUGFIX] Validation is not reset in functional tests ----------------------------------------------------------------------------------------- If using the internal request engine (= in functional tests) the ValidationResolver that contains a 1st level cache for validated objects is not properly reset. This change fixes this by introducing a reset() method that is called by InternalRequestEngine::sendRequest() * Fixes: `#46715 `_ * Commit: `8f0041d `_ [BUGFIX] Doctrine DocParser ignores Flow autoloader ----------------------------------------------------------------------------------------- The Doctrine DocParser does not utilize the autoloaders registered into spl_autoload. This change registers the Flow autoloader into Doctrines AnnotionRegistry so it will be used in the lookup. The error only occurs in Production context, but it's hard to say how this change can be verified as it seems to be very specific when the error occurs and does not have to occur for all controller / action combinations in the application. * Resolves: `#48551 `_ * Commit: `ec698a0 `_ [BUGFIX] Comment now references to the correct method name ----------------------------------------------------------------------------------------- * Fixes: `#48557 `_ * Commit: `20216da `_ [BUGFIX] Broken inheritance type handling in FlowAnnotationDriver ----------------------------------------------------------------------------------------- This reverts commit 93fbe9fc8d789547f05eec2b4945eb6c565fa3fa because it broke more than it was supposed to fix. The failing test that led to the original "fix" was in fact broken and is fixed with this change. * Related: `#48231 `_ * Commit: `69c6576 `_ [BUGFIX] remove obsolete PackageManagerControllerTest ----------------------------------------------------------------------------------------- … the original has been removed at I3f7e287d4dca234f77a727ec113960b3fd215b33 -- breaking the unit tests * Commit: `2ac620e `_ [TASK] Make code migration checking roles in policies more robust ----------------------------------------------------------------------------------------- The migration checking for the use of globally defined roles identifier was a bit too eager in working on packages without Policy.yaml and/or role definitions, plus it did not skip local roles in ACLs. * Commit: `35ec586 `_ [FEATURE] Allow use of callback function in regex search/replace ----------------------------------------------------------------------------------------- Since using the e modifier for preg_replace() is no longer recommended (deprecated as of PHP 5.5) this is an alternative. If the $replace argument given to searchAndReplaceRegex() in code migrations is an anonymous function it will be passed to preg_replace_callback() and thus allows custom replace operations. * Commit: `12d815d `_ [TASK] Add german translation for validation error messages ----------------------------------------------------------------------------------------- This adds german translatsions for bundled validation error messages. * Resolves: `#48254 `_ * Related: `#45279 `_ * Commit: `9808fb2 `_ [BUGFIX] Allow access to resources GRANTED to "Everybody" ----------------------------------------------------------------------------------------- PolicyEnforcement does no longer throw an AccessDenied exception if not logged in before checking the actual ACLs for the resource in question. This allows creating resources and granting access to them for "Everybody" which was not possible before. * Fixes: `#46036 `_ * Commit: `1efc101 `_ [TASK] Remove leftover package manager controller for CLI ----------------------------------------------------------------------------------------- This one was replaced by a command controller some time ago. * Commit: `277ff08 `_ [TASK] Document translated validation error messages ----------------------------------------------------------------------------------------- This adds documentation on how to use translated validation error messages. * Resolves: `#48251 `_ * Commit: `f445b78 `_ [BUGFIX] Ignoring of inheritance type in FlowAnnotationDriver broken ----------------------------------------------------------------------------------------- Due to weird circumstances the tests for the FlowAnnotationDriver were skipped for a while, and change Ie6e46efa858a651b2f1fe4b08d78039249504dea broke the functionality to disable inheritance of no subclasses exist for a class annotated with an InheritanceType annotation. This changes fixes that. * Fixes: `#48231 `_ * Commit: `93fbe9f `_ [TASK] Re-enable and fix FlowAnnotationDriver tests ----------------------------------------------------------------------------------------- * Commit: `6a310a1 `_ [TASK] Fix mailing list URI on first guide page ----------------------------------------------------------------------------------------- * Commit: `b3a9b13 `_ [TASK] Update CLI command reference ----------------------------------------------------------------------------------------- This updates the CLI command reference in the guide. The change looks bigger than it is, because the commands are now sorted by package key and identifier. * Commit: `04b484a `_ [BUGFIX] Fix failing ValidatorResolverTest ----------------------------------------------------------------------------------------- The PolyTypeObjectValidator change broke a number of changes, because it was not adjusted to the static method result compilation changes merged since it was created. * Related: `#45167 `_ * Commit: `3761b8f `_ [TASK] Fix rST markup in ObjectManagement chapter ----------------------------------------------------------------------------------------- A note block was not correctly marked up. * Commit: `59f5443 `_ [TASK] Fix rST markup in Routing chapter ----------------------------------------------------------------------------------------- Some code blocks were not correctly marked up, leading to block quotes instead of code listings. * Commit: `150d2cd `_ [BUGFIX] Add missing "search" ACL to file permission script ----------------------------------------------------------------------------------------- * Resolves: `#48133 `_ * Commit: `3613438 `_ [BUGFIX] Controllers must not be of scope singleton ----------------------------------------------------------------------------------------- Removes the scope("singleton") annotation from the provided base controllers. Background: Usually the scope of a controller doesn't really make a difference, because they are only instantiated once per request. But if the same controller is used multiple times (e.g. within two plugin/widget instances on one page) the side effects could be very confusing. * Related: `#45647 `_ * Commit: `7f89b1b `_ [BUGFIX] Authentication does not work any longer without redirects ----------------------------------------------------------------------------------------- This fixes a regression that made the authenticated roles only available in the security context after a redirect following authentication. Background: This is a regression introduced with the 1st level cache added in Id256b168ff9c6aa4cac8da8957ada237f9236c71 but the actual problem is that the PersistenceQueryRewritingAspect initializes the security context if it was not initialized before (since change I44838de1503cbe49cf3fee51921b731bfaa0cfc5) when intercepting QOM queries setting the context roles to "Anonymous" and "Everybody". This change adds a new method Context::withoutAuthorizationChecks() that allows you temporarily disable authorization related interceptors e.g. PolicyEnforcement and PersistenceQueryRewriting aspects in order to be able to circumvent authorization in low level operations (for example to fetch the current account in an AuthenticationProvider). Usage:: $this->securityContext->withoutAuthorizationChecks( function ($accountRepository, $username, $providerName, &$account) { // this will disable the PersistenceQueryRewritingAspect for this one call $account = $accountRepository ->findActiveByAccountIdentifierAndAuthenticationProviderName($username, $providerName) } ); * Related: `#46352 `_ * Fixes: `#46636 `_ * Commit: `e06e0f2 `_ [TASK] Adjust dependencies to doctrine packages ----------------------------------------------------------------------------------------- This changes the dependencies to doctrine/migrations (so it explicitly points to dev-master) and doctrine/data-fixtures (so it becomes a suggestion instead of a requirement). * Related: `#47808 `_ * Commit: `14d6b5c `_ [BUGFIX] ReflectionService works for non-Entity inheritance members ----------------------------------------------------------------------------------------- As soon as a class which is *not* an entity was present as an ancestor of an Entity (with at least one Entity descendant in between), there was an Undefined Index error because the ReflectionService proceeded on the assumption that everything was an Entity, hence present in the ->classSchemata array. This adds an additional check for the actual presence of such an array index and proofs this behavior with a Functional Test Fixture. * Fixes: `#47809 `_ * Commit: `4c52078 `_ [BUGFIX] Handle open basedir properly during file upload ----------------------------------------------------------------------------------------- This solves the issues of uploading files when using open_basedir restriction. Instead of having to add the temporary upload directory (upload_tmp_dir) in the open_basedir configuration, which is a bad idea, this ensures that it works even though the open basedir restricts access to the temporary upload directory. Make sure that the temporary upload directory is writable to test this issue. * Resolves: `#45936 `_ * Commit: `6fb381b `_ [BUGFIX] Allow variable name references in @var annotations ----------------------------------------------------------------------------------------- This change loosens the strictness of the @var annotation parsing, where it would throw an exception when the annotation contained the variable name it referred to. So this is now possible:: /** * @var integer $variable */ * Fixes: `#47114 `_ * Commit: `4395bcb `_ [FEATURE] Allow using own I18n formatters ----------------------------------------------------------------------------------------- Internationalization's placeholder formatters do not need to be placed under the TYPO3\\Flow namespace anymore, making it possible to use very own formatters in own packages. * Commit: `d836376 `_ [TASK] Update configuration schemas ----------------------------------------------------------------------------------------- This change updates the configuration schemas to the latest merges. On top, it allows for configuration of doctrine connection wrappers and the MasterSlaveConnection wrapper, that allows to setup a master/slave database connection. * Resolves: `#47346 `_ * Commit: `3b554c9 `_ [BUGFIX] Support BCrypt validation of hashes with different cost ----------------------------------------------------------------------------------------- In the current implementation of the BCryptHashingStrategy a password is hashed with crypt and the hash contains the algorithm and parameters with the salt that was used to hash the password. This change updates the validation to also take the cost from the stored hash and allow changes to the cost setting. * Fixes: `#47725 `_ * Commit: `8872a65 `_ [BUGFIX] ClassLoader does not handle underscore correctly ----------------------------------------------------------------------------------------- For class names containing an underscore the ClassLoader now correctly replaces that with a directory separator when loading classes. This fixes compatibility with some PSR-0 compatible composer packages. * Fixes: `#47675 `_ * Commit: `24e15e4 `_ [TASK] Fix spelling error related to static method advice test ----------------------------------------------------------------------------------------- This was introduced with I15817e357d98eb78de8984a78582de5cdf16064e * Related: `#47371 `_ * Commit: `ff13988 `_ [BUGFIX] Lazy DI causes endless loop for certain session objects ----------------------------------------------------------------------------------------- Fixes an issue with the Lazy Dependency Injection mechanism which caused and endless loop if session-scoped objects were unserialized and later on injected lazily. Background: when a session is resumed (rather early in the HTTP Request Handler), the objects contained in the session are unserialized and register their instance automatically at the Object Manager. If such an object, for example the Security Context, is later on injected lazily into another class, the generated proxy code will overwrite the instance which was previously set at the Object Manager. In the reported case the RequestHandler retrieved the Security Context