- 02 Dec, 2021 1 commit
-
-
Christian Kuhn authored
Resolves: #96196 Related: #92947 Releases: main Change-Id: I9f8e9949c5443eb0324b8406346f98e87bfacc20 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/72456 Tested-by:
core-ci <typo3@b13.com> Tested-by:
Oliver Bartsch <bo@cedev.de> Tested-by:
Benni Mack <benni@typo3.org> Tested-by:
Stefan Bürk <stefan@buerk.tech> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch> Reviewed-by:
Oliver Bartsch <bo@cedev.de> Reviewed-by:
Benni Mack <benni@typo3.org> Reviewed-by:
Stefan Bürk <stefan@buerk.tech> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch>
-
- 15 Nov, 2021 1 commit
-
-
Storing the package artifact in the var/build folder raised questions how this folder shall be treated in general and during deployment. Since the Package Artifact is built in a `composer install` process, it should be treated the same as other build artifacts like all files in the vendor folder. To make this more clear, the package artifact is now also stored in the vendor folder. Accessing the vendor folder during runtime is now possible with using Composer 2.1 runtime API, which is required anyway already. The path to the vendor folder is determined indirectly, by using the path to the typo3/cms-composer-installers package. This means, this package must not be replaced by another package with a different name. Since no public replacements for this package exist and there are no benefits for a private replacement of this package over having a private fork with the same package name, this should not be an impediment. To ease the required related changes in the testing framework, late static binding is used for calling SystemEnvironmentBuilder::usesComposerClassLoading Resolves: #95897 Releases: master Change-Id: I3cfc982c289b312d22f59d2704d7e7932efc8cc1 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/72071 Tested-by:
core-ci <typo3@b13.com> Tested-by:
Oliver Hader <oliver.hader@typo3.org> Tested-by:
Benni Mack <benni@typo3.org> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Reviewed-by:
Benni Mack <benni@typo3.org>
-
- 12 Oct, 2021 1 commit
-
-
The (ugly) statement strpos($haystack, 'needle') !== false can be safely replaced with str_contains($haystack, 'needle'). This is possible, as a symfony polyfill for php 8.0 functions is in place. Resolves: #95466 Releases: master Change-Id: I313f47832a254c23c6815b6b44557a01019e59e7 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/71429 Tested-by:
core-ci <typo3@b13.com> Tested-by:
Simon Schaufelberger <simonschaufi+typo3@gmail.com> Tested-by:
Benni Mack <benni@typo3.org> Reviewed-by:
Simon Schaufelberger <simonschaufi+typo3@gmail.com> Reviewed-by:
Wouter Wolters <typo3@wouterwolters.nl> Reviewed-by:
Benni Mack <benni@typo3.org>
-
- 19 Dec, 2020 1 commit
-
-
This change removes the &route parameter from all Backend URLs, and changes them to speaking URLs like /typo3/main?token=123123123. For this change, it is necessary to adapt the installations' webserver configuration rewrite rules to enable URL rewriting in TYPO3 Backend. An silent upgrader will automatically update existing webserver configuration files like .htaccess or web.config to adapt to the TYPO3 Backend navigation concepts. Further steps will be using the browsers pushState functionality to update the URL when a module changes, and further deep-linking into TYPO3 Backend. Resolves: #93048 Releases: master Change-Id: Icdccfb4dbba71d2ecd08d619ed17ff49f6225b3e Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/67083 Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
Benni Mack <benni@typo3.org> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Reviewed-by:
Benni Mack <benni@typo3.org>
-
- 01 Dec, 2020 1 commit
-
-
Christian Kuhn authored
Final patch to deprecate TYPO3_MODE and TYPO3_REQUESTTYPE with an excessive changelog file to explain details and migration for extension developers. Resolves: #92947 Related: #92948 Related: #92951 Related: #92949 Related: #92952 Related: #92953 Releases: master Change-Id: Id0570582aa08dd34faea3506d5ef8bc85afdda33 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/66948 Tested-by:
