==================== 2.2.0-beta1 ==================== ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Base Distribution ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [TASK] Update composer manifest ----------------------------------------------------------------------------------------- See http://ci.typo3.robertlemke.net/job/typo3-flow-branch/4/ * Commit: `752d6bb `_ [TASK] Add phpunit/phpunit as dev requirement ----------------------------------------------------------------------------------------- * Commit: `5531c5d `_ [TASK] Some tweaks to the release scripts ----------------------------------------------------------------------------------------- * Commit: `a546323 `_ [TASK] Fix create-branch dependency handling ----------------------------------------------------------------------------------------- * Commit: `ccb988d `_ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ TYPO3.Eel ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [TASK] Update composer manifest ----------------------------------------------------------------------------------------- See http://ci.typo3.robertlemke.net/job/typo3-flow-branch/4/ * Commit: `bf8b1de `_ Revert "[FEATURE] shuffle() operation" ----------------------------------------------------------------------------------------- After some discussion we decided to remove this feature again because the same behavior can, as Christopher pointed out, be achieved through the Array Helper: ${Array.random(q(node).children('...').get())} The merged shuffle() operation also had the problem of preserving array keys. The following line of TypoScript would _not_ return a random, but always the first article: articles = ${q(this.someArticles).shuffle().get(0)} This reverts the following commits: 2db53f9877b1d0b461a6b5df35d20bd66efb7469 cdc83573e41778089143dc5cdb2413b825e9c200 * Commit: `feb5d4d `_ [FEATURE] Add first letter to upper/lower methods in StringsHelper ----------------------------------------------------------------------------------------- * Commit: `86b894c `_ [BUGFIX] Make shuffle() a non-final operation ----------------------------------------------------------------------------------------- * Commit: `cdc8357 `_ [FEATURE] shuffle() operation ----------------------------------------------------------------------------------------- This introduces a new FlowQuery operation which randomizes the current context. If the context is, for example, an array of Nodes, ashuffle() can be used to pick one of these. TypoScript Example: articleNode = ${q(this.articleNodes).shuffle().get(0)} * Commit: `2db53f9 `_ [BUGFIX] Prevent race conditions in Eel Expression Cache ----------------------------------------------------------------------------------------- This should prevent race conditions where the included cache file contained less expressions than the file that ends up in the code to be cached string. * Fixes: `#54487 `_ * Commit: `65b34b4 `_ Revert "[BUGFIX] Prevent race conditions in EEL Expression Cache" ----------------------------------------------------------------------------------------- SORRY, accidentally hit the submit button, just wanted to leave my review. This reverts commit e30a9e7cf65fe4a260121900024157733b8dc6f6 * Commit: `c39d5c5 `_ [BUGFIX] Prevent race conditions in EEL Expression Cache ----------------------------------------------------------------------------------------- This should prevent race conditions where the included cache file contained less expressions than the file that ends up in the code to be cached string. * Commit: `e30a9e7 `_ [BUGFIX] Fix unwrapping of left hand side operand for substractions ----------------------------------------------------------------------------------------- This change fixes a missing unwrap on the Eel context for substraction expressions in the CompilingEelParser. All expressions should be re-generated by flushing the Eel expression cache. * Commit: `4859a3b `_ [FEATURE] Configuration Helper: settings ----------------------------------------------------------------------------------------- This new helper is supposed to be the one which provides information about the environment. The first implemented method allows for retrieving settings. Example for use within TypoScript: sitePackageKey = ${Configuration.setting(‚Acme.Demo.sitePackageKey')} * Commit: `fbf13ab `_ [!!!][FEATURE] Use JavaScript semantics of || and && operators ----------------------------------------------------------------------------------------- This change updates the handling of the boolean short circuit operators for disjunction and conjunction to the JavaScript semantics of returning one of the left or right side values instead of a boolean. This is only breaking if the code using Eel relied on the exact type e.g. by using a strict comparison. * Commit: `6205fbc `_ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ TYPO3.Flow ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [TASK] Update references in documentation ----------------------------------------------------------------------------------------- See http://ci.typo3.robertlemke.net/job/typo3-flow-release/13/ * Commit: `8863063 `_ [BUGFIX] Make RequestTest branch independent ----------------------------------------------------------------------------------------- There are two tests testing headers rendered by