Hosting TYPO3

10.4.21

1 Oktober - 150MBBug Fixes

[TASK] Explicitly define symfony polyfill packages

[TASK] Upgrade to typo3/html-sanitizer v2.0.11

[TASK] Upgrade to typo3/phar-stream-wrapper v3.1.7

[BUGFIX] Bump symfony/polyfill-mbstring to ^1.16

[BUGFIX] Avoid TSFE injection into standalone ContentObjectRenderer

[BUGFIX] Correct decision about new content button

[BUGFIX] Fix slug generation for non-pages records with pid=0

[BUGFIX] Fix event handler invocation in language pack download

[TASK] Emit typo3:datahandler:process after drag&drop in page module

[BUGFIX] Evaluate edit permissions of live search suggestions

[TASK] Make some type annotations more specific

[DOCS] Fix typo in deprecation rst for 57594

[BUGFIX] Respect includeNotInMenu setting in menu cache hash

[BUGFIX] Backend Login Test for admins improved

[TASK] Delete acceptance split job files before recreation

[TASK] Better checks in Build/Script/checkFilePermissions.sh

[TASK] gitlab-ci: Activate check permissions script

[TASK] Test if status codes are selectable and send in redirects

[BUGFIX] Remove forgotten PHP 8.0 option from runTests.sh

[TASK] Raise typo3/testing-framework:^6.11.0

[TASK] Remove php 8.0 option from Build/Scripts/runTests.sh

[BUGFIX] Add "308 Permanent Redirect" HTTP status to redirects

[BUGFIX] Fix pasting elements in page module

[TASK] Update CKEditor to v4.16.2

[BUGFIX] Ensure deterministic orderBy of CategoryCollection

[TASK] Add support for class-string annotation and provide meta file

[BUGFIX] Allow shortcuts to pages with doktype > 200

[DOCS] Access single form values

[TASK] runTest.sh: Version check docker-compose v2

[BUGFIX] Fix queryGenerator count result with deleted entries

[BUGFIX] Make QueryGenerator handle multiple label_alt columns

[DOCS] Fix incorrect code block syntax in some rst files

[BUGFIX] Correct locallang reference in irre_tutorial

[BUGFIX] Provide correct description for MAIL settings

[BUGFIX] Render "Update now" button for every community release

[BUGFIX] Mitigate docker shenanigans using runTests.sh

[TASK] Raise typo3/testing-framework:^6.10.0

[BUGFIX] PSR-7 Uri implementation must return scheme as string

[TASK] Upgrade to typo3/html-sanitizer v2.0.10

[TASK] Remove obsolete LOCK TABLE check from install tool

[TASK] Public GeneralUtility::xml2arrayProcess()

[TASK] Require symfony/filesystem as direct dependency

[BUGFIX] Correctly resolve nested arguments in SimpleEnhancer

[BUGFIX] Keep checked state of record relations in sync

[BUGFIX] Revert "Remove prefixed scriptName from urlPath in PageRouter"

[BUGFIX] Do not transform text when RTE is disabled

[BUGFIX] Remove unnecessary html tags

[BUGFIX] Reset mass action state when updating workspace listing

[BUGFIX] Check for any references to formPersistenceIdentifier

[TASK] Update guzzlehttp/psr7 to 1.7.0

[BUGFIX] Hide inactive checkbox labeled toggle state

[DOCS] Fix LinkServiceHook changelog

[BUGFIX] Drop button group sliding from MultiStepWizard

Lesen Sie mehr: https://get.typo3.org/release-notes/10.4.21






10.4.20
 (Sicherheitsupdate)
18 August - 150MB10.4.20



New Features

[FEATURE] Introduce explicit f:sanitize.html view-helper 



Bug Fixes

[TASK] Upgrade to typo3/html-sanitizer v2.0.9 

[BUGFIX] Adjust default behavior of HTML sanitization in parseFunc 

[BUGFIX] Allow HTML node onclick events in generated frontend markup 

[BUGFIX] Use loading="lazy" in FormEngineUtility::getIconHtml() 

[BUGFIX] Respect toggle for legacy form upload MIME types again 

[DOCS] Exclude form finisher options from overrides 

[BUGFIX] Fix FileSpoolTest creating "spool" directory on root level 

[BUGFIX] Remove prefixed scriptName from urlPath in PageRouter 

[BUGFIX] Support for vimeo event url 

[BUGFIX] Avoid timeout issues through SvgFilesSanitization 

[TASK] Add status quo tests for f:format.html 

[BUGFIX] Re-add language switcher for sys_file_metadata records 

[DOCS] Document usage of YAML loader 

[TASK] Forward initiator to typo3/html-sanitizer 

[TASK] gitlab-ci: Backup TYPO3 logs of backend acceptance tests 

[TASK] Upgrade to typo3/html-sanitizer v2.0.8 

[DOCS] Document final "nature" of Redirect finisher 

[BUGFIX] Inform about extended support in reports module correctly 

[BUGFIX] Accept JS spam protected email addresses 

[BUGFIX] Fix the Formelement selection button on first use 

[TASK] Enhance documentation for integration of html-sanitizer 

[BUGFIX] Respect 'ignoreRootLevelRestriction' setting 

[TASK] Declare core as replacement for t3g/svg-sanitizer" 

[BUGFIX] Avoid option enableWordClean name in tests 

[BUGFIX] Sort tables alphabetically in Export 



10.4.19



Security

[SECURITY] Ensure XSS-safe rich text rendering 



Bug Fixes

[TASK] Declare core as replacement for t3g/svg-sanitizer 

[TASK] Update enshrined/svg-sanitize to v0.14.1 

[TASK] Restore newRecord level button behaviour 

[BUGFIX] Render correct version information in Core Updater and reports module 

[BUGFIX] Reset query filters for file storages 

[BUGFIX] Prevent method call on invalid task in scheduler 

[BUGFIX] Only allow to edit metadata in FileList if metadata exists 

[TASK] runTests.sh: Allow step debugging acceptance tests 

[TASK] Raise typo3/testing-framework:^6.9.0 

[BUGFIX] Add necessary type property to reduced data structure 

[TASK] Remove duplicate variable initialization 

[BUGFIX] Use correct fallback for default page TSconfig 

[BUGFIX] Extbase Relations are resolved properly in workspaces 

[BUGFIX] Store preview of FAL Online Media in public folder 

[TASK] Add tests for wrong translation behavior of Extbase 

[BUGFIX] Clarify IPv6 address matching 

[TASK] Change indent for .rst in .editorconfig 

[BUGFIX] Fix sphinx warnings in previous changelog entries 

[TASK] Synchronize core changelog files between v11, v10, v9 

[BUGFIX] Skip range validation if input value and default are both "0" 

[BUGFIX] Add typehints for Doctrine DBAL 2.13.x 

[TASK] Add NEON files to .editorconfig 

[BUGFIX] Check whether realpath exists in runTests.sh 

[TASK] Rename github.com/TYPO3/TYPO3.CMS to github.com/typo3/typo3 

[BUGFIX] Use correct maximum width/height for media preview 

[BUGFIX] Do not encode password reset link in plain text 

[TASK] Make runTests.sh compatible with docker-compose v2 

[BUGFIX] Extbase ObjectManager can inject PSR ContainerInterface 

[BUGFIX] Add missing title tag for edit icon in page module. 

[BUGFIX] Check whether tt_content parent page is accessible 

[BUGFIX] Render upgrade wizard description in confirmation step

Lesen Sie mehr: https://get.typo3.org/release-notes/10.4.20






10.4.18
 (Sicherheitsupdate)
3 August - 150MBSecurity

[SECURITY] Do not log sensitive data in authentication process 

[SECURITY] Mitigate XSS related to column names 

[SECURITY] Encode error messages in Query View 

[SECURITY] Mitigate XSS in viewpage 



Bug Fixes

[TASK] Mitigate downstream CSV code injection 

[BUGFIX] Prevent TypeError in TableController 

[BUGFIX] Upgrade packages chart.js, codemirror, ckeditor4 

[TASK] Skip another SVG sanitizer test causing seg fault 

[TASK] Skip SVG sanitizer test causing segmentation fault 

[TASK] Backport SecurityUtility.stripHtml() 

[TASK] Streamline identifier usage in SvgFilesSanitization upgrade wizard 

[BUGFIX] Correctly resolve best matching FAL storage 

[TASK] Adjust RST syntax in SVG sanitizer documentation 

[TASK] Introduce SVG Sanitizer 

[BUGFIX] Properly check shortcut permissions in ShortcutRepository 

[TASK] Improve exception messages in ImageService 

[BUGFIX] Enable ContextMenu for file mounts and file storages again 

[BUGFIX] Remove always true part of if condition 

[BUGFIX] Fix missing closing divs in SelectSingleBoxElement 

[TASK] Add placeholder for title field in create multiple pages 

[BUGFIX] Allow to abort a selected upgrade wizard before execution 

[TASK] Reflect patched jQuery state 

[BUGFIX] Unlink temp files in import of ext:impexp 

[BUGFIX] Handle invalid source string correctly in ImageService 

[BUGFIX] Avoid crash due to endless loop in Fluid-based Page Module 

[DOCS] Complete new pagination changelog rst 

[BUGFIX] Set position for alert container to fixed 

[DOCS] Use correct method params in #90956 rst-file 

[BUGFIX] Fix typos in language labels 

[BUGFIX] Declare guzzlehttp/psr7 dependency 

[BUGFIX] Respect TSconfig when adding page translations to recordlist 

[DOC] Change fallback layer code removal information 

[BUGFIX] Fix terms in Info > Page TSconfig 

[BUGFIX] Missing is_array check in setValueByPath 

[BUGFIX] Respect offline storages on context menu initialization 

[TASK] Extract common site test aspects to trait 

[TASK] Add acceptance test for EXT:reports module 

[TASK] Add customization examples for felogin 

[BUGFIX] Fix range handling for eval double 

[DOCS] Fix PHP code example in changelog 

[TASK] Raise typo3/testing-framework:^6.8.4 

[TASK] Raise typo3/testing-framework:^6.8.3 

[BUGFIX] Correct ac test file namespace 

[BUGFIX] Fix return annotation of AbstractDomainObject->getUid() 

[BUGFIX] Do not render clipboard actions for page translations 

[TASK] Remove "sha1" from sys_file searchFields 

[BUGFIX] Check if shortcuts' target table still exists 

[TASK] Document behaviour of inline parent info in itemsProcFunc 

[BUGFIX] Add uid field to fieldDefinitions in EXT:seo 

[BUGFIX] Prevent Uncaught TypeError in Recordlist JavaScript

Lesen Sie mehr: https://get.typo3.org/release-notes/10.4.18






10.4.11

16 Dezember 2020 - 150MB
[BUGFIX] Implement deferred BE image processing consistently (thanks to Helmut Hummel)

[BUGFIX] More deterministic mm sorting (thanks to Christian Kuhn)

[TASK] Raise typo3/testing-framework to ^6.6.0 (thanks to Christian Kuhn)

[TASK] Add EventDispatcher and Logger support to transports (thanks to Simon Gilli)

[TASK] Harden client-side SecurityUtility.encodeHtml (thanks to Oliver Hader)

[BUGFIX] Properly discard workspace MM relations (thanks to Christian Kuhn)

[BUGFIX] Use less restrictive CSP for showing PDF documents (thanks to Oliver Hader)

[TASK] Use correct version in build package.json (thanks to Oliver Hader)

[BUGFIX] Use named export of BackendExceptionModule in FormEngine (thanks to Benjamin Franzke)

[BUGFIX] Fix hardcoded icon path in CSS (thanks to Andreas Fernandez)

[BUGFIX] Revert method signature change (thanks to Georg Ringer)

[TASK] Change page unavailable status code from 500 to 503 (thanks to Ben Abbott)

[TASK] Prepare TYPO3 tests to use phpunit v9 (thanks to Anja Leichsenring)

[BUGFIX] Fix display of login message in EXT:felogin (thanks to Oliver Bartsch)

[BUGFIX] Use composer min version depending on PHP version handled (thanks to Anja Leichsenring)

[BUGFIX] Respect none accessible workspace pages in tree list (thanks to Daniel Siepmann)

[BUGFIX] Fix translation wizard when there are elements with language "All" (thanks to Dmitry Dulepov)

[BUGFIX] Ensure pageUid of RedirectFinisher can be parsed correctly (thanks to Elias Häußler)

[TASK] Update frontend build step to node14 and yarn v1.22 (thanks to Benni Mack)

[BUGFIX] Add missing function for workspaces module pagination (thanks to Sebastian Michaelsen)

[BUGFIX] Show record history sub elements (again) (thanks to Oliver Hader)

[BUGFIX] Add context menu to page translations in info module (thanks to Oliver Bartsch)

[BUGFIX] Remove event listener from Topbar (thanks to Oliver Bartsch)

[DOCS] Correct page TSconfig example when using types for presets (thanks to Stefan Frömken)

[TASK] Use default from address in scheduler's test task (thanks to Georg Ringer)

[TASK] Raise typo3/testing-framework to ^6.5.0 (thanks to Christian Kuhn)

[TASK] Add application type to request (thanks to Christian Kuhn)

[TASK] Introduce constant 'TYPO3' (thanks to Christian Kuhn)

[BUGFIX] Do not hand invalid input to ResourceFactory (thanks to Daniel Goerz)

[BUGFIX] Allow removal of RegularExpression validator (thanks to Oliver Bartsch)

[DOCS] Fix hook registration example in changelog (thanks to Remo Schneider)

[DOCS] Add missing descriptions to ViewHelper arguments (thanks to Oliver Bartsch)

[BUGFIX] Fix performance issue with mail spools (thanks to Markus Gerdes)

[BUGFIX] Update sessions in RedisBackend correctly (thanks to Markus Klein)

[TASK] Add deprecation warning to Widget ViewHelper (thanks to Remo Schneider)

[BUGFIX] Add focus to user confirmation password field (thanks to Oliver Bartsch)

[BUGFIX] Allow keyboard navigation for form duplication wizard (thanks to Elias Häußler)

[BUGFIX] Make sure external link checks time out (thanks to Sybille Peters)

[BUGFIX] Use a HTML button for the collapsable IRRE header (thanks to Olaf Schmidt-Wischhöfer)

[BUGFIX] Use button tag for modal buttons in InlineControlContainer (thanks to Olaf Schmidt-Wischhöfer)

[BUGFIX] Set the correct PageUid in the MountpointInfos (thanks to Devid Messner)

[BUGFIX] Fix removal of broken link from list (thanks to Sybille Peters)

[TASK] Output test run overview at end of local test run (thanks to Anja Leichsenring)

[BUGFIX] Make non-visible l10n_parent fields of type group (thanks to Markus Klein)

[BUGFIX] Register icons not being part of TYPO3.Icons again (thanks to Andreas Fernandez)

[BUGFIX] Ignore deleted form elements for form's reference count (thanks to Georg Ringer)

[DOCS] Switch extensionname and pluginname in ext:form (thanks to Charanth)

[BUGFIX] Release locks in middleware to prevent locking deadlock (thanks to Christian Kuhn)

[BUGFIX] Correct uri in functional test (thanks to Christian Kuhn)

[BUGFIX] Do not change TCA in ext_tables in test_datahandler (thanks to Christian Kuhn)

[BUGFIX] Do not change TCA in ext_tables in irre_tutorial (thanks to Christian Kuhn)

[BUGFIX] Use hashed sessionId to find existing session (thanks to Markus Klein)

[BUGFIX] Assume image dimension of SVGs with no dimension (thanks to Helmut Hummel)

[BUGFIX] Reimplement mod.defLangBinding for fluid-based page module (thanks to Georg Ringer)

[BUGFIX] Process cropped images only once (thanks to Helmut Hummel)

Lesen Sie mehr: https://get.typo3.org/release-notes/10.4.11



Zeige mehr Versionen




10.4.10
 (Sicherheitsupdate)
20 November 2020 - 150MB
[SECURITY] Disallow XXE in RSS dashboard widget (thanks to Oliver Hader)

[SECURITY] Protect persisted session IDs from being used directly (thanks to Oliver Hader)

[SECURITY] Encode passed arguments in Fluid view helpers (thanks to Oliver Hader)

[SECURITY] Upgrade typo3fluid/fluid to v2.6.10 (thanks to Oliver Hader)

[BUGFIX] Do not try to evaluate fe_groups for page overlays (thanks to Markus Klein)

[BUGFIX] Do not use AdminPanel reference in EXT:frontend code (thanks to Benni Mack)

[TASK] Introduce resource Content-Security-Policy check (thanks to Oliver Hader)

[TASK] Introduce sudo mode for install tool accessed via backend (thanks to Oliver Hader)

[BUGFIX] Update localized records when publishing default translation (thanks to Benni Mack)

[TASK] Drop deprecated testing-framework method usages (thanks to Christian Kuhn)

[BUGFIX] Make login loading text always readable (thanks to Eric Chavaillaz)

[BUGFIX] Install tool database row updater works with mssql (thanks to Christian Kuhn)

[TASK] Streamline server response check (thanks to Oliver Hader)

[TASK] Update @typo3/icons to 2.0.4 (thanks to Andreas Fernandez)

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:backend (thanks to Alexander Schnitzler)

[TASK] Streamline usage of contrib packages in TypeScript (thanks to Benjamin Franzke)

[BUGFIX] Remove upper limits of imagewidth & imageheight of tt_content (thanks to Georg Ringer)

[DOCS] Improve documentation for Fluid f:translate viewhelper (thanks to Peter Kraume)

Revert "[BUGFIX] Update localized records when publishing default translation" (thanks to Anja Leichsenring)

[BUGFIX] Update localized records when publishing default translation (thanks to Benni Mack)

[TASK] Use current mime types for fonts (thanks to Guido Schmechel)

[TASK] Enable EXT:impexp to include presets in export (thanks to Alexander Nitsche)

[BUGFIX] Disable no_cache functionality for new installations (thanks to Benni Mack)

[TASK] Remove unneeded BE user context set up from TreeController test (thanks to Tymoteusz Motylewski)

[BUGFIX] Reintroduce the check on options.saveDocNew (thanks to Xavier Perseguers)

[FEATURE] Add options to locally test on composer min and max stages (thanks to Anja Leichsenring)

[TASK] Raise typo3/testing-framework to 6.4.7 (thanks to Benni Mack)

[TASK] Removed unknown aria attribute from modules menu (thanks to Torben Hansen)

[BUGFIX] Add focus style to button on login form (thanks to Torben Hansen)

[FEATURE] Allow more DBMS-Versions for local testing (thanks to Anja Leichsenring)

[BUGFIX] Moving pages in workspaces updates pid correctly (thanks to Christian Kuhn)

[TASK] Upgrade typo3/phar-stream-wrapper to v3.1.6 (thanks to Oliver Hader)

[BUGFIX] Fix type error in TCA table wizard for null values (thanks to Daniel Siepmann)

[TASK] Enforce Composer 2 usage for TYPO3 development (thanks to Helmut Hummel)

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:extbase (thanks to Alexander Schnitzler)

[BUGFIX] Avoid database errors when translating sys_file (metadata) records (thanks to Benni Mack)

[BUGFIX] Fix workspace select / deselect all buttons (thanks to Oliver Bartsch)

[BUGFIX] Allow keyboard usage of file upload dropzone (thanks to Olaf Schmidt-Wischhöfer)

[BUGFIX] Workspace preview uncheck all button (thanks to Christian Kuhn)

[TASK] Use SVG icon sprites (thanks to Andreas Fernandez)

Revert "[BUGFIX] Fix count for custom queries with group by statement" (thanks to Anja Leichsenring)

[BUGFIX] Allow slug recreation if postModifiers are defined (thanks to Elias Häußler)

[BUGFIX] Provide colPos for each cell in defLangBinding view (thanks to Oliver Bartsch)

[BUGFIX] Fix count for custom queries with group by statement (thanks to Stefan Froemken)

[BUGFIX] Use requested php version for testing also in web container (thanks to Anja Leichsenring)

[BUGFIX] Fix exclusive values in FormEngine's selectMultipleSideBySide (thanks to Andreas Fernandez)

[BUGFIX] Apply fixes from newer php-cs-fixer (thanks to Andreas Fernandez)

[BUGFIX] Use default page id for fetching a site in SlugService (thanks to Oliver Bartsch)

[BUGFIX] Use button tag for buttons in IRRE header (thanks to Olaf Schmidt-Wischhöfer)

[TASK] Update build plans to support Composer 2 (thanks to Andreas Fernandez)

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Database (thanks to Alexander Schnitzler)

[DOCS] Wrong API example for FluidEmail in changelog (thanks to Daniel Siepmann)

[DOCS] Update linkvalidator documentation: Administration (thanks to Sybille Peters)

[BUGFIX] Use correct format character in CleanerTaskTest (thanks to Oliver Bartsch)

[BUGFIX] Do not re-set PreviewAspect when initializing TSFE (thanks to Benni Mack)

[DOCS] Update linkvalidator documentation Introduction (thanks to Sybille Peters)

[DOCS] Fix wrong event class name in AssetRenderer events example (thanks to Jonas Eberle)

[BUGFIX] Prevent double escaping for src attribute in ScriptViewHelper (thanks to Frank Naegler)

[BUGFIX] TCA foreign_table_where on some l10n_parent fields (thanks to Christian Kuhn)

[BUGFIX] Fix CSH labels for inverted columns (thanks to Oliver Bartsch)

[BUGFIX] Use type "button" for accessible paste content buttons (thanks to Oliver Bartsch)

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:backend Tree (thanks to Alexander Schnitzler)

[BUGFIX] Ensure getUniqueId returns unique ids for grid objects (thanks to Oliver Bartsch)

[BUGFIX] Limit doctrine/dbal to 2.10.x or 2.11.2+ (thanks to Markus Klein)

[BUGFIX] Allow access to a sub-branch of a workspace for a limited user (thanks to Danilo Caccialanza)

[BUGFIX] Felogin allows redirect to any site (thanks to Markus Klein)

[BUGFIX] Fix PHP type error in f:form.select.optgroup view helper (thanks to Oliver Hader)

[BUGFIX] Remove invalid attribute alt from textareas (thanks to Georg Ringer)

[BUGFIX] Make paste content button accessible via keyboard (thanks to Oliver Bartsch)

[BUGFIX] Remove invalid attribute href from span element (thanks to Georg Ringer)

[BUGFIX] Fix label for pages.no_search column (thanks to Oliver Bartsch)

[BUGFIX] Remove invalid alt attribute from span elements (thanks to Georg Ringer)

[BUGFIX] Replace shorthand ternary operator in CheckboxElement (thanks to Georg Ringer)

[TASK] Provide title attribute for iframes (thanks to Oliver Bartsch)

[BUGFIX] Remove wrong single quote (thanks to Georg Ringer)

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:backend Form (thanks to Alexander Schnitzler)

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:backend Controller (thanks to Daniel Goerz)

[BUGFIX] Restore behavior of LocalDriver->isFolderEmpty() (thanks to Daniel Goerz)

[TASK] Ensure composer update installs the highest possible packages (thanks to Andreas Fernandez)

[BUGFIX] Add missing field in MigrateFeloginPlugins upgrade wizard (thanks to Christoph Lehmann)

[BUGFIX] Mark page for previewing when admin panel is active (thanks to Benni Mack)

[BUGFIX] Migrate the most accurate RealURL page path to page slugs (thanks to Mathias Brodala)

[BUGFIX] Return empty array when user can't be found (thanks to Tymoteusz Motylewski)

[BUGFIX] Workspace and reference index fixes (thanks to Christian Kuhn)

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:backend View (thanks to Alexander Schnitzler)

[TASK] Fix documentation rendering (thanks to Oliver Hader)

[BUGFIX] Allow empty string in redirects:integritycheck task (thanks to Daniel Siepmann)

[DOCS] Improve documentation of format.crop (thanks to Sybille Peters)

[BUGFIX] Return alternative group uids when aspect has no user (thanks to Xavier Perseguers)

[BUGFIX] Do not consider empty files being an image or media file (thanks to Helmut Hummel)

[BUGFIX] Ensure message send loop breaks in case of success (thanks to Simon Gilli)

[DOCS] Revise visual output of linkvalidator configuration chapter (thanks to Chris Müller)

[BUGFIX] Provide original message and envelope to transport (thanks to Simon Gilli)

[BUGFIX] Quote double quotes in CSV integrity fix script (thanks to Christian Kuhn)

[TASK] Raise typo3/testing-framework to 6.4.6 (thanks to Christian Kuhn)

[BUGFIX] Fix SQL error in backend user list on PostgreSQL (thanks to Stephan Großberndt)

[TASK] Provide information about mandatory uid field in PHPDoc (thanks to Thomas Löffler)

[BUGFIX] Allow more page types for backend usergroups (thanks to Benni Mack)

[BUGFIX] Improve performance of the forgot password action (thanks to Tymoteusz Motylewski)

[BUGFIX] Fix type error in log upgrade wizard (thanks to Georg Großberger)

[BUGFIX] Ensure UserAspect->isLoggedIn() checks for user only (thanks to Benni Mack)

[BUGFIX] Do not read workspace if there is no BE user (thanks to Markus Klein)

[BUGFIX] Fix data type annotations in WidgetRegistry (thanks to Chris Müller)

[TASK] Remove empty array from site configuration before persisting (thanks to Georg Ringer)

[TASK] Explicitly require PHPUnit 8 (thanks to Helmut Hummel)

[BUGFIX] Use correct path in example of ResourceViewHelper (thanks to Sybille Peters)

[BUGFIX] Avoid exceptions during link checking (thanks to Georg Ringer)

[TASK] Force integer for specific fields of site configuration (thanks to Georg Ringer)

[BUGFIX] If is_regexp = 1 then source_path must wrap in # (thanks to Mohsin Khan)

[BUGFIX] Adjust acceptance test for composer max stages (thanks to Anja Leichsenring)

[TASK] Activate a postgres/mssql skipped test (thanks to Christian Kuhn)

[BUGFIX] Omit exception using localized file metadata with RTE (thanks to Chris Müller)

[BUGFIX] Revert typo3/testing-framework providing prophecy trait (thanks to Anja Leichsenring)

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Resource (thanks to Alexander Schnitzler)

[BUGFIX] Use Package as argument type in ServiceProviderRegistry again (thanks to Daniel Goerz)

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Utility (thanks to Alexander Schnitzler)

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Imaging (thanks to Alexander Schnitzler)

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Crypto (thanks to Alexander Schnitzler)

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Mail (thanks to Alexander Schnitzler)

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:lowlevel (thanks to Alexander Schnitzler)

[BUGFIX] Allow LocalDriver baseUri to be set to any value (thanks to Helmut Hummel)

[BUGFIX] Use correct regular expression in FormDefinitionConversionService (thanks to Georg Ringer)

[BUGFIX] Pass defLangBinding to generateLanguageView (thanks to Oliver Bartsch)

[BUGFIX] Disable a flaky postgres functional test (thanks to Christian Kuhn)

[TASK] Raise typo3/testing-framework to 6.4.4 (thanks to Anja Leichsenring)

[BUGFIX] Proper reference index updating on workspace publish (thanks to Christian Kuhn)

[TASK] Define callable controller actions (thanks to Oliver Hader)

[TASK] Add a remark about changed loading order mechanism (thanks to Moritz Ahl)

[TASK] Assert clean reference index after DataHandler tests (thanks to Christian Kuhn)

[BUGFIX] Correctly handle workspace overlays (thanks to Nicole Cordes)

[BUGFIX] Use correct page id for permission calculation of inline controls (thanks to Oliver Bartsch)

[BUGFIX] Use transOrigPointerField for indentation check in recordlist (thanks to Oliver Bartsch)

[BUGFIX] Remove sorting from BackendLayoutIcon Updater (thanks to Stefan Froemken)

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:fluid (thanks to Alexander Schnitzler)

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core TypoScript (thanks to Alexander Schnitzler)

[TASK] Improve mocking in ConnectionTest to prepare for dbal 2.11 (thanks to Anja Leichsenring)

[TASK] Rephrase explanation of sprintf arguments (thanks to Remo Schneider)

[DOCS] Fix typoscript example in EXT:form (thanks to mtness)

[BUGFIX] Fix event registration for legacy-slot (thanks to Daniel Goerz)

[TASK] Move CleanerTask tests to functional tests (thanks to Anja Leichsenring)

Lesen Sie mehr: https://get.typo3.org/release-notes/10.4.10






10.4.9

30 September 2020 - 150MBFeatures

[FEATURE] Add FluidEmail option to EXT:form EmailFinisher



Bug Fixes and Changes

[BUGFIX] Add FieldWizard for other language thumbnails

[BUGFIX] Add missing language option to EmailToSender

[BUGFIX] Adjust CSS import paths in inline CSS

[BUGFIX] Allow Fluid Preview for each Plugin

[BUGFIX] Allow longer values in index_stat_word

[BUGFIX] Avoid using BackendWorkspaceRestriction

[BUGFIX] Check for columns before iterating over those in page module

[BUGFIX] Correct sys_refindex update on workspace publish

[BUGFIX] Disable cross origin check for cropper.js

[BUGFIX] Do not show editlock fields to editors

[BUGFIX] Do not stop rewrite processing for favicon.ico

[BUGFIX] Do not translate move pointers in workspace

[BUGFIX] Do not use returnUrl and index.php for workspace logout links

[BUGFIX] Ensure composer update --prefer-lowest installs the lowest possible packages

[BUGFIX] Fix copying of moved records in workspace

[BUGFIX] Fix uninitialized $queuedMessages in MemorySpool

[BUGFIX] Increase size of DB field filelink_sorting

[BUGFIX] Make external link checking more robust

[BUGFIX] Only fix versioning PID for moved records

[BUGFIX] Optimize database pre checks within install process

[BUGFIX] Page tree: Hide delete drop zone when not dragging

[BUGFIX] Prevent toggling of child containers controls

[BUGFIX] Prevent usage of non existing php function in PHP 7.2 tests

[BUGFIX] Properly render IRRE image thumbnail

[BUGFIX] Properly update reference index when deleting children

[BUGFIX] Remove linebreak in translation of site.base

[BUGFIX] Remove pre-checks on "transport_spool_filepath"

[BUGFIX] Remove wrongly introduced showNewRecordLink property

[BUGFIX] Render plugin content element only if a plugin is selected

[BUGFIX] Respect selected language id in columns mode

[BUGFIX] Send specific value when unchecking items in TypoScript module

[BUGFIX] Send workspace notifications to selected recipients only

[BUGFIX] Separate 'delete' and 'discard' in DataHandler

[BUGFIX] Set correct return type for CommandRegistry::getCommandByIdentifier

[BUGFIX] Set typo3Language for new site languages if possible

[BUGFIX] Show fieldname of flexform fields

[BUGFIX] Skip sys_refindex for workspace placeholders

[BUGFIX] Stop calling a non-static method statically

[BUGFIX] Use correct variable to access language id of a column

[BUGFIX] Use dedicated property to hide newRecordLink button

[BUGFIX] Use null coalescing operator in ViewHelperResolver

[DOCS] Correct FAL tag notation

[TASK] Activate phpstan rule IncompatiblePhpDocTypeRule

[TASK] Add field flag to LanguageMenuProcessor

[TASK] Add functional tests for RootlineUtility

[TASK] Add missing word to comment

[TASK] Add more test cases for workspaces

[TASK] Add tests for Extbase DateTimeConverter

[TASK] Always send 404 response on hidden pages

[TASK] Avoid double slash in requirejs contrib paths

[TASK] Deferred reference index updating

[TASK] Drop reference index in workspace discard more effectively

[TASK] Extract SVG image processing into processor

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:belog

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:beuser

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Authentication

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Cache

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Charset

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Composer

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Configuration

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Core

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core DependencyInjection

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Domain

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core ExpressionLanguage

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Html

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Http

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core LinkHandling

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Localization

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Log

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Package

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Page

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Routing

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Service

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Session

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Site

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core TimeTracker

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Tree

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Type

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:felogin

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:filelist

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:frontend

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:impexp

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:indexed_search

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:info

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:recordlist

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:recycler

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:redirects

[TASK] Fix phpstan checkFunctionArgumentTypes errors in several extensions

[TASK] Improve and fix ThumbnailController

[TASK] Local variable $resolvedIds in PlainDataResolver

[TASK] Make online media preview processing a processor

[TASK] Omit composer install before composer update for test builds

[TASK] Remove Build/phpstan.level2.neon

[TASK] Remove rector/rector from require-dev section

[TASK] Render language ID in site module languages inline header

[TASK] Update all npm packages

[TASK] Update ckeditor to 4.15.0

[TASK] Update ckeditor-wordcount-plugin to 1.17.6

[TASK] Update phpstan/phpstan and friendsoftypo3/phpstan-typo3

[TASK] Update TypeScript and friends

[TASK] Upgrade codemirror to 5.58.1

[TASK] Upgrade Grunt to 1.3

Lesen Sie mehr: https://get.typo3.org/release-notes/10.4.9






10.4.8

14 September 2020 - 150MB10.4.8

[TASK] Drop workspace publish locking

[BUGFIX] Add support for symfony/event-dispatcher-contracts v1

[BUGFIX] Evaluate drag elements language in page modules Drag&Drop

[DOCS] Streamline Symfony Command examples

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:form

[BUGFIX] Ensure cache entries in PageRepository consider groups

[TASK] Use eslint instead of tslink in test script

[TASK] Provide web server url configuration for acceptance tests



10.4.7

[BUGFIX] Update ref-index when deleting new workspace relations

[TASK] Replace ResponseError with regular AjaxResponse

[BUGFIX] Ensure BroadcastService listens only once

[BUGFIX] Fix language module naming in ext:setup

[BUGFIX] Backport new API to keep legacy_collections compatible

[BUGFIX] PlainDataResolver misses DeletedRestriction

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:install

[BUGFIX] Skip -1 as language column in fluid based page layout

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:extensionmanager

[BUGFIX] Don't call ResourceFactory::getStorageObject twice

[BUGFIX] Correctly build query string without cHash

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:workspaces

[TASK] CSV integrity test script can fix fixtures

[BUGFIX] Use complete message object for testing transport events

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:linkvalidator

[BUGFIX] Apply default values before processing datamap

[BUGFIX] Do not create Install Tool cookie if not needed

[TASK] Update build toolchain

[BUGFIX] Fixes annotation of parameter in ExtensionConfiguration

[TASK] sys_refindex testing in DataHandler functional tests

[BUGFIX] Ensure uniqid calls use more_entropy

[BUGFIX] Exclude relations to tables in sys_refindex

[TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:scheduler

[BUGFIX] Add missing migration check for replyToAddress

[BUGFIX] Don't pre-calculcate asset paths in t3editor

[DOCS] Fix location of "Detailed statistics" module

[BUGFIX] Ensure workspace's new placeholder keeps sorting+pid on moving

[BUGFIX] Do not set a label for workspace placeholders

[TASK] Set Sys log dateformat to system default

[BUGFIX] Correctly show changes in current workspace in the page tree

[BUGFIX] Provide EventDispatcher and Logger to transports

[DOCS] Avoid use of TYPO3_MODE checks in ext_localconf.php

[TASK] Default workspaces_perms=0 for new be_users

[BUGFIX] Output messages and progress for language:update

[BUGFIX] Fix return type hint for retrieveYamlFilesFromExtensionFolders

[BUGFIX] DB check -> full search shows deleted records if requested

[BUGFIX] Add absolute URL generation to f:widget.link

[BUGFIX] Correctly call BackendUtility::selectVersionsOfRecord

[BUGFIX] Fix passing status code in redirects pagination

[BUGFIX] DatabaseRecordList: Field selection in single table view

[BUGFIX] Workspace delete placeholder handling in list module

[BUGFIX] Only set BE user cookie when logged in

[BUGFIX] Add UID of metadata to mergedProperties

[BUGFIX] Workspace relations in ElementInformationController

[BUGFIX] Wrap operands in parentheses

[BUGFIX] Properly set user to admin in setup module

[DOCS] Add RTE preset override for flexform field

[BUGFIX] Discarding record in workspaces deletes move placeholder

[BUGFIX] IRRE: Handle localizable records correctly

[BUGFIX] Ensure context for inline relation buttons

[BUGFIX] DatabaseRecordList: Respect connected translation mode

[BUGFIX] Context menu: Disable new on translated page records

[BUGFIX] Context menu: Disable new on translated records

[BUGFIX] Fix unique slug when counter suffix fails

[BUGFIX] Reintroduce tt_content sorting to both page modules

[BUGFIX] DatabaseRecordList: Alternative route for new content wizard

[TASK] Use named export of MessageUtility in Scheduler.ts

[DOCS] Fix invalid Symfony Command examples

[BUGFIX] Ensure correct loading order in ModuleTemplate

[BUGFIX] Respect defaultAction for file overrides set in UserTSconfig

[BUGFIX] Handle missing files in ImageService

[BUGFIX] DatabaseRecordList: Make link of reference count work again

[BUGFIX] Make edit record bookmarks appear again

[BUGFIX] Properly convert setting detectDomainRecords

[BUGFIX] Add missing default value for sitemap_priority column

[BUGFIX] Streamline AjaxDataHandler event names

[BUGFIX] Fix wrong return hint for getRecordOverlay

[BUGFIX] Recycler does not show workspace records in live

[TASK] Add security relevant .htaccess configuration as default

[TASK] Add SECURITY.md

[BUGFIX] Keep FE cookie expire time correct

[BUGFIX] Disable editExistingRecord test

[BUGFIX] Use proper workspace record in stage notifications

[BUGFIX] Properly allow multiline values in Install Tool

[BUGFIX] Render placeholder attribute for readonly fields

[TASK] Minor workspace docs update

[BUGFIX] Drop 'List View' in workspace preview

[BUGFIX] Register deprecated icon if target extension is loaded

[BUGFIX] Limit amount of data fetched by the page tree

[BUGFIX] Add polyfill for custom elements

[TASK] Update typo3/cms-styleguide to 10.0.4

[TASK] Admins set up first workspace in workspace module

[TASK] Non-admin users see all workspace tabs

[BUGFIX] Backend search in field "slug"

[BUGFIX] Do not set type=text/javascript in ResourceCompressor

[TASK] Redirects: Add space item if no preview is available

[TASK] Remove inline onclick code from MoveElementController

[BUGFIX] Scan for AbstractController, not its methods

[TASK] Add html linting to runTests.sh

[BUGFIX] Drop "All workspaces" tab from workspace module

[BUGFIX] Extract width and height meta data for all image files

[BUGFIX] Fix typo to show label description of tasks again

[BUGFIX] Improve readability of records in workspace module

[BUGFIX] Drop "LIVE workspace" tab from workspace module

[TASK] Use frontend requests when testing canonical URL behavior

[BUGFIX] Remove left-over "import all the things"

[BUGFIX] Use GeneralUtility::createVersionNumberedFilename in AssetRenderer

[BUGFIX] Ensure decoded parameters are a valid array

[BUGFIX] Avoid empty cache identifiers

[BUGFIX] Skip processing of inline children which aren't workspace-aware

[BUGFIX] Show "All" language flag again in Page module (old and Fluid)

[BUGFIX] Ensure uid is integer when passing to method call

[BUGFIX] Allow routes without actual route variables for ExtbaseEnhancer

[BUGFIX] Workspace preview shows correct pages in sub menus

[TASK] Reload topbar when sys_workspace records are changed

[TASK] Broadcast AjaxDataHandler events

[BUGFIX] Improve usage of 3rd party modules in TypeScript context

[BUGFIX] Use GeneralUtility::makeInstance instead of ObjectManager calls

[TASK] Revert "Limit amount of data fetched by the page tree"

[TASK] Add possibility to create random values in JavaScript

[BUGFIX] Always use 'paste' wording pasting clipboard elements

[BUGFIX] Switch workspace by opening the module explicitly

[BUGFIX] Use ADMCMD_prev to keep live version in workspace split view

[BUGFIX] Always fetch live versions for root page IDs in Extbase

[BUGFIX] Do not use hard-coded magic 1337 in admin panel

[BUGFIX] Casual notice in ExtensionManagementUtility

[BUGFIX] Drop obsolete workspace fluid partial

[BUGFIX] Fix slug handling for sites not on root level

[BUGFIX] Allow moving a workspace record after itself

[BUGFIX] Workspace module: Clear row selection after publish

[BUGFIX] Allow more than 999 subpages in link browser pagetree

[BUGFIX] Always initialize frontend user groups in Extbase User model

[BUGFIX] Add sites folder to install tool permission check

[BUGFIX] Improve error message when deleting a page with disallowed tables

[BUGFIX] Prevent non-numeric value warning in ErrorHandler.php

[BUGFIX] Prevent non-numeric value warning in PhpErrorCodeViewHelper

[BUGFIX] Add missing composer.json adjustments for ext-libxml

[BUGFIX] Fetch TYPO3 version in reports module only

[BUGFIX] Fix install tool updates of user configuration on PostgreSQL

[BUGFIX] Use configured sender address in recovery e-mail in ext:felogin

[TASK] Update typo3/testing-framework to 6.3.3

[BUGFIX] Use proper english in label when translating a page

[BUGFIX] Tests for translated content will prepare a translated page

[TASK] Update example of FormProtectionFactory validation

[TASK] Add index for pages_language_overlay migration

[BUGFIX] Add max-size to checkBox select icons

[BUGFIX] Discard only workspace records if deleting workspace

[BUGFIX] Properly return integer within resolvePreviewRecordId

[BUGFIX] Check if DOM element exists before usage

[BUGFIX] Do not generate site configuration for localized root pages

[BUGFIX] No bogus log entries when discarding workspace records

[BUGFIX] Add more log info when discarding workspace records fails

[TASK] Restore order of class members in extbase's ActionController



10.4.6

[SECURITY] Avoid ambiguous HMAC results

[SECURITY] Apply file deny pattern to eID API used for file retrieval

[BUGFIX] Respect different matcher config of ConstructorArgumentMatcher

[BUGFIX] Drop obsolete CSS code

[BUGFIX] Send warning email for backend login failure on all DBMS

[TASK] Update description for lockIP and lockIPv6

[BUGFIX] Correctly remove added items from unique selectbox

[BUGFIX] Skip TimeTracker errors in ErrorHandler

[TASK] Allow typo3/cms to be installed with Composer 2

[BUGFIX] Show indexed_search backend module on PostgreSQL for pages with subpages

[BUGFIX] Adjust processing order of routes during URL generation

[BUGFIX] Deleting a localized page deletes its localized records

[BUGFIX] Provide example on how to limit phpunit test execution

[BUGFIX] Add missing css class to create new IRRE relations

[BUGFIX] Translation wizard shows correct elements in workspace

[TASK] Add 'enableControlPanels' argument

[BUGFIX] Limit amount of data fetched by the page tree

[BUGFIX] Implement Tag interface for DocBlock tags

[BUGFIX] Correctly render information boxes if image rendering tests fail

[BUGFIX] Fix indenting in changelog

[BUGFIX] Set fixed widths for extension manager ui elements

[BUGFIX] Increase size of sitemap_priority database field

[TASK] Adjust ActionDispatcher comments in BackendUtility

[TASK] Order Changelog versions for v10 descending

[TASK] Remove inline JavaScript from backend paginate view helper

[TASK] Reduce inline JavaScript for refreshing backend components

[TASK] Streamline GlobalEventHandler JavaScript module

[BUGFIX] Move translations of general information widget to EXT:dashboard

[BUGFIX] Avoid SQL error in indexed_search indexer on PostgreSQL

[DOCS] Fix reST markup

[BUGFIX] Always merge results from empty tabs

Lesen Sie mehr: https://typo3.org/article/typo3-1047-and-9521-maintenance-releases-published






10.4.5

9 Juli 2020 - 150MB
2020-07-07 e5d157de7f [BUGFIX] Handle null values correctly to avoid PHP errors (thanks to stiffes)

2020-07-07 8788b9cefc [BUGFIX] Use URI of current request for referrer check (thanks to Andreas Fernandez)

2020-06-30 55eb394e19 [BUGFIX] Fix serialization of FileReference objects (thanks to Benjamin Franzke)

2020-06-30 c8d38e9269 [TASK] Fix comments of DataHandler::clear_cacheCmd() (thanks to Christian Eßl)

2020-06-30 5aa085fea6 [BUGIFX] Store state of PageTitleProviderManager in cache (thanks to Helmut Hummel)

2020-06-29 c0602c087d [BUGFIX] Reinitialize PageRenderer after deserialization (thanks to Benjamin Franzke)

2020-06-29 2661fa0cb3 [BUGFIX] Convert SVG files if fileExtension is explicitly set (thanks to Benni Mack)

2020-06-29 d3381d3e73 [BUGFIX] Use hashed object identifier in IRRE for nprogress (thanks to Andreas Fernandez)

2020-06-29 f11267293d [BUGFIX] Add ext-libxml to composer.json (thanks to Daniel Goerz)

2020-06-29 c35ed460c2 [BUGFIX] Fall back to default folder when user-specific upload folder does not exist (thanks to Benni Mack)

2020-06-29 52b0af1d3e [BUGFIX] Replace $.trim with String.prototype.trim (thanks to Andreas Fernandez)

2020-06-22 774e0fb71a [BUGFIX] Add max width for social media images (thanks to Benni Mack)

2020-06-21 f25454b9b9 [BUGFIX] Allow deserialization of Area objects for processed files (thanks to Helmut Hummel)

2020-06-20 caa671acc0 [BUGFIX] Register workspace preview middleware earlier (thanks to Benni Mack)

2020-06-14 032f1f633c [BUGFIX] Use proper language label for hidden headlines in preview (thanks to Daniel Siepmann)

Lesen Sie mehr: https://typo3.org/article/typo3-1045-maintenance-release-published






10.4.4

10 Juni 2020 - 150MBLesen Sie mehr: http://wiki.typo3.org/TYPO3_CMS_10.4.4






10.4.3
 (Hauptversion)
19 Mai 2020 - 150MB
2020-05-19 1e766c5c5d [BUGFIX] Loosen site check for records not stored in site context (thanks to Helmut Hummel)

2020-05-19 78ea2ce307 [BUGFIX] Re-add initialization of PageRepository::$where_groupAccess (thanks to Thomas Hohn)

2020-05-19 712c24bc02 [BUGFIX] Fixed order-by while querying old realurl table for slugs (thanks to Riny van Tiggelen)

2020-05-18 86b9b4a226 [BUGFIX] Allow referrer refresh in install tool (thanks to Oliver Hader)

2020-05-18 4d15cf2103 [BUGFIX] Use checksum of frontend groups in cache identifier (thanks to Andreas Fernandez)

2020-05-18 2ce81ab606 [BUGFIX] Fix serialization of ObjectManager (thanks to Benjamin Franzke)

2020-05-18 d685d02162 [TASK] Add missing documentation for BackendUserConfigurationUpdate (thanks to Oliver Hader)

2020-05-18 7c4699b2f9 [BUGFIX] Set controller object name for widget request (thanks to Alexander Schnitzler)

2020-05-18 b9ace2c1bb [BUGFIX] Properly (un)serialize ReflectionService (thanks to Alexander Schnitzler)

2020-05-18 18e3f4f7db [BUGFIX] Allow arbitrary objects in widget context (thanks to Oliver Hader)

2020-05-18 794c2286ae [DOCS] Fix table syntax in changelog (thanks to Daniel Siepmann)

2020-05-18 fbafe16c48 [BUGFIX] Allow multiple referrer types in backend main route (thanks to Oliver Hader)

2020-05-18 c6863067a8 [BUGFIX] Use SystemEmail layout in felogin password recovery (thanks to Andreas Fernandez)

2020-05-17 33187ea82b [DOCS] Correctly close tags in changelogs (thanks to ayacoo)

2020-05-15 110985c199 [TASK] Namespaces for PSR-14 events corrected (thanks to jdoe-dev)

2020-05-15 cb0d4629d8 [BUGFIX] Set changed state of FormEngine when null placeholder fields are changed (thanks to Andreas Fernandez)

2020-05-15 67944aa4f5 [BUGFIX] Check for existence of t3js-login-url id in Login dialog (thanks to Oliver Hader)

2020-05-14 a908f93edd [BUGFIX] Fix SMTP encryption migration when plaintext was used before (thanks to Benjamin Franzke)

2020-05-14 2398785187 [BUGFIX] Use correctly terminated HTML block elements (thanks to Oliver Hader)

2020-05-14 dab027bd42 [BUGFIX] Exclude current record when checking slug's uniqueness (thanks to Xavier Perseguers)

2020-05-14 5c48857fc5 [BUGFIX] Relax constraints on serializing objects (thanks to Oliver Hader)

2020-05-14 45d2a426b3 [BUGFIX] Open CSH with selected context provided by links (thanks to Daniel Siepmann)

2020-05-13 738ac0cc94 [BUGFIX] Remove wrong MethodCallStaticMatchers (thanks to Markus Klein)

2020-05-13 3c7867fc5e [TASK] Don't use GeneralUtility::getContainer in functional tests (thanks to Benjamin Franzke)

Lesen Sie mehr: http://wiki.typo3.org/TYPO3_CMS_10.4.3






9.5.28
 (Sicherheitsupdate)
3 August - 150MB
[SECURITY] Do not log sensitive data in authentication process

[SECURITY] Mitigate XSS related to column names

[SECURITY] Encode error messages in Query View

[SECURITY] Mitigate XSS in viewpage

[TASK] Mitigate downstream CSV code injection

[BUGFIX] Upgrade packages chart.js, codemirror, ckeditor4

[TASK] Skip another SVG sanitizer test causing seg fault

[TASK] Skip SVG sanitizer test causing segmentation fault

[TASK] Backport SecurityUtility.stripHtml()

[TASK] Streamline identifier usage in SvgFilesSanitization upgrade wizard

[BUGFIX] Correctly resolve best matching FAL storage

[TASK] Adjust RST syntax in SVG sanitizer documentation

[TASK] Introduce SVG Sanitizer

[TASK] Reflect patched jQuery state

[BUGFIX] Unlink temp files in import of ext:impexp

[BUGFIX] Declare guzzlehttp/psr7 dependency

[TASK] Extract common site test aspects to trait

[DOCS] Add note about TSconfig behaviour in EXT:linkvalidator

[TASK] Remove a library dependent view helper test

[BUGFIX] Avoid reloading backend login form for checking HTTP referrer

[TASK] Update url to license information

[TASK] Add tests for route enhancers having nested arguments declaration

[BUGFIX] Handle LEFT JOINs in Extbase correctly

[BUGFIX] Allow persisting PseudoFileReference via database form finisher

[TASK] Streamline routing related phpDoc comments & annotations

[BUGFIX] Fix Typo3DbQueryParserTest for custom php timezones

[BUGFIX] Delay error handler registration

Lesen Sie mehr: https://get.typo3.org/release-notes/9.5.28






9.5.24

16 Dezember 2020 - 150MB
[TASK] Harden client-side SecurityUtility.encodeHtml (thanks to Oliver Hader)

[BUGFIX] Use less restrictive CSP for showing PDF documents (thanks to Oliver Hader)

[BUGFIX] Fix translation wizard when there are elements with language "All" (thanks to Dmitry Dulepov)

[DOCS] Correct page TSconfig example when using types for presets (thanks to Stefan Frömken)

[DOCS] Fix hook registration example in changelog (thanks to Remo Schneider)

[BUGFIX] Update sessions in RedisBackend correctly (thanks to Markus Klein)

[BUGFIX] Pass new folder object in PostFolderRenameSignal (thanks to Xavier Perseguers)

[BUGFIX] Make external link checking more robust (thanks to Sybille Peters)

[TASK] Output test run overview at end of local test run (thanks to Anja Leichsenring)

[DOCS] Switch extensionname and pluginname in ext:form (thanks to Charanth)

[BUGFIX] Use hashed sessionId to find existing session (thanks to Markus Klein)

Lesen Sie mehr: https://get.typo3.org/release-notes/9.5.24






9.5.23
 (Sicherheitsupdate)
20 November 2020 - 150MB
[SECURITY] Protect persisted session IDs from being used directly (thanks to Oliver Hader)

[SECURITY] Encode passed arguments in Fluid view helpers (thanks to Oliver Hader)

[SECURITY] Upgrade typo3fluid/fluid to v2.6.10 (thanks to Oliver Hader)

[BUGFIX] Do not try to evaluate fe_groups for page overlays (thanks to Markus Klein)

[BUGFIX] Do not use AdminPanel reference in EXT:frontend code (thanks to Benni Mack)

[TASK] Introduce resource Content-Security-Policy check (thanks to Oliver Hader)

[TASK] Introduce sudo mode for install tool accessed via backend (thanks to Oliver Hader)

[BUGFIX] Show flag for language "All" in the Page module (thanks to Dmitry Dulepov)

[TASK] Streamline server response check (thanks to Oliver Hader)

[DOCS] Improve documentation for Fluid f:translate viewhelper (thanks to Peter Kraume)

[BUGFIX] Do not consider empty files being an image or media file (thanks to Helmut Hummel)

[BUGFIX] Felogin allows redirect to any site (thanks to Markus Klein)

[BUGFIX] Reintroduce the check on options.saveDocNew (thanks to Xavier Perseguers)

[FEATURE] Add options to locally test on composer min and max stages (thanks to Anja Leichsenring)

[FEATURE] Allow more DBMS-Versions for local testing (thanks to Anja Leichsenring)

[BUGFIX] Fix type error in TCA table wizard for null values (thanks to Daniel Siepmann)

[TASK] Upgrade typo3/phar-stream-wrapper to v3.1.6 (thanks to Oliver Hader)

[TASK] Enforce Composer 2 usage for TYPO3 development (thanks to Helmut Hummel)

[BUGFIX] Provide colPos for each cell in defLangBinding view (thanks to Oliver Bartsch)

[BUGFIX] Apply fixes from newer php-cs-fixer (thanks to Andreas Fernandez)

[TASK] Update build plans to support Composer 2 (thanks to Andreas Fernandez)

[DOCS] Update linkvalidator documentation: Administration (thanks to Sybille Peters)

[BUGFIX] Mark page for previewing when admin panel is active (thanks to Benni Mack)

[DOCS] Update linkvalidator documentation Introduction (thanks to Sybille Peters)

[BUGFIX] Limit doctrine/dbal to 2.10.x or 2.11.2+ (thanks to Markus Klein)

[BUGFIX] Fix PHP type error in f:form.select.optgroup view helper (thanks to Oliver Hader)

[BUGFIX] Migrate the most accurate RealURL page path to page slugs (thanks to Mathias Brodala)

[BUGFIX] Quote double quotes in CSV integrity fix script (thanks to Christian Kuhn)

[BUGFIX] Fix SQL error in backend user list on PostgreSQL (thanks to Stephan Großberndt)

[BUGFIX] Fix type error in log upgrade wizard (thanks to Georg Großberger)

[BUGFIX] If is_regexp = 1 then source_path must wrap in # (thanks to Mohsin Khan)

[BUGFIX] Use correct regular expression in FormDefinitionConversionService (thanks to Georg Ringer)

[TASK] Define callable controller actions (thanks to Oliver Hader)

Lesen Sie mehr: https://get.typo3.org/release-notes/9.5.23






9.5.22
 (Sicherheitsupdate)
30 September 2020 - 150MB9.5.22



Bug Fixes and Changes

[BUGFIX] Allow longer values in index_stat_word

[BUGFIX] Deliver detected file type for IM identify

[BUGFIX] Do not stop rewrite processing for favicon.ico

[BUGFIX] Ensure cache entries in PageRepository consider groups

[BUGFIX] Ensure composer update --prefer-lowest installs the lowest possible packages

[BUGFIX] Page tree: Hide delete drop zone when not dragging

[BUGFIX] Render plugin content element only if a plugin is selected

[BUGFIX] Set correct return type for CommandRegistry::getCommandByIdentifier

[TASK] Migrate uglify to terser

[TASK] Omit composer install before composer update for test builds

[TASK] Update all npm packages

[TASK] Update ckeditor to 4.15.0

[TASK] Update ckeditor-wordcount-plugin to 1.17.6

[TASK] Upgrade codemirror to 5.58.1



9.5.21



Bug Fixes and Changes

[BUGFIX] Allow more than 999 subpages in link browser pagetree

[BUGFIX] Allow routes without actual route variables for ExtbaseEnhancer

[BUGFIX] Correctly build query string without cHash

[BUGFIX] Correctly call BackendUtility::selectVersionsOfRecord

[BUGFIX] Correctly show changes in current workspace in the page tree

[BUGFIX] Disable new content buttons until module is loaded

[BUGFIX] Do not mark repeatable wizards executed during install

[BUGFIX] Do not use hard-coded magic 1337 in admin panel

[BUGFIX] Don't call ResourceFactory::getStorageObject twice

[BUGFIX] Don't pre-calculcate asset paths in t3editor

[BUGFIX] Ensure decoded parameters are a valid array

[BUGFIX] Extract width and height meta data for all image files

[BUGFIX] Fetch TYPO3 version in reports module only

[BUGFIX] Fix install tool updates of user configuration on PostgreSQL

[BUGFIX] Fix slug handling for sites not on root level

[BUGFIX] Fix typo to show label description of tasks again

[BUGFIX] Limit amount of data fetched by the page tree

[BUGFIX] Make "showHiddenRecords" in adminpanel work again

[BUGFIX] Prevent non-numeric value warning in ErrorHandler.php

[BUGFIX] Prevent non-numeric value warning in PhpErrorCodeViewHelper

[BUGFIX] Properly return integer within resolvePreviewRecordId

[BUGFIX] Send warning email for backend login failure on all DBMS

[BUGFIX] Skip processing of inline children which aren't workspace-aware

[BUGFIX] Tests for translated content will prepare a translated page

[BUGFIX] Use URI of current request for referrer check

[BUGFIX] Wrap operands in parentheses

[DOCS] Add RTE preset override for flexform field

[DOCS] Avoid use of TYPO3_MODE checks in ext_localconf.php

[TASK] Add possibility to create random values in JavaScript

[TASK] Add security relevant .htaccess configuration as default

[TASK] Add SECURITY.md

[TASK] Add tests for SecurityUtility.getRandomHexValue

[TASK] Clean up JavaScript code

[TASK] CSV integrity test script can fix fixtures

[TASK] Revert "Limit amount of data fetched by the page tree"

[TASK] Update example of FormProtectionFactory validation

[TASK] Use frontend requests when testing canonical URL behavior



9.5.20



Security

[SECURITY] Apply file deny pattern to eID API used for file retrieval

[SECURITY] Avoid ambiguous HMAC results



Bug Fixes and Changes

[BUGFIX] Adjust processing order of routes during URL generation

[BUGFIX] Allow deserialization of Area objects for processed files

[BUGFIX] Always merge results from empty tabs

[BUGFIX] Avoid SQL error in indexed_search indexer on PostgreSQL

[BUGFIX] Deleting a localized page deletes its localized records

[BUGFIX] Fix indenting in changelog

[BUGFIX] Limit amount of data fetched by the page tree

[BUGFIX] Provide example on how to limit phpunit test execution

[BUGFIX] Respect different matcher config of ConstructorArgumentMatcher

[BUGFIX] Show indexed_search backend module on PostgreSQL for pages with subpages

[BUGIFX] Store state of PageTitleProviderManager in cache

[TASK] Update description for lockIP and lockIPv6

Lesen Sie mehr: https://get.typo3.org/release-notes/9.5.22






9.5.19

10 Juni 2020 - 150MBLesen Sie mehr: http://wiki.typo3.org/TYPO3_CMS_9.5.19






9.5.18

19 Mai 2020 - 150MB
2020-05-19 8eb29dd228 [BUGFIX] Loosen site check for records not stored in site context (thanks to Helmut Hummel)

2020-05-19 41f444956e [BUGFIX] Re-add initialization of PageRepository::$where_groupAccess (thanks to Benni Mack)

2020-05-19 5ccf6b21a8 [BUGFIX] Fixed order-by while querying old realurl table for slugs (thanks to Riny van Tiggelen)

2020-05-19 8a13731028 [BUGFIX] Allow referrer refresh in install tool (thanks to Oliver Hader)

2020-05-18 234d8387e1 [BUGFIX] Use checksum of frontend groups in cache identifier (thanks to Andreas Fernandez)

2020-05-18 cebeaf6c62 [BUGFIX] Actually write cache for generated access field condition (thanks to Andreas Fernandez)

2020-05-18 6d9e803c03 [BUGFIX] Allow multiple referrer types in backend main route (thanks to Oliver Hader)

2020-05-18 b499cb83cc [TASK] Add missing documentation for BackendUserConfigurationUpdate (thanks to Oliver Hader)

2020-05-18 eda9a9a40a [BUGFIX] Properly (un)serialize ReflectionService (thanks to Alexander Schnitzler)

2020-05-18 274e028231 [BUGFIX] Allow arbitrary objects in widget context (thanks to Oliver Hader)

2020-05-15 b1af57ac3f [BUGFIX] Set changed state of FormEngine when null placeholder fields are changed (thanks to Andreas Fernandez)

2020-05-15 f06fa29885 [BUGFIX] Check for existence of t3js-login-url id in Login dialog (thanks to Oliver Hader)

2020-05-14 ccd6da5027 [BUGFIX] Exclude current record when checking slug's uniqueness (thanks to Xavier Perseguers)

2020-05-14 347ab376d8 [BUGFIX] Use correctly terminated HTML block elements (thanks to Oliver Hader)

2020-05-14 8686d85863 [BUGFIX] Relax constraints on serializing objects (thanks to Oliver Hader)

2020-05-14 e413054c53 [BUGFIX] Prevent PHP type error and stale language cache (thanks to Claus Due)

2020-05-14 984a3609bd [BUGFIX] Fix "see also" links in CSH entries (thanks to Josef Glatz)

Lesen Sie mehr: http://wiki.typo3.org/TYPO3_CMS_9.5.18






9.5.17
 (Sicherheitsupdate)
12 Mai 2020 - 150MB9.5.17



Security

2020-05-12 deaf931cf4 [SECURITY] Mitigate bypassing CSRF token via XSS (thanks to Oliver Hader)

2020-05-12 7d4159f791 [SECURITY] Avoid insecure deserialization of $BE_USER->uc properties (thanks to Oliver Hader)

2020-05-12 fa3992d114 [SECURITY] Prevent destructors with side-effects from being unserialized (thanks to Oliver Hader)

2020-05-12 931a4fc070 [SECURITY] Ensure decoded entities are encoded for HTML again (thanks to Oliver Hader)

2020-05-12 109bf625ea [SECURITY] Escape shortened placeholder text in HTML output (thanks to Markus Klein)



Bug Fixes

2020-05-12 c04ce95574 [TASK] Integrate server response security checks (thanks to Oliver Hader)

2020-05-12 14849c32c4 [TASK] Incorporate changes of jQuery version 3.5.0 (thanks to Andreas Fernandez)

2020-05-12 d9616d6910 [BUGFIX] Revert PageReadPermission check for TreeController (thanks to Benni Mack)

2020-05-12 89b080a338 [BUGFIX] Fix internal + external links with URLs fragment (thanks to Benni Mack)

2020-05-12 49096b07e5 [BUGFIX] Enable Enhancer support for MountPoints (thanks to Benni Mack)

2020-05-11 c71afa631e [BUGFIX] Only call getMovePlaceholder for MOVE_POINTER records (thanks to Benni Mack)

2020-05-11 d3297faa12 [BUGFIX] Correctly evaluate "unique" eval for slug fields (thanks to David König)

2020-05-11 db898e5a18 [BUGFIX] Fix HMENU special=directory when site language is in free mode (thanks to Benni Mack)

2020-05-11 61aec7014e [BUGFIX] Do not deprecate $GLOBALS[TYPO3_REQUEST] (thanks to Benni Mack)

2020-05-11 1688e52557 [BUGFIX] Fix typo in frontend usergroups CSH details text (thanks to Marcin Sągol)

2020-05-10 10f755df33 [BUGFIX] Include composer dumpautoload in Test Plan Jobs (thanks to Anja Leichsenring)

2020-05-09 feb1d091cb [TASK] Improve backend module Form description (thanks to Marcin Sągol)

2020-05-09 f4f0dc0ecd [BUGFIX] Remove obsolete period in scheduler label (thanks to Daniel Goerz)

2020-05-06 4978699fe2 [BUGFIX] Use correct slug for access restricted translated pages (thanks to Benni Mack)

2020-05-06 f862f640f8 [BUGFIX] Use proper Fluid exception class (thanks to Andreas Fernandez)

2020-05-06 9a4bcd7705 [BUGFIX] Lift restriction for restricted records in Routing Aspects (thanks to Benni Mack)

2020-05-06 45d3d1150d [TASK] Avoid superfluous reference operator on objects (thanks to Oliver Hader)

2020-05-06 25aa35b322 [TASK] Use proper function reference for backend route in test case (thanks to Oliver Hader)

2020-05-06 df5e808447 [BUGFIX] Fix typo in identifier exists validation message in site configuration (thanks to Marcin Sągol)

2020-05-05 326671fd23 [BUGFIX] Reset window.opener in backend and load modules if authenticated (thanks to Andreas Fernandez)

2020-05-04 529a1cdbe4 [TASK] Respect disabled ElementBrowser also in TableList (thanks to Oliver Bartsch)

2020-05-04 cb40a8cc90 [BUGFIX] Harden deprecation log handling (thanks to Helmut Hummel)

2020-05-04 34fcc2dc9e [BUGFIX] Cache various where clauses of PageRepository (thanks to Benni Mack)

2020-05-02 3ca5e7b4dc [TASK] Ensure login module is completely loaded and processed (thanks to Oliver Hader)

2020-05-02 dd8cf23a63 [TASK] Use proper TypeScript functions instead of arrow functions (thanks to Oliver Hader)

2020-04-30 bc5a5dfdb2 [TASK] Add tags to clearcachehook (thanks to Patrick Schriner)

2020-04-28 0de69760b8 [BUGFIX] Correctly use trigger_error for deprecations (thanks to Markus Klein)

2020-04-28 1fa44d3850 [BUGFIX] No longer use deprecated function writeDeprecationLogFileEntry (thanks to Sybille Peters)



9.5.16



Bug Fixes

2020-04-28 43809319eb [BUGFIX] Set default value defined in columnsOverrides (thanks to Oliver Bartsch)

2020-04-28 47cf00f6b8 [BUGFIX] Fix inline icon rendering of bitmap icons (thanks to Benjamin Franzke)

2020-04-28 72417605dd [BUGFIX] Make backend.user conditions in FE work (thanks to Benni Mack)

2020-04-28 b7bb01e5b7 [BUGFIX] Throw BadRequestException on failed hmac validation from forms (thanks to Christian Eßl)

2020-04-28 610501882d [BUGFIX] Skip dynamically assigned instance names in extension scanner (thanks to Oliver Hader)

2020-04-28 b59a4ecc8b [BUGFIX] Fully check dependencies of dependencies (thanks to Simon Gilli)

2020-04-28 32e5af77a1 [BUGFIX] Fix extension scanner Index.rst filename parsing (thanks to Benjamin Franzke)

2020-04-28 9d29c51ac6 [DOCS] Fix some broken or outdated links (thanks to Sybille Peters)

2020-04-27 31bae041c0 [BUGFIX] Resolve merge conflict in NightlySpec (thanks to Andreas Fernandez)

2020-04-27 41d3f3243d [TASK] Rework nightly test run to execute less tests (thanks to Anja Leichsenring)

2020-04-27 e20f412eea [BUGFIX] Do not disable caching for caches with TransientMemoryBackend (thanks to Stephan Großberndt)

2020-04-27 bbc6800b38 [BUGFIX] Respect page TSconfig in drag & drop of page tree (thanks to Benni Mack)

2020-04-25 c0e7b296ef [BUGFIX] Reintroduce Extbase referring argument handling (thanks to Oliver Hader)

2020-04-25 560fa88db6 [TASK] Update Feature-80579-ImprovedJavaScriptModalAPI.rst (thanks to Alexander Obert)

2020-04-24 dcd45479d0 [BUGFIX] Check if language is accessible in PageContentErrorHandler (thanks to Christian Eßl)

2020-04-23 ed32856d00 [BUGFIX] Update ckeditor to 4.14.0 (thanks to Josef Glatz)

2020-04-22 a3725e0215 [BUGFIX] Resolve non-hidden workspace version of hidden live page properly (thanks to Benni Mack)

2020-04-22 e719a6898d [BUGFIX] Use correct identifier for "england" flag icon (thanks to Andreas Fernandez)

2020-04-22 5457c5b593 [BUGFIX] Evaluate proper permissions on pasting content (thanks to Oliver Bartsch)

2020-04-22 0af7aed893 [BUGFIX] QueryView: add missing space between form and message (thanks to Josef Glatz)

2020-04-21 cb42d317c2 [BUGFIX] Prevent PageTypeDecorator from matching index too generously (thanks to Guido Schmechel)

2020-04-21 c4e47924a1 [BUGFIX] Ensure ZipService sets proper permissions recursively (thanks to Benni Mack)

2020-04-21 e25c8e2840 [BUGFIX] Remove $scheme from LegacyLinkNotationConverter::resolve() (thanks to Christian Eßl)

2020-04-21 4c2ab2104c [BUGFIX] Ignore includeNotInMenu for the section menu of the current page (thanks to Josef Glatz)

2020-04-21 20e5cbb7cc [BUGFIX] Display error messages in scheduler (thanks to Susanne Moog)

2020-04-21 918477470b [BUGFIX] Fix wrongly used typecast in combination with ?? operator (thanks to Thomas Pronold)

2020-04-21 d0031a3f19 [BUGFIX] Use correct variable in TcaInline in exception log (thanks to Andreas Fernandez)

2020-04-21 a0357f03e5 [BUGFIX] Allow all child nodes in ActionMenuItemGroupViewHelper (thanks to Susanne Moog)

2020-04-20 144b11d5e8 [BUGFIX] Remove handling of nonexisting Exception in RecordProvider (thanks to Christian Eßl)

2020-04-20 ae722d641e [BUGFIX] Revert Use existing API instead of ContentObjectRenderer" (thanks to Georg Ringer)

2020-04-20 ba712650c9 [BUGFIX] Avoid 500 error for non-admins in page tree (thanks to Benni Mack)

2020-04-20 2e179973b2 [BUGFIX] Fix check for skipping translation of the metadata file field (thanks to Xavier Perseguers)

2020-04-20 57bcedc28d [DOCS] rte_ckeditor: add a meaningful project title (thanks to Josef Glatz)

2020-04-19 0e66ed43e3 [TASK] Tune permission checks in TreeController (thanks to Tymoteusz Motylewski)

2020-04-19 981e59e36a [DOCS] Add correct indentations in rte_ckeditor documentation (thanks to Josef Glatz)

2020-04-17 a3730417cb [BUGFIX] Skip input validation in scheduler command task (thanks to Helmut Hummel)

2020-04-16 2f8e83f351 [BUGFIX] Allow multiple mountpoints with the same slug (thanks to Patrick Broens)

2020-04-16 375c88db8c [BUGFIX] Do not generate links to unreachable pages (thanks to Markus Klein)

2020-04-16 ceb8f7f0c2 [BUGFIX] Don't render broken extension icons in language packs updater (thanks to Josef Glatz)

2020-04-15 d80621d03e [BUGFIX] Re-enable clearable behavior of ext:beuser filter field (thanks to Oliver Hader)

2020-04-15 31c81429b2 [TASK] Remove dependency to algo26-matthias/idna-convert (thanks to Benni Mack)

2020-04-15 ccc7eae6d7 [BUGFIX] Remove invalid doctype annotations from GeneralUtility (thanks to Ronald Kools)

2020-04-15 024358c587 [BUGFIX] Reset clipboard state for files that have been deleted (thanks to Oliver Hader)

2020-04-15 98d21328d1 [TASK] Provide test for Page\TreeController (thanks to Tymoteusz Motylewski)

2020-04-14 f426b2dcc7 [BUGFIX] Use empty alt text for EM extension icons (thanks to Oliver Klee)

2020-04-14 68357d565a [BUGFIX] Do not promote deprecated TS condition syntax in changelog (thanks to Tymoteusz Motylewski)

2020-04-14 612a5376c9 [BUGFIX] Cast label field for search in recycler (thanks to Manuel Selbach)

2020-04-13 dedbe269b3 [TASK] Add methods PURGE and BAN in TYPO3\CMS\Core\Http\Request (thanks to Timo Poppinga)

2020-04-13 2f6165e094 [BUGFIX] Disable extension scanner if no extensions are available (thanks to Benni Mack)

2020-04-12 7b3214f31b [BUGFIX] Restore ckeditor selections when unloading modal (thanks to Andreas Fernandez)

2020-04-12 f6016b3dc8 [BUGFIX] Keep language or colPos when moving a record in list module (thanks to Christian Eßl)

2020-04-12 081161e20a [TASK] Bring back datetime related acceptance tests for FormEngine (thanks to Anja Leichsenring)

2020-04-11 ce50ca1259 [BUGFIX] correctly resolve saved mm relations in TCA (thanks to Tobi Kretschmann)

2020-04-10 24f1f1f350 [BUGFIX] Fix wording of exception in DataMapper (thanks to Georg Ringer)

2020-04-10 149103e8f9 [BUGFIX] Do not perform string-with-boolean comparisons in switch cases (thanks to Volker Diels-Grabsch)

2020-04-08 2269bbdaca [BUGFIX] Fix typos in InlineStackProcessorTest (thanks to Christian Eßl)

2020-04-08 5d14536ca1 [TASK] Restructure and fine-tune builds (thanks to Andreas Fernandez)

2020-04-07 685e9a2321 [BUGFIX] Include Page Read Permissions to PageTreeController (thanks to Benni Mack)

2020-04-07 548a10af18 [BUGFIX] Fix thrown exception in history (thanks to Patrick Broens)

2020-04-07 b0104e8052 [TASK] Upgrade Documentation: add footer links (thanks to Josef Glatz)

2020-04-06 7e60acc352 [BUGFIX] Convert page UID to proper link syntax in LinkBrowser (thanks to Markus Klein)

2020-04-06 5aa3b71c29 [BUGFIX] Allow pageIdSelector again in non-RTE link browser (thanks to Markus Klein)

2020-04-05 d16e72e892 [BUGFIX] Preserve selection ranges in RteLinkBrowser (thanks to Andreas Fernandez)

2020-04-05 2a8ca70295 [TASK] Move ExceptionHandler tests into real class instances (thanks to Anja Leichsenring)

2020-04-04 49bca73dd3 [BUGFIX] Always show download icons in language pack module (thanks to Georg Ringer)

2020-04-04 35a0a3e4af [BUGFIX] Declare method of AspectFactory in matcher (thanks to Andreas Fernandez)

2020-04-02 6b35756c6f [BUGFIX] Do not cache on cObject level if global no_cache is active (thanks to Markus Klein)

2020-04-02 2a1bda4f7d [BUGFIX] Respect site for route persisted mappers (thanks to Oliver Hader)

2020-04-02 bca432f7d0 [BUGFIX] Clarify Extbase exception message (thanks to Benni Mack)

2020-04-02 4a3cb5eb74 [DOCS] Fix broken text role markup in changelog (thanks to Daniel Siepmann)

2020-04-01 1da57dfc1a [BUGFIX] Don't render dropdown arrow in selectSingleBox (thanks to Andreas Fernandez)

2020-04-01 707dff3981 [TASK] Add Typo3Version class (thanks to Benni Mack)

2020-04-01 ae8172cef8 [BUGFIX] Show correct value in translated single select + checkboxes (thanks to Benni Mack)

2020-03-31 64b406bcec [BUGFIX] Provide inlineParentUid in FormInlineAjaxController (thanks to Oliver Bartsch)

Lesen Sie mehr: http://wiki.typo3.org/TYPO3_CMS_9.5.17






9.5.15

1 April 2020 - 150MB9.5.15

2020-03-31 1edbfe7217 [BUGFIX] Revert: Make default folder structure aware of 'web-dir' option (thanks to Benni Mack)

2020-03-31 afbd8417b6 [TASK] Update symfony dependencies for tarball distributions (thanks to Benni Mack)

2020-03-30 de96f1c979 [TASK] Update symfony dependencies for tarball distributions (thanks to Benni Mack)

2020-03-30 ea2a38326a [TASK] Allow composer installers 3.0 and higher (thanks to Benni Mack)

2020-03-29 a616cabd56 [BUGFIX] Respect access restrictions for inline editing in pagetree (thanks to Christian Eßl)

2020-03-27 e8596f5350 [TASK] Improve IconViewHelper documentation (thanks to Christian Eßl)

2020-03-27 567f38e200 [BUGFIX] Don't include path for fragment-only links (thanks to Andreas Wolf)

2020-03-27 514388e365 [BUGFIX] Do not render a-tag if URL is empty in link.action VH (thanks to Frank Naegler)

2020-03-27 f2279ee442 [BUGFIX] Update Autocomplete widget template ajax url (thanks to Stefan Horst)

2020-03-27 8bcc49b1fb [BUGFIX] Output more helpful information in OrphanRecordsCommand (thanks to Georg Ringer)

2020-03-27 2179282c80 [BUGFIX] Set data-formengine-input-name for disabled text fields (thanks to Andreas Fernandez)

2020-03-27 9860d7a696 [BUGFIX] Fix exception for image with crop definition on PostgreSQL (thanks to Stephan Großberndt)

2020-03-27 be090ef8ad [BUGFIX] Avoid error in imageLinkWrap for non-existing files (thanks to Susanne Moog)

2020-03-27 c2f2932df4 [BUGFIX] Keep classes in recordlist in workspaces (thanks to Georg Ringer)

2020-03-27 2741fb5fa6 [TASK] Improve wording if errors in extension scanner occurs (thanks to Georg Ringer)

2020-03-27 3fd180a03d [TASK] Resize t3editor fields to former height (thanks to Daniel Goerz)

2020-03-26 824049ddec [BUGFIX] Let t3editor consume as much space as possible (thanks to Andreas Fernandez)

2020-03-26 86fe3c6b22 [BUGFIX] Missing space before GeneralUtility::implodeAttributes (thanks to Eric Chavaillaz)

2020-03-26 4042a0b368 [BUGFIX] Use proper in_array() call in LanguagePackService (thanks to Benni Mack)

2020-03-26 50d757d9d0 [BUGFIX] Reset number of results in QueryResult after offset changes (thanks to Susanne Moog)

2020-03-25 47360d8b35 [BUGFIX] Remove mention of deprecation log in presets (thanks to Susanne Moog)

2020-03-25 74d1141d08 [BUGFIX] Sort upgrade documentation by filename (thanks to Josef Glatz)

2020-03-25 4072f22924 [DOCS] Correct information regarding ipAnonymization setting (thanks to Daniel Siepmann)

2020-03-25 933fcd88a9 [BUGFIX] Prevent overriding ckeditor config from plugins (thanks to Benjamin Kott)

2020-03-25 f1685c2374 [BUGFIX] Catch error in database Upgrade Wizard (thanks to Nicole Cordes)

2020-03-24 0c1c3d56e7 [BUGFIX] Fix order of deleting page translations in DataHandler (thanks to Sybille Peters)

2020-03-24 61f2679221 [TASK] Set pseudo user when simulating a user group (thanks to Susanne Moog)

2020-03-24 9d4a8b9fcd [BUGFIX] Properly display boolean values as "0" and "1" in strings (thanks to Kay Strobach)

2020-03-24 608e2a8d76 [DOCS] Fix documentation on PageTypeEnhancer TypoScript example (thanks to Julian Hofmann)

2020-03-24 39ebeedcb0 [BUGFIX] Do not stop indexing on errors (thanks to Susanne Moog)

2020-03-24 4c5e22c49e [BUGFIX] Set correct PID for inline elements on page object (thanks to Susanne Moog)

2020-03-24 3de44184ef [BUGFIX] Assure title is set in BrowseLinksController (thanks to Daniel Goerz)

2020-03-24 9d9d350ae7 [BUGFIX] Reimplement check for readonly title in link browser (thanks to Daniel Goerz)

2020-03-24 c2be7f2be6 [BUGFIX] Do not compress inline CSS (thanks to Susanne Moog)

2020-03-24 9548679c0a [BUGFIX] Skip empty static routes (thanks to Georg Ringer)

2020-03-23 8130b8b4de [BUGFIX] Reveal invisible soft hyphen character in CKEditor (thanks to Sebastian Klein)

2020-03-23 650d409b72 [BUGFIX] Differ between upload_max_filesize / post_max_size (thanks to Benni Mack)

2020-03-23 de5e0e4f79 [BUGFIX] Hide the preview button for sysfolders in list/page layout module (thanks to Christian Eßl)

2020-03-23 cc284021ea [BUGFIX] Streamline language pack download URLs (thanks to Benni Mack)

2020-03-23 710adb7691 [BUGFIX] Allow functions in foreign_table_where clause (thanks to Susanne Moog)

2020-03-23 29673edd89 [BUGFIX] Allow setting onChange for category fields (thanks to Susanne Moog)

2020-03-23 06ff2692a2 [DOCS] Fix formatting in .rst files (thanks to Sybille Peters)

2020-03-23 aefac380e0 [BUGFIX] Don't append query string to Close.html (thanks to Andreas Fernandez)

2020-03-23 41488cedb1 [BUGFIX] Show always Install Tool's login form if permanently enabled (thanks to Susanne Moog)

2020-03-23 05a62e59e9 [BUGFIX] Check event.key for Install Tool submit (thanks to Georg Ringer)

2020-03-23 2fc894f989 [BUGFIX] Respect dots in TS keys during autocomplete (thanks to Georg Ringer)

2020-03-22 7f9198fcc9 [BUGFIX] Do not overwrite default thread count for Argon PasswordHashing (thanks to Susanne Moog)

2020-03-22 d7e775a477 [BUGFIX] Paste all items from clipboard into group field (thanks to Andreas Fernandez)

2020-03-22 21480237b6 [BUGFIX] Remove obsolete styling for gridder (thanks to Andreas Fernandez)

2020-03-22 c1140b4b12 [BUGFIX] Add guard clause while checking if user is system maintainer (thanks to Georg Ringer)

2020-03-21 1317a1b886 [BUGFIX] Move non-build dependencies into dependencies (thanks to Andreas Fernandez)

2020-03-21 7cc2a367cc [BUGFIX] Avoid validation failure on multi select fields without option (thanks to Marco Huber)

2020-03-21 a5a771360e [BUGFIX] Show correct context menu for file mounts (thanks to Christian Eßl)

2020-03-21 eec93fe605 [BUGFIX] Allow lowlevel cleaner missing files check for filenames with anchor (thanks to Benni Mack)

2020-03-21 bf8811034e [BUGFIX] Allow file links to files with anchors (thanks to Benni Mack)

2020-03-21 1036961a92 [BUGFIX] Avoid errors for creating new IRRE Elements on new parent records (thanks to Benni Mack)

2020-03-21 9666272f90 [BUGFIX] Use string as hmac context in inline controllers (thanks to Andreas Fernandez)

2020-03-21 646df5c8f9 [BUGFIX] Fix behaviour of useDefaultLanguageRecord (thanks to Oliver Eglseder)

2020-03-20 8269c5fa17 [BUGFIX] Escaping IRRE title once is enough (thanks to Susanne Moog)

2020-03-20 81c8887098 [BUGFIX] Properly merge RequireJS configuration (thanks to Andreas Fernandez)

2020-03-20 1caf97fe79 [BUGFIX] Never show failed "ADMCMD expired" exception (thanks to Benni Mack)

2020-03-20 60b9716e3c [BUGFIX] Load ext_localconf.php when checking TCA migrations (thanks to Andreas Fernandez)

2020-03-20 4ae42a7870 [BUGFIX] Not include defer files to concatenateJs (thanks to Guido Schmechel)

2020-03-20 9f65bd88a1 [TASK] Fix null coalescing operator precedence (thanks to Jacob Dreesen)

2020-03-20 703ebf2591 [BUGFIX] Do not try to display unreadable files (thanks to Susanne Moog)

2020-03-20 c2f6ca1963 [BUGFIX] Use function assignment to keep binding of this (thanks to Andreas Fernandez)

2020-03-20 08e7e1ed9b [BUGFIX] Ask user for notifications before requesting permissions (thanks to Andreas Fernandez)

2020-03-19 10e64f2cd9 [BUGFIX] Fetch correct uid for ###REC_FIELD and group fields (thanks to Georg Ringer)

2020-03-19 4700766b6c [BUGFIX] Correct label for move pointer + placeholder (thanks to Benni Mack)

2020-03-19 0ad81ed579 [BUGFIX] Cast string to float in NumberViewHelper (thanks to Susanne Moog)

2020-03-19 c0d1fe66cc [TASK] Make tests PHPUnit v9 compatible (thanks to Benni Mack)

2020-03-19 14dd2b89c3 [TASK] Remove superfluous UriBuilder references (thanks to Susanne Moog)

2020-03-19 3e04c803f7 [BUGFIX] Ensure cache tags are available on cached pages (thanks to Susanne Moog)

2020-03-19 7b48be1169 [BUGFIX] Handle docroot-relative paths in ResourceCompressor (thanks to Markus Klein)

2020-03-19 61f611d8d0 [BUGFIX] Install Tool modals won't depend on spinner (thanks to Andreas Fernandez)

2020-03-18 0791a699d1 [BUGFIX] Check "tables_modify" permissions in list module (thanks to Christian Eßl)

2020-03-18 3678caf5a3 [BUGFIX] Reimplement previewing of date / usergroup restricted content (thanks to Susanne Moog)

2020-03-18 6eeb66199d [TASK] Allow editing of crdate in sys_news (thanks to Susanne Moog)

2020-03-18 c7f893260d [TASK] Add rules for versionNumberInFilename to web.config (thanks to Susanne Moog)

2020-03-17 6a2cd5021d [TASK] Use no-cookie setting for vimeo by default (thanks to Guido Schmechel)

2020-03-17 6fcefe59cb [BUGFIX] Fix some dirty field checks in FormEngine (thanks to Christian Eßl)

2020-03-17 b71024c2f5 [BUGFIX] Make SQL schema migrations working on SQLite (thanks to Markus Klein)

2020-03-16 6a0ca1b049 [BUGFIX] Respect editPanel.onlyCurrentPid = 1 (thanks to Benni Mack)

2020-03-16 7dffa0ef83 [BUGFIX] Do not flush redirect cache when re-building (thanks to Susanne Moog)

2020-03-16 4ea41c5dab [TASK] Handle JSON problems in RedisSessionBackend (thanks to Markus Klein)

2020-03-15 229c81aeca [BUGFIX] Disable translation for TCA field file of sys_file_metadata (thanks to Tizian Schmidlin)

2020-03-15 f1baa7bb2e [BUGFIX] Respect columnsOverrides in TCA for all field types (thanks to Benjamin Gries)

2020-03-15 f2cba2e0a8 [BUGFIX] Allow TYPO3_CONTEXT to be set from Apache2 with suexec support (thanks to Benni Mack)

2020-03-15 b5a8a38739 [BUGFIX] Render dbType=date/datetime readonly fields properly (thanks to Benni Mack)

2020-03-15 6cb6827332 [BUGFIX] Make DateViewHelperTests resilient to execution time (thanks to Markus Klein)

2020-03-15 d0bc927520 [BUGFIX] Respect clearCache_pageGrandParent for non-page records (thanks to Benni Mack)

2020-03-14 b351ff1d89 [BUGFIX] Allow folder sorting by modification time (thanks to Susanne Moog)

2020-03-13 cf0f7afbf9 [BUGFIX] Do not show page delete area if user is lacking permissions (thanks to Christian Eßl)

2020-03-13 fd723c30bf [BUGFIX] Mark field as changed, when changing text in ckeditor source mode (thanks to Christian Eßl)

2020-03-13 914591b849 [BUGFIX] Force argument additionalConfig of MediaViewHelper as array (thanks to Georg Ringer)

2020-03-13 ef35bf6560 [BUGFIX] Wrap query parts in searchWhere into parentheses (thanks to Georg Ringer)

2020-03-13 443f51cad5 [BUGFIX] Fix various issues in "View Upgrade Docs" (thanks to Andreas Fernandez)

2020-03-13 3890b7c5d5 [BUGFIX] Fix examples for EditRecord- and NewRecordViewHelper (thanks to Torben Hansen)

2020-03-12 8f3ce89601 [BUGFIX] Show value '0' in cells of table content element (thanks to Georg Ringer)

2020-03-11 e62379cc2f [BUGFIX] Handle constructor arguments in extension scanner correctly (thanks to Oliver Hader)

2020-03-10 add951cc88 [BUGFIX] Create new instance of ValueSlider per occurrence (thanks to Andreas Fernandez)

2020-03-10 e8c2d78ced [BUGFIX] Disable FormEngine's save button on submit (thanks to Andreas Fernandez)

2020-03-10 e98ba4a4a8 [BUGFIX] Allow slashes in enhanced routes having aspects definitions (thanks to Christian Eßl)

2020-03-10 306ddc7076 [TASK] Check symbolic link creation before auto updating (thanks to Susanne Moog)

2020-03-10 d853626e15 [BUGFIX] Consider hidden records in persisted mapper aspects (thanks to Florian Wessels)

2020-03-09 8841472d0f [BUGFIX] Skip error when processing already deleted records (thanks to Christoph Lehmann)

2020-03-09 b537dccd14 [TASK] Streamline SiteLanguage related tests to be based on Site (thanks to Oliver Hader)

2020-03-09 340fbaff6b [BUGFIX] Calculate correct list of pages for SuggestWizardDefaultReceiver (thanks to Georg Ringer)

2020-03-09 63b60b6f01 [BUGFIX] Escape html tags in cshmanual content (thanks to Christian Eßl)

2020-03-09 ca1f918662 [BUGFIX] Sort most search words by count (thanks to Georg Ringer)

2020-03-09 ca89b886c7 [DOCS] Fix typo in RST docs (thanks to Markus Klein)

2020-03-08 fc0064efa1 [BUGFIX] Properly evaluate if condition in SearchController (thanks to Benni Mack)

2020-03-08 a30774e396 [BUGFIX] Make default folder structure aware of 'web-dir' option (thanks to Benni Mack)

2020-03-08 0eb6d2f7b6 [BUGFIX] Use parent page ID as PID for suggest fields (thanks to Susanne Moog)

2020-03-08 fad9205cd3 [BUGFIX] setSingletonInstance should respect XCLASS registrations (thanks to Benni Mack)

2020-03-08 53be664197 [BUGFIX] Prioritize iconIdentifier over default icon for extbase modules (thanks to Georg Ringer)

2020-03-08 f734946d85 [BUGFIX] Consider CGI wrapper for NormalizedParams->getSiteUrl() (thanks to Oliver Hader)

2020-03-08 2042cdf840 [BUGFIX] Fix ActionMenuItemViewHelper select-attribute (thanks to Kevin Ditscheid)

2020-03-08 7f050bac02 [BUGFIX] Remove unnecessary onChange="reload" in site language (thanks to Christian Eßl)

2020-03-07 c945c3d3c3 [BUGFIX] Add formDataProvider DatabasePageRootline to flexFormSegment (thanks to Georg Ringer)

2020-03-07 906a09e59e [DOCS] Clarify changed logger instantiation in scheduler tasks (thanks to Susanne Moog)

2020-03-07 72d446d950 [BUGFIX] Add cache property to TypoScript syntax in t3editor (thanks to Tymoteusz Motylewski)

2020-03-07 d7ebff31c6 [TASK] Disable InMemoryLogWriter in CLI mode (thanks to Christian Eßl)

2020-03-07 4d84dbec08 [BUGFIX] Catch InvalidArgumentException in scheduler (thanks to Susanne Moog)

2020-03-07 07dded9940 [BUGFIX] Make wizard SeparateSysHistoryFromSysLogUpdate repeatable (thanks to Jigal van Hemert)

2020-03-06 0ac4d4b4a1 [BUGFIX] Fix handling of type "comment" in TypoScript Constant Editor (thanks to Christian Eßl)

2020-03-06 b7a4edb115 [TASK] Change info message in scheduler in composer mode (thanks to Susanne Moog)

2020-03-06 6ac227304c [BUGFIX] Do not assign tab items if their content is empty (thanks to Christian Eßl)

2020-03-06 622e1a3dcd [BUGFIX] Reorder processing of TCA select items again (thanks to Jigal van Hemert)

2020-03-06 f4add4d165 [BUGFIX] Allow "distinct" in select.selectFields (thanks to Susanne Moog)

2020-03-06 b06f4ca4ae [BUGFIX] Throw missing exception in method getTypeOfChildProperty (thanks to Alexander Schnitzler)

2020-03-06 97bdfad253 [BUGFIX] Re-enable Guzzle versions > 6.5.0 (thanks to Benni Mack)

2020-03-05 d13c8b3de4 [BUGFIX] Do not try to map properties with unknown type (thanks to Susanne Moog)

2020-03-05 6afc789f66 [BUGFIX] Remove possibility to exclude width/height in sys_file_metadata (thanks to Susanne Moog)

2020-03-05 51a78b6b0b [BUGFIX] Use polyfills or older API in AdminPanel (thanks to Andreas Fernandez)

2020-03-04 17cdc5280f [BUGFIX] Catch possible exceptions while loading YAML files via import (thanks to Georg Ringer)

2020-03-04 6df00f3557 [TASK] Use attribute translate="no" for non translatable strings (thanks to Georg Ringer)

2020-03-04 c047024b7b [BUGFIX] Show guidelines in Adminpanel rendering tree view (thanks to Tymoteusz Motylewski)

2020-03-03 410c35f9d0 [BUGFIX] Respect content_from_pid in page cache (thanks to Georg Ringer)

2020-03-03 d8f581f939 [BUGFIX] Consider language context and fallbacks in persisted aspects (thanks to Nicole Cordes)

2020-03-03 05b8c06731 [BUGFIX] Streamline README.md and INSTALL.md with current links (thanks to Benni Mack)

2020-03-02 ed06f1e598 [BUGFIX] Respect cross-site error content source (thanks to Francois Suter)

2020-03-02 2ccb392cde [BUGFIX] Show scrollbar earlier in pagetree on larger pagetrees (thanks to Christian Eßl)

2020-03-01 eafa610a9b [BUGFIX] Initialize CodeMirror if element becomes visible to client (thanks to Andreas Fernandez)

2020-02-29 1c9bb1ef34 [BUGFIX] Check if editor is allowed to drag-move pages in pagetree (thanks to Christian Eßl)

2020-02-29 42e63752e0 [BUGFIX] Evaluate invertStateDisplay in flexforms (thanks to Christian Eßl)

2020-02-29 6a2deadf7c [TASK] Change several uris in ext:about to https (thanks to Susanne Moog)

2020-02-29 c064c3803f [BUGFIX] Allow newlines in ConfirmationFinisher message (thanks to Christian Eßl)

2020-02-29 2bc0ab6873 [BUGFIX] Fix broken link in Documenting HowTo (thanks to Christian Eßl)

2020-02-28 4d9691b65b [BUGFIX] Add type definition for backend user section (thanks to Susanne Moog)

2020-02-28 19bfe48a9b [BUGFIX] Add missing identify fields for f:hidden VH (thanks to Stefan Froemken)

2020-02-28 137b381561 [BUGFIX] Fix check for "ifEmpty" relevance (thanks to Francois Suter)

2020-02-28 e078193460 [BUGFIX] Add $TSkey labels for internal debugging (thanks to c.essl)

2020-02-27 89e5adda58 [BUGFIX] Include jquery-ui-resizable css (thanks to Susanne Moog)

2020-02-27 4cf18c612c [BUGFIX] Ensure presence of record uid for postModifiers of slugs (thanks to Susanne Moog)

2020-02-27 6159f7054b [DOCS] Correct typo in Changelog (thanks to Franz Holzinger)

2020-02-27 13c818453d [TASK] Add meaningful terms in various PHPDocs and comments (thanks to Oliver Bartsch)

2020-02-27 dd9be5a97a [BUGFIX] Fix Exception caused by empty staticPageArguments (thanks to Manuel Munz)

2020-02-27 87751a4693 [TASK] Define RootlineUtility::purgeCaches as internal (thanks to Georg Ringer)

2020-02-27 981e85baaa [BUGFIX] Raise minimum requirement of symfony/http-foundation (thanks to Andreas Fernandez)

2020-02-27 1b252f004c [BUGFIX] Fix description of pageNotFound and pageUnavailable handling (thanks to Susanne Moog)

2020-02-26 eecb0ef716 [BUGFIX] Do not process original files (thanks to Florian Schuhmann)

2020-02-26 9410da02fb [BUGFIX] Use brackets to access 1st char in string (thanks to Georg Ringer)

2020-02-25 4e10f6eeaa [DOCS] Add example for RadioButton/MultiCheckbox (thanks to ochorocho)

2020-02-24 700419fd08 [BUGFIX] Run 'language:update' command via scheduler task (thanks to Markus Poerschke)

2020-02-23 56552f3a75 [BUGFIX] Prevent separating HTML inline elements (thanks to Sebastian Klein)

2020-02-22 ae9bfdebbe [BUGFIX] Remove unused npm libraries (thanks to Andreas Fernandez)

2020-02-22 479a3e8716 [TASK] Use new syntax to import PageTSconfig (thanks to Oliver Bartsch)

2020-02-22 237381467e [FEATURE] Use SiteLanguageAwareInterface to check for trait existence (thanks to Christian Eßl)

2020-02-22 fe6b71a1c0 [BUGFIX] Toggle compare buttons correctly in beuser list (thanks to Daniel Goerz)

2020-02-22 e3dcaea527 [DOCS] Improved documentation example for afterInitializeCurrentPage hook (thanks to Markus Ehrlich)

2020-02-22 f8e1b71e43 [DOCS] Add directive to deny access for current Apache (thanks to Chris Müller)

2020-02-22 32bc7b97e8 [BUGFIX] Fix missing labels in clipboard (thanks to Christian Eßl)

2020-02-22 945e86fe74 [BUGFIX] Fix missing labels in reports module (thanks to Christian Eßl)

2020-02-22 2a79da28cc [BUGFIX] Fix missing "Page TSconfig" title (thanks to Christian Eßl)

2020-02-22 c14f3b0282 [BUGFIX] Fix missing label in Site Config (thanks to Christian Eßl)

2020-02-21 2e97e0c4f0 [BUGFIX] Use json_encode instead of implode (thanks to Susanne Moog)

2020-02-21 0312760d0c [BUGFIX] Fix wrong language label in FileContentParser (thanks to Christian Eßl)

2020-02-21 c1a801a698 [BUGFIX] Calculate correct cache identifier for cached SQL statement (thanks to Markus Klein)

2020-02-20 f1846b64fc [TASK] Improve check if records exist in DatabaseRecordList (thanks to Georg Ringer)

2020-02-19 fcecadbcc3 [TASK] Make info messages of InputSlugElement translatable (thanks to Georg Ringer)

2020-02-19 b79747a69e [BUGFIX] Prevent empty div in RecordHistory Rollback (thanks to Christian Eßl)

2020-02-19 66316936ad [BUGFIX] Change no_follow, no_index labels to their new inverted labels (thanks to Christian Eßl)

2020-02-18 7c94866afd [BUGFIX] Task for IP anonymization respects mask (thanks to Guido Schmechel)



9.5.14

2020-02-18 f0a9b4001d [BUGFIX] Ignore quotes in tag attribute value decoding (thanks to Nikita Hovratov)

2020-02-18 4ad70755e3 [BUGFIX] Show sys_note of hidden or deleted author (thanks to Nikita Hovratov)

2020-02-18 2ee19049d1 [BUGFIX] Set parent uid in newly created IRRE child record (thanks to Chris Müller)

2020-02-17 55799d7bf7 [BUGFIX] Use single instance of DocumentTypeExclusionRestriction (thanks to Manuel Selbach)

2020-02-17 b7fe23a035 [BUGFIX] Set correct PID for file references on new pages (thanks to ℳichiel ℛoos)

2020-02-17 a909d5dfbf [TASK] Access VH VariableContainer through RenderingContext (thanks to Claus Due)

2020-02-17 10b5e6e9e5 [BUGFIX] Respect form element instance for validators (thanks to Ralf Zimmermann)

2020-02-17 3beda3e1c9 [BUGFIX] Replace IP address in login error log mails (thanks to Georg Ringer)

2020-02-17 f8f87f64c8 [TASK] Review changelog files for release 9.5.14 (thanks to Anja Leichsenring)

2020-02-16 a0ef1e7151 [DOCS] Optimize scheduler documentation (thanks to Sybille Peters)

2020-02-16 2f415eae3d [FEATURE] Implement SameSite option for TYPO3 cookies (thanks to Benni Mack)

2020-02-16 4578519a9d [BUGFIX] Use multibyte method in CodeCompletionController (thanks to Georg Ringer)

2020-02-15 d019a5896e [BUGFIX] Make user avatar buttons accessible via keyboard (thanks to Elias Häußler)

2020-02-15 cf88a5a73f [BUGFIX] Allow CSH details for extbase based FlexForms (thanks to Stefan Froemken)

2020-02-15 84533bd54a [TASK] Add base Widget class methods for Fluid 3.0 compat (thanks to Claus Due)

2020-02-15 e8cab9ebf6 [BUGFIX] Use correct label while restoring a record in workspace (thanks to Georg Ringer)

2020-02-14 16d36cb472 [BUGFIX] Rework AJAX request queueing (thanks to Andreas Fernandez)

2020-02-14 97906c1c93 [BUGFIX] Check extension configuration before passing it (thanks to Georg Ringer)

2020-02-14 7e5c66adca [BUGFIX] Fix broken icon for groups with allowed all tables (thanks to Nikita Hovratov)

2020-02-14 105e68fab2 [BUGFIX] Display editIcon and editPanel of EXT:feedit (thanks to Daniel Siepmann)

2020-02-14 6d8defce1a [BUGFIX] Respect language permissions for page translations in list module (thanks to Georg Ringer)

2020-02-13 f9834a4bbf [TASK] Avoid Fluid JS escaping trick in new content wizard (thanks to Claus Due)

2020-02-12 61b25428c2 [TASK] Raise symfony dependencies to their LTS versions (thanks to Benni Mack)

2020-02-12 f586010b52 [BUGFIX] Use new group names in Bamboo AbstractSpec (thanks to Andreas Fernandez)

2020-02-12 6f8cc6f51b [BUGFIX] Make abstract test class really abstract to exclude it from test runs (thanks to Anja Leichsenring)

2020-02-11 afcacfb64a [FEATURE] Support of Macedonian (thanks to Georg Ringer)

2020-02-10 c43c3868cd [BUGFIX] Reset variables in SiteListCommand (thanks to Georg Ringer)

2020-02-04 16d3191725 [BUGFIX] Reset MP parameter on shortcut to MountPoint (thanks to Benni Mack)

2020-02-04 5caf3f9007 [BUGFIX] OtherLanguageContent: show fallback language icon (thanks to Josef Glatz)

2020-02-03 622bb8d154 [TASK] Remove title field in redirects module (thanks to Guido Schmechel)

2020-02-03 71fa330eba [BUGFIX] Independently check permissions for each language in page module (thanks to Christian Eßl)

2020-02-03 282523fec9 [BUGFIX] Make overlaid mountpoint pages avoid redirects (thanks to Benni Mack)

2020-02-03 d58f48991c [TASK] Update Fluid Standalone to latest version (thanks to Benni Mack)

2020-02-03 8cd3f9230b [BUGFIX] Improve visual output of slug proposal (thanks to Elias Häußler)

2020-02-03 4af60b558d [TASK] Add REPORT HTTP method for WebDAV (thanks to Stefan Horst)

2020-02-02 104459cd47 [TASK] Raise typo3/testing-framework fixing DatabaseSnapshot issue (thanks to Oliver Hader)

2020-02-02 6b8d8a7bce [TASK] Add tests for PersistedAliasMapper (thanks to Oliver Hader)

2020-02-02 0ee4594102 [BUGFIX] Use correct method name in PersistedPatternMapper legacy trait (thanks to Oliver Hader)

2020-02-01 beef709f92 [BUGFIX] Cast integer to string items during route argument mapping (thanks to Oliver Hader)

2020-02-01 1c7aed7618 [BUGFIX] Raise symfony/routing to ^4.3 in composer.json (thanks to Oliver Hader)

2020-01-31 fee60b9bbd [TASK] Update StaticValueMapper example in doc-block (thanks to Oliver Hader)

2020-01-31 1f70258a94 [BUGFIX] Use correct method name in PersistedPatternMapper legacy trait (thanks to Oliver Hader)

2020-01-31 442c8cad3b [BUGFIX] Show error for all invalid conditions (thanks to Frank Naegler)

2020-01-31 48d7af7008 [TASK] Dissolve PersistenceDelegate for persisted mappers (thanks to Oliver Hader)

2020-01-31 fd2b3731c5 [BUGFIX] Allow MountPoints with the same slug and add tests (thanks to Benni Mack)

2020-01-31 34a9727d53 [TASK] Show property path in title attribute (thanks to Sebastian Michaelsen)

2020-01-29 3138352683 [BUGFIX] Avoid PHP warning in ArrayUtility::getValueByPath() (thanks to Daniel Siepmann)

2020-01-28 ae5b3b0bc6 [TASK] Update copyright year in several files to 2020 (thanks to Elias Häußler)

2020-01-28 a763bf1bf5 [TASK] Streamline CacheHashCalculator test case (thanks to Oliver Hader)

2020-01-28 c71e744e4d [TASK] Repair examples (thanks to Stefan Frömken)

2020-01-28 fd4ddf1329 [BUGFIX] Ensure route defaults and requirements are considered (thanks to Oliver Hader)

2020-01-27 c4b9dbda62 [BUGFIX] Do not try to persist fieldNames of type "none" (thanks to Christian Eßl)

2020-01-27 63b03bfc30 [BUGFIX] Fix language synchronization for inline relations with inline relations (thanks to Michael Stucki)

2020-01-25 9a512a60bc [BUGFIX] Load uncached site configuration in editAction (thanks to Kevin Appelt)

2020-01-25 4b84003e05 [BUGFIX] Allow context menu hide/unhide for all TCA-based fields (thanks to Benni Mack)

2020-01-25 8a15b2d277 [BUGFIX] Hide invisible tab-panes to prevent focus hidden form elements (thanks to András Ottó)

2020-01-24 5695613534 [BUGFIX] Add more safety checks when dealing with buttons in the BE (thanks to Markus Klein)

2020-01-24 39c2e112cc [BUGFIX] Make unique id for same checkboxes in different sections (thanks to Dmytro Nozdrin)

2020-01-24 3e8aa38bb5 [BUGFIX] Ensure ZipService->extract sets proper permissions (thanks to Benni Mack)

2020-01-24 ab6cc19816 [BUGFIX] Reduce memory consumption in findIdentifiersByTag() (thanks to Markus Klösges)

2020-01-22 dd1a2c0145 [TASK] Extend route enhancer test framework (thanks to Oliver Hader)

2020-01-20 d2ce2f0b8a [BUGFIX] Consider Symfony route modifier (thanks to Oliver Hader)

2020-01-20 75331623e7 [BUGFIX] Avoid removing empty prefixes in mount-point handling (thanks to Oliver Hader)

2020-01-20 748098ec13 [TASK] Extend route enhancer test framework (thanks to Oliver Hader)

2020-01-20 30651e6cbc [TASK] Add page type enhancer tests for root page (thanks to Susanne Moog)

2020-01-20 9fca335b32 [FEATURE] Native MountPoint support for Site Handling (thanks to Benni Mack)

2020-01-18 9dde8915e6 [BUGFIX] Hand over new parameters to DataHandler clones (thanks to Benni Mack)

2020-01-17 cb1cc8a8ff [BUGFIX] Remove dependency check on openSSL (thanks to Benni Mack)

2020-01-17 08a55b3393 [TASK] Do not add target attribute if lightbox is enabled (thanks to Eric Chavaillaz)

2020-01-17 8758e9e61c [BUGFIX] Use latest slug in PopulatePageSlug (thanks to Sybille Peters)

2020-01-17 f3b9c4be57 [BUGFIX] Fix search in file list mount points (thanks to Sebastian Hofer)

2020-01-17 838a23e626 [BUGFIX] Correctly pass arguments to ext:felogin "postProcContent" hook (thanks to Christian Eßl)

2020-01-17 d8391ec44c [DOCS] Add example to RTE configuration concepts (thanks to Toben Schmidt)

2020-01-16 93b9f59efa [BUGFIX] Respect fallback languages in slug generation for pages (thanks to Christian Eßl)

2020-01-16 fbbfcaecaf [BUGFIX] Access module uses DataHandler for updating page (thanks to Benni Mack)

2020-01-16 9dc20efbd6 [BUGFIX] Add support for options in "Execute console commands" (thanks to Sebastian Mazza)

2020-01-16 efc8580dfb [BUGFIX] Apply restrictions for default language in context menu (thanks to Daniel Goerz)

2020-01-16 052a45018b [BUGFIX] Prevent ambiguous column name for TCA items (thanks to Daniel Siepmann)

2020-01-16 0a14ffac46 [BUGFIX] Avoid applying zero prefix for zero in StaticRangeMapper (thanks to Oliver Hader)

2020-01-16 f775aec18c [BUGFIX] Remove handling of nonexisting Exception in PageProvider (thanks to Daniel Goerz)

2020-01-16 4612bad6af [BUGFIX] Allow felogin to work without storage PID (thanks to Benni Mack)

2020-01-16 c7161fa586 [BUGFIX] Clarify description in ExtensionManagementUtility::addPlugin (thanks to Benni Mack)

2020-01-15 a5b78635b8 [BUGFIX] Allow additional parameters in static routes (thanks to Benni Mack)

2020-01-15 672f836211 [TASK] Move RST file for adding Kinyarwanda to correct folder (thanks to Daniel Goerz)

2020-01-15 50bfd9cfa3 [FEATURE] Add support for Kinyarwanda language (thanks to Tymoteusz Motylewski)

2020-01-15 f9a3a41325 [BUGFIX] Check isAbsPath when creating log file (thanks to Susanne Moog)

2020-01-15 36f4e0e53a [BUGFIX] Avoid creation of duplicate processed files (thanks to Benni Mack)

2020-01-15 d693279f4c [BUGFIX] Respect index in page type resolution (thanks to Daniel Goerz)

2020-01-15 39d258b23e [TASK] Respect default_sortby in TCA foreign table queries (thanks to Christoph Lehmann)

2020-01-15 dc8276577b [BUGFIX] Replace regexp capture groups for redirects (thanks to Guido Schmechel)

2020-01-15 5e7759d3e8 [BUGFIX] disableNoCacheParameter option allows TypoScript cache option (thanks to Benni Mack)

2020-01-15 7e984028db [TASK] Allow record or uid for isInWebMount (thanks to Markus Klein)

2020-01-15 98816d8082 [TASK] Add index to l10n_source field (thanks to Riny van Tiggelen)

2020-01-14 b915383f5d [TASK] Add test cases for handling of l18n_cfg field in pages sitemap (thanks to Daniel Goerz)

2020-01-14 a8116815d5 [TASK] Use prepared statement in BackendUtility::getPageForRootline (thanks to Markus Klein)

2020-01-14 f6bc1240bf [BUGFIX] Use DataHandler localize in Localization Overview (thanks to Susanne Moog)

2020-01-14 34a79461c8 [BUGFIX] Cast indexer config to integers before multiplication (thanks to Andreas Fernandez)

2020-01-14 935a7a5b97 [BUGFIX] Support unicode characters for redirects (thanks to Guido Schmechel)

2020-01-14 09fd6661e1 [TASK] Refactor route enhancer tests (thanks to Oliver Hader)

2020-01-14 5048e95610 [BUGFIX] Skip mkdir on logfiles with wrapper (thanks to Sven Carstens)

2020-01-14 174325faa8 [BUGFIX] Use correct type annotation for TSFE->pageCache (thanks to Markus Klein)

2020-01-14 83f29c2589 [BUGFIX] Use indexed menu item array for directory menu (thanks to Alexander Stehlik)

2020-01-14 01a0c5c3f5 [BUGFIX] Make current folder selectable for folder links (thanks to Markus Klein)

2020-01-14 e45c13d633 [BUGFIX] Improved visibility error message in install tool (thanks to Sebastian Rosskopf)

2020-01-14 39e93c9ffa [DOCS] Update TypoLink example inside of ViewHelper (thanks to Tizian Schmidlin)

2020-01-14 47b9dee94e [TASK] Avoid superfluous Reflection invocation in tests (thanks to Oliver Hader)

2020-01-14 04d8ada7d7 [BUGFIX] Show argument validation results in scheduler list (thanks to Markus Klösges)

2020-01-14 28c5a7b2b2 [BUGFIX] Ensure StaticRangeMapper applies zero prefix to internal map (thanks to Oliver Hader)

2020-01-14 6b61b504a5 [BUGFIX] Only include translated pages in sitemap (thanks to Daniel Goerz)

2020-01-13 3c27620f53 [BUGFIX] Preserve order of select items in FormEngine (thanks to Markus Klein)

2020-01-13 1d352d1997 [BUGFIX] Allow resolving unmapped type GET parameters with PageTypeDecorator (thanks to Benni Mack)

2020-01-13 7820d832b0 [BUGFIX] Add language flags to sys category TCA config (thanks to Joerg Boesche)

2020-01-13 33d4aa730d [BUGFIX] Only show translate button for available languages (thanks to Daniel Goerz)

2020-01-13 94bb5e4625 [BUGFIX] Fix various misbehaviors in "Broken Extension Scanner" (thanks to Andreas Fernandez)

2020-01-12 b1279c34cc [DOCS] Document request.getPageArguments() in TS conditions (thanks to Daniel Goerz)

2020-01-12 a566528c4c [BUGFIX] Do not pass extTarget by reference (thanks to Susanne Moog)

2020-01-12 3f8c961ea7 [TASK] Add a function to safely traverse arrays in TS conditions (thanks to Markus Klein)

2020-01-12 92ed7870ee [BUGFIX] Handle missing TSFE gracefully in TS conditions (thanks to Georg Ringer)

2020-01-12 31cc90f0b0 [BUGFIX] DefaultTcaSchema must not create SQL for tables not requested (thanks to Markus Klein)

2020-01-10 a0f12a5252 [BUGFIX] Fix OptimizeDatabaseTableTask for PDO and MySQLi (thanks to Manuel Selbach)

2020-01-10 a67d0b6710 [BUGFIX] Ensure fresh logger instance in scheduler tasks (thanks to Helmut Hummel)

2020-01-10 02976de354 [BUGFIX] Check return value of inet_pton in IpAnonymizationUtility (thanks to Georg Ringer)

2020-01-10 fdccaace66 [BUGFIX] Correctly display the CGI environment in Environment module (thanks to Benni Mack)

2020-01-09 07eea94944 [FEATURE] Provide feature flag for new translation server's export (thanks to Georg Ringer)

2020-01-07 ab16e2eddf [TASK] Add max_line_length to .editorconfig for rst files (thanks to Chris Müller)

2020-01-07 e7f4e66606 [DOCS] Link to same version in documentation (thanks to Sybille Peters)

2020-01-06 f5a0c76a9e [TASK] Use PermutationUtility::meltStringItems in test cases (thanks to Oliver Hader)

2020-01-06 ee7bbcb90b [TASK] Introduce PermutationUtility (thanks to Oliver Hader)

2020-01-06 89c62ee2bf [DOCS] Update Deprecation 79440 Changelog entry (thanks to Naderio)

2019-12-31 f13f60ea2e [BUGFIX] PopulatePageSlugs return the most recent slug (thanks to Herman Kremer)

2019-12-30 52ad1726ec [TASK] Disallow .php8 file extensions for uploading (thanks to Benni Mack)

2019-12-28 45a7e5a7c0 [DOCS] Correct code block for site configuration (thanks to Stephan Salzmann)

2019-12-28 f6eae8a817 [DOCS] Update Context API usage example (thanks to Tymoteusz Motylewski)

2019-12-27 357f4df72d [BUGFIX] Fix /date|time|int/ regex in backend search (thanks to Christian Eßl)

2019-12-27 9b74860954 [BUGFIX] Reset evaluate permissions to previous value (thanks to Susanne Moog)

2019-12-27 e40561d7ba [TASK] Add index to slug field (thanks to Oliver Bartsch)

2019-12-27 715977d589 [BUGFIX] PopulatePagesSlugs should respect tx_realurl_pathsegment field (thanks to Tobias Gaertner)

2019-12-27 771f3d878a [BUGFIX] Test failure due to erroneous usage of uniqueId() function (thanks to Anja Leichsenring)

2019-12-27 e11c2a2096 [TASK] Remove report for ext:compatibility7 (thanks to Anja Leichsenring)

2019-12-27 cf3bd5aaa8 [TASK] Correctly nest testing template instructions in DOM (thanks to Oliver Hader)

2019-12-27 1d381c2834 [TASK] Remove repository polling trigger from pre-merge test plans (thanks to Anja Leichsenring)

2019-12-27 aa1feb2470 [TASK] COMPOSER_ROOT_VERSION raise to current version 9.5.13 (thanks to Anja Leichsenring)

2019-12-20 33ad14cac3 [TASK] Update codeception and phpunit to latest versions (thanks to Benni Mack)

2019-12-20 6881edfb7e [BUGFIX] Include .htaccess file in extension packages (thanks to Georg Ringer)

2019-12-19 10b979454c [BUGFIX] Adjust parameters of implode() for PHP 7.4 (thanks to Susanne Moog)

2019-12-19 4203cde399 [TASK] Increase wait limit for mssql containers (thanks to Anja Leichsenring)

2019-12-18 e2dd92d657 [BUGFIX] Use correct implode(string, array) syntax (thanks to Anja Leichsenring)

2019-12-18 cb5a03b335 [TASK] Fix closure comparison in test (thanks to Susanne Moog)

Lesen Sie mehr: http://wiki.typo3.org/TYPO3_CMS_9.5.15






9.5.13
 (Sicherheitsupdate)
5 Februar 2020 - 150MBSecurity

Avoid insecure deserialization in QueryGenerator & QueryView

Prevent SQLi in ext:lowlevel QueryGenerator

Avoid directory traversal on archive extraction

XSS in file list through file extension

Avoid XSS by correctly encoding typolink results

Prevent XSS in EXT:form error message output

Avoid possible insecure deserialization in Extbase



Changes

Re-introduce removed methods

Streamline frontend user password recovery process

Revert FolderCheck for clipboard actions

Avoid applying parameter inflation during route resolving

Ensure correct return values in Workspace middleware

Add more tests for TypoLink handling in fluid

Name "default language" consistently

Use correct Plan name and key

Simplify chunking of test-plan jobs

Fix return value in command site:list

Extend docs of DeleteUploads finisher

Always allow dividers in TCA auth mode check

Convert URLs with ampersands in Linkvalidator

Remove incorrect slash in extension paths

Remove "Adding Your Own Content Elements"

Adjust name for PageTitle API in documentation

Add VendorName to Fluid Ajax WidgetContext

Mix test jobs in stages

Remove unused imports

Mark guzzlehttp/guzzle >= 6.5.0 as conflict

Apply thumbscrews to sqlserver

Fix typo in cHash option description

Use existing API instead of ContentObjectRenderer

Raise platform settings for tarball distributions

Remove leading slash from backendLogo path

Add check if update of all language packs is possible

Use RequestFactory for downloading mirrors and check response properly

Revert "[BUGFIX] Set tasks backend:lock & backend:unlock as not schedulable"

Restructure nightly plans in stages a 50 jobs

Remove jumpToUrl function in LinkBrowser

Check if header variable is set before using it

Do not apply default node settings when invoking command

Fix broken Fluid templates

Provide PHP 7.4 test run configuration

Fix failing tests in 9.5 branch

Streamline test names

Filter empty values from language list

Use mssql-2017-cu17

Provide necessary info for NewContentElementWizardHook again

Do not send default data for page tree items

Update doctrine/annotations dependency

Open a new tab if window name in backend is newTYPO3frontendWindow

RTE: Link with anchor and params not working

Use correct testing container for JS related tests -again

No longer include punctuation in CKEditor autolinks

Improve pre-merge test run configs

Fix translated shortcut target in menus

Update codemirror to v5.49.2

Restructure nighly test plan spec

Allow to switch clipboard mode to copy without items

Add example for saving uploaded files in SaveToDatabase finisher

Future-proof Fluid template namespace imports

Render FlashMessages at ClearCache

Use correct filename in documentation of fluid styled content

Update friendsofphp/php-cs-fixer to 2.16.1

Fix double encoding of current page link in link wizard

Fix explanation of content element TypoScript example

Use current site language in indexed search by default

Refer to classes in typo3fluid in Changelog

Use correct ViewHelper namespace in PHPDoc of SubmitViewHelper

Fix mistakes regarding RTE-configuration via TsConfig

Write "PropertyGridEditor" default values as integer number

Respect user mount points within FormPersistenceManager

Fix some minor typos in Changelog

Document date element in EXT:form

Document unsetting array property items in form variants

Show form definitions with same filename from different storages

StaticRouteResolver returns 404 on invalid static route

Respect unique form identifier for validators

Disable browser autofill feature for the honeypot field

Unconfigured typeNums should result in 404 instead of 500 response

Add additional tests for Route VariableProcessor

Only process arrays in BackendUserConfigurationUpdate

Make PHP code of TYPO3 Core PHP 7.4 compliant

Cast id to integer in class BackendUserConfigurationUpdate

Fix PHP error in SoftReferenceParserHook for missing form definitions

Document variables assigned to mail templates

Remove assignment to unused property in PageRenderer

Do not use constants in low-level classes

Synchronize TCA enable columns from workspace version

Do not add entries to cache_treelist when logged into BE

Update doctrine/dbal to 2.10.0

Ensures configuration for resolveAnchorLink is an array

Respect config.intTarget and extTarget in default ParseFunc

Add Maori locale and flag

Add examples to ext:backend ViewHelpers

Add missing semicolon in rst file

Fix minor typos in form documentation

Update dependency CmsComposerInstaller

Trigger nightly test builds with more time in between

Fix exception in IpAnonymizationTask after upgrade from TYPO3 8

Consider all elements in typo3temp/assets/ when clearing

Add fallback identifier to IRRE fields

Remove htmlspecialchars from path_Workspace

IRRE: Create a correct original value identifier

Respect language restrictions for direct page title editing

Make EXT:backend independent of EXT:install

Deactivate link element's explanation toggle after change

Allow usage of uid in slug generation via Ajax

Set default controller name in ExtbasePluginEnhancer

Log invalid hash generation in FAL Indexer

Add clarification and tests to SiteBasedRedirectResolver

Decode tag attributes during HTML parsing

RTE: Support anchors without href

Reenable input field for page ID when setting a link via RTE

Use correct icon for menu separator if hidden in menu

Add additional workspaces tests covering enable fields

Fix RTE preset example

Respect cacheHash excludedParameters in TSFE::reqCHash()

Pluralize term dynamically

Prevent indexing of XML sitemaps by search engines

Extend TCA shadowColumns instead of overriding them

Don't escape decimal character group

Remove references to "alternativeTempPath"

Streamline SoftReferenceIndex references

Fix tests in ConditionMatcher regarding applicationContext

Revert "[TASK] Speed up DB query for tables with versions"

Enable php 7.4 for runTests.sh script

Update Guzzle to latest version (6.4.1)

Improve accessibility of backend login

SysLanguageViewHelper fetches proper DB connection

Use prepared statements for pdo_mysql per default

Do not fall back to routes on invalid “id”

Have backend layouts in DB respect workspace versions

Check parsed url for query part in BE Shortcuts

Remove 2nd double quotes from exception messages

SoftReferenceIndex parses new TypoLink format correct

Fix stdWrap.replacement boolean properties handling

Don't process ifEmpty/ifBlank stdWrap if content is available

Fix parameter descriptions of bulkInsert

Lesen Sie mehr: http://wiki.typo3.org/TYPO3_CMS_9.5.13






9.5.8
 (Hauptversion) (Sicherheitsupdate)
31 Juli 2019 - 150MB9.5.8



Security

Disallow insecure deserialization for l18n_diffsource (thanks to Oliver Hader)

Deny pages' TSconfig and tsconfig_includes for non-admins (thanks to Oliver Hader)

Disallow session data transfer on frontend user logout (thanks to Oliver Hader)

Deny access to import module for non-admin users (thanks to Oliver Hader)

Conflict insecure versions symfony/cache component (thanks to Frank Naegler)

Disallow javascript & data scheme in URL link handler (thanks to Oliver Hader)

Check record permissions in record information popup (thanks to Andreas Fernandez)



9.5.7



Highlights

Upgrade typo3/phar-stream-wrapper to v3.1.2

Set TYPO3 version to 9.5.7-dev



Bug Fixes

Fix record preview

Avoid realpath resolving in PharStreamWrapperInterceptor

Remove non existing source map reference

Remove unused variable

Ignore PATH_INFO in NormalizedParams scriptName calculation

Properly initialize image property of FrontendUser

Make php-intl work with older ICU versions



9.5.6



Security

Enclose file type scope when invoking ImageMagick

Destroy sessions on password change

Avoid logging sensitive information during authentication

Hide items in page tree a user does not have access to

Raise Fluid Standalone dependency



Highlights

Re-introduce mixed overlay mode for content fallback

API to search for files including meta data based on folder

Add custom generator options via hook



Bug Fixes

Fix RST rendering in Documentation file

Avoid showing password on MacBook touch bar in backend forms

Do not apply stdWrap on USER_INT

Respect uniqueInSite when moving records

Add functional tests for hreflang tag generation

Do not remove page cache for redirects issued by plugins

Remove duplicated types of AbstractFileFolder::$originalResource

Upgrade and streamline typo3/phar-stream-wrapper to v3.1.1

Support concurrent requests without 503 responses

bamboo plan for security pre-merge tests

Do not open EditDocumentController in modal

Allow TypoScript conditions to access PageArguments

Unhide page translations by default

Mitigate migration of EXT:sv and saltedpasswords into core

Make sure a twitter:card metatag is rendered

Check correct setting on extension upload

Avoid raising a warning in SimpleLockStrategyTest

Sanitize undefined TCA columns required for data integrity

Only show records from current language in XML Sitemap

Have RecordState support versioning

Invoke delete command via AJAX

Use correct ViewHelper argument description

Let Install Tool use core's bootstrap

Document property "elementDescription"

Move backend translations into Database.xlf

Fix structure of generated finisher FlexForm fields

Document variants of form framework

Add arguments to the MimeTypeValidator error object

Use form specific flexform sheets within the frontend

Add guard clause to preFileAdd form hook

Catch form errors and display speaking error message

Add clarification for link.editRecord ViewHelper

Change finisher override display behavior

Add missing translation of validator

Add id to confirmation finisher template

Pass error arguments to translator

Document validators of form framework

Fluid viewhelper f:format.date() uses timestamp from context aspect

Fix header levels for ViewHelper class comments

Fix docs of FlashMessage finisher

Show "FlashMessage" finisher output

Make AdvancedPassword confirmation error translatable

Render content element in ConfirmationFinisher

Ensure Lowercase folders on non-case-sensitive file system

Close file resource in FileLockStrategy if acquire failed

Raise twitter bootstrap to 3.4.1

Incorporate changes of jQuery version to 3.4.0

Document proposed folder structure

Add extension suggestions to EXT:form

Transliterate accented characters

Remove Windows line breaks

Properly handle quotes in plaintext mails

Update Settings.cfg to recent TYPO3 version

Fix DeleteUploadsFinisher with recyclers

Make filter in workspace module work again

Fix alias of SaltedPasswordsService

Use correct value for remove function

Overlay workspace records in Live Search

Correction of the userdefined time range

Make loading of depth in workspace module work for 0

Add missing fe_login hooks to docs

URL without base runs into a redirect loop

Make CodeMirror search persistent

Mark symfony/routing 4.2.7 as conflict

Don't show new button when adding a new record

Ensure www.mydomain.com/index.php works

Repair depth selection in workspace module

Ensure PageRouter only operates with previous result

Allow to check/uncheck all recipients in Workspace stage dialog

Store depth selector in workspace module in uc

Check if language is accessible before uri generation

Simplify UX in Workspace Module

Apply quality settings for images

Fix labels and field ordering of workspaces TCA

Fix serialization of loggers

Use proper TYPO3_CONF_VARS IM option

Prevent throwing warnings when extract svg image sizes

Use finder instance correctly

Do not send empty scheduler status mails

Add tests for SiteBased translations in Extbase records

Populate href lang URI only if the link is available

Catch TypeError on inlineCSS files

Add tests for pages.slug in workspaces tests

Do not use LSB in

Fix typo in form documentation

Use proper path to install cli binary

Add table name as prefix for language DB selection

Allow FileInterface for ClickEnlarge ViewHelper

Use PageTitle API for indexed_search

Ensure to properly catch any connection exception

Fix handling menuConfig of LanguageMenuProcessor

Update columns in DocHeader bar

Reenable Page TSconfig setting mod.web_list.hideTranslations

Fix null coalesce evaluation in PageLayoutView::getLocalizedPageTitle()

DB check - search query, array handling on operator change

Use SiteFinder in SearchController for getting all languages

Remove superfluous function calls in page module

Handle configured error level only in error handler

Remove limit in be_groups fields

Do not use native closest() due to missing browser support in IE

Adjust documentation for custom routing enhancer registration

Improved visibility error message in install tool

Remove hard coded path to LocalConfiguration.php

Show correct timestamp in file replace dialog

Avoid PHP notice in DataHandler

Prepare Frontend Tests for additional site handling tests

Enable preview of hidden page translations

Check if fileObject width is greater than 0, if not use maxWidth

Documentation links to invalid URL

Use SiteMatcher in TranslationConfigurationProvider

Fix Changelog associated with extension scanner for services

DB check > Search: Convert --div-- to optgroup

Update ColorPicker to use cleaned minicolors hex value

Use live record uid for preview in workspace

Resolve and link modified slugs in workspaces properly

Avoid cHash mismatches when previewing workspace changes

Add be_user id to LinkGenerator page-version test context

Update SYS_LASTCHANGED for the right language page record

Update topbar when switching BE language

Do not overwrite status code of received response

Remove @internal from ConnectionPool::resetConnections()

Re-enable target attribute for links in menus

Respect sorting in section menus

Mark input fields edited by datepicker as changed

Ensure parse_str method argument is valid for BE shortcuts

Add additionalFields to cache identifier in getPageForRootline

Show typo3link module in ckeditor if href attribute is empty

Ensure result is string in __toString of CropVariantCollection

Prevent empty new form from being closed without confirmation

Rename PageParameterValidator to PageArgumentValidator

Upgrade ckeditor to 4.11.3

Add jquery.clearable to backend page tree filter

Add field static_page_arguments to group by of query

Allow umlaut domains for site domain resolving

Include Records with "All Languages" in default language

Add slug field to page-related DataHandler tests

Use correct default value for sys_file_storage|is_public

Do not treat all classes as entities in ClassSchema

GifBuilder returns already generated images

Fix typos in PHP comments

Access correct event variable in ContextMenu.ts

Add requireJs for Inline JavaScript in file replace view

Prevent exception in file list

Fix strict type error in recursive mount point resolving

Remove invalid sort link in filelist module

Catch ExpressionLanguage exception for invalid base variants

Prevent various PHP notices

Use TSConfig defaults for DataHandler

Do not use named parameter for list of ids in plain data resolver

Reduce strictness for .pl files in fileDenyPattern

Check existence of OEmbed title

Properly render hidden fields for IRRE records

Fix @var comment in AbstractFileCollection

Add missing licence header to viewhelper classes

Change abandoned package mso/idna-convert

Access and update attribute data-action explicitly in Core Updater



9.5.5



Features

Fallback options for slug fields

Add SiteProcessor



Bug Fixes

Catch possible error due to wrong redirect regex

Reintroduce removed page tree TSconfig settings

Fix fallback language handling

Force closing tag in PageViewHelper

Add check for string to prevent PHP warning

Streamline base variants for sites

Fix indexing of pages using route enhancers

Calc permissions for edit links correctly

Update to phpunit 7.5

Make slugs unique when copying pages

Properly use requirejs-loader.js in frontend context

Abort slug proposal request on rapid typing

Support non ASCII url slugs

Exclude logger from serialize on save for Extbase scheduler task

Tighten rst validation rule for keyword

Relax rst validation rules for Feature and Important

Remove PageRenderer debug code

Do not treat all classes as entities in ClassSchema"

htaccess does not allow pages that end with "rc"

Do not treat all classes as entities in ClassSchema

Respect no_cache in PageLinkBuilder

Mock FileRepository Singletons in unit tests

Migrate existing ViewHelper docs to valid rst

Allow type 'check' in site configuration

Use real ObjectManager stubs in unit tests

Mock ResourceFactory Singletons in unit tests

Mock SignalSlot\Dispatcher Singletons in unit tests

Do not render unused attribute in Checkbox element

LegacyDomainResolver must ignore hidden domain records

Prevent int range escalation in language sorting

Catch orphaned language related exception

Do not use ObjectManager to instantiate PageTitleProviderManager

Update tslint.json and fix build

Replace IRC with Slack in composer support section

EXT:opendocs - Remove bogus initial document count

Have stdWrap.lang use Site concept

Remove empty TsDebug.js

Document rte_ckeditor

Add missing interface to AdminPanel Cache Module

Cast lastMod property to int

Commit missing composer.lock changes

Raise php-cs-fixer version

Update doctrine/dbal to ~2.8.0

Keep language reference for children using l10n_mode=exclude

Scheduler: Remove label from progress bar

Allow strings in site configuration type "select"

Cast fallback language uids to integer

Revert Set controller in ExtbasePluginEnhancer"

Set controller in ExtbasePluginEnhancer

Corrected tooltip for pages with nav_hide

Use proper argument for options in SendEmailCommand

Add language synchronization tests for TCA type inline/CSV

Show hidden subgroups of fe_group

Reduce information disclosure of the used TYPO3 version

Reuse entities of overridden classes in persistence session

Add support for language -1 to TCA field type slug

Use proper exception messages for Scheduler::fetchTask()

Mark scheduler tasks as executed on PHP-level errors

Update typo3fluid/fluid to 2.6.0

Use real finisher identifier in form element variants

Fix return type of determineSiteScript

Resolve site correctly in nested site structure

Increase field name of table sys_file_storage

Use overridden field label in list view

Add correct description for CType menu_sitemap

Improve indexed_search manual

Prevent selection of pagetree loader animation

bamboo: db dependency loop needs break condition



9.5.4



Security

Extend file deny pattern

Use a fluid template for the ConfirmationFinisher message

Raise bootstrap 3.4.0 to fix XSS in JS components

XSS issues in Fluid view helpers

Prevent possible XSS in install tool

Avoid creation of backend users without password

Avoid disclosing loaded extensions



Highlights

Support feature toggle in expression language

Support feature toggle in expression language

Make SiteLanguage available in TypoScript



Bug Fixes

and dozens of bug fixes



9.5.3



Bug Fixes

Fix positioning of arrows in Element Browser

Properly separate markup for modal windows in extension manager

Fix HTML in modal of OnlineMedia.ts

Fix HTML in drag-title of PageTreeDragDrop.js

getTreeList inserts duplicate keys in cache_treelist

Revert bugfix Remove surrounding &nsbp; in the tables with ol or ul in CKEditor

Do not rewind Generator in DebuggerUtility::var_dump()

Silence composer install progress in bamboo

Allow custom namespace in ExtbasePluginEnhancer

Remove @ in doc comment of TypoScriptParser

Add filter for be_users and be_groups

Set TYPO3 version to 9.5.3-dev



9.5.2



Security

Avoid DoS in Online Media Helper

Remove TYPO3 version from installer

Make InstallTool session cookie HTTP-only

Prevent XSS with fe_users data in felogin/TSFE

Prevent XSS in modal component and PageTree

Properly escape videoId for YouTube/Vimeo

Update library CKEditor to 4.11.1



Highlights

Allow replacing strings in slug

Allow to override htmlTag attributes

Support recursive in record sitemap

Improve creation of URL query strings from arrays



Bug Fixes

and dozens of bug fixes



9.5.1



Bug Fixes

Remove X-UA-Compatible from HTML of backend

and dozens of bug fixes



9.5.0



Highlights

Add stdWrap to config.additionalHeaders"

Introduce PageTypeEnhancer

Make prepending slash in TCA slug configurable

Introduce RouteEnhancers for Page-based Routing

Allow site in TypoScript getText

Allow environment variables in site config

Allow multiple domain variants per site

Allow static route resolving

Add support for the "canonical" tag

Use utf8mb4 on mysql for new instances



Bug Fixes

and dozens of bug fixes



9.4.0



Security

Deny direct FAL commands for form definitions

Ensure validity of parameters submitted to ThumbnailController

Remove support for native PHP yaml extension

Filter disallowed properties in form editor

Explicitly deny object deserialization

Mitigate phar stream wrapper

Introduce PHP stream wrapper for phar:// protocol

Deny authentication bypass using blowfish/md5 encryption



Highlights

Add property to disable form elements/finishers

Add hreflang support

XML Sitemap

New API for UpgradeWizards

Add PageTitle API

Add commands for listing and showing sites

Add inline AJAX validation for TCA type slug

Add pagination and filtering to the redirects module

Show extensions via CLI

Add symfony expression language for TypoScript conditions

Refactor AdminPanel API to use composition

Move workspaces scheduler tasks to native symfony commands

Allow symfony commands to be non-schedulable

Add Upgrade Wizard to migrate to pagepath segment for pages

Introduce Page-based URL handling

Add SQL Logging to AdminPanel

Add a new TCA type "slug"

Show only sys_languages in Backend which are available

Add "Pseudo" Site functionality

Add feature toggle interface to Settings

Enable/disable a specific SiteLanguage in Frontend

Add path where reference records are located to record info

Move expression language handling into EXT:core

Add Log Module to AdminPanel

Use symfony/routing for Site Resolving

Select first element of PageTree toolbar on initialization

Add hooks for DatabaseRecordList CSV actions

Open specific field when fixing links

Add TCA 'saltedPassword' eval for type=input

Re-Design the AdminPanel

Add infix option for filenames used by FileWriter

Allow TCA description property

Add getEnv value modifier to TS parser

Add context check for TypoScript

Introduce conditional variants for form elements

Add Contexts for storing data access modes

Add support to CurrencyViewHelper for mdash

Use HTML5 field types and attributes in FormEngine

Add interval presets for cron command field of scheduler task

Load merged JS files asynchronous

Enable SQLite in installation process

Add trait to detect public deprecated methods



Bug Fixes

Merge salted passwords auth service into default service

Drop "documentation" extension

and dozens of bug fixes

Lesen Sie mehr: http://wiki.typo3.org/TYPO3_CMS_9.5.8






8.7.32

1 April 2020 - 150MB8.7.32

2020-03-30 c3c2857f0f [TASK] Update symfony dependencies for tarball distributions (thanks to Benni Mack)

2020-03-27 6a619da4ea [BUGFIX] Do not render a-tag if URL is empty in link.action VH (thanks to Frank Naegler)

2020-03-23 f9500bdf02 [DOCS] Fix formatting in .rst files (thanks to Sybille Peters)

2020-03-21 5aa844c1cb [BUGFIX] Use string as hmac context in inline controllers (thanks to Andreas Fernandez)

2020-03-10 7d765c8d3b [BUGFIX] Do not process original files (thanks to Florian Schuhmann)

2020-03-08 1eb10f80fb [BUGFIX] Update local cache upon creation of new storage object (thanks to Yann Weyer)

2020-03-06 5833630c13 [BUGFIX] Re-enable Guzzle versions > 6.5.0 (thanks to Benni Mack)

2020-03-04 8a6c9a4bed [TASK] Make ViewHelpers compatible with Fluid 3.x (thanks to Claus Due)

2020-02-28 3194634a74 [BUGFIX] Remove jumpToUrl function (thanks to Dennis Prinse)

2020-02-27 9b96aea68d [BUGFIX] Include jquery-ui-resizable css (thanks to Susanne Moog)

2020-02-27 9e0db782aa [BUGFIX] Raise minimum requirement of symfony/http-foundation (thanks to Benni Mack)

2020-02-23 3b355be1ae [BUGFIX] Prevent separating HTML inline elements (thanks to Sebastian Klein)

2020-02-18 0645e7b5fa [TASK] Access VH VariableContainer through RenderingContext (thanks to Claus Due)



8.7.31

2020-02-17 0bafe6c9a7 [BUGFIX] Set correct PID for file references on new pages (thanks to ℳichiel ℛoos)

2020-02-17 0d5ae4ebe5 [FEATURE] Implement SameSite option for TYPO3 cookies (thanks to Benni Mack)

2020-02-15 79bd294e6b [TASK] Add base Widget class methods for Fluid 3.0 compat (thanks to Claus Due)

2020-02-14 b6c3a09937 [BUGFIX] Fix broken icon for groups with allowed all tables (thanks to Georg Ringer)

2020-02-12 c6f5cb5740 [BUGFIX] Fix Fluid syntax errors in PageZero.html (thanks to Claus Due)

2020-02-12 c05e5bbb49 [BUGFIX] Use new group names in Bamboo AbstractSpec (thanks to Andreas Fernandez)

2020-02-11 375e9b6e1e [TASK] Remove branch-alias occurrences (thanks to Oliver Hader)

2020-02-11 9f801dba23 [TASK] Streamline legacy composer references (thanks to Oliver Hader)

2020-02-03 eddc9158bf [TASK] Update Fluid Standalone to latest version (thanks to Benni Mack)

2020-01-29 ddbc5af982 [BUGFIX] Avoid PHP warning in ArrayUtility::getValueByPath() (thanks to Daniel Siepmann)

2020-01-29 8b2e596ea9 [TASK] Update copyright year in several files to 2020 (thanks to Elias Häußler)

2020-01-27 84451995a6 [BUGFIX] Fix language synchronization for inline relations with inline relations (thanks to Michael Stucki)

2020-01-24 5bf3475672 [BUGFIX] Ensure ZipService->extract sets proper permissions (thanks to Benni Mack)

2020-01-17 0cdf7a60e9 [DOCS] Add example to RTE configuration concepts (thanks to Toben Schmidt)

2020-01-15 67bd68cf65 [BUGFIX] Cast indexer config to integers before multiplication (thanks to Daniel Goerz)

2020-01-14 ce52e13dd3 [DOCS] Link to same version in documentation (thanks to Sybille Peters)

2020-01-13 5223e569d3 [BUGFIX] Preserve order of select items in FormEngine (thanks to Markus Klein)

2020-01-10 710bf8cd37 [BUGFIX] Fix OptimizeDatabaseTableTask for PDO and MySQLi (thanks to Manuel Selbach)

2020-01-10 fb9ab833dd [BUGFIX] Remove PHP version restriction in all sysexts (thanks to Benni Mack)

2020-01-10 4e826ecb73 [BUGFIX] Check return value of inet_pton in IpAnonymizationUtility (thanks to Georg Ringer)

2020-01-06 97fb25c17d [DOCS] Update Deprecation 79440 Changelog entry (thanks to Naderio)

2019-12-30 1bf94f719c [BUGFIX] Test failure due to erroneous usage of uniqueId() function (thanks to Anja Leichsenring)

2019-12-30 e171c0b3d2 [TASK] Disallow .php8 file extensions for uploading (thanks to Benni Mack)

2019-12-27 f03118eb3c [BUGFIX] Include .htaccess file in extension packages (thanks to Georg Ringer)

2019-12-27 35c321ac9e [TASK] Remove repository polling trigger from pre-merge test plans (thanks to Anja Leichsenring)

2019-12-27 8657d04264 [TASK] COMPOSER_ROOT_VERSION raise to current version 8.7.30 (thanks to Anja Leichsenring)

2019-12-20 9f7b336e3e [TASK] Update codeception and phpunit to latest versions (thanks to Benni Mack)

2019-12-19 4307ef9a72 [BUGFIX] Adjust parameters of implode() for PHP 7.4 (thanks to Susanne Moog)

2019-12-19 56914b3fc3 [TASK] Increase wait limit for mssql containers (thanks to Anja Leichsenring)

2019-12-18 4be3b783fc [BUGFIX] Use correct implode(string, array) syntax (thanks to Anja Leichsenring)

Lesen Sie mehr: http://wiki.typo3.org/TYPO3_CMS_8.7.32






8.7.30
 (Sicherheitsupdate)
18 Januar 2020 - 150MBSecurity

Avoid insecure deserialization in QueryGenerator & QueryView

Prevent SQLi in ext:lowlevel QueryGenerator

Avoid directory traversal on archive extraction

XSS in file list through file extension

Avoid XSS by correctly encoding typolink results

Prevent XSS in EXT:form error message output

Avoid possible insecure deserialization in Extbase

Lesen Sie mehr: http://wiki.typo3.org/TYPO3_CMS_8.7.30






8.7.19

30 August 2018 - 150MBLesen Sie mehr: http://wiki.typo3.org/TYPO3_CMS_8.7.19






8.7.4
 (Hauptversion)
7 August 2017 - 150MBLesen Sie mehr: http://wiki.typo3.org/TYPO3_CMS_8.7.4






7.6.21
 (Hauptversion)
31 Juli 2017 - 150MBLesen Sie mehr: http://wiki.typo3.org/TYPO3_CMS_7.6.21