Oliver Bartsch <bo@cedev.de> Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Daniel Goerz <daniel.goerz@posteo.de> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch> Reviewed-by:
Oliver Bartsch <bo@cedev.de> Reviewed-by:
Daniel Goerz <daniel.goerz@posteo.de> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch>
-
- 28 Nov, 2020 1 commit
-
-
Christian Kuhn authored
TYPO3 still has some script files that run in global scope without class or callable encapsulation. Those are especially ext_localconf.php, ext_tables.php and Configuration/TCA/Overrides/* script files. When those files are located within document root, they can be called directly via HTTP and may output something, which can be a security risk. To prevent this, they have a call at the very start: 'defined('TYPO3_MODE') or die();'. Unfortunately, constant 'TYPO3_MODE' is a technical debt, core tries to phase it out in v11. We thus need something equivalent for these calls. Since that test for existance of a constant is so simple and straight forward, the solution is to define a new constant to true, simply named 'TYPO3', to substitute 'TYPO3_MODE'. The call is very similar: 'defined('TYPO3') or die();'. The patch targets core master and v10: Having that constant in v10 simplifies life of extension developers who want to deliver extensions compatible with v10 and v11 in the same version, when 'TYPO3_MODE' constant is deprecated in v11 with upcoming patches. Resolves: #92948 Related: #92947 Releases: master, 10.4 Change-Id: Ib7b438422a41e242cf49cd4f87a6f8c50a9907d3 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/66937 Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Benni Mack <benni@typo3.org> Tested-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch> Reviewed-by:
Benni Mack <benni@typo3.org> Reviewed-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch>
-
- 26 Sep, 2020 1 commit
-
-
This patch fixes incompatible type usage in function arguments and is preparatory work for introducing native type hints and strict mode in all core files. Releases: master, 10.4 Resolves: #92281 Change-Id: I20d4fb256f1a8d8c91ec4a4430303d2462fea967 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/65656 Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Andreas Fernandez <a.fernandez@scripting-base.de> Tested-by:
Oliver Bartsch <bo@cedev.de> Tested-by:
Daniel Goerz <daniel.goerz@posteo.de> Reviewed-by:
Oliver Klee <typo3-coding@oliverklee.de> Reviewed-by:
Markus Klösges <mkloesges@gmx.de> Reviewed-by:
Andreas Fernandez <a.fernandez@scripting-base.de> Reviewed-by:
Oliver Bartsch <bo@cedev.de> Reviewed-by:
Daniel Goerz <daniel.goerz@posteo.de>
-
- 26 May, 2020 1 commit
-
-
Benni Mack authored
This change removes the unneeded public constants - FILE_DENY_PATTERN_DEFAULT - PHP_EXTENSIONS_DEFAULT - TYPO3_copyright_year - TYPO3_URL_DONATE - TYPO3_URL_EXCEPTION - TYPO3_URL_GENERAL - TYPO3_URL_LICENSE - TYPO3_URL_WIKI_OPCODECACHE as well as the runtimeActivatedPackages feature, all of which have been marked as deprecated in TYPO3 v10. Resolves: #91477 Related: #91473 Releases: master Change-Id: I8e98509e2842d7fb116f44c31d4c10957b73a2ca Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/64584 Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Tested-by:
Wouter Wolters <typo3@wouterwolters.nl> Tested-by:
Benni Mack <benni@typo3.org> Reviewed-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Reviewed-by:
Wouter Wolters <typo3@wouterwolters.nl> Reviewed-by:
Benni Mack <benni@typo3.org>
-
- 28 Apr, 2020 1 commit
-
-