Http\\Request, those include the FLOW_VERSION_BRANCH - but did not use the constant. * Commit: `89fd418 `_ [TASK] Adjust FLOW_VERSION_BRANCH to 2.2 ----------------------------------------------------------------------------------------- * Commit: `bd9d7b1 `_ [TASK] Update composer manifest ----------------------------------------------------------------------------------------- See http://ci.typo3.robertlemke.net/job/typo3-flow-branch/4/ * Commit: `3d5a722 `_ [BUFGIX] Throw exception if PackageStates.php is not writeable ----------------------------------------------------------------------------------------- * Fixes: `#53238 `_ * Commit: `1781926 `_ [FEATURE] Add PSR-4 support to Package ----------------------------------------------------------------------------------------- This change updates the Package class to properly load PSR-4 based packages. Depends on: https://github.com/composer/installers/pull/135 * Commit: `66e66d3 `_ [!!!][FEATURE] Throw exception for unpersisted changes in Safe Requests ----------------------------------------------------------------------------------------- This changeset keeps track if the PersistenceManager has unpersisted changes and notifies the Developer with a helpful exception if this happens in a safe request (GET/HEAD). This exception is only thrown in development context In case you implemented your own Persistence Manager, you must add the new hasUnpersistedChanges() method, unless you extend the AbstractPersistenceManager. * Resolves: `#51570 `_ * Commit: `e9b5de3 `_ [TASK] Tweak readme and upgrading docs towards release ----------------------------------------------------------------------------------------- * Commit: `4c39af6 `_ [BUGFIX] Do not serialize singleton properties on __sleep ----------------------------------------------------------------------------------------- Serializing a Flow managed object will not serialize injected properties as they will be reinjected anyway. This now works consistently for all injections. This also is a workaround for the PHP bug: https://bugs.php.net/bug.php?id=65967 As the only reason we serialize an SplObjectStorage curently is that we serialize Logger instances. * Commit: `cf5bb87 `_ [TASK] Fix unit test failing due to float precision issue, part III ----------------------------------------------------------------------------------------- Tries to fix two unit tests still failing with something like:: Expected: "12.35" Actual: "12.349999999999999857891452847979962825775146484375" The first tries did not work, so we just raise the value from 12.34 to 112.34 - that makes it 112.34000000... which makes the test pass. * Commit: `2c1148b `_ [TASK] Fix unit test failing due to float precision issue ----------------------------------------------------------------------------------------- Tries to fix two unit tests still failing with something like:: Expected: "12.35" Actual: "12.349999999999999857891452847979962825775146484375" The first try did not work, so maybe handing in the expected value in it's true format helps. * Commit: `260a686 `_ [TASK] Fix unit test failing due to float precision issue ----------------------------------------------------------------------------------------- Tries to fix two unit failing with:: Expected: "12.34" Actual: "12.339999999999999857891452847979962825775146484375" * Commit: `89bdc23 `_ [BUGFIX] PackageManager initialize() signature is incompatible ----------------------------------------------------------------------------------------- PackageManagerInterface contains following method declaration:: public function initialize(\\TYPO3\\Flow\\Core\\Bootstrap $bootstrap); however in the PackageManager the signature is:: public function initialize(\\TYPO3\\Flow\\Core\\Bootstrap $bootstrap, $packagesBasePath = FLOW_PATH_PACKAGES, $packageStatesPathAndFilename = '') This will create a fatal error on some versions of php and when running unit tests on hhvm (of CMS), see http://php.net/manual/en/language.oop5.interfaces.php: "The class implementing the interface must use the exact same method signatures as are defined in the interface. Not doing so will result in a fatal error." This change updates the method signature of the PackageManager to be in line with the interface. * Fixes: `#56409 `_ * Commit: `bff1609 `_ [FEATURE] Use CacheAwareInterface to build route cache identifier ----------------------------------------------------------------------------------------- This change allows to cache route values with objects implementing CacheAwareInterface. As an optimization an exception that was used only internally is replaced by boolean values. * Commit: `fa28894 `_ [BUGFIX] .htaccess is overwritten by the composer install scripts ----------------------------------------------------------------------------------------- The composer update / install scripts overwrite the Web/.htaccess file which is unwanted behavior as this leads to issues when people add custom rewrite rules, or if for example setting the MultiViews option is not allowed. This change moves the .htaccess, index.php and flow scripts to the Defaults folder so it will only be initialy placed into the installation. * Fixes: `#54553 `_ * Commit: `c2beba9 `_ [TASK] Add changelog for TYPO3 Flow 2.1.1 ----------------------------------------------------------------------------------------- See