Andy Miller
b0dd2358f4
Updated packages (including dom-sanitizer 1.0.7)
2023-11-06 16:50:15 +00:00
Djamil Legato
0c9333e60d
Revert "fix whitespace encoding in urls" ( #3764 )
...
* Revert "fix whitespace encoding in urls (#3719 )"
This reverts commit 6a9b1f2214
2023-10-27 23:58:08 -07:00
Andy Miller
0b53609fa0
updated changelog
2023-10-25 14:49:52 +01:00
Andy Miller
cfa510e7f7
Merge branch 'master' into develop
2023-10-25 12:38:41 +01:00
Andy Miller
6d5f0ff9ba
validaiton math rounding - fixes #3761
2023-10-25 12:38:12 +01:00
Angela Ugrinovska
71939e18be
Fixed too few arguments exception thrown in the admin with using flex objects ( #3658 )
...
Going through older PRs, thanks for this.
2023-10-24 10:33:58 +01:00
Junky Junkerson
45f8fe4d0b
Correcting comment in about custom site.yaml value ( #3659 )
...
Corrected blog: route: '/blog' comment from system.blog.route to site.blog.route
2023-10-24 10:32:49 +01:00
Vital
2179ef33a7
Fixed exception: "Property 'jsmodule_pipeline_include_externals' does not exist in the object!" ( #3661 )
...
Co-authored-by: Artemkin_V <avr@vital-web.ru >
2023-10-24 10:32:19 +01:00
Rotzbua
d0ae677e61
Update jquery-3.x.min.js to v3.6.4 ( #3713 )
...
Source: https://code.jquery.com/jquery-3.6.4.min.js
2023-10-24 10:30:19 +01:00
dirkjf
6a9b1f2214
fix whitespace encoding in urls ( #3719 )
...
* fix broken src url encoding
* remove redundant code
* Revert "remove redundant code"
This reverts commit 4e0020114e3e8259da3a
2023-10-24 10:30:00 +01:00
yiwu
b1117e45c9
Update system.yaml ( #3721 )
...
add ISO 8601 dateformat
2023-10-24 10:28:44 +01:00
Ricardo Verdugo
382a836d80
Fix invalid input to foreach ( #3724 )
...
* Fix invalid input to foreach
This happens with discord oauth, possibly others
* Update UserGroupObject.php
---------
Co-authored-by: Andy Miller <1084697+rhukster@users.noreply.github.com >
2023-10-24 10:28:23 +01:00
Raffael Herrmann
db3e39f0cb
Added detection of external triggers of the scheduler ( #3726 )
...
Added extension to the isCrontabSetup method to detect external triggers of the scheduler, so that in the admin interface the error message is hidden when the scheduler is called by an external trigger.
2023-10-24 10:25:44 +01:00
Jeremy Angele
80ce87e4a9
Update dangerous extensions ( #3756 )
...
Thanks for this!
2023-10-24 10:20:22 +01:00
Jeff
f0f29891d6
Update Inflector::ordinalize() ( #3759 )
...
put the init() call before the $ordinals test
2023-10-24 10:19:24 +01:00
Andy Miller
c66da5bedb
Merge tag '1.7.43' into develop
...
Release 1.7.43
2023-10-02 10:41:37 -06:00
Andy Miller
1f21d259ea
Merge branch 'release/1.7.43'
2023-10-02 10:41:36 -06:00
Andy Miller
21b218e464
prepare for release
2023-10-02 10:41:26 -06:00
Andy Miller
3b2fb023b8
change version number
2023-10-02 10:36:33 -06:00
Andy Miller
92babda742
updated changelog
2023-10-02 10:30:31 -06:00
pamtbaau
3cdbc5890a
Fix url of @import not being rewritten ( #3750 )
...
Looks good. thanks.
2023-10-02 10:04:29 -06:00
Andy Miller
a8042a666c
updated composer - fixes #3748
2023-10-02 09:52:50 -06:00
Andy Miller
79f9640b12
move language debug to debugger - fixes #3752
2023-10-02 09:51:22 -06:00
Andy Miller
65aeb82e21
add ability to override modified date via frontmatter
2023-10-02 09:36:22 -06:00
Andy Miller
e3b0aa0c50
inlcude phar in dangerous extensions
2023-08-22 11:57:13 +01:00
Andy Miller
7e617a632e
updated security.md
2023-08-22 09:24:41 +01:00
Andy Miller
fb5dd14875
Merge branch 'release/1.7.42.3'
2023-07-18 12:41:08 -06:00
Andy Miller
490bdd6ce7
Merge tag '1.7.42.3' into develop
...
Release v1.7.42.3
2023-07-18 12:41:08 -06:00
Andy Miller
893b1dd1db
prepare for release
2023-07-18 12:40:57 -06:00
Andy Miller
1146959806
fixed a typo
2023-07-18 12:40:27 -06:00
Andy Miller
45103f81b4
Merge branch 'release/1.7.42.2'
2023-07-18 10:50:51 -06:00
Andy Miller
c426f4a9cc
Merge tag '1.7.42.2' into develop
...
Release v1.7.42.2
2023-07-18 10:50:51 -06:00
Andy Miller
0d27f2d77e
prepare for release
2023-07-18 10:50:36 -06:00
Andy Miller
b4c62101a4
SSTI attack mitigation - GHSA-9436-3gmp-4f53
2023-07-18 10:49:47 -06:00
Andy Miller
950cd0854f
updated vendor libs
2023-06-15 15:32:06 -06:00
Andy Miller
4cd137830b
Merge branch 'release/1.7.42.1'
2023-06-15 12:57:56 -06:00
Andy Miller
aa19bcdcbe
Merge tag '1.7.42.1' into develop
...
Release v1.7.42.1
2023-06-15 12:57:56 -06:00
Andy Miller
cf6bf7d1ec
prepare for release
2023-06-15 12:57:46 -06:00
Andy Miller
47665dbddb
Fixes #3727 - filter field being a closure
2023-06-15 09:03:12 -06:00
Andy Miller
dc209453d0
Merge branch 'release/1.7.42'
2023-06-14 14:19:10 -06:00
Andy Miller
5b89091f13
Merge tag '1.7.42' into develop
...
Release 1.7.42
2023-06-14 14:19:10 -06:00
Andy Miller
50ee844759
prepare for release
2023-06-14 14:19:00 -06:00
Andy Miller
244758d438
also handle SSTI in reduce twig filter + function
2023-06-14 11:08:17 -06:00
Andy Miller
71bbed12f9
more SSTI fixes in Utils::isDangerousFunction()
2023-06-13 17:57:11 -06:00
Andy Miller
8c2c1cb726
better SSTI in |map and |filter
2023-06-