The check for the constant TYPO3_PATH_WEB was an experiment, to allow a document root with public assets only, but this never worked out and was never really used. The check can safely be removed, as it won't do anything useful anyway. Also adapt a comment in SystemEnvironmentBuilder which still refers to this variable/constant and its usage in the helhum/typo3-secure-web package. This statement can be removed as helhum/typo3-secure-web is not actually using that constant/envvar. Resolves: #91215 Related: #63025 Releases: master Change-Id: I1b44ba97f4654d1e4e200d7ad1a7c228dba48c25 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/64330 Tested-by:
Benjamin Franzke <bfr@qbus.de> Tested-by:
Josef Glatz <josefglatz@gmail.com> Tested-by:
Benni Mack <benni@typo3.org> Tested-by:
TYPO3com <noreply@typo3.com> Reviewed-by:
Benjamin Franzke <bfr@qbus.de> Reviewed-by:
Benni Mack <benni@typo3.org> Reviewed-by:
Josef Glatz <josefglatz@gmail.com>
-
- 15 Apr, 2020 1 commit
-
-
With this patch, the header comment of php files is automatically added by the php-cs-fixer, which guarantees that its format and place of occurrence remain the same in all files. Files that are copied over from other projects are excluded. Furthermore, files that are kind of inspired by other projects also get the same header comment but may have a second, additional comment explaining its origin. Used command: bin/php-cs-fixer fix --config=Build/php-cs-fixer/header-comment.php Releases: master Resolves: #91024 Change-Id: I5a040517e0fbde6e5a27d589bf2f222078326dc8 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/64159 Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Andreas Fernandez <a.fernandez@scripting-base.de> Tested-by:
Benni Mack <benni@typo3.org> Reviewed-by:
Andreas Fernandez <a.fernandez@scripting-base.de> Reviewed-by:
Benni Mack <benni@typo3.org>
-
- 14 Apr, 2020 1 commit
-
-
This change adds two changes 'blank_line_after_opening_tag' => true, 'single_trait_insert_per_statement' => true, to our PHP-CS Fixer configuration, adopting more rules related to PSR-12. Resolves: #91020 Releases: master Change-Id: I180b2cbceb077911bddeb42d9f131e5b32244ed2 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/64158 Tested-by:
Josef Glatz <josefglatz@gmail.com> Tested-by:
Oliver Bartsch <bo@cedev.de> Tested-by:
Alexander Schnitzler <git@alexanderschnitzler.de> Tested-by:
Andreas Fernandez <a.fernandez@scripting-base.de> Tested-by:
TYPO3com <noreply@typo3.com> Reviewed-by:
Josef Glatz <josefglatz@gmail.com> Reviewed-by:
Oliver Bartsch <bo@cedev.de> Reviewed-by:
Alexander Schnitzler <git@alexanderschnitzler.de> Reviewed-by:
Andreas Fernandez <a.fernandez@scripting-base.de>
-
- 23 Mar, 2020 1 commit
-
-
This change targets a couple of things: - The global constant "FILE_DENY_PATTERN_DEFAULT" is moved to a class constant - The global constant "PHP_EXTENSIONS_DEFAULT" which is not in use anymore, is removed. - The security aspect of checking against the fileDenyPattern is extracted into its own Class where - The fileDenyPattern can never be empty, but only be set via DefaultConfiguration. This makes it easier to test this functionality, a single object is taking over the responsibility, and the logic is now in one place. Also, the non-usage of the global constant makes life easier. Resolves: #90147 Releases: master Change-Id: I9db0d6fc3b10f75a3735017cb9ac0d9bfd4ff02b Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/62843 Tested-by:
Oliver Hader <oliver.hader@typo3.org> Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Georg Ringer <georg.ringer@gmail.com> Reviewed-by:
Oliver Hader <oliver.hader@typo3.org> Reviewed-by:
Georg Ringer <georg.ringer@gmail.com>
-
- 21 Mar, 2020 1 commit
-
-
"GeneralUtility::isRunningOnCgiServerApi()" is now deprecated in favor of "Environment::isRunningOnCgiServer()". Resolves: #90800 Releases: master Change-Id: Ib9e9e38d0e53ca00f3c58eb3255943d57cf7c0e0 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63680 Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Daniel Haupt <mail@danielhaupt.de> Tested-by:
Georg Ringer <georg.ringer@gmail.com> Reviewed-by:
Daniel Haupt <mail@danielhaupt.de> Reviewed-by:
Georg Ringer <georg.ringer@gmail.com>
-
- 15 Mar, 2020 1 commit
-
-