http://ci.typo3.robertlemke.net/job/typo3-flow-release/11/ * Commit: `7c633c0 `_ [TASK] Add changelog for TYPO3 Flow 2.0.2 ----------------------------------------------------------------------------------------- See http://ci.typo3.robertlemke.net/job/typo3-flow-release/10/ * Commit: `f77957f `_ [!!!][FEATURE] Optional evaluation of validator with IgnoreValidation ----------------------------------------------------------------------------------------- If an @IgnoreValidation annotation is added for an action argument, the validation will not be evaluated by default anymore. This is an optimization for read-only actions and other cases where the validation adds a measurable overhead. The annotation option "evaluate" can be set to true to enable the old behaviour of evaluating the validator for the argument and storing the validation results (while still ignoring any error). * Related: `#3305 `_ * Commit: `58cf4d4 `_ [TASK] Proxy class cache is only asked for existing classes ----------------------------------------------------------------------------------------- Build a map of proxied classes to be used by the class loader to prevent calls to the proxy class cache that cannot be fullfilled. * Commit: `c81dcc9 `_ [TASK] ValidatorResolver uses CompileStatic ----------------------------------------------------------------------------------------- Available Validator implementations can be given to the ValidatorResolver via CompileStatic, there is no need to find them on runtime. * Commit: `2013e26 `_ [BUGFIX] Classes from inactive packages should not be loaded ----------------------------------------------------------------------------------------- The ClassLoader refactoring made it possible to load classes from inactive packages as the class paths would still be registered by composer which knows nothing about inactive packages. The solution is to unset class paths for inactive packages. Additionally an UnitTest was added to make sure the behavior stays correct. * Commit: `ed30c30 `_ [TASK] Resources are published with relative symlinks ----------------------------------------------------------------------------------------- Fixes an issue with the publication of persistent resources which used absolute paths rather than relative paths for generating symbolic links. TYPO3.Surf heavily relies on symbolic links for pointing to the currently active release. The key problem was that the symbolic link which is put into the Web/_Resources folder used an absolute path (realpath) to the resource file in Data/Persistent/ rather than a possible symbolic link. This worked fine as long as the actual directory (previous release) exists, but breaks as soon as old releases have been removed. * Resolves: `#51676 `_ * Resolves: `#51809 `_ * Commit: `6d206c1 `_ [FEATURE] Cache backend's flushByTag() now reports no. of affected entries ----------------------------------------------------------------------------------------- This slightly changes the behaviour of flushByTag() which now should return the number of actually removed entries. If a backend cannot or doesn't want to report that number (for example due to performance constraints), that function may still return NULL. * Commit: `14bacb4 `_ [!!!][TASK] Use JSON instead of serialize() in FileMonitor ----------------------------------------------------------------------------------------- For larger arrays JSON is faster than serialize() so the FileMonitor that caches large associative arrays is switched to use json_encode() and json_decode() and a StringBackend instead of the VariableBackend that serializes. This could be breaking if you implemented your own Strategy and use the Flow_Monitor cache there because it will no longer accept all kinds of variables but only strings. * Commit: `f270ae8 `_ [TASK] Clarify logger configuration in Objects.yaml ----------------------------------------------------------------------------------------- The configuration given in Objects.yaml for the system logger is not really used, as the logger is set up from settings during boot. This change makes it clear that a change to the settings should be done through Settings.yaml. * Commit: `641364d `_ [FEATURE] Allow IgnoreValidation on class properties ----------------------------------------------------------------------------------------- Ignoring class properties during object validation can be useful. This change allows to use the IngoreValidation annotation to be used on class properties. The ValidatorResolver will then skip those properties when building the base validator conjunction. * Commit: `f4aa656 `_ [TASK] Warn on invalid persistence.doctrine settings ----------------------------------------------------------------------------------------- If the Doctrine settings are removed (due to an error in the YAML files) compiling proxy classes will just not happen. Since this is hard to spot, throw an exception if the settings are NULL. * Commit: `1b4abf6 `_ [!!!][BUGFIX] Translation not working with single numeric argument ----------------------------------------------------------------------------------------- This removes the option to provide the plural quantity as a single numeric argument, as this was used nowhere but prevented translations from working with such single arguments. This change is breaking for cases where an application