via ObjectManager->get() and received a DependencyProxy instead of the expected real instance. On using it, the DependencyProxy called the ObjectManager->get() method to retrieve the real instance which resulted in a recursion. This patch corrects the generated proxy code to check for an existing real instance before trying to generate a Dependency Proxy. * Resolves: `#46424 `_ * Commit: `a532ede `_ [BUGFIX] AOP erroneously allows to advise static methods ----------------------------------------------------------------------------------------- Fixes an issue with the AOP proxy builder which erroneously allowed to advise static methods which resulted in a PHP fatal error as soon as such a method was called. * Fixes: `#47371 `_ * Commit: `86620ec `_ [BUGFIX] unpublishPersistentResource deletes only intended Resource ----------------------------------------------------------------------------------------- When calling ``unpublishPersistentResource``, now only the actually intended Resource gets deleted, rather than the whole publishing target directory. Since vfsStream does not support the necessary glob() operation, the appropriate UnitTest is rebuilt to use the real filesystem. * Commit: `7278fbb `_ [BUGFIX] generateUUID() creates uppercase characters in UUIDs ----------------------------------------------------------------------------------------- The UUIDs generated by that method were always lowercase, now they are uppercase (since change I1237fdfbee75cbfca2f2082cf30a69383dbc7fd5). As soon as you do a case-sensitive comparison on those UUIDs as strings, this will now break, even if the UUIDs are the same semantically. This change makes them lowercase again. * Fixes: `#47534 `_ * Related: `#46862 `_ * Commit: `654e0f4 `_ [BUGFIX] Fix PolicyService->createRole to use the Role object ----------------------------------------------------------------------------------------- * Fixes: `#47500 `_ * Commit: `c1774f1 `_ [BUGFIX] initializeObject is no longer executed twice ----------------------------------------------------------------------------------------- In every session-scope object initializeObject() was called twice as soon as the session is started. Now initializeObject() is only called once. * Fixes: `#45609 `_ * Commit: `609de0d `_ [BUGFIX] setParentRoles() fails if passed roles contain duplicates ----------------------------------------------------------------------------------------- Fixes an issue where Doctrine failed inserting parent roles if the array passed to Role->setParentRoles() contained duplicates. Even though getParentRoles() does return roles without duplicates, setParentRoles() did not filter duplicates and caused the SQL error mentioned in the related issue ticket. * Resolves: `#47473 `_ * Commit: `30124b2 `_ [BUGFIX] ActionController throws warning because of short method names ----------------------------------------------------------------------------------------- Fixes an issue in ActionController which caused a PHP warning if the concrete ActionController implementation contained methods whose name was shorter than 7 characters. * Resolves: `#47469 `_ * Commit: `54d4b68 `_ [TASK] Complete documentation for Error Rendering Groups ----------------------------------------------------------------------------------------- This adds a section about how to configure and use the custom error views resp. rendering groups. * Related: `#39423 `_ * Commit: `fcfbc32 `_ [BUGFIX] Add hasRole() to PolicyService ----------------------------------------------------------------------------------------- The PolicyService needs hasRole() to allow checks for existing roles without workarounds. * Fixes: `#47416 `_ * Commit: `43f3584 `_ [BUGFIX] generateUUID can be broken by seeding mt_rand ----------------------------------------------------------------------------------------- Use randomizer which cannot be seeded / configured by userspace code. * Resolves: `#46862 `_ * Commit: `3ad59e9 `_ [!!!][FEATURE] Skip automatic persistence and CSRF protection for "safe" requests ----------------------------------------------------------------------------------------- This change set introduces an important behavior for Flow applications: HTTP request methods which are, by definition, considered to be "safe" (that is, "read-only") are now treated as such. In practice it means that GET requests will not trigger a persistAll() call anymore and CSRF protection for actions is not checked anymore if the request is a GET request. Please adjust your applications to cleanly observe this principle since more optimizations in this direction are planned for later versions of TYPO3 Flow. This patch contains the corresponding documentation. * Resolves: `#47252 `_ * Commit: `f3d285c `_ [BUGFIX] Fix exception header in InternalRequestEngine ----------------------------------------------------------------------------------------- When using the virtual browser in functional tests, the InternalRequestEngine communicates any exceptions which occurred during the request by adding special headers to the HTTP response. Previously the "X-Flow-ExceptionCode" header contained exception codes like "#1222268609: ". This patch fixes the rendering to just the code, like "1222268609". * Commit: `a5be4aa `_ [BUGFIX] Property mapper can again map account roles ----------------------------------------------------------------------------------------- Due to the type hint in the setter method of roles, the property mapper was unable to set the converted property. * Resolves: `#47232 `_ * Commit: `71ba4e0 `_ [BUGFIX] Flow Exception shouldn't be in use statement ----------------------------------------------------------------------------------------- * Fixes: `#47253 `_ * Commit: `ee91e3f `_ [BUGFIX] System roles don't get a package namespace ----------------------------------------------------------------------------------------- The role change I39f335baa01fbe9b883e98e85cb1f063bbaf5744 introduced the automatic prepend of the package namespace where the role has been defined; except for system roles which are at the moment Anonymous and Everybody. For ACLs, however, the package namespace has been prepended also for the system roles. This fixes that behavior. * Fixes: `#47229 `_ * Related: `#28862 `_ * Commit: `f71d9f1 `_ [FEATURE] HTTP method tunneling ----------------------------------------------------------------------------------------- This change allows the HTTP method to be overridden by the client. This is especially useful for clients that only support a subset of the supported methods (e.g. browsers). The request method can be overridden by specifying a ``__method`` argument. Additionally Flow now respects the ``X-HTTP-Method`` respectively ``X-HTTP-Method-Override`` header. usage::
Note:: The HTTP request method can only be changed for POST requests * Resolves: `#47137 `_ * Commit: `a297b17 `_ [!!!][TASK] Adjust logException() signature in LoggerInterface ----------------------------------------------------------------------------------------- This adds the $additionalData parameter to the signature of the logException() method. * Commit: `2f4a691 `_ [TASK] Remove @-operator again in SimpleFileBackend and ClassLoader ----------------------------------------------------------------------------------------- This change removes the shut-up operator again from include_once() calls in the ClassLoader and SimpleFileBackend in order to provide meaningful error messages to the developer if class files or cache entries were not found. * Related: `#46689 `_ * Commit: `f04343e `_ [FEATURE] Static compilation of compile time data ----------------------------------------------------------------------------------------- Implement a CompileStatic annotation for static methods that will be evaluated by the proxy builder in production. Update bootstrap and some classes to enable efficient caching of reflection information and lazy loading of the reflection service. Note: It is not possible to give a type hint to those static methods, since it could be a DependencyProxy that is actually passed. * Related: `#46371 `_ * Commit: `c632956 `_ [TASK] Throw exception on lacking @var annotation ----------------------------------------------------------------------------------------- In the Validation\\ValidationResolver now an exception is thrown if the validated property does not have an @var annotation which is mandatory. This prevents a Notice exception when accessing the not present 'var' key on the tag values array, and gives instead a more helpful exception message. * Commit: `eacd75d `_ [TASK] Re-add Testing Routes.yaml ----------------------------------------------------------------------------------------- This partly reverts I9aa80105cf05e675fbb6ca26bd99f377f52254c8 which rendered functional routing tests useless (they are skipped if the testing routes are not available). Now, if Flow Subroutes are included in a distribution, Routing tests will be executed again. * Commit: `259a6e8 `_ [BUGFIX] Initialize $roleRepository correctly ----------------------------------------------------------------------------------------- The $roleRepository is set "manually" in initializeRolesFromPolicy() - only if caches are outdated. But the $roleRepository is needed even if the caches are up to date, so this breaks. This change moves the initialization outside the check. * Fixes: `#47115 `_ * Commit: `ae01fce `_ [BUGFIX] PropertyMapper now normalizes simple types ----------------------------------------------------------------------------------------- This fixes a bug where the property mapper was unable to find a valid typeconverter for properties annotated with int or bool. * Fixes: `#47054 `_ * Commit: `8eca52b `_ [!!!][FEATURE] Handle roles consistently as objects ----------------------------------------------------------------------------------------- With this change roles are consistently used as objects. To prevent naming conflicts between roles from different packages the package key is added to the role names. The handling of roles now is more strict and does not allow the use of not configured (non-existent) roles anymore. Roles are now referenced as real instances instead of their string identifiers in models. Roles which were defined in policies are now automatically mirrored to the RoleRepository (usually stored as a table in a database). The getRoles() method has been removed from TokenInterface. * Resolves: `#28862 `_ * Resolves: `#43578 `_ * Related: `#37451 `_ * Related: `#27698 `_ * Commit: `f0776fb `_ [TASK] Cleaned up configuration:validate command ----------------------------------------------------------------------------------------- * Related: `#44990 `_ * Commit: `3ece55d `_ [FEATURE] Allow split configuration sources ----------------------------------------------------------------------------------------- With this change it is possible to allow split configuration sources when defining a custom configuration type. This allows to use multiple YAML for a type (when using the bundled YamlSource), which will be merged together. * Related: `#37854 `_ * Commit: `fae1b9d `_ [FEATURE] Support for sessionless authentication ----------------------------------------------------------------------------------------- This feature enables authentication without the need of a session to be started. This is useful for stateless services (e.g. REST) where you don't want Flow to create a session cookie. Authentication tokens which don't rely on a session simply implement the SessionlessTokenInterface marker interface. This patch reverts parts of the first implementation of sessionless authentication introduced in https://review.typo3.org/#/c/18388 (commit I5f86cb7a3a3fff3220d61d705f216e1b1d4f2369). The original implementation was a breaking change with a few unresolved side effects. The implementation contained in this change set is backwards compatible with already existing authentication tokens which relied on sessions. This patch also contains a small speed optimization for the CSRF Protection pattern which assumes that no account has been authenticated yet if the Authentication Manager is still a Dependency Proxy. * Resolves: `#45282 `_ * Resolves: `#46428 `_ * Commit: `9feb590 `_ [BUGFIX] Session: add safeguard against incompatible request handlers ----------------------------------------------------------------------------------------- This adds additional checks and throws an exception if a session should be started but the currently active request handler does not implement the HttpRequestHandlerInterface. * Resolves: `#44087 `_ * Commit: `9a0715c `_ [BUGFIX] Reduce side effects of sessions used in functional tests ----------------------------------------------------------------------------------------- This patch