Update to current version.
Github-version contains several small
fixes / cleanups, so a current
checkout was used here.

Change-Id: I7ca66e6deb191c14ead7925769bd3a694b19bf10
Resolves: #42236
Releases: 4.6
Reviewed-on: http://review.typo3.org/16040
Reviewed-by: Dmitry Dulepov
Tested-by: Dmitry Dulepov

If HTML element is used and t3editor is not
installed, an error is thrown.

Solution is to move the wizard code to t3editor
itself.

Change-Id: I7260f9b4347ca49424f9867ade4b9b145bbfeebf
Fixes: #33813
Releases: 4.7, 4.6, 4.5
Reviewed-on: http://review.typo3.org/13920
Reviewed-by: Steffen Ritter
Tested-by: Steffen Ritter
Reviewed-by: Wouter Wolters
Tested-by: Wouter Wolters
Reviewed-by: Mattias Nilsson
Tested-by: Mattias Nilsson
Reviewed-by: Jigal van Hemert
Tested-by: Jigal van Hemert

When focussing the livesearch in the backend, other menus
should be closed.

Change-Id: Ic1c9e8ec84748476185d2357c094858f76d11dd8
Fixes: #32890
Release: 4.7, 4.6
Reviewed-on: http://review.typo3.org/13913
Reviewed-by: Wouter Wolters
Tested-by: Wouter Wolters
Reviewed-by: Felix Kopp
Tested-by: Felix Kopp
Reviewed-by: Jigal van Hemert
Tested-by: Jigal van Hemert

All versioning information and actions should be
hidden if workspaces are used.

One remaining selector is in the page module when
a page has been versioned in a workspace.

Hide this selector when workspaces extension is installed.

Fixes: #43264
Related: #27969, #25962
Releases: 4.5, 4.6, 4.7, 6.0

Change-Id: If96f1fe99f2a7a5b5b48f1f8a1aca8f053a6622a
Reviewed-on: http://review.typo3.org/16708
Reviewed-by: Jigal van Hemert
Tested-by: Jigal van Hemert

Allow setting the subject of an Email
by adding a 3rd input field to the
post processor section of the form tab.

Change-Id: I8512f751d7b99258fcd9d2ebfbff4c1e0fcc9bd4
Releases: 6.0, 4.7, 4.6, 4.5
Resolves: #35787
Reviewed-on: http://review.typo3.org/14334
Reviewed-by: Stefan Neufeind
Reviewed-by: Florian Scholz
Tested-by: Florian Scholz
Reviewed-by: Steffen Ritter
Tested-by: Steffen Ritter

Change-Id: I81ae9b9d3a052b8c96c7592e26d325c6fc9f068c
Reviewed-on: http://review.typo3.org/16645
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team

In fact current implementation does not replace the LIKE
operator with an SQL equal statement for numeric fields
but whenever a query that can be interpreted as integer
is encountered, regardless of the underlying column type.

Example: If you have pages "102 W", "102 E", you used
to be able to search for "102" and get them, but now
the query is casted to an integer and the page title
is search for an equality on "102" resulting in
an empty result list.

The underlying column type should be used
instead (code to cache this information is already
available within DBAL and Helmut started months
ago to backport it to Core itself: #28654).

Thanks to Clio Online for sponsoring this fix!

Change-Id: Iadc7e3e454d14b2b5012fd02324089600200d8f4
Resolves: #33700
Releases: 6.0, 4.7, 4.6
Reviewed-on: http://review.typo3.org/16479
Reviewed-by: Marco Bresch
Tested-by: Marco Bresch
Reviewed-by: Soren Malling
Tested-by: Soren Malling
Reviewed-by: Dmitry Dulepov
Tested-by: Dmitry Dulepov

Change-Id: I0ff0a5e65b7c7ec5c5c2e6537c68fed6d0f856f9
Reviewed-on: http://review.typo3.org/16433
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team

Change-Id: I5770c742c148020d910d4e9121a4390a472f31e2
Reviewed-on: http://review.typo3.org/16432
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team

Change-Id: I648ce4a04832faba5806eb2cf75415f9a7b527a0
Reviewed-on: http://review.typo3.org/16427
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team

Change-Id: I600c93d9e5f5bb0dccd18caab40a5bf03df6c726
Reviewed-on: http://review.typo3.org/16422
Reviewed-by: Steffen Ritter
Tested-by: Steffen Ritter

The logos have been changed to match the new CI,
but were cut out sloppily.