depends on previous behavior that translateBy* calls with a single numeric argument would implicate a quantity for plural form. Also classes extending I18n\\Translator and using protected method getPluralForm() will break due to a signature change. * Fixes: `#45062 `_ * Commit: `98748f8 `_ [TASK] Fix intermittent failure in SessionTest unit test ----------------------------------------------------------------------------------------- By injecting a system logger mock, the test for GC that would fail at random should now run reliably. Along this the test tweaks the code (style) a bit. * Commit: `be63e60 `_ [BUGFIX] route caching should take hostnames into account ----------------------------------------------------------------------------------------- With several Sites / Domains in Neos the routing cache identifier is not unique for nodes with the same name This change takes the hostname into account and ensures the cache Identifier is unique for all Sites * Resolves: `#54632 `_ * Commit: `7dcacff `_ [FEATURE] Allow conversion from objects to simple types ----------------------------------------------------------------------------------------- This change allows the PropertyMapper to convert from object types to simple types by registering a specific converter for that direction. A converter from persistent objects to string is added to allow for a simple (reversible) way to represent entities and valueobjects as strings. * Commit: `a2a5266 `_ [TASK] Prevent errors on non existing classes ----------------------------------------------------------------------------------------- Removing the shutup operator results in a non functional state when flushing all caches as the annotation parser tries to load all annotations as classes which results in warnings. * Commit: `67fb9de `_ [TASK] Use isset in mergeRecursiveOverrule where possible ----------------------------------------------------------------------------------------- In some places array_key_exists is unnecessary and isset is faster. Because of the high amount of calls it makes sense to optimize this. * Commit: `c5f177c `_ [TASK] getUnixStylePath uses only one str_replace ----------------------------------------------------------------------------------------- A single str_replace call is less expensive than multiple nested calls. Therefor it is changed in getUnixstylePath(). * Commit: `ad76fa3 `_ [TASK] Allow use of PHPUnit from PEAR ----------------------------------------------------------------------------------------- The class loader change Ib7ff6f4f73f323ce9fc71627c84bf96ef077557e removed some code used to load PHPUnit from PEAR if needed. This change brings that back. * Commit: `774dac0 `_ [TASK] Remove shut-up operator in ClassLoader ----------------------------------------------------------------------------------------- The last classloader change added the shut-up operator to a number of include() calls. This change removes it again and uses file_exists() instead. Since those checks happen only once (when initializing the class loader), the performance impact should be minimal. * Commit: `15f5586 `_ [FEATURE] Provide request / response in exception dump ----------------------------------------------------------------------------------------- This change enhances the Logger to compile some more post mortem data which is then written into the exception dump file. Now the HTTP request and response are also included if possible. * Commit: `55c39c6 `_ [TASK] Optimize arrayMergeRecursiveOverrule by removing recursion ----------------------------------------------------------------------------------------- Method calls in PHP are generally slow. As we rely heavily on this function in several parts it's worthwile to micro-optimize the implementation to get rid of recursion. Running the unit tests showed a performance improvement of 25% by using a stack based approach instead of nested calls. The effect could be even higher for highly nested arrays (like configuration). * Commit: `2e0ee9d `_ [FEATURE] Allow to cache Doctrine ORM query results ----------------------------------------------------------------------------------------- This change allows to cache query results in the persistence layer. The caching can be switched on by setting the new $cacheResult flag on Repository->findBy(), Repository->findOneBy() and Query->execute(). In addition the caching can be switched on globally by setting:: TYPO3.Flow.persistence.cacheAllQueryResults to TRUE. Keep in mind this might have unexpected side effects. Note: The caching is only implemented for the Doctrine persistence. When using generic persistence it has no effect. * Commit: `060ab57 `_ [TASK] Improve security checks and related logging ----------------------------------------------------------------------------------------- The AccessDecisionVoterManager now doesn't throw & catch an exception in order to find out if hasAccessToResource(). Also improves the log output for security / account related events. It adds the current session ID to the message Successfully re-authenticated tokens for account "foo" * Commit: `15a9569 `_ [!!!][FEATURE] Use PHP YAML extension if available ----------------------------------------------------------------------------------------- If you have the PECL YAML extension installed it will be used to parse your configuration