makes sure that once a session has been closed or destroyed, it will rebuild information determined from the request / response in case it is started again. While this scenario (a session is closed and started again during the same PHP request) is uncommon in real world projects, it may happen during functional tests. Therefore this is mainly a fix to reduce side effects in functional tests. A concrete side effect Flow has without this patch is that session cookies are set to the HTTP response only when a session was started the first time. This patch also adds an explanation about starting / resuming sessions to the class doc comment. * Resolves: `#46703 `_ * Resolves: `#44202 `_ * Commit: `2fdafb6 `_ [FEATURE] Set packageType when creating new package ----------------------------------------------------------------------------------------- When calling packageManager->createPackage you have no way to define what package type you are creating. This allows for ex. SiteKickstarter to set correct package type in composer manifest * Resolves: `#44258 `_ * Commit: `bb742c5 `_ [BUGFIX] Avoid side effects in APC cache backend ----------------------------------------------------------------------------------------- When more than one cache was using the APC cache backend, use of the same entry identifiers would cause side effects, as the frontends would access the same entries. This is fixed by including the cache identifier in the prefix hash. * Fixes: `#44471 `_ * Related: `#38135 `_ * Commit: `b09ea99 `_ [BUGFIX] Fix variable type declaration in Security\\Context ----------------------------------------------------------------------------------------- The $request member is annotated as being Http\\Request but must be Mvc\\ActionRequest instead. * Fixes: `#44743 `_ * Commit: `0a10bdf `_ [TASK] Adjust tests to rewritten URLs in functional tests ----------------------------------------------------------------------------------------- The resolution for #44434 makes Flow behave as if mod_rewrite was available during functional tests. Some tests checking against generated URLs need to be adjusted, so they no longer expect it to produce links with embedded "index.php". * Related: `#44434 `_ * Commit: `5d1ed40 `_ [!!!][BUGFIX] Enable settings override with empty array value ----------------------------------------------------------------------------------------- This change updates the behavior of arrayMergeRecursiveOverrule such that empty arrays are also treated as empty values. If you used this function before it can lead to different results after the change. Before the change an empty array value was always merged into the first array, even if emptyValuesOverride was set to TRUE. With the new behavior an empty array value overrides a given input value if emptyValuesOverride is set. This allows to override settings with an empty array in the settings hierarchy. This change is breaking if your settings hierarchy depends on empty array values not overriding a parent configuration. * Resolves: `#36720 `_ * Commit: `abdffa8 `_ Revert "[FEATURE] Make ArrayConverter map only allowed properties" ----------------------------------------------------------------------------------------- This reverts commit ed875023d0a980b4192bc01e7307db9efc7d2071 The feature is breaking if you rely on Arrays being converted as is and it breaks some functional tests. Until a backwards compatible solution is found the feature is reverted. * Commit: `bb48029 `_ [BUGFIX] Reintroduce support for entities with custom id properties ----------------------------------------------------------------------------------------- This adjusts the pointcut expressions of the PersistenceMagicAspect to introduce UUID identifiers only to entities that do not contain custom identifier properties (annotated with @ORM\\Id). This change also refactors the unit tests and adds functional tests for the aspect. * Fixes: `#46883 `_ * Commit: `cd38544 `_ [TASK] Remove leading backslash in use statement(s) ----------------------------------------------------------------------------------------- * Commit: `b3473de `_ [TASK] Update contributors list in guide ----------------------------------------------------------------------------------------- * Commit: `5c96eb1 `_ [TASK] Code cleanup in Error classes ----------------------------------------------------------------------------------------- * Make proper use of namespace * Fixes a number of CGL violations * Fixes other small issues * Commit: `331b66a `_ [TASK] Two tweaks to the documentation ----------------------------------------------------------------------------------------- Add a hint on setting the default collation for MySQL and tweak the installation instructions a tiny bit. * Commit: `12d062b `_ [BUGFIX] StringLengthValidator should use UTF-8 safe function ----------------------------------------------------------------------------------------- StringLengthValidator no longer uses strlen to determine the length of the string to be validated but uses the Utility\\Unicode\\Functions::strlen method which relies on mb_string internally. * Fixes: `#36159 `_ * Commit: `e32d5e6 `_ [TASK] Improved exception message for compilation errors ----------------------------------------------------------------------------------------- This removes the "Execution of subprocess failed with exit code …" as it distracts from the real problem which only appears later in the message. Most likely the user / developer is not interested in possible bugs of the compiler / subprocess. * Commit: `a18996b `_ [BUGFIX] Allow upload of files without file extension ----------------------------------------------------------------------------------------- This change allows upload of files without a file extension. The upload of PHP-Files is still not allowed. The method importUploadedResource does not have a unit test, since it is not testable through the use of move_uploaded_file. * Resolves: `#46536 `_ * Commit: `d17b53c `_ [FEATURE] Support arguments in Scripts::executeCommand ----------------------------------------------------------------------------------------- Previously it was not supported to have command arguments in a CLI subcommand. This patch solves this issue by adding a $commandArguments parameter to the executeCommand() method. * Resolves: `#46072 `_ * Commit: `aa3f832 `_ [TASK] Fix typo in method name ----------------------------------------------------------------------------------------- The method forceFlushCachesIfNeccessary() is spelled incorrectly, it should be forceFlushCachesIfNecessary(). * Commit: `34971c3 `_ [BUGFIX] Undefined index breaks logger setup in Production ----------------------------------------------------------------------------------------- With I6da4763fb94798b1d1647b6108457996a48aa128 the logger used for the system log was made configurable. In Production context, when cached settings are used, this breaks after an update - and even --force with a cache flush does not help. This change adds a safeguard against the settings not being there. * Related: `#40738 `_ * Related: `#46053 `_ * Commit: `c3f0cdb `_ [BUGFIX] ObjectAccess::getProperty() breaks on \\stdClass due to cache ----------------------------------------------------------------------------------------- When using getProperty() on \\stdClass instances, the accessor cache leads to false results - because the class name alone in this case does not tell anything about the availability of a property. With this change getProperty() does not use the cache for \\stdClass anymore. * Fixes: `#46465 `_ * Commit: `d1fdd2a `_ [BUGFIX] fix ObjectAccess::getProperty() for getters in ArrayAccess objects ----------------------------------------------------------------------------------------- With I2abbbd5924cd0177ad8a31cb01c2953dd5ba39fd a regression was introduced that prevented ObjectAccess::getProperty() to work on objects implementing ArrayAccess and providing custom getters. Code to reproduce: \\TYPO3\\Flow\\Reflection\\ObjectAccess::getProperty(new \\ArrayObject(), 'iteratorClass') expected: "ArrayIterator" actual: *Exception* This change fixes this by checking arrays and ArrayAccess objects separately. * Fixes: `#46491 `_ * Related: `#42723 `_ * Commit: `392020a `_ [FEATURE] Allow PolyType custom validators to be used ----------------------------------------------------------------------------------------- This introduces a new PolyTypeObjactValidatorInterface. When building base validator conjunctions for a type, all implementations of that interface will be asked if they canValidate() the type. This enables the writing of custom validators that act on multiple types. * Resolves: `#45167 `_ * Commit: `7f51878 `_ [BUGFIX] Make the AbstractExceptionHandler check for error_reporting() ----------------------------------------------------------------------------------------- When the shut-up operator is used in PHP the error_reporting level is temporarly lowered to 0. The AbstractExceptionHandler does not check for this, and outputs the exception whenever it is called. This is a problem when the set_exception_handler method is used, as PHP will still call those exception handlers even if the shut-up operator is used. This is why the AbstractExceptionHandler should check for error_reporting() === 0 and ignore the exception if so. This change fixes the exit code 255 error during the compile run which is thrown in the Testing context where we set E_WARNING to be an exceptional error. * Resolves: `#46485 `_ * Commit: `f4d459b `_ [TASK] CGL cleanup of TYPO3.Flow ----------------------------------------------------------------------------------------- Fixes a list of CGL issues in Flow. * Commit: `516c3e2 `_ [!!!][TASK] Cache result of isAuthenticated in AuthenticationProviderManager ----------------------------------------------------------------------------------------- This change will calculate the result of the authentication in authenticate() and respect the authentication strategy for the result. The authenticate() method will be called lazily if not done before. This is breaking since isAuthenticated() before would behave like the "at least one token" strategy was used, even the strategy was set to "all tokens". * Commit: `44f1409 `_ [TASK] Add Unit Tests for Utility\\Algorithms ----------------------------------------------------------------------------------------- This adds Unit Tests for the Utility\\Algorithms class and its functions. * Commit: `936ffe9 `_ [TASK] Add default route in functional test for security ----------------------------------------------------------------------------------------- If the Flow framework routes were not mounted some functional tests failed due to the request matcher of the TestingProvider. This change adds the required route programatically. Since the Routes.yaml for functional tests is not needed anymore it can be removed. * Commit: `60c09a2 `_ [FEATURE] Make System Logger frontend configurable ----------------------------------------------------------------------------------------- Move hard coded TYPO3\\FLOW3\\Log\\Logger to Settings.yaml instead. This allows a user to fully replace the logger instead of just adding or removing backends. * Resolves: `#40738 `_ #46053 * Commit: `0c1046e `_ [TASK] Keep roles until tokens get updated ----------------------------------------------------------------------------------------- * Resolves: `#46352 `_ * Commit: `5241493 `_ [BUGFIX] Fix getIdentifierByObject for lazy doctrine proxy ----------------------------------------------------------------------------------------- This bug was introduces with Ib6e1eda1ac38677e84c46a441d099b2c5c1e6e24 and causes the content security functional test to fail. There was no unit test or other indication for this behaviour, so this change adds a unit test for the Doctrine persistence manager. * Commit: `4226319 `_ [TASK] Remove cache has call in router caching aspect ----------------------------------------------------------------------------------------- This change removes a call to "has" on the cache frontend, which is not needed if we want to use the entry with "get". This improves the performance when building a larger number of URIs. * Commit: `f614a36 `_ [FEATURE] A boolean value Validator ----------------------------------------------------------------------------------------- A new Validator for validating if a value is a specific boolean value (TRUE or FALSE). Used with no options it expects TRUE. Mainly useful for validating mandatory checkboxes in forms (like Terms and Conditions). * Resolves: `#45553 `_ * Commit: `d46b153 `_ [TASK] Optimize Validation to improve performance ----------------------------------------------------------------------------------------- The validation result