Exchange the most prominent logos with proper ones.

Fixes: #42850
Releases: 6.0, 4.7, 4.6, 4.5

Change-Id: Id5ac815b8c2b381bef89f9e152345fd29a822bf6
Reviewed-on: http://review.typo3.org/16396
Reviewed-by: Steffen Ritter
Tested-by: Steffen Ritter

The security fix preventing XSS included a regression
since the quoting has been backported wrong.

This results in an JS error which prevens all jumpURL
calls in the backend from working.

Change-Id: I80210a30ad9e7bb1d7b9da3b9d09490c428a24ff
Releases: 4.5, 4.6, 4.7
Resolves: #42812
Reviewed-on: http://review.typo3.org/16376
Reviewed-by: Steffen Ritter
Tested-by: Steffen Ritter

Change-Id: I027f9930e59f872e888abe9bcd26d251fe4bc174
Reviewed-on: http://review.typo3.org/16311
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team

Change-Id: I3a359e98c9ef77e0660df702d454858c7454aaf7
Reviewed-on: http://review.typo3.org/16310
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team

Oliver Hader authored Nov 08, 2012 and Oliver Hader committed Nov 08, 2012

This patch fixes the SQL injection possibilities in the record
history view as well as fixing XSS possibilities. The submitted
GET/POST data gets sanitized now besides that.

Change-Id: Ia595a7f0847352afe6a6de1ed1e5173b8fa0d099
Fixes: #42696
Releases: 6.0, 4.7, 4.6, 4.5
Security-Commit: 1583a40f946dccb606c466656292cbfb6d5d5fc9
Security-Bulletin: TYPO3-CORE-SA-2012-005
Reviewed-on: http://review.typo3.org/16301
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader

Oliver Hader authored Nov 08, 2012 and Oliver Hader committed Nov 08, 2012

Properly html encode the label of tree nodes.

Fixes: #42774
Releases: 6.0, 4.7, 4.6, 4.5

Change-Id: I59773eb475d0736933a17b3151c998a7e3c528b7
Security-Commit: 04a1bd7b4f131c9e31c39ee63e6ccaf4932dbd8f
Security-Bulletin: TYPO3-CORE-SA-2012-005
Reviewed-on: http://review.typo3.org/16300
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader

Helmut Hummel authored Nov 08, 2012 and Oliver Hader committed Nov 08, 2012

The method getFuncCheck creates an URL from input variables and puts
it in JavaScript context without properly encoding them.

This might lead to XSS if the input variables come from untrusted source.

Fixes: #42776
Releases: 6.0, 4.7, 4.6, 4.5

Change-Id: Ie9ac07acdfaa322b50366dc62da599055ff00248
Security-Commit: 6fb472ca36fbeb32ddcfd18ac68a90f2f0933af1
Security-Bulletin: TYPO3-CORE-SA-2012-005
Reviewed-on: http://review.typo3.org/16299
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader

Change-Id: Ia83d1ee864677a0f4aa21365447c0796935933b7
Reviewed-on: http://review.typo3.org/16288
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team

If you enable "Sort alphabetically" the correct value (1) is submitted to
extension settings. But when you use any other functionality of the page
(e.g. setting some conditions or use search filter) the value is set to
"on" which disables the sorting.

Change-Id: I88233f94edba032c9b23072fb5e9132b276c8f1e
Fixes: #39677
Releases: 6.0, 4.7, 4.6, 4.5
Reviewed-on: http://review.typo3.org/16149
Reviewed-by: Christian Kuhn
Tested-by: Christian Kuhn
Reviewed-by: Wouter Wolters
Tested-by: Wouter Wolters
Reviewed-by: Nicole Cordes
Tested-by: Nicole Cordes
Reviewed-by: Jigal van Hemert
Tested-by: Jigal van Hemert

Oliver Hader authored Nov 02, 2012 and Oliver Hader committed Nov 02, 2012

Translation of pages are stored in pages_language_overlay and
can be managed in workspaces as well. If a new translation is
created in the workspace only, the page module is broken in
the live workspace.