files, which results in a tremendous speed improvement, especially in Development context. As this YAML parser is stricter also all yaml files are adapted. This is breaking if the YAML extension is installed and you have invalid YAML files. * Commit: `63f7446 `_ [BUGFIX] Set Max-Age for Cookies ----------------------------------------------------------------------------------------- If the configured session cookie lifetime is > 0, the Max-Age property of the cookie is set accordingly in the response header. Before this change the lifetime would be used as the expiry time, leading to cookies having session lifetime only. * Fixes: `#55369 `_ * Commit: `7f16897 `_ [TASK] ClassLoader compatible with all composer packages ----------------------------------------------------------------------------------------- The ClassLoader understands all composer autoload types (PSR-0 autoloading, PSR-4 autoloading, classmap generation and files includes) and additionally has a faster resolution logic. For additional speed, e.g. in Production context, you can run:: composer install -o to let composer generate optimized autoloading maps. * Resolves: `#42961 `_ * Commit: `d36117c `_ [TASK] Add a forgotten change log ----------------------------------------------------------------------------------------- * Commit: `0148179 `_ [TASK] Remove ChangeLog from PDF ----------------------------------------------------------------------------------------- * Resolves: `#55215 `_ * Commit: `1f5e5fb `_ [BUGFIX] TOC is broken on docs.typo3.org ----------------------------------------------------------------------------------------- * Fixes: `#55212 `_ * Commit: `9785181 `_ [TASK] Introduce "CacheAwareInterface" ----------------------------------------------------------------------------------------- This change introduces a new interface which describes how objects can provide a distinct identifier which can be used for a cache entry. * Commit: `d356f21 `_ [BUGFIX] Make Doctrine service return correct packages for migrations ----------------------------------------------------------------------------------------- With a previous fix ``PackageManager::getPackageOfObject()`` now compares the namespace of a given object rather than it's location on the disk. This broke the behavior of ``Doctrine\\Service::getPackageKeyFromMigrationVersion()`` because doctrine migrations all have the same namespace ``\\TYPO3\\Flow\\..`` With this fix the doctrine service compares the file paths again. * Related: `#55309 `_ * Commit: `5385bae `_ [!!!][BUGFIX] Return 404 status code for removed entities ----------------------------------------------------------------------------------------- With this change the status code for persisted entities that can't be found is no longer ``500``. Background: When an exception is thrown in ``PropertyMapper::convert()`` it is always wrapped in a ``\\TYPO3\\Flow\\Property\\Exception`` leading to the default exception handling which sets the status code of the HTTP response to 500. This is a breaking change only in the case that one relied on the (incorrect) behavior of returning a status code 500 for entities that couldn't be found. * Resolves: `#55618 `_ * Commit: `bdc1c89 `_ [BUGFIX] Fix PackageManager unit tests ----------------------------------------------------------------------------------------- Due to a previous change the PackageManager's unit tests are failing. This change adjusts the tests to the modified code fixing the tests. Background: The method ``getPackageOfObject()`` fixed with I49cf6615b15f4414193d4b563dfe11169fcf44b7 changes the behavior of the PackageManager so that it compares namespaces rather than file paths. Unfortunately this broke unittests that generated dummy files with invalid PHP namespaces. * Related: `#55309 `_ * Commit: `002243a `_ [!!!][BUGFIX] Sort packages by dependency ----------------------------------------------------------------------------------------- Before this, packages were sorted with PHP sort functions which did not work in all cases due to the insufficiently determined order of package dependencies. With this change the sorting is done with an depth-first algorithm that makes sure that package settings overrule settings from depending packages. The algorithm is an adapted version of http://en.wikipedia.org/wiki/Topological_sorting This is a breaking change in case you relied on the previous (and sometimes incorrect) sorting of packages. * Commit: `318a0bc `_ [FEATURE] Add method getPackageByClassName to PackageManager ----------------------------------------------------------------------------------------- Currently there is only a method to fetch the package of a given object. This change adds a new method ``PackageManager::getPackageByClassName()`` that resolves the package of a given class name. * Resolves: `#50118 `_ * Commit: `6f335eb `_ [BUGFIX] Make getPackageOfObject() work for proxy objects ----------------------------------------------------------------------------------------- The method ``PackageManager::getPackageOfObject()`` failed to resolve the package of a given object if it was a proxy. This change fixes this by comparing the namespace of the object with the package namespaces rather than the file locations. Background: The Flow/Doctrine proxy classes usually reside in a folder underneath ``Data/Temporary``. Comparing