object traverses the whole result- tree everytime someone checks for errors, notices or warnings. This patch refactors the Result object to cache the result internally and propagate changes to the parent result object. In addition the heavy merge actions use this cached information to prevent unneccesary operations. Furthermore the validators are reworked to prevent superfluous object creation. * Resolves: `#46340 `_ * Commit: `90b4bc4 `_ [TASK] Use property injection where possible ----------------------------------------------------------------------------------------- This change refactors setter injection to property injection to allow lazy dependency injection. * Commit: `9ed19b5 `_ [TASK] Optimize I18N service ----------------------------------------------------------------------------------------- This change makes the I18N service usable for lazy loading by removing it from the default runtime. Additionally the Locale class is marked as non-proxyable to prevent calls to the wakeup function. * Commit: `9c2f9ee `_ [!!!][FEATURE] Lazy Dependency Injection ----------------------------------------------------------------------------------------- This introduces lazy dependency injection for dependencies injected through Property Injection. Instead of loading the respective class and instantiating the dependency right away, a proxy object is injected which automatically replaces itself with the real dependency once a method is called on it. The @Inject annotation now accepts an optional argument "lazy" which allows for turning off lazy dependency injection in specific cases. Please read the new section in the Object Management chapter of the Flow manual, included in this change set. * Resolves: `#43819 `_ * Commit: `ff8608f `_ [TASK] Remove file_get_contents call in Cache FileBackend ----------------------------------------------------------------------------------------- * Fixes: `#46343 `_ * Commit: `4607e58 `_ [TASK] Change order of accessing identity in getIdentifierByObject ----------------------------------------------------------------------------------------- This change improves the performance of getIdentifierByObject since the EntityManager contains method is rather slow. * Commit: `4b4548f `_ [TASK] Use include with shutup instead of file_exists ----------------------------------------------------------------------------------------- This change uses include with shutup operator instead of file_exists checks for optimized performance. * Fixes: `#46337 `_ * Commit: `70a092b `_ [BUGFIX] Compile original and proxy class into one file ----------------------------------------------------------------------------------------- Reduce amount of file inclusions by combining original class code and proxy class code into the same file as both need to be loaded anyway. * Fixes: `#46338 `_ * Commit: `7a00ec8 `_ [BUGFIX] Remove unneeded filesystem calls ----------------------------------------------------------------------------------------- This change removes a call to is_dir in the FileMonitor which is duplicate as the ReadDirectoryRecursively does exactly the same and throws an error in this case. Also 2 calls to file_exists are removed as they're not necessary at this point as filemtime() will just return FALSE if something goes wrong. * Resolves: `#46290 `_ * Commit: `203534c `_ [BUGFIX] Add Flow-Doctrine cache adapter ----------------------------------------------------------------------------------------- This adds a cache adapter for Doctrine. It is used for the Doctrine ORM metadata and query cache instead of the ArrayCache used until now. Until now the cache implementations of Doctrine that could be configured were not usable. This change fixes that, so that actually a cache for metadata and query caching is used. * Fixes: `#45264 `_ * Commit: `5e5ebf3 `_ [BUGFIX] Flow Bootstrap now works if PhpUnit is used as Phar file ----------------------------------------------------------------------------------------- If PhpUnit was used as a Phar file, the Flow Core Bootstrap failed during initialization in Testing context because it tried to find PhpUnit's autoloader. Since autoloading is already in effect when using the Phar version, a simple check for the existence of a PhpUnit class is sufficient. * Commit: `7b9a935 `_ [TASK] Make Aspects singletons ----------------------------------------------------------------------------------------- * Commit: `90cdde4 `_ [TASK] Allow package key wildcards for excludeClasses ----------------------------------------------------------------------------------------- The object.excludeClasses setting can now handle a trailing * as a wildcard character in the package key. * Commit: `a381478 `_ [BUGFIX] Exception thrown in TypeHandling (follow up) ----------------------------------------------------------------------------------------- When using isCollectionType() on an string, a warning is thrown. The change id Iae59221cbd72677e6c18ad0a383792a798447253 introduced this. * Resolves: `#45876 `_ * Commit: `5772372 `_ [TASK] Some cleanup to cache related classes ----------------------------------------------------------------------------------------- Non-functional changes to enhance CGL compliance and fix some typos. * Commit: `258afd3 `_ [BUGFIX] Flow CLI again works for Windows command prompt ----------------------------------------------------------------------------------------- Probably introduced with Ibd70e2dc8ff3a958a33ad0eb422060dc0fd8b799, the Flow CLI call via the provided .bat file didn't work anymore because the used ``$_SERVER['PHP_SELF']`` will behave differently for the flow shell and the flow.bat file: in case of the shell, the actual ``Scripts/flow.php`` file will be *included*, while in case of the .bat file, the ``Scripts/flow.php`` file is immediately called with PHP. This results in a different PHP_SELF value. The ``FLOW_ROOTPATH`` value which has to be determined, now is built manually in case of a ``DIRECTORY_SEPARATOR`` equaling a Windows one. Additionally, in order to still allow calling the flow executable from arbitrary locations also for Windows, the flow.bat file is adjusted a bit in order to not rely on being at the root path when calling the file. * Fixes: `#44000 `_ * Related: `#31642 `_ * Commit: `6a4c6df `_ [TASK] Use composer/installers instead of own fork ----------------------------------------------------------------------------------------- * Commit: `1721c14 `_ [BUGFIX] Exception thrown in TypeHandling ----------------------------------------------------------------------------------------- When using isCollectionType() on an unknown class, an exception is caused by a warning PHP gives about that class being unknown. The issue has been introduced together with the patch I007b0faf486680ecfb2fe7c753ef4cabcf6d618c This adds a check that the element is a known class before using is_subclass_of() to prevent the exception. * Fixes: `#45876 `_ * Commit: `57a78d3 `_ [TASK] Remove Configuration\\Source\\SourceInterface ----------------------------------------------------------------------------------------- It is unused and switching sources is not supported any longer. * Commit: `34f5d44 `_ [TASK] Tweak some unit tests ----------------------------------------------------------------------------------------- Basically a non-functional change that simply gets rid of some warnings and a skipped test. * Commit: `a25a8b5 `_ [FEATURE] Make ArrayConverter map only allowed properties ----------------------------------------------------------------------------------------- With this change the ArrayConverter only maps allowed and not skipped keys from source to target. Of no PropertyMappingConfiguration is given, it returns the unchanged source array (as before). * Resolves: `#46061 `_ * Commit: `ed87502 `_ [FEATURE] Allow unknown / disallowed properties to be skipped ----------------------------------------------------------------------------------------- This adds skipUnknownProperties() and skipProperties() to the PropertyMappingConfiguration. If configured to skip all unknown or the given properties, the PropertyMapper will not throw an error if they are found in the source when doing property mapping. * Resolves: `#46048 `_ * Commit: `162f676 `_ [BUGFIX] Keep array keys with nested _descendAll in JsonView ----------------------------------------------------------------------------------------- When nesting _descendAll the JsonView discards array keys. This change fixes that. * Fixes: `#46046 `_ * Commit: `090dd30 `_ [TASK] Tiny tweaks to security documentation ----------------------------------------------------------------------------------------- Some markup fixes to the security chapter. * Commit: `9296c2e `_ [BUGFIX] Fix security related functional tests ----------------------------------------------------------------------------------------- With the fix related to "sessionless authentication" (I5f86cb7a3a3fff3220d61d705f216e1b1d4f2369) settings have been adjusted in order to use the testing provider & token only for requests matching a ControllerObjectName of "TYPO3\\Flow\\Tests\\.*". This change adjusts the tests accordingly. * Related: `#45282 `_ * Resolves: `#45953 `_ * Commit: `bd46c61 `_ [TASK] Some translation corrections and addition of French ----------------------------------------------------------------------------------------- * Add new trans-unit id and new target-language fr translation for ValidationErrors.xlf * Add new file and new target-language fr for translation for Main.xlf * Resolves: `#45279 `_ * Commit: `f35d572 `_ [BUGFIX] Constants use in YAML Configuration maintains type ----------------------------------------------------------------------------------------- If a constant expression in the YAML configuration is used, for example ``foo: '%PHP_VERSION_ID%'``, and the value exclusively represents this constant (i.e. no additional string concatenation like ``path: '%FLOW_PATH_DATA%Logs/Exception'``), the value is substituted directly in order to maintain the initial type of the constant. Prior to this, a ``str_replace`` was done which resulted in a string in every case no matter if the constant was meant to be an integer, for example. * Fixes: `#45864 `_ * Commit: `e2e7e50 `_ [FEATURE] Routing: Nested SubRoutes ----------------------------------------------------------------------------------------- With this change it's possible to load SubRoutes from other SubRoutes. The syntax is the same as before with two additions: 1. You can specify a ``suffix`` in order to load a SubRoute from a different file than the default ``Routes.yaml`` 2. You can set ``variables`` that will be replaced in the merged SubRoutes Usage:: - name: 'Product' uriPattern: 'products/' defaults: '@package': 'My.Package' '@controller': 'Product' subRoutes: 'EntitySubroutes': package: 'MyPackage.RestTest' # load SubRoutes from My.Package/Configuration/Routes.Entity.yaml suffix: 'Entity' # replace placeholder "" with "product": variables: 'entityName': 'product' * Resolves: `#43966 `_ * Commit: `15788c4 `_ [!!!][FEATURE] Support for "sessionless authentication" ----------------------------------------------------------------------------------------- This feature enables authentication without the need of a session to be started. This is useful for stateless services (e.g. REST) where you don't want Flow to create a session cookie. This is a breaking change if you created a custom authentication provider or -token and relied on the fact that AuthenticationProvider::authenticate() started a session. With this change the session is started when AuthenticationToken::updateCredentials() is called. This way the token can decide if it needs a session. Just add a @Flow\\Session(autoStart=true) to the updateCredentials() method if your custom token relies on a session. * Resolves: `#45282 `_ * Commit: `7d79b80 `_ [BUGFIX] Routing includes object arguments even though it should not ----------------------------------------------------------------------------------------- Route::resolve() considered "__identity" arguments as internal and ignored them, if they were not part of the respective Route defaults or uriPattern. This change fixes this by only iterating through sub requests (marked with a "--") * Fixes: `#45463 `_ * Commit: `85ceb84 `_ [TASK] Clean up JsonView and JsonViewTest internals ----------------------------------------------------------------------------------------- Fix docblock and add array type hint to $configuration argument of transformValue() and transformObject(); fix language in JsonViewTest test names. A tiny, non-functional change to Http\\Message is included. * Commit: `70bd32e `_ [BUGFIX] Fix composer requirements ----------------------------------------------------------------------------------------- This