The reason for that is, that workspaces placeholders need to
be ignored if not working on a real workspace.

Change-Id: Ied52a985c3cb1c0796f616679414799d956024d8
Releases: 6.0, 4.7, 4.6, 4.5
Fixes: #42281
Reviewed-on: http://review.typo3.org/16136
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader

Wouter Wolters authored Oct 28, 2012 and Christian Kuhn committed Nov 02, 2012

Change-Id: I8be45d59b780595e25d6d7f5371300b6506baa2f
Fixes: #38024
Releases: 6.0, 4.7, 4.6, 4.5
Reviewed-on: http://review.typo3.org/16132
Reviewed-by: Christian Kuhn
Tested-by: Christian Kuhn

PHP 5.4 raises warnings of type "Illegal string offset" if you access
$foo['bar'] and $foo is no array. This is the case in hook
SwitchBackUser, if in cli context.

Change-Id: I5ed32e054b156c9fbc64e99ff33ba5c4637ce266
Fixes: #37578
Releases: 6.0, 4.7, 4.6, 4.5
Reviewed-on: http://review.typo3.org/16111
Reviewed-by: Christian Kuhn
Tested-by: Christian Kuhn

Robert Heel authored Feb 06, 2012 and Christian Kuhn committed Oct 29, 2012

Reworked substUrlsInPlainText by using regex.
Adding unittest.

Change-Id: Ib9b7d7990ac695cbb6fedac6bb346304a048ab10
Resolves: #28248
Releases: 4.5, 4.6, 4.7, 6.0
Reviewed-on: http://review.typo3.org/10538
Reviewed-by: Christian Kuhn
Tested-by: Christian Kuhn

Steffen Ritter authored Oct 12, 2012 and Christian Kuhn committed Oct 29, 2012

The FrontendEditingController calls TSFE->includeTCA right
before the index_ts.php calls TSFE->getCompressedTCA().

Because of the missing parameter within the
FrontendEditingController, getCompressedTCA wil not be
executed anymore. As an result the TSFE->TCAcachedExtras
are not available when FE-editing is active.

This prevents the a working language overlay, which only
looks to that array, which fields are configured to be
overlayed.

Change-Id: Ib130b11dd76c0b533b9a699a113f03e750ba2516
Fixes: #40733
Releases: 6.0, 4.7, 4.6, 4.5
Reviewed-on: http://review.typo3.org/15539
Reviewed-by: Wouter Wolters
Reviewed-by: Stefan Neufeind
Reviewed-by: Christian Kuhn
Tested-by: Christian Kuhn

Xavier Perseguers authored Oct 16, 2012 and Christian Kuhn committed Oct 29, 2012

Change-Id: Iae39a4d5c58a1e509eed55ab089caf1b2c140078
Fixes: #42054
Relates: #35212
Releases: 4.6, 4.7, 6.0
Reviewed-on: http://review.typo3.org/15956
Reviewed-by: Christian Kuhn
Tested-by: Christian Kuhn

Wouter Wolters authored Oct 27, 2012 and Georg Ringer committed Oct 27, 2012

Fix generation of ext_emconf.php so that it will return valid
commented code. This is already done for 6.0

Change-Id: I11b708c411d6368839571a0d21fdd751308daad7
Resolves: #42444
Releases: 4.5, 4.6, 4.7
Reviewed-on: http://review.typo3.org/15981
Reviewed-by: Georg Ringer
Tested-by: Georg Ringer

Stanislas Rolland authored Jul 11, 2012 and Christian Kuhn committed Oct 22, 2012

Problem: The filename created by t3lib_div::tempnam may contain
backslashes.

Solution: Process the file name through t3lib_div::fixWindowsFilePath

Change-Id: Ie8a23ce82801f6618a8d0ed012121056aa7be0e3
Releases: 4.5, 4.6, 4.7, 6.0
Resolves: #38699
Reviewed-on: http://review.typo3.org/15889
Reviewed-by: Christian Kuhn
Tested-by: Christian Kuhn

Sebastian Schawohl authored Jan 31, 2012 and Christian Kuhn committed Oct 22, 2012

Internet Explorer 8 raises an error on JavaScript objects with reserved
words as property names. In the new form wizard an object was created
with class as property name which is a reserved word. Surrounding with
quotes fixes the bug.

Change-Id: Id9ceef79e8503886cdaebbf14ddb4e92c4b7dcea
Fixes: #33504
Releases: 6.0, 4.7, 4.6
Reviewed-on: http://review.typo3.org/15883
Reviewed-by: Christian Kuhn
Tested-by: Christian Kuhn

Xavier Perseguers authored Oct 19, 2012 and Christian Kuhn committed Oct 19, 2012

Change-Id: I7f6f41e1fb39d4e984883544befbd04610188702
Relates: #41828
Reviewed-on: http://review.typo3.org/15820
Reviewed-by: Christian Kuhn
Tested-by: Christian Kuhn

Change-Id: I858fdf23a71e739c68b757bf486038b6c57d2675
Relates: #41828
Releases: 4.5, 4.6, 4.7
Reviewed-on: http://review.typo3.org/15717
Reviewed-by: Oliver Klee
Reviewed-by: Xavier Perseguers
Tested-by: Xavier Perseguers

Problem: When linking from a piece of content in the RTE to a disabled
page in the tree, the link isn't shown in the final frontend rendering.
However, the small arrow icon that you can have in front of the link to
denote its type, does get shown.
Solution: Remove the icon if no link is generated

Change-Id: I0d119cc40f1e2e04bddfbf2b3d4073405152bb2a
Resolves: #36087
Releases: 4.5, 4.6, 4.7, 6.0
Reviewed-on: http://review.typo3.org/15796
Reviewed-by: Stanislas Rolland
Tested-by: Stanislas Rolland

Problem: The spell checker must analyze the dictionary file and may
have to update the charset of the personal dictionary. In doing so,
it is looking for the wrong file when the dictionary in use is a
regional/variety dictionary.

Change-Id: Ibb6214be3b8cb4aeb2eb179e4a221b62c1e6f50e
Resolves: #29685
Releases: 4.5, 4.6, 4.7, 6.0
Reviewed-on: http://review.typo3.org/15784
Reviewed-by: Stanislas Rolland
Tested-by: Stanislas Rolland

Ernesto Baschny authored Jul 18, 2012 and Xavier Perseguers committed Oct 17, 2012

Change-Id: I496e3729b3c98c85a07e75539de9464f272837e6
Fixes: #38406
Releases: 6.0, 4.7, 4.6, 4.5
Reviewed-on: http://review.typo3.org/15775
Reviewed-by: Xavier Perseguers
Tested-by: Xavier Perseguers

Philipp Kitzberger authored Mar 19, 2012 and Xavier Perseguers committed Oct 17, 2012

When creating a new page node via drag'n'drop shortcuts in pagetree,
the TCAdefaults.pages array from page TsConfig is now being respected.
This allows to preset certain field values for new pages.

Change-Id: I21c2f84951699469b00a745b62d2a95fb114809e
Fixes: #25021
Releases: 6.0, 4.7, 4.6, 4.5
Reviewed-on: http://review.typo3.org/9888
Reviewed-by: Xavier Perseguers
Tested-by: Xavier Perseguers

Change-Id: Ib23a244f05f394227d526f5f127aa7762ed65dc7
Reviewed-on: http://review.typo3.org/15733
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team

Change-Id: I211c7fd92d45298c8c67cd8ca4a8cfb5852847ea
Reviewed-on: http://review.typo3.org/15732
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team

Change-Id: I9ced13664b2699f4ff6d7b1eb149a6b525f0ff27
Reviewed-on: http://review.typo3.org/15727
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team

Steffen Ritter authored Oct 16, 2012 and Xavier Perseguers committed Oct 16, 2012

Change-Id: Id4bfa9fd549959dc90469a67d05e00302d554e2a
Reviewed-on: http://review.typo3.org/15715
Reviewed-by: Xavier Perseguers
Tested-by: Xavier Perseguers

Steffen Ritter authored Oct 16, 2012 and Xavier Perseguers committed Oct 16, 2012

Change-Id: Id4124e96a392f05c37e22d1dc3ce39e0daf08df0
Reviewed-on: http://review.typo3.org/15716
Reviewed-by: Xavier Perseguers
Tested-by: Xavier Perseguers