those paths with the package root paths led to invalid results. * Fixes: `#55309 `_ * Commit: `9128a7f `_ [TASK] Add notice about php path for windows users ----------------------------------------------------------------------------------------- Adds an additional note to set the php path in Settings.yaml for windows users as most won't have php in C:/php/php. * Commit: `9858381 `_ [BUGFIX] HTTP accept header parsing was not case-insensitive ----------------------------------------------------------------------------------------- Some browsers send the Accept-Language header with uppercase letters for the region. This was not correctly matched by the parseAcceptLanguageHeader utility function. * Commit: `e1df340 `_ [TASK] Tweak documentation settings ----------------------------------------------------------------------------------------- * Commit: `221aa7e `_ [TASK] Add change log for TYPO3 Flow 2.1.0-RC1 ----------------------------------------------------------------------------------------- * Commit: `7b8af25 `_ [TASK] Fix and tweak rST markup ----------------------------------------------------------------------------------------- Note especially the changes to Förthner and Föder! :) Yes, they fix PDF rendering of the documentation. * Commit: `1085741 `_ [TASK] Tweak documentation settings ----------------------------------------------------------------------------------------- * Commit: `896c375 `_ [TASK] Fix tables in rST documents ----------------------------------------------------------------------------------------- Although working for HTML rendering the syntax was wrong, breaking PDF rendering. * Commit: `b04fc8e `_ [TASK] Add change logs for TYPO3 Flow 2.0.0, 2.0.1, 2.1.0 ----------------------------------------------------------------------------------------- Add change logs, some minor tweaks to some distribution files. * Commit: `4490120 `_ [BUGFIX] Fix configuration schema for package settings ----------------------------------------------------------------------------------------- This adjusts the TYPO3.Flow.package.schema.yaml to the "packagesPathByType" setting introduced with Ic87ebaece612e25898318795c748941e5a96b8cb. * Commit: `ba088da `_ [BUGFIX] Fix configuration schema for Routes ----------------------------------------------------------------------------------------- This adjusts the Routes.schema.yaml to the "httpMethods" setting introduced with #27117 * Related: `#27117 `_ * Commit: `d62a228 `_ [BUGFIX] Allow uppercase rewrite regex expression for session id ----------------------------------------------------------------------------------------- The usage of the SecurityPublishingConfiguration in combination with the fluid resource viewhelper generates a link which includes the users sessions id. This session id includes uppercase characters. The mod_rewrite rule for this private resources doesnt allow uppercase characters for the session id, so the user gets a 404. * Fixes: `#54973 `_ * Commit: `dc93887 `_ [TASK] Enable PDF rendering of the documentation ----------------------------------------------------------------------------------------- * Commit: `dda156d `_ [TASK] Fix some typos ----------------------------------------------------------------------------------------- Fixes some typos within comments. This is a cosmetic fix only. * Commit: `99390af `_ [BUGFIX] Classes without namespace create invalid proxy code ----------------------------------------------------------------------------------------- This change makes classes without namespace create proper proxy class code, by optionally skipping the namespace declaration. Before such classes would create an empty namespace statement, which resulted in syntax errors, i.e.:: namespace ; => "syntax error, unexpected ';', expecting T_STRING or T_NS_SEPARATOR or '{' in [filename]" * Fixes: `#52944 `_ * Commit: `9352bf3 `_ [BUGFIX] Filebackend is prone to race condition while writing cache entry ----------------------------------------------------------------------------------------- This change improves protection against race conditions by adding a unique identifier to the temporary file name while writing cache entry files. * Commit: `bfbec2f `_ [BUGFIX] Respect X-Forwarded-Proto header consistently ----------------------------------------------------------------------------------------- The ``Http\\Request`` currently only considers ``X-Forwarded-Proto`` headers in its isSecure() method. With this change the header is checked in the constructor so that it overrules the requested protocol if set. Before:: GET http://acme.com:8080 HTTP/1.1 X-Forwarded-Proto: https X-Forwarded-Port: 443 Generated URIs like ``http://acme.com:8080``. With this change the result is ``https://acme.com``. * Fixes: `#54453 `_ * Commit: `ca7d52f `_ [BUGFIX] Browser must not directly handle cookie ----------------------------------------------------------------------------------------- Request::create() doesn't support "cookies" parameter. Cookie argument has been removed from Request::create with change Icdf7fea74d8331abcf95f1ec361abc78e31bfb8c. * Fixes: `#48290 `_ * Commit: `32283a2 `_ [SECURITY] Remove possible XSS from ActionController Error output ----------------------------------------------------------------------------------------- The errorAction method in the ActionController