Apache2 suexec support prefixes environment variables with HTTP_ in order to whitelist environment variables - this is what TYPO3 is using for TYPO3_CONTEXT. Resolves: #90145 Releases: master, 9.5 Change-Id: I069949578c2467436fca568504dcda84d16df8fa Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63627 Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Susanne Moog <look@susi.dev> Tested-by:
Daniel Goerz <daniel.goerz@posteo.de> Reviewed-by:
Wouter Wolters <typo3@wouterwolters.nl> Reviewed-by:
Susanne Moog <look@susi.dev> Reviewed-by:
Daniel Goerz <daniel.goerz@posteo.de>
-
- 08 Mar, 2020 1 commit
-
-
Releases: master Resolves: #90668 Change-Id: I92cc4942f9f06d587a7957a94f006d157143e55c Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63569 Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Andreas Fernandez <a.fernandez@scripting-base.de> Tested-by:
Benni Mack <benni@typo3.org> Reviewed-by:
Oliver Klee <typo3-coding@oliverklee.de> Reviewed-by:
Andreas Fernandez <a.fernandez@scripting-base.de> Reviewed-by:
Benni Mack <benni@typo3.org>
-
- 14 Feb, 2020 1 commit
-
-
Benni Mack authored
SystemEnvironmentBuilder calls error_reporting(E_ALL & ~(E_STRICT | E_NOTICE | E_DEPRECATED)); which in turn is called on every test to setup the environment. This basically enforces this exact error reporting and does not allow to configure the error reporting in phpunit.xml AT ALL. Until TYPO3 v9, this was covered in each BaseTestCase in setUpBeforeClass() to re-add E_NOTICE to make all tests run without notice. The functionality in SystemEnvironmentBuilder was added in TYPO3 v6.0 while refactoring TYPO3's Bootstrap to ensure that no notices in ext_localconf.php or ext_tables.php were breaking the output. However, nowadays, TYPO3's error reporting is set up directly after LocalConfiguration.php inclusion, making this logic obsolete. The functionality is therefore moved to the Bootstrap at a later point, which is called for Functional and Acceptance Tests. Resolves: #90125 Releases: master Change-Id: I8d6348ffbf6622c03abecedc1cb0ce286ba1044c Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/62926 Reviewed-by:
Oliver Hader <oliver.hader@typo3.org> Reviewed-by:
Georg Ringer <georg.ringer@gmail.com> Reviewed-by:
Oliver Klee <typo3-coding@oliverklee.de> Reviewed-by:
Benni Mack <benni@typo3.org> Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Georg Ringer <georg.ringer@gmail.com> Tested-by:
Benni Mack <benni@typo3.org>
-
- 10 Jan, 2020 1 commit
-
-
Using Class constants instead of constants that are defined during runtime has the following benefits: - Naming can be made more consistent (and separated) - Speeding up requests where the constants are not needed - Benefit from Opcaching of class loading instead of dynamic runtime definition - Testing framework has less "bootstrap" to do This affects the following constants: - TYPO3_copyright_year - TYPO3_URL_GENERAL - TYPO3_URL_LICENSE - TYPO3_URL_EXCEPTION - TYPO3_URL_DONATE - TYPO3_URL_WIKI_OPCODECACHE The constants are now deprecated. In addition, the "Typo3Copyright" class is now called "TYPO3Information". Resolves: #89866 Releases: master Change-Id: I607c90cb281179bda9875504d258daefd3471868 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/62624 Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Tested-by:
Georg Ringer <georg.ringer@gmail.com> Reviewed-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Reviewed-by:
Georg Ringer <georg.ringer@gmail.com>
-
- 09 Jan, 2020 1 commit
-
-
To optimize TYPO3 for Opcaching and speeding up performance, as well as simplyfing the bootstrap (also for the testing framework) the constants * TYPO3_version * TYPO3_branch are moved to a new PHP class "Typo3Version". This reduces the necessity to define the constants, and since TYPO3 Bootstrap continues to use the class, the constants are defined in the constructor for TYPO3 v10, and will be removed in TYPO3 v11. Resolves: #90007 Releases: master Change-Id: I18942023c0e234a328d45f724a6b3092c801982c Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/62740 Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Georg Ringer <georg.ringer@gmail.com> Tested-by:
Oliver Hader <oliver.hader@typo3.org> Reviewed-by:
Tymoteusz Motylewski <t.motylewski@gmail.com> Reviewed-by:
Georg Ringer <georg.ringer@gmail.com> Reviewed-by:
Oliver Hader <oliver.hader@typo3.org>
-
- 30 Dec, 2019 2 commits
-
-
php bin/rector process A couple of rectors have been disabled due to different reasons: - Rector\Php71\Rector\FuncCall\CountOnNullRector This rector has been disabled as it creates rather long and complex structures to avoid calling count on null. This rector will be enabled as soon as TYPO3 uses at least PHP 7.3 which introduces a "is_countable" method. - Rector\Php71\Rector\Assign\AssignArrayToStringRector This rector has been disabled as it does not work properly. The default types of parameters have been changed although their types could properly be inferred by a doc block or by value assignments. - Rector\Php71\Rector\BinaryOp\BinaryOpBetweenNumberAndStringRector This rector has been disabled as it does not work properly. A bug report is filed and to be found here: https://github.com/rectorphp/rector/issues/2454 - Rector\Php71\Rector\FuncCall\RemoveExtraParametersRector This rector has been disabled as it does not work properly. It removed arguments in tests, especially when using prophecies. Releases: master Resolves: #90002 Change-Id: I6ed14d38cc697a23104286db57535d6a3c0dbf62 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/62751 Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Benni Mack <benni@typo3.org> Tested-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Reviewed-by:
Benni Mack <benni@typo3.org> Reviewed-by:
Anja Leichsenring <aleichsenring@ab-softlab.de>
-
With PHP 8 on the horizon, TYPO3 Core should be prepared to also disallow files with the file extension ".php8" for uploading. Resolves: #90023 Releases: master, 9.5, 8.7 Change-Id: I670755c5ae09ccf6ffd49c4b91b4617956f76ad7 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/62776 Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Georg Ringer <georg.ringer@gmail.com> Tested-by:
Oliver Hader <oliver.hader@typo3.org> Reviewed-by:
Oliver Klee <typo3-coding@oliverklee.de> Reviewed-by:
Björn Jacob <bjoern.jacob@tritum.de> Reviewed-by:
Guido Schmechel <guido.schmechel@brandung.de> Reviewed-by:
Georg Ringer <georg.ringer@gmail.com> Reviewed-by:
Oliver Hader <oliver.hader@typo3.org>
-
- 15 Dec, 2019 1 commit
-
-
This a pre-patch to clean up the functionality of the SystemEnvironmentBuilder, which was originally introduced as part of the Bootstrap logic in 6.0. However, a few cross-concerns can be cut in TYPO3 v10: - Calling the deprecated GeneralUtility::presetApplicationContext() is not needed anymore, as it can be populated on-demand when the deprecated GeneralUtility::getApplicationContext() method is called via Environment API. This way, the ApplicationContext initialization can be put directly in the Environment API initialization call. - The static "isFunctionDisabled" method with a nasty runtime cache is only used in one place in backend, so does not belong to "building system environment", and is therefore removed. - The now unused "exitWithMessage" protected method is removed, removing a dependency to the HttpUtility class. Resolves: #89943 Releases: master Change-Id: I31156b1a1ded306d99bcf2d51de43bc919a0b3e0 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/62628 Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Daniel Goerz <daniel.goerz@posteo.de> Tested-by:
Susanne Moog <look@susi.dev> Reviewed-by:
Daniel Goerz <daniel.goerz@posteo.de> Reviewed-by:
Susanne Moog <look@susi.dev>
-
- 03 Dec, 2019 2 commits
-
-
Benni Mack authored
Change-Id: I0e8abdb62a45326896fc75d9872eead478615dce Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/62525 Tested-by:
Susanne Moog <look@susi.dev> Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Benni Mack <benni@typo3.org> Reviewed-by:
Susanne Moog <look@susi.dev> Reviewed-by:
Benni Mack <benni@typo3.org>