fixes some requirements that were a bit too relaxed (due to a misunderstanding when introducing composer to Flow). * Commit: `5d68589 `_ [BUGFIX] Account's expirationDate can be set NULL ----------------------------------------------------------------------------------------- After setting the expirationDate once, it's impossible to set it NULL again due to the typehint in the function parameters. * Fixes: `#45629 `_ * Commit: `f350533 `_ [BUGFIX] Flow should work with PHP versions lower than 5.3.9 ----------------------------------------------------------------------------------------- The change Ia42e374202845dfe5e95c72512e9fefb4f00e789 introduced usage of is_a() with 3 arguments which is only implemented from PHP 5.3.9. This change replaces the call with a manual check for inheritance. * Related: `#32829 `_ * Commit: `45ea227 `_ [BUGFIX] Mapping to subtype with [__type] fails ----------------------------------------------------------------------------------------- The type of a target object can be manipulated by setting __type in the form (or during action initialization when saving the form). This however fails if the target subclass contains fields that the original class does not have, because the property mapping is done before the final class is extracted from the __type request variable. To get this working, the process of getting the final class name is moved before the property mapping. If you wrote your own type converters, you might need to implement the new getTargetTypeForSource() method if you do not extend the provided AbstractTypeConverter of Flow. * Fixes: `#32829 `_ * Commit: `8199795 `_ [BUGFIX] Correctly handle boolean values with property injection ----------------------------------------------------------------------------------------- This change fixes a bug in the property injection where an empty string or 1 are used for representing a boolean value. This change forces the value to be TRUE or FALSE when the value configured in Objects.yaml is a boolean value. * Resolves: `#45413 `_ * Commit: `206c737 `_ [FEATURE] Allow influencing ini usage for sub process ----------------------------------------------------------------------------------------- With a newly introduced configuration directive ``TYPO3.Flow.core.subRequestPhpIniPathAndFilename`` it is now possible to control whether to use an ini file or not for sub processes. The allowed values for this setting might either be NULL or not set to use the parent process' ini file; or might be a path to a specific ini file. If this setting is set to ``false``, no explicit ini file will be used for sub processes. Additionally, this patch refactory the actual command generation out of the execution method in order to make it unit-testable, which is also included in this patch. * Resolves: `#45178 `_ * Commit: `577d51c `_ [TASK] Cosmetic cleanup of security sub package ----------------------------------------------------------------------------------------- Non-functional adjustments adding type hints & fixing doc comments in order to reduce code warnings in Security sub package. * Commit: `d74b086 `_ [FEATURE] Command to list registered type converters ----------------------------------------------------------------------------------------- For debugging and informational purposes, this provides a command ``flow:typeconverter:list`` that lists the currently active type converters known to the Flow instance. * Commit: `3b17b18 `_ [BUGFIX] Dependency Injection: safeguard for malformed DocBlocks ----------------------------------------------------------------------------------------- This adds a safeguard to the Dependency Injection Proxy Class Builder which previously ended with a fatal error if client code contained a malformed DocBlock * Resolves: `#45219 `_ * Commit: `abcdf94 `_ [BUGFIX] Correct method listing of cache FrontendInterface ----------------------------------------------------------------------------------------- The documented listing of the method the cache's FrontendIterface supports is now in sync with the actually supported methods. * Commit: `867ecc7 `_ [!!!][TASK] Remove canValidate() from GenericObjectValidator ----------------------------------------------------------------------------------------- The canValidate() method on the GenericObjectValidator has been around for years in various forms, but is not used anymore. Marked as breaking because it had been annotated as @api for no real reason. * Commit: `7d466f2 `_ [TASK] Fix rendering date in documentation index ----------------------------------------------------------------------------------------- The change in I6de5923f7277b728debd29f29a43e4f8aac2b99d did nest markup, so the "today" was not expanded. * Commit: `753b6cd `_ [TASK] Add custom configuration types documentation ----------------------------------------------------------------------------------------- In change I16b1de8e7c3ec826240c273a87c5e2a095815a86 the option to use custom configuration types was added. This change adds the missing documentation for that feature. * Related: `#37854 `_ * Commit: `9c5e31b `_ [TASK] Add rendering date to documentation index ----------------------------------------------------------------------------------------- * Commit: `9815a45 `_ [BUGFIX] Redirect instead of raising "Entity not found" exception ----------------------------------------------------------------------------------------- If you are logged in into a secured Flow project and delete the corresponding db user (for whatever reasons) an exception "Entity not found" is raised and not caught. With this change the exception is caught and instead PolicyEnforcement will throw an AuthenticationRequiredException, usually calling a redirect to the configured login page. * Resolves: `#29907 `_ * Commit: `940f56d `_ [!!!][BUGFIX] Expose timezone in JsonView's DateTime output ----------------------------------------------------------------------------------------- This corrects the string formatting in JsonView regarding DateTime objects. The additionally required Timezone offset is appended as of ISO 8601 in order to not lead into timezone issues after transferring the resulting JSON. This is breaking in cases where the original incorrect behaviour was worked around by subsequent processing of the transmitted timestamp. * Fixes: `#44997 `_ * Commit: `e5ed0ff `_ [FEATURE] Add unique entity validator ----------------------------------------------------------------------------------------- This adds a validator for ensuring uniqueness of submitted entities. It uses the entity identity properties to determine the uniqueness of the entity. Made with intended use in create & update actions using the action parameter validation. * Resolves: `#44622 `_ * Commit: `7ee3832 `_ [TASK] Tweak figures used in documentation ----------------------------------------------------------------------------------------- Tweaks image inclusions in the sources and fixes some tiny markup errors along the way. * Related: `#44885 `_ * Commit: `b944d91 `_ [BUGFIX] Fix security-related functional test failures, part 2 ----------------------------------------------------------------------------------------- The change I724c1b352dd1807ba53b1e336f2d90e90360ff4d introduced some test failures. This change takes care of the failing functional tests. It does that by: * setting the "current request" again after a call to clearContext() in ContentSecurityTest * adjusting the expected exception in MethodSecurityTest in two places This is a followup to I353e2cba11473cf9ddef82f96b6a79d9d6fefbba which was broken after having fixed those already. * Related: `#42601 `_ * Fixes: `#44765 `_ * Commit: `56c6d85 `_ [BUGFIX] Fix security-related functional test failures ----------------------------------------------------------------------------------------- The change I724c1b352dd1807ba53b1e336f2d90e90360ff4d introduced some test failures. This change takes care of the failing functional tests. It does that by: * changing the order in which security is set up in the FunctionalTestCase provided by Flow. * setting the "current request" again after a call to clearContext() in ContentSecurityTest * adjusting the expected exception in MethodSecurityTest in two places * Fixes: `#44765 `_ * Related: `#42601 `_ * Commit: `55a312f `_ [TASK] Adjust reST documentation for docs.typo3.org ----------------------------------------------------------------------------------------- Moves images around, adjust sources as needed, add Settings.yml. Some source syntax fixes along the way. * Resolves: `#44885 `_ * Commit: `60d8f31 `_ [TASK] Add @api tags for methods in Resource ----------------------------------------------------------------------------------------- This just adds missing @api tags to those methods we support as part of the API. * Commit: `5e248b0 `_ [BUGFIX] Fix high memory consumption of renderObjectDump() ----------------------------------------------------------------------------------------- This change reduces the maximum recursion level for Doctrine Collection dumps from 12 to 3. This reduces memory consumption during exception handling and when using \\TYPO3\\Flow\\var_dump(). * Fixes: `#44278 `_ * Commit: `261af72 `_ [BUGFIX] Throw exception when using options with singleton validators ----------------------------------------------------------------------------------------- Validators being singleton must not be called with options because the options are then inherent properties of the Validator and cannot be executed subsequently with other options. An exception is thrown if such a case occurs because it is then a design mistake of the developer. Besides, this improves the namespace use a bit. * Fixes: `#34872 `_ * Commit: `5f1f59b `_ [BUGFIX] Fix security-related unit test failures ----------------------------------------------------------------------------------------- The change I724c1b352dd1807ba53b1e336f2d90e90360ff4d introduced some test failures. This change takes care of the failing unit tests. * Related: `#42601 `_ * Commit: `9a3433d `_ [TASK] Adds a documentation tip to keep type hinting ----------------------------------------------------------------------------------------- This adds a tip to the PropertyMapping documentation in relation to the MVC stack; mentioning how to not lose type hinting capabilities due to index-accessing controller's ``arguments`` array. * Commit: `5fb83bd `_ [FEATURE] Support streams as Request content ----------------------------------------------------------------------------------------- This patch enhances the setContent() method of the HTTP Request class to accept stream resources, additionally to plain strings. Additionally the CurlEngine now detects a stream and takes advantage of cURL's INFILE feature. That way (bigger) files can bypass PHP when sent through a request with cURL. * Resolves: `#44730 `_ * Commit: `c958024 `_ [BUGFIX] The security context is only allowed to be initialized after routing took place ----------------------------------------------------------------------------------------- This bugfix solves the root-cause for the following two symptoms: * two logins needed in Neos until the Site is shown * if the Flow_Mvc_Routing_FindMatchResults cache is deactivated completely, the login does not work at all. The problem is as follows: * The security context needs the current *request* for working properly; such that it can separate the active and inactive tokens correctly in \\TYPO3\\Flow\\Security\\Context::separateActiveAndInactiveTokens() * The current request is built during *routing*. Thus, the routing mechanism (f.e. RoutePart handlers) is not allowed to access the Security Context in any way. If it does (like in this example), things might break in various ways. * For Neos, the following call chain takes place: * Routing * FrontendNodeRoutePartHandler->matchValue line 51 * NodeService->getNodeByContextNodePath() line 57 * new ContentContext() calls "initializeObject" * ContentContext->initializeObject does $this->domainRepository->findByHost() * this internally uses Repository->findAll() * this executes the *TYPO3\\Flow\\Security\\Aspect\\PersistenceQueryRewritingAspect->rewriteQomQuery* * because Neos has policy entries for entities (TYPO3\\TYPO3CR\\Domain\\Model\\Node), $this->securityContext->initialize() is called, WITHOUT HAVING A REQUEST SET BEFORE. * This results in a half- and wrongly-initialized Security Context set up, with activeTokens not properly set, and also only the standard roles assigned ("Everybody"). * Thus, the check in TYPO3\\Neos\\Controller\\Frontend\\NodeController->showAction() fails: $this->accessDecisionManager->decideOnResource('TYPO3_Neos_Backend_BackendController'); * This redirects the user back to the login ($this->redirect('index', 'Login')) * Now, if the routing cache is activated, the aspect kicks in (in the second iteration) and directly returns the match result, without triggering a database query before. Thus, we need to enforce that the security context is not initialized during the routing phase. The attached patch is just a quick fix; with not really the clean solution. But at least it works and the problem is properly described ;-) This is a follow-up to issue #42601; where the according code has been implemented. * Commit: `ce08c30 `_ [BUGFIX] Adjust YAML schemas to latest changes ----------------------------------------------------------------------------------------- the CLI command "./flow configuration:validate" currently reports invalid configuration for type "Settings" and "Objects" due to outdated schema files. This adjust respective schemas to recent Flow changes. * Fixes: `#44602 `_ * Commit: `911e281 `_ [BUGFIX] Check inheritance in TypeHandling::isCollectionType() ----------------------------------------------------------------------------------------- With this change TypeHandling::isCollectionType() does consider inheritance when it comes to the checking it does. Thus a subclass of SplObjectStorage or an implementation of Doctrine's Collection interface will now be seen as a collection type. * Fixes: `#44535 `_ * Commit: `54d4fe9 `_ [BUGFIX] Implement case-sensitivity switch for Query::equals() ----------------------------------------------------------------------------------------- That was left as a todo and never done. Now it is possible to check case-insensitive. Checking case-sensitive works depending on database support, it can only be done if the database allows for case-sensitive checking. The change also trivially solves a todo about NULL checking in equals(). * Fixes: `#44520 `_ * Commit: `61ae445 `_ [BUGFIX] Make use of DateTimeValidator possible ----------------------------------------------------------------------------------------- When one used Validate(type="DateTime") the ValidatorResolver would try to use DateTime as the validator itself. This change fixes that. * Fixes: `#40449 `_ * Commit: `0a4f1ca `_ [FEATURE] Add setOption() to CurlEngine ----------------------------------------------------------------------------------------- This allows to configure cURL in the CurlEngine. Examples for use are proxy server settings or SSL certification handling:: $engine = new CurlEngine(); $engine->setOption(CURLOPT_PROXY, '127.0.0.1'); $engine->setOption(CURLOPT_PROXYPORT, 8888); In addition the singleton scope of the CurlEngine is removed. * Resolves: `#43903 `_ * Commit: `1c2e454 `_ [FEATURE] API to access prefixed identifier in cache backend ----------------------------------------------------------------------------------------- In case where we need to share cache between different application, it's needed to access the prefixed identifier to allow the other application to access the cache entry. * Resolves: `#43960 `_ * Commit: `0bc3465 `_ [BUGFIX] Fix git error with "core:migrate --status" command ----------------------------------------------------------------------------------------- Obviously there are some different ways git handles the --grep option to the log command. This changes should make it work everywhere, and uses the syntax actually spelled out in the help text. * Fixes: `#44280 `_ * Commit: `a898458 `_ [BUGFIX] Exclude Doctrine Annotations and Collections from reflection ----------------------------------------------------------------------------------------- Doctrine split Annotations and Collections from the Common package, now the exclusion of those packages from reflection is updated. * Fixes: `#44496 `_ * Commit: `2bc1a61 `_ [FEATURE] Allow custom custom configuration files in ConfigurationManager ----------------------------------------------------------------------------------------- Using the added methods it is possible to register new "types" of configuration. The set of processing types remains constant, but one can now e.g. register "Assets" as configuration type and use the "Settings" processing rule for that. This way it it possible to move settings for assets into a dedicated file, "Assets.yaml". The change adds - resolveConfigurationProcessingType() method - registerConfigurationType() method - 2 tests to add a new ConfigurationType - emitConfigurationManagerReady() to register new ConfigurationTypes during boot * Resolves: `#37854 `_ * Commit: `8378b19 `_ [TASK] Ignore Libraries in core:migrate commands ----------------------------------------------------------------------------------------- This change makes the core:migrate commands ignore the folder Packages/Libraries to avoid unintended side effects. * Resolves: `#44398 `_ * Commit: `c2a7d73 `_ [TASK] Adjust suggested folder structure in Package Management section ----------------------------------------------------------------------------------------- I7772051938a4306328108bacde34710c54fc3a69 introduced suggested names for directories under Resources/Public. This adjusts the suggested folder names as discussed and adds a link to the ResourceManagement chapter. * Related: `#42726 `_ * Resolves: `#13694 `_ * Commit: `4d72543 `_ [BUGFIX] Actually do regex search/replace in code migrations ----------------------------------------------------------------------------------------- Actually makes searchAndReplaceRegex() in code migrations do something with the target files. * Fixes: `#44402 `_ * Commit: `df259e5 `_ [BUGFIX] Fix code migration status command ----------------------------------------------------------------------------------------- Calling flow:core:migrate --status is fixed by this change. * Fixes: `#44397 `_ * Commit: `5b4cd7c `_ [BUGFIX] Prevent UriBuilder adding current namespaced arguments ----------------------------------------------------------------------------------------- UriBuilder no longer removes namespaced arguments from the parent request causing all arguments of namespaced sub request to be added to new request even though addQueryString isn't set. The bug was introduced in Iba56bfffa9d8f47670afb1297575607b1b0023a8 * Fixes: `#44139 `_ * Commit: `1c35754 `_ [TASK] Some documentation fixes regarding Caching ----------------------------------------------------------------------------------------- This corrects an incorrect mentioned of ``Settings.yaml`` (which must be ``Objects.yaml`` correctly), and some occurrences of an unnecessary additional colon in a literal block (``::``) * Commit: `6c48a05 `_ [BUGFIX] Fix migration error on missing Configuration directory ----------------------------------------------------------------------------------------- For packages having no Configuration directory the core migration tool died with an error message when trying to process configuration. This is solved by checking for existence before trying to read any files. * Fixes: `#43948 `_ * Commit: `dec4182 `_ [TASK] Some documentation fixes ----------------------------------------------------------------------------------------- * Commit: `6d825e9 `_ [TASK] Update link and thumbnail for one-page CGL ----------------------------------------------------------------------------------------- * Related: `#43882 `_ * Commit: `51d5a7a `_ [FEATURE] Allow exposing the class name of an object in JsonView ----------------------------------------------------------------------------------------- Besides telling the identifier of a persisted object, it's now additionally possible to expose the class name of this object. For convenience, it's possible to output only the unqualified class name rather than the fully qualified one. * Resolves: `#42784 `_ * Commit: `5aa5283 `_ [BUGFIX] Silence warning on writing PackageStates.php ----------------------------------------------------------------------------------------- When the file permissions on for example the configuration folder are not correct a PHP warning is shown. This is shown on top of the friendly error TYPO3.Setup message and should be hidden. The only way to silence this is to use the shut-up operator in sortAndSavePackageStates() inside PackageManager. Any exception or error code thrown at that point are not catchable by a (setup) controller. * Fixes: `#42202 `_ * Commit: `f1c8c38 `_ [TASK] Adjust routing documentation to recent changes ----------------------------------------------------------------------------------------- This fixes the routing examples provided with the definitive guide. * Related: `#43589 `_ * Commit: `4e32723 `_ [FEATURE] Improve executeCommand exception message ----------------------------------------------------------------------------------------- If a subprocess command could not be executed, the exception message now clearly says what command that actually is. Besides, the message formatting is a bit nicer and an exception number (timestamp) has been added. * Commit: `1e7af08 `_ [TASK] Add Runtime Cache to Reflection\\ObjectAccess ----------------------------------------------------------------------------------------- Using Reflection\\ObjectAccess during validation or f.e. JsonView in an extensive way you soon will end up with thousands of calls to functions of that class. By adding a runtime cache this can be sped up. * Resolves: `#42723 `_ * Commit: `3f17618 `_ [BUGFIX] Handle constant correctly in Doctrine\\Service ----------------------------------------------------------------------------------------- The runDql() method in Persistence\\Doctrine\\Service didn't use the passed by value for the hydrationMode correctly. Now that value is considered to be an already resolved constant as annotated and noted down in the method's signature. * Fixes: `#44049 `_ * Commit: `a3f587b `_ [TASK] Various cleanup changes to tests and a Files method ----------------------------------------------------------------------------------------- Fixes a number of docblocks, two test names. The Utility\\Files method createDirectoryRecursively now throws a dedicated exception if a file exists already where a directory should be created. * Commit: `451f9b3 `_ [TASK] Add ChangeLog for 2.0 beta 1 ----------------------------------------------------------------------------------------- * Commit: `9083bed `_ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ TYPO3.Fluid ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [TASK] Fix version requirement on Flow ----------------------------------------------------------------------------------------- * Commit: `4422c51 `_ [TASK] Update composer manifest ----------------------------------------------------------------------------------------- See http://ci.typo3.robertlemke.net/job/typo3-flow-branch/3/ * Commit: `3d3ebdb `_ [TASK] Adjust to "Deprecated base tag" ----------------------------------------------------------------------------------------- This adjusts code and documentation to the recent change in Flow, namely the deprecation of base tags. * Related: `#53827 `_ * Commit: `102fcfa `_ [TASK] Allow link ViewHelper to generate relative URIs ----------------------------------------------------------------------------------------- This re-introduces the ``absolute`` argument to the ``link.action`` ViewHelper that has been removed in revision I85fdff19e54c70eb8b16ffb247e6c171fa5bac04. But its default value is now ``TRUE`` for backwards compatibility reasons. So in order to render relative URIs, the argument has to be set explicitly:: * Related: `#53827 `_ * Commit: `5d6d51d `_ [BUGFIX] Flush template cache on ViewHelper changes ----------------------------------------------------------------------------------------- Changing the signature of the render method in a ViewHelper leads to stale cached templates that throw exceptions. This change uses the file monitoring to flush the template cache on a change to a ViewHelper class. * Fixes: `#54135 `_ * Commit: `ced8f40 `_ [BUGFIX] Fix IfAccessViewHelper tests ----------------------------------------------------------------------------------------- Fixes the unit tests for the ``security.ifAccess`` ViewHelper that broke with I39abae46be9e553954e3967ecabe229124acb551 * Commit: `352fcdd `_ [TASK] Regard system role AuthenticatedUser in IfHasRole VH ----------------------------------------------------------------------------------------- This patch makes the ViewHelper regard the new system role `AuthenticatedUser` which was introduced in Ia00bea27e81b2e4a172ad4f998dfa30581dd71dd. * Resolves: `#53800 `_ * Commit: `db33e39 `_ [TASK] IfAccessViewHelper now avoids exceptions in Security.log ----------------------------------------------------------------------------------------- Previously this view helper was just calling decideOnResource() in order to find out if a resource was accessible and caught any exception thrown by that method. Now the correct method hasAccessToResource() is called instead. Because the logging aspect registered even caught exceptions, any call to this view helper resulted in an Access Denied entry in Security.log * Commit: `f556da2 `_ [TASK] CGL Fixes ----------------------------------------------------------------------------------------- * Removes indent from inline comments * Fixes several docblock issues * Fixes incorrect spacing * Fixes several other CGL issues * Commit: `77c3225 `_ [TASK] Remove PHP closing tag ----------------------------------------------------------------------------------------- * Commit: `def4ec6 `_ [BUGFIX] Form ViewHelpers throw exception if no formObject is set ----------------------------------------------------------------------------------------- When using forms with object binding Fluid throws an exception for FormField ViewHelpers bound to nested properties if no form object is available. This is the case for example in newAction() where the object is usually NULL:: * Related: `#29290 `_ * Commit: `b074081 `_ [TASK] initializeAction methods have to be protected ----------------------------------------------------------------------------------------- * Commit: `d53af17 `_ [BUGFIX] Additional Identity Properties not set on mapping error ----------------------------------------------------------------------------------------- When binding Fluid forms to nested objects, Fluid automatically adds hidden fields with the identifiers of all affected objects so that the persistence layer can update all objects correctly. When a form was redisplayed due to property mapping errors, the identity fields for the nested sub objects were no longer created. This change fixes this by making sure all identity fields are rendered recursively also after property mapping errors. Example code to verify this:: {iteration.cycle}: When submitting the form with validation errors, the redisplayed form should contain a div with a hidden field named "user[__identity]" for the user and one for each invoice. * Fixes: `#29290 `_ * Commit: `3a56759 `_ [BUGFIX] Don't use folders as templates, partials and layouts ----------------------------------------------------------------------------------------- The PHP function ``file_exists()`` returns TRUE for files as well as directories. This change adjusts Template- and StandaloneView to use ``is_file()`` instead. * Fixes: `#47188 `_ * Commit: `b1041e1 `_ [FEATURE] Introduce TemplateObjectAccessInterface ----------------------------------------------------------------------------------------- This change is needed to handle TypoScript objects, simple types and Eel expressions in the same way. With the additional call to $node->objectAccess() for implementations of TemplateObjectAccessInterface the evaluation of TypoScript objects can be deferred until the actual rendering to be as lazy as possible. * Related: `#48359 `_ * Commit: `7c7ea0a `_ [TASK] Fix license in file level docblocks ----------------------------------------------------------------------------------------- * Related: `#50835 `_ * Commit: `0cabe77 `_ [TASK] Major cosmetic cleanup ----------------------------------------------------------------------------------------- This adjusts the package to recent CGL changes, fixes loads of minor spelling and includes further cleanups: * Fix package key in class doc comments * Import namespaces in order to avoid FQNs * Add inline @var annotations for better maintainability * Remove deprecated ViewHelpers "identity.json", "link.widget" & "uri.widget" * Remove obsolete DocbookGenerator (use XsdGenerator instead) * Fix unit and functional tests! * Commit: `4578833 `_ [FEATURE] Add supportedOptions to templateView ----------------------------------------------------------------------------------------- This changes the templateView to make use of the new way to set options by the view configuration change. See I93acc3ed3d9578a5d00d494b367aa7201138255b * Resolves: `#42176 `_ * Commit: `eec91b0 `_ [FEATURE] Fallback paths ----------------------------------------------------------------------------------------- With this change it will be possible to define multiple values for the ``template``, ``partial`` and ``layout`` root path configuration. Each of the respective options will now have a corresponding setter that enables configuration of multiple paths to look up when loading a Fluid template file:: $view->setTemplateRootPaths(array('first/path', 'second/path', …)); The old setters will be kept and they overrule the fallback paths. So:: $view->setTemplateRootPath('some/path'); would disable the fallback paths of the previous example. The same is true for ``setPartialRootPath()`` and ``setLayoutRootPath()``. The rootPath-getters have been deprecated in favor of ``getTemplateRootPaths()``, ``getPartialRootPaths()`` and ``getLayoutRootPaths()``. * Resolves: `#39870 `_ * Commit: `a117389 `_ [BUGFIX] Base64-encode widget context ----------------------------------------------------------------------------------------- In order to avoid various null-byte-issues as they occur when serializing an object with protected members (see [1]); for example with Suhosin or some reverse proxy implementations; the context object is transferred in a Base64 encoded state now. As there is no need to urlencode it anymore, this additionally saves some bytes. [1] http://php.net/serialize section "Parameters", subsection Note * Fixes: `#35090 `_ * Commit: `f53ee1c `_ [FEATURE] Added autofocus attribute to textfield and textarea ----------------------------------------------------------------------------------------- The ViewHelpers f:form.textfield and f:form.textarea were lacking the HTML5 "autofocus" attribute. It is available for button, input and textarea. Now Fluid reflects this correctly by adding this attribute to the initializeArguments methods for TextareaViewHelper and TextfieldViewHelper. * Resolves: `#49726 `_ * Commit: `c763e75 `_ [BUGFIX] format.bytes ViewHelper: add peta-byte and support large numbers ----------------------------------------------------------------------------------------- In the row of prefixes for multiples "peta" is missing between "tera" and "exa". pow() will use float if the numbers require it (too large). So we also need to allow float-values to support larger numbers. * Fixes: `#49143 `_ * Commit: `27e6ebe `_ [FEATURE] ViewHelper to display file sizes ----------------------------------------------------------------------------------------- Simple ViewHelper that converts the size of a file to a human readable string. Usage: {fileSize -> f:format.bytes()} * Resolves: `#49128 `_ * Commit: `96c3108 `_ [BUGFIX] Typo in SwitchViewHelper code example ----------------------------------------------------------------------------------------- Fixes a typo in the usage example introduced with Ibec7b1acc4555a8f69ea7465023a2cf2b06e63aa * Fixes: `#48856 `_ * Related: `#33817 `_ * Commit: `88edf89 `_ [TASK] Add hints to ViewHelpers ----------------------------------------------------------------------------------------- This adds some developer notes to commonly used ViewHelpers that should prevent over- or misusage. * Commit: `eb510ff `_ [FEATURE] Switch View Helper ----------------------------------------------------------------------------------------- Simple view helper that allows you to render content depending on a given value or expression. It bahaves similar to a basic switch statement in PHP. Usage:: Mr. Mrs. * Resolves: `#33817 `_ * Commit: `4fd6714 `_ [TASK] Optimize number_format calls ----------------------------------------------------------------------------------------- This change optimizes number_format calls in ViewHelpers by explicitly casting the number argument to float. A benchmark shows this increases performance of the number_format call by a factor of 2-3. * Resolves: `#36207 `_ * Commit: `48e3cf0 `_ [BUGFIX] Declare ObjectManager property ----------------------------------------------------------------------------------------- The objectManager is injected and used but the property is not declared in the class. * Fixes: `#47968 `_ * Commit: `1779aeb `_ [FEATURE] CSRF token ViewHelper ----------------------------------------------------------------------------------------- With I9d667aa451a7510cf12ab13be745fed1f7ca477e CSRF tokens are not added to URIs any longer. Therefore you need to add the token yourself for "unsafe" requests (POST, PUT, DELETE, ...). This is not true for fluid forms where the token is added automatically if the form does not have method="get" set (see Ic600a9e591d047ca9bbd39d352c4f337bcfaa6a9). For other forms or AJAX requests the ViewHelper can be used like this::
...
* Related: `#47252 `_ * Commit: `480bbef `_ [!!!][TASK] CSRF protection for "safe" request methods ----------------------------------------------------------------------------------------- This change set adjusts URL related view helpers in Fluid to an important behavior for Flow applications: HTTP request methods which are, by definition, considered to be "safe" (that is, "read-only") are now treated as such. The Fluid Link and Uri view helpers will not generate CSRF tokens anymore, since we assume that you are using them for GET requests. The FormViewHelper however, will enable link protection if the form does not have method="get" set. Please adjust your applications to cleanly observe this principle since more optimizations in this direction are planned for later versions of TYPO3 Flow. * Related: `#47252 `_ * Commit: `e1ca2a7 `_ [TASK] Add packageKey attribute to ifHasRole view helper ----------------------------------------------------------------------------------------- This change adds support for handling a packageKey to the ifHasRole view helper. It can be used in three ways: 1) The 'old' way, with just a string like 'Administrator' This will result in a check for the Administrator role within the current package (fetched from the controllerContext) 2) With a full role identifier like 'Foo.MyPackage:Administrator' 3) Using both, the role attribute and packageKey attribute This was once Iae92119bf9f8d6125211d1e4b1e42a0a513d804b but had to be reverted after an accidental merge. * Related: `#37451 `_ * Commit: `3a7966b `_ [TASK] Revert: "Add packageKey attribute to ifHasRole view helper" ----------------------------------------------------------------------------------------- This reverts commit 806a29a4dabd5a7a90b55d819a39782a0a807cff The change was merged too early by mistake. Related changes need to be merged first. see: https://review.typo3.org/#/q/status:merged+branch:master+topic:roles,n,z * Related: `#37451 `_ * Commit: `b2153d8 `_ [TASK] Remove leading backslash in use statement(s) ----------------------------------------------------------------------------------------- * Commit: `0f4d1d4 `_ [TASK] Add packageKey attribute to ifHasRole view helper ----------------------------------------------------------------------------------------- This change adds support for handling a packageKey to the ifHasRole view helper. It can be used in three ways: 1) The 'old' way, with just a string like 'Administrator' This will result in a check for the Administrator role within the current package (fetched from the controllerContext) 2) With a full role identifier like 'Foo.MyPackage.Administrator' 3) Using both, the role attribute and packageKey attribute * Related: `#37451 `_ * Commit: `806a29a `_ [BUGFIX] GroupedFor ViewHelper to support DateTime objects ----------------------------------------------------------------------------------------- The groupedFor view helper can group by DateTime objects as defined in the properties of an object. It uses \\DateTime::RFC850 format to group by internally, so the the subsequent groupKey can use it to format a valid date again. * Fixes: `#44826 `_ * Commit: `c7b4af7 `_ [FEATURE] Add a Format.Case ViewHelper ----------------------------------------------------------------------------------------- This adds a Format.Case ViewHelper that changes a string's case in various manners like uppercase, lowercase, (un-)capitalization and each-word-capitalization. * Resolves: `#44572 `_ * Commit: `770f32c `_ [TASK] Adjust Fluid to Lazy Dependency Injection ----------------------------------------------------------------------------------------- This adjusts the ViewHelperNode and AbstractWidgetViewHelper to Lazy Dependency Injection introduced in Flow 2.0 * Related: `#43819 `_ * Commit: `cd8dbb1 `_ [TASK] filemtime is namespaced in TemplateView.php ----------------------------------------------------------------------------------------- * Resolves: `#45987 `_ * Commit: `8490172 `_ [TASK] Remove dependency on installer ----------------------------------------------------------------------------------------- Rely on implicit dependency through TYPO3.Flow * Commit: `9c58d28 `_ [FEATURE] Configurable prepend option for Select ViewHelper ----------------------------------------------------------------------------------------- A common use case with select fields is to have a 'empty' option at first position in the options list. This change provides the possibility to add a label and (optionally) a value, which will be rendered in the option list. Usage: Note: The prepended option can be translated using the "translate" argument. * Resolves: `#44235 `_ * Commit: `4c58955 `_ [BUGFIX] Fix broken TemplateViewTest ----------------------------------------------------------------------------------------- The test was broken by I6f31adc1bd493f2c818b532b2394a774c17f24b7 when some imported class names were made fully qualified (and thus pointed to non-existing classes). * Related: `#44710 `_ * Commit: `f988260 `_ [FEATURE] Allow f:link.action to operate on parent request ----------------------------------------------------------------------------------------- Add an useParentRequest argument to link.action, uri.action, and form ViewHelpers to generate links using the Parent Request instead of the current Request. * Resolves: `#35790 `_ * Commit: `6b5f0d0 `_ [TASK] Fix some CGL issues spotted during backporting (part2) ----------------------------------------------------------------------------------------- This patch fixes some CGL problems spotted while syncing Flow Fluid and TYPO3 CMS Fluid Also removed unneeded backporter tokens from code. This will ease next backporting a lot. * Resolves: `#44710 `_ * Commit: `725a552 `_ [TASK] Add placeholder attribute to password ViewHelper ----------------------------------------------------------------------------------------- As a follow-up to I24bb73c5de5a494259171ff289d434892f85e16e, this also adds the placeholder attribute to the password ViewHelper. * Related: `#37558 `_ * Commit: `c8089da `_ [TASK] Fix CGL in TemplateParser ----------------------------------------------------------------------------------------- This patch fixes some CGL violations found in TemplateParser * Resolves: `#44702 `_ * Commit: `5e10ef2 `_ [TASK] Fix CGL issues in AbstractViewHelper ----------------------------------------------------------------------------------------- This patch fixes some CGL issues found in AbstractViewHelper founded when backporting fluid to TYPO3 CMS * Resolves: `#44706 `_ * Commit: `62f0fbd `_ [!!!][BUGFIX] urlencode viewhelper accepts objects with __toString ----------------------------------------------------------------------------------------- This fixes a problem with the urlencode view helper. If you pass it an object with __toString() method – for example an URI object – it is returned as is. Now the view helper additionally checks for a __toString() method. This change is breaking if you rely on the viewhelper to return values that are not a string or an object with __toString. The viewhelper will now throw an exception in this case. * Fixes: `#44889 `_ * Commit: `d8097eb `_ [TASK] Fix some CGL issues spotted during backporting ----------------------------------------------------------------------------------------- This patch fixes some cgl problems spotted while syncing Flow Fluid and CMS Fluid * Resolves: `#44710 `_ * Commit: `295eacf `_ [FEATURE] Add errorClass to form.hidden VH ----------------------------------------------------------------------------------------- For use in JS-enhanced frontends it can be useful to attach errorClass even to hidden fields (to detect validation errors). * Commit: `a5e0ba7 `_ [!!!][TASK] Clean up placeholder on textfield and text area VHs ----------------------------------------------------------------------------------------- The form.textfield VH had a placeholder attribute as argument to the render() method; the form.textarea VH did not support placeholder at all. With this change the placeholder is available on both VHs but registered as tag attribute. If you extended TextfieldViewHelper::render() make sure to remove the $placeholder argument, otherwise you will see Argument "placeholder" has already been defined, thus it should not be defined again. errors from Fluid. * Resolves: `#37558 `_ * Commit: `11ecf9b `_ [BUGFIX] Add input string argument to Format.Crop ViewHelper ----------------------------------------------------------------------------------------- The Format.Crop ViewHelper did not provide a way to pass the input string as simple argument; this patch now allows this. An appropriate UnitTest is added; additionally an augmentation to the ViewHelpers' DocComment, mentioning an inline use case, is added. * Commit: `c3f3ca3 `_ [BUGFIX] Adjust pagination widget to recent changes ----------------------------------------------------------------------------------------- With #43589 the action argument of link/URI ViewHelpers is not optional any longer. This change adjusts the template of the provided pagination widget to that breaking change by specifying the action argument. Besides this adds a check to widget.link & widget.uri ViewHelpers which throws a more meaningful exception if the action argument was omitted. * Fixes: `#44376 `_ * Related: `#43589 `_ * Commit: `fd3ff04 `_ [BUGFIX] Tweaked the TranslateViewHelper documentation ----------------------------------------------------------------------------------------- The DocComment part of the TranslateViewHelper contained an example which does not work in Fluid that exactly way. A wrapping CDATA block obviously fixes the issue in order to prevent Fluid regarding the translation placeholder as object literal incorrectly. * Commit: `2afcead `_ [TASK] Make getTemplateRootPath() public like its setter ----------------------------------------------------------------------------------------- The getTemplateRootPath() method in View\\TemplateView now becomes public analogous to its setter counterpart which already is public, too. * Resolves: `#29303 `_ * Commit: `73156e7 `_ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ TYPO3.Kickstart ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [TASK] Fix version requirement on Flow ----------------------------------------------------------------------------------------- * Commit: `5f55f05 `_ [TASK] Update composer manifest ----------------------------------------------------------------------------------------- See http://ci.typo3.robertlemke.net/job/typo3-flow-branch/3/ * Commit: `411856a `_ [TASK] CGL Fixes ----------------------------------------------------------------------------------------- * Fixes incorrect spacing * Commit: `93d51f2 `_ [TASK] Remove PHP closing tag ----------------------------------------------------------------------------------------- * Commit: `dedf7b1 `_ [TASK] Adjust test to relative namespace handling ----------------------------------------------------------------------------------------- * Related: `#46008 `_ * Commit: `df5e4c6 `_ [TASK] Fix license in file level docblocks ----------------------------------------------------------------------------------------- * Related: `#50835 `_ * Commit: `923b8b4 `_ [BUGFIX] Kickstarter creates superfluous code ----------------------------------------------------------------------------------------- The kickstarter creates a lot of code that is not needed. Especially redundant doc comments are counter productive. This change tweaks and cleans up the generator templates so that they create less noise. This also comes with following minor improvements: * Remove leading slash from use statement * Replace "`_ * Commit: `4de1a56 `_ [BUGFIX] Kickstarter creates "delete links" ----------------------------------------------------------------------------------------- With 2.0 Flow won't persist changes automatically for safe requests (see #47252). This adjusts the index template accordingly so that it creates delete forms instead of links. * Fixes: `#48028 `_ * Related: `#47252 `_ * Commit: `cc329f3 `_ [BUGFIX] Controllers must not be of scope singleton ----------------------------------------------------------------------------------------- Adjusts the controller templates to create prototypes instead of singletons. Background: Usually the scope of a controller doesn't really make a difference, because they are only instantiated once per request. But if the same controller is used multiple times (e.g. within two plugin/widget instances on one page) the side effects could be very confusing. * Fixes: `#45647 `_ * Commit: `35bd7a3 `_ [BUGFIX] Fix command controller kickstart ----------------------------------------------------------------------------------------- When kickstarting a command controller the class/file name would lack the "Command" part (as of Ie758c26cecd591ed240478de3f9597714060fb88). * Fixes: `#43908 `_ * Commit: `568c98f `_ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ TYPO3.Party ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [TASK] Fix version requirement on Flow ----------------------------------------------------------------------------------------- * Commit: `1a2e276 `_ [TASK] Update composer manifest ----------------------------------------------------------------------------------------- See http://ci.typo3.robertlemke.net/job/typo3-flow-branch/3/ * Commit: `57aa36b `_ [TASK] CGL Fixes ----------------------------------------------------------------------------------------- * Removes indent from inline comments * Commit: `2a24d32 `_ [TASK] Remove PHP closing tag ----------------------------------------------------------------------------------------- * Commit: `4b1adcb `_ [TASK] Improve Electronic Address validators ----------------------------------------------------------------------------------------- Improvement of the regex pattern for MSN, Yahoo and Sip validators. This includes the removal of an exception when trying to resolve the pattern. In the MSN validator an outlook domain address is now also valid in addition to msn, hotmail and live domains. * Fixes: `#47882 `_ * Commit: `c733d12 `_ [BUGFIX] Add missing delimiter in IcqValidator ----------------------------------------------------------------------------------------- * Fixes: `#47881 `_ * Commit: `1628866 `_ [FEATURE] Add possibility to fetch address and usage types ----------------------------------------------------------------------------------------- * Add the possibility to get lists of electronic address types and usage types. * Add extra validation to properties * Resolves: `#44196 `_ * Commit: `d9f5aeb `_ [FEATURE] Support nested editing of electronic addresses ----------------------------------------------------------------------------------------- A setter for electronic addresses is needed when using nested Fluid forms. * Commit: `55af865 `_ [TASK] Add missing validators for ElectronicAddress types ----------------------------------------------------------------------------------------- Adds the needed validators and changes the ElectronicAddressValidator so that it uses them. * Fixes: `#39150 `_ * Commit: `a69dd90 `_ [TASK] Remove dependency on installer ----------------------------------------------------------------------------------------- Rely on implicit dependency thorugh TYPO3.Flow * Commit: `f996744 `_ [BUGFIX] Removing primary electronic address fails in persistence ----------------------------------------------------------------------------------------- When removing an electronic address which is also the primary electronic address of a Person an exception is thrown in the persistence layer due to a property being unset and not set to NULL when validating the object before persisting. * Fixes: `#45459 `_ * Commit: `b145b95 `_ [TASK] Remove Gizmo as electronic address type ----------------------------------------------------------------------------------------- Due to discontinued support as of April 3, 2011. * Resolves: `#45276 `_ * Commit: `b16e70e `_ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ TYPO3.Welcome ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [TASK] Fix version requirement on Flow ----------------------------------------------------------------------------------------- * Commit: `39f81ba `_ [TASK] Update composer manifest ----------------------------------------------------------------------------------------- See http://ci.typo3.robertlemke.net/job/typo3-flow-branch/3/ * Commit: `19b018e `_ [BUGFIX] Switch welcome site to jQuery for consistency ----------------------------------------------------------------------------------------- The welcome site now also uses jQuery as JavaScript library. Additionally folder names were adapted to match the best practice proposal we have. * Fixes: `#44670 `_ * Commit: `27b3e27 `_