base class of Flow returns error messages without properly encoding them. Because these error messages can contain user input, this could lead to a Cross-Site Scripting vulnerability in Flow driven applications. The offending output has been removed without substitution. Hint: If you have customized the error action in your Flow application, we advise you to check that the error messages returned in these actions only contain static strings and are not derived from any kind of user input. If you are not sure whether your code is fine in that regard, feel free to ask on a public mailing list or the forum. * Fixes: `#31206 `_ Security-Bulletin: TYPO3-FLOW-SA-2013-001 * Commit: `f4fc77c `_ [TASK] Add dependencies to newly created composer manifests ----------------------------------------------------------------------------------------- Newly created composer manifests had a single dependency to Flow before this change. Now the dependencies from package meta data are added to the manifest. * Commit: `22edb22 `_ [TASK] Update contributors list in guide ----------------------------------------------------------------------------------------- * Commit: `f51de6b `_ [TASK] Remove version number in composer command to install Flow ----------------------------------------------------------------------------------------- * Commit: `6df0dad `_ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ TYPO3.Fluid ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [TASK] Update composer manifest ----------------------------------------------------------------------------------------- See http://ci.typo3.robertlemke.net/job/typo3-flow-branch/4/ * Commit: `e587e0f `_ [TASK] Fix failing functional FormObjectsTest ----------------------------------------------------------------------------------------- With change Ic37008975e9c58ec9bea9d4277ee4621e6de061b being merged the test objectIsNotCreatedAnymoreIfIdentityFieldHasBeenAdded failed due to 404 being returned instead of 500. * Commit: `675deaf `_ [BUGFIX] Use getPropertyPath in autocomplete widget ----------------------------------------------------------------------------------------- Since the query in the widget that searches for autocomplete items already supports nested properties the building of the result array now also uses ObjectAccess::getPropertyPath() instead of ObjectAccess::getProperty(). * Resolves: `#55142 `_ * Commit: `5332635 `_ [FEATURE] Add generic data-* attribute ----------------------------------------------------------------------------------------- All elements in HTML5 can have any number of data-* attributes. This additional array attribute on tag bases viewhelpers makes it easier to add several data-* attributes to them:: Will render:: `_ * Commit: `8f7bd50 `_ [TASK] Fix “flush() on a non-object” in TemplateCompiler ----------------------------------------------------------------------------------------- * Commit: `89d02b3 `_ [TASK] Move f:form.validationResults view helper to f:validation.results ----------------------------------------------------------------------------------------- Moves the validationResults ViewHelper to the ``validation`` namespace for consistency reasons. If you use this ViewHelper you should update your Fluid templates from:: ... to:: * Related: `#54196 `_ * Commit: `49dfdbe `_ [FEATURE] Introduce Validation.IfHasErrors ViewHelper ----------------------------------------------------------------------------------------- This allows to check whether validation errors adhere to the current request, or if there is such an error for a particular property path. * Resolves: `#54196 `_ * Commit: `c4d4db3 `_ [FEATURE] Make NumberViewHelper regard locale ----------------------------------------------------------------------------------------- This change makes the NumberViewHelper use the forceLocale attribute like the Currency and DateViewHelper do. It also abstracts the locale awareness away into a seperate abstract ViewHelper class to lay a foundation for other such ViewHelpers. * Resolves: `#48218 `_ * Commit: `df00bf9 `_ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ TYPO3.Kickstart ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [TASK] Update composer manifest ----------------------------------------------------------------------------------------- See http://ci.typo3.robertlemke.net/job/typo3-flow-branch/4/ * Commit: `93f267b `_ [TASK] Fix CGL violations in generator service ----------------------------------------------------------------------------------------- * Commit: `61b8b45 `_ [TASK] Remove PHP closing tag in templates ----------------------------------------------------------------------------------------- * Commit: `053ac2e `_ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ TYPO3.Party ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [TASK] Update composer manifest ----------------------------------------------------------------------------------------- See http://ci.typo3.robertlemke.net/job/typo3-flow-branch/4/ * Commit: `75cb8aa `_ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ TYPO3.Welcome ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [TASK] Update composer manifest ----------------------------------------------------------------------------------------- See http://ci.typo3.robertlemke.net/job/typo3-flow-branch/4/ * Commit: `9c182a4 `_