1. 16 Aug, 2021 1 commit
  2. 10 Aug, 2021 1 commit
  3. 20 Jul, 2021 1 commit
  4. 16 Jul, 2021 1 commit
  5. 04 May, 2021 1 commit
  6. 23 Feb, 2021 1 commit
  7. 22 Dec, 2020 1 commit
  8. 26 May, 2020 1 commit
  9. 19 May, 2020 1 commit
  10. 12 May, 2020 1 commit
  11. 28 Apr, 2020 1 commit
  12. 21 Apr, 2020 1 commit
  13. 14 Apr, 2020 1 commit
  14. 25 Feb, 2020 1 commit
  15. 03 Dec, 2019 1 commit
  16. 01 Oct, 2019 1 commit
  17. 23 Jul, 2019 1 commit
  18. 12 Jun, 2019 1 commit
  19. 15 Jan, 2019 1 commit
  20. 14 Dec, 2018 2 commits
  21. 11 Dec, 2018 1 commit
  22. 30 Oct, 2018 1 commit
  23. 02 Oct, 2018 1 commit
  24. 04 Sep, 2018 1 commit
  25. 12 Jul, 2018 1 commit
    • Oliver Hader's avatar
      [SECURITY] Introduce PHP stream wrapper for phar:// protocol · b3b7d453
      Oliver Hader authored and Oliver Hader's avatar Oliver Hader committed
      This custom stream wrapper for the phar:// protocol overrides
      PHP's native handling. In case Phar bundles shall be loaded from
      a valid directory, the custom wrapper falls back to the native PHP
      wrapper in order to invoke Phar-related actions.
      
      In case the location is not trustworthy, an according exception
      is thrown. The custom stream wrapper is registered in the beginning
      of TYPO3's bootstrap class.
      
      Truested locations are those in typo3conf/ext/* - anything else is
      denied and not considered as trustworthy.
      
      Releases: master, 8.7, 7.6
      Resolves: #85385
      Security-Commit: efa085d9a5aebfac6b92309ea53c455b95a81fcc
      Security-Bulletin: TYPO3-CORE-SA-2018-002
      Change-Id: Ifd38eab7a5757e6cfbd6f773a3fed8f3d742e09d
      Reviewed-on: https://review.typo3.org/57558
      
      Reviewed-by: Oliver Hader's avatarOliver Hader <oliver.hader@typo3.org>
      Tested-by: Oliver Hader's avatarOliver Hader <oliver.hader@typo3.org>
      b3b7d453
  26. 11 Jun, 2018 1 commit
  27. 09 Apr, 2018 1 commit
  28. 30 Jan, 2018 2 commits
  29. 12 Dec, 2017 2 commits
  30. 03 Dec, 2017 1 commit
  31. 02 Nov, 2017 1 commit
  32. 13 Jul, 2017 1 commit
  33. 30 Aug, 2016 1 commit
  34. 08 Oct, 2015 1 commit
  35. 06 Jul, 2014 2 commits
    • Christian Kuhn's avatar
      [CLEANUP] Remove comment header in ext_emconf · 7755bf4c
      Christian Kuhn authored and Jigal van Hemert's avatar Jigal van Hemert committed
      The "do not touch me" comment header in ext_emconf.php files
      of system extensions are misleading since we are editing those
      files manually for years now. Remove those headers.
      
      Change-Id: I27f6253effa54dae7f92170175e7705cc706d03a
      Resolves: #60129
      Releases: 6.3, 6.2
      Reviewed-on: https://review.typo3.org/31405
      Reviewed-by: Jigal van Hemert
      Tested-by: Jigal van Hemert
      7755bf4c
    • Christian Kuhn's avatar
      [CLEANUP] ext_emconf files · 396e8e5a
      Christian Kuhn authored
      Quite some keys in ext_emconf are obsolete and can be removed.
      See related issue for a list of keys.
      
      Change-Id: Id12c2e3d61569cc1e84226ef75120ae4261922fb
      Resolves: #60128
      Related: #58365
      Releases: 6.3, 6.2
      Reviewed-on: https://review.typo3.org/31397
      Reviewed-by: Markus Klein
      Tested-by: Markus Klein
      Reviewed-by: Susanne Moog
      Tested-by: Susanne Moog
      Reviewed-by: Christian Kuhn
      Tested-by: Christian Kuhn
      396e8e5a
  36. 12 Mar, 2014 1 commit