-
Benni Mack authored
Change-Id: I09bb29716abb1a7b1f4c8010c1d98c15ae90d808 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/62523 Tested-by:
Benni Mack <benni@typo3.org> Reviewed-by:
Benni Mack <benni@typo3.org>
-
- 07 Oct, 2019 1 commit
-
-
Make spelling in TYPO3 great again. Resolves: #89290 Releases: master Change-Id: I520840dd0774aa5d658ce6a45811aa6282c9e461 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/61845 Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Jörg Bösche <typo3@joergboesche.de> Tested-by:
Daniel Goerz <daniel.goerz@posteo.de> Reviewed-by:
Jörg Bösche <typo3@joergboesche.de> Reviewed-by:
Daniel Goerz <daniel.goerz@posteo.de>
-
- 01 Oct, 2019 2 commits
-
-
Change-Id: I81e89208e45b689b32f5c8df2392e8c2b24b8392 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/61870 Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Oliver Hader <oliver.hader@typo3.org> Reviewed-by:
Oliver Hader <oliver.hader@typo3.org>
-
Change-Id: I6491f0abe1148a2fbea8b37709dd16b071657b35 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/61869 Tested-by:
Oliver Hader <oliver.hader@typo3.org> Reviewed-by:
Oliver Hader <oliver.hader@typo3.org>
-
- 23 Aug, 2019 1 commit
-
-
This patch replaces all usages of `strstr()` and its friends where the existence of a certain substring is checked, but the result isn't used at all with `strpos()`, which uses less memory. Resolves: #88922 Releases: master Change-Id: Ie45589ac9410e22e1b48e82dd8086eadb6d74107 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/61445 Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Tested-by:
Frank Naegler <frank.naegler@typo3.org> Reviewed-by:
Oliver Klee <typo3-coding@oliverklee.de> Reviewed-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Reviewed-by:
Frank Naegler <frank.naegler@typo3.org>
-
- 23 Jul, 2019 2 commits
-
-
Change-Id: Ic8975554d38eef468af5454152a0200e21eb962d Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/61339 Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Benni Mack <benni@typo3.org> Reviewed-by:
Tymoteusz Motylewski <t.motylewski@gmail.com> Reviewed-by:
Benni Mack <benni@typo3.org>
-
Benni Mack authored
Change-Id: I4b576a1651703f7d404dac7127f9ad373310be58 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/61338 Tested-by:
Benni Mack <benni@typo3.org> Reviewed-by:
Benni Mack <benni@typo3.org>
-
- 11 Jul, 2019 1 commit
-
-
Benni Mack authored
The global state array "T3_VAR" for keeping some legacy functionality has been removed. It is not in used by TYPO3 Core anymore, the last occurrence for "injecting" some data into Indexed Search indexing has been removed, as SingletonInterface, hooks and the possibility to provide ones' own indexer for custom download extensions should be used instead. Resolves: #88660 Releases: master Change-Id: I5a587271983c6bb4ae6709c0140e818c4c1eb572 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/61197 Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Georg Ringer <georg.ringer@gmail.com> Tested-by:
Steffen Frese <steffenf14@gmail.com> Tested-by:
Jörg Bösche <typo3@joergboesche.de> Tested-by:
Benni Mack <benni@typo3.org> Reviewed-by:
Georg Ringer <georg.ringer@gmail.com> Reviewed-by:
Steffen Frese <steffenf14@gmail.com> Reviewed-by:
Jörg Bösche <typo3@joergboesche.de> Reviewed-by:
Benni Mack <benni@typo3.org>
-
- 08 Jun, 2019 1 commit
-
-
This patch removes unused variables: $GLOBALS['TYPO3_MISC']['microtime_BE_USER_start'] $GLOBALS['TYPO3_MISC']['microtime_BE_USER_end'] $GLOBALS['TYPO3_MISC']['microtime_end'] $GLOBALS['TYPO3_MISC']['microtime_start'] are replaced by properly using - TimeTracker->start() - TimeTracker->finish() (new method) to encapsulate the logic into the main method. Resolves: #88498 Releases: master Change-Id: I158e4b3aed002f688f117488cb0300c6523e791f Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/60769 Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Andreas Fernandez <a.fernandez@scripting-base.de> Tested-by:
Georg Ringer <georg.ringer@gmail.com> Reviewed-by:
Andreas Fernandez <a.fernandez@scripting-base.de> Reviewed-by:
Georg Ringer <georg.ringer@gmail.com>
-
- 07 Mar, 2019 1 commit
-
-
Files like "file.pl.txt" cannot be uploaded anymore since ".pl" is considered as executable Perl file. In multilingual scenarios "pl" is used as reference for Polish content. Since required modules mod_perl or mod_cgid are not enabled by default, and limited to be executable only when invoked in location "/cgi-bin/", now only files ending with ".pl" (e.g. "file.pl") are denied. Resolves: #87733 Releases: master, 9.5, 8.7 Change-Id: Ib9a69fd3ec04f51653857d2f7309e30b78932653 Reviewed-on: https://review.typo3.org/c/59886 Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Tested-by:
Susanne Moog <susanne.moog@typo3.org> Tested-by:
Markus Klein <markus.klein@typo3.org> Reviewed-by:
Wolfgang Klinger <wolfgang@wazum.com> Reviewed-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Reviewed-by:
Susanne Moog <susanne.moog@typo3.org> Reviewed-by:
Markus Klein <markus.klein@typo3.org>
-
- 01 Feb, 2019 1 commit
-
-
Reduce information disclosure of the used TYPO3 version by adding a dynamic 4-digit year in the TYPO3_copyright_year constant. That makes it more difficult to find out the used TYPO3 version just by looking at the frontend source code of a website. Releases: master, 9.5 Resolves: #87543 Change-Id: Ic169548c7111715eecedfce4ced5c8a3564d102a Reviewed-on: https://review.typo3.org/59565 Tested-by:
TYPO3com <noreply@typo3.com> Reviewed-by:
Georg Ringer <georg.ringer@gmail.com> Tested-by:
Georg Ringer <georg.ringer@gmail.com> Reviewed-by:
Mathias Brodala <mbrodala@pagemachine.de> Reviewed-by:
Richard Haeser <richard@maxserv.com> Tested-by:
Richard Haeser <richard@maxserv.com> Reviewed-by:
Jigal van Hemert <jigal.van.hemert@typo3.org> Tested-by:
Jigal van Hemert <jigal.van.hemert@typo3.org> Reviewed-by:
Oliver Klee <typo3-coding@oliverklee.de> Reviewed-by:
Stephan Großberndt <stephan.grossberndt@typo3.org> Reviewed-by:
Fabien Udriot <fabien.udriot@ecodev.ch> Tested-by:
Fabien Udriot <fabien.udriot@ecodev.ch> Reviewed-by:
Mona Muzaffar <mona.muzaffar@gmx.de> Tested-by:
Mona Muzaffar <mona.muzaffar@gmx.de> Reviewed-by:
André Schließer <andy.schliesser@gmail.com> Tested-by:
André Schließer <andy.schliesser@gmail.com> Reviewed-by:
Andreas Wolf <andreas.wolf@typo3.org> Tested-by:
Andreas Wolf <andreas.wolf@typo3.org>
-
- 22 Jan, 2019 1 commit
-
-
In order to enhance protection against (possible) executable file extensions phar, shtml, cgi, pl have been added to the according file deny pattern. Releases: master, 9.5, 8.7 Resolves: #87368 Security-Commit: c9f0d00b89768b63df9c77884cf9d19d658fc0fc Security-Bulletin: TYPO3-CORE-SA-2019-008 Change-Id: I92998a2046b6efb7f31961c20f24c81d00957879 Reviewed-on: https://review.typo3.org/59540 Reviewed-by:
Oliver Hader <oliver.hader@typo3.org> Tested-by:
Oliver Hader <oliver.hader@typo3.org>
-
- 11 Jan, 2019 2 commits
-
-
Finally drops the last path related constant from SystemEnvironmentBuilder. typo3/testing-framework again needed some adaptions, so this is raised with the patch as well. composer require --dev typo3/testing-framework ~5.0.3 Change-Id: Ie8fc311ae8e5180885bc92e007a09f828f26b1e9 Resolves: #87405 Releases: master Reviewed-on: https://review.typo3.org/59406 Tested-by:
TYPO3com <noreply@typo3.com> Reviewed-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Tested-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Reviewed-by:
Benni Mack <benni@typo3.org> Tested-by:
Benni Mack <benni@typo3.org>
-
The patch removes the definition of constant PATH_thisScript. * The main change in SystemEnvironmentBuilder splits method definePaths() into two parts calculateScriptPath() and calculateRootPath() since definePaths() formerly communicated the script path using the PATH_thisScript constant to method initializeEnvironment(), which has to fall now. Note initializeEnvironment() is now protected, which is ok since that usage was only internally for the testing framework which is resolved now, too. * A raise of the testing framework from 5.0.1 to 5.0.2 is needed. It also defined that constant and triggered some different code paths with this in SystemEnvironmentBuilder. composer require --dev typo3/testing-framework ~5.0.2 * With the changes in SystemEnvironmentBuilder, Environment::getCurrentScript() now returns '.../bin/phpunit' and not '.../typo3/index.php' in unit tests, which is more correct. This however has the side effect that various path related unit tests need an adaption to properly set up the environment as needed. Change-Id: I7d16c488a3039b3de689bb8b1b903d989d943c8d Resolves: #87391 Releases: master Reviewed-on: https://review.typo3.org/59392 Reviewed-by:
Andreas Fernandez <a.fernandez@scripting-base.de> Tested-by:
Andreas Fernandez <a.fernandez@scripting-base.de> Tested-by:
TYPO3com <noreply@typo3.com> Reviewed-by:
Georg Ringer <georg.ringer@gmail.com> Tested-by:
Georg Ringer <georg.ringer@gmail.com> Reviewed-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Tested-by:
Anja Leichsenring <aleichsenring@ab-softlab.de>
-
- 09 Jan, 2019 2 commits
-
-
Includes year change in Settings.cfg, Index.rst files and also README.md, INSTALL.md and SystemEnvironmentBuilder.php Resolves: #87313 Releases: master, 9.5, 8.7 Change-Id: Ie056e9b7804af4003c2b67ee5e6d87ffd4eb96ba Reviewed-on: https://review.typo3.org/59381 Reviewed-by:
Wouter Wolters <typo3@wouterwolters.nl> Tested-by:
Wouter Wolters <typo3@wouterwolters.nl> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
TYPO3com <noreply@typo3.com> Reviewed-by:
Andreas Fernandez <a.fernandez@scripting-base.de> Tested-by:
Andreas Fernandez <a.fernandez@scripting-base.de> Reviewed-by:
Georg Ringer <georg.ringer@gmail.com> Tested-by:
Georg Ringer <georg.ringer@gmail.com>
-
As a preparation to further path related clean ups, the file existance check of the determined scriptPath must only be checked if PATH_thisScript is not defined. This is an edge case that was triggered with my patch for issue #87247 and fixes unit tests for extensions with current testing-framework. Note this is not the final state and more patches to handle the path mess will follow later. Resolves: #87378 Related: #87247 Releases: master Change-Id: I8e3d8524a5d40fe66bdfdbda92a2f18540d9a0d8 Reviewed-on: https://review.typo3.org/59386 Reviewed-by:
Benni Mack <benni@typo3.org> Tested-by:
Benni Mack <benni@typo3.org> Tested-by:
TYPO3com <noreply@typo3.com> Reviewed-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Tested-by:
Anja Leichsenring <aleichsenring@ab-softlab.de>
-
- 20 Dec, 2018 1 commit
-
-
Drops most global constants marked for removal, only PATH_site and PATH_thisScript are left, those need special care. Resolves: #87247 Releases: master Change-Id: Id93f31df8abb44d9f4f1df836b49ff225741fb83 Reviewed-on: https://review.typo3.org/59244 Tested-by:
TYPO3com <no-reply@typo3.com> Reviewed-by:
Wouter Wolters <typo3@wouterwolters.nl> Tested-by:
Wouter Wolters <typo3@wouterwolters.nl> Reviewed-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Tested-by:
Anja Leichsenring <aleichsenring@ab-softlab.de>
-
- 19 Dec, 2018 1 commit
-
-
These constant redefintion guards were forgotten to be updated when Bootstrap::getInstance() and the call to SystemEnvironmentBuilder::run() in Bootstrap::baseSetup() were removed. These guards are no longer necessary for regular execution as baseSetup() does no longer (conditionally) invoke SystemEnvironmentBuilder::run() (which was provided for deprecated and now removed bootstrapping code). We do still leave the guards in, as they are needed in unit tests, but update the comments. Releases: master Resolves: #87216 Related: #87202 Change-Id: I3b1c60ea32163d68b7f314b6539c54d8c048c323 Reviewed-on: https://review.typo3.org/59214 Tested-by:
TYPO3com <no-reply@typo3.com> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch> Reviewed-by:
Anja Leichsenring <aleichsenring@ab-softlab.de> Tested-by:
Anja Leichsenring <aleichsenring@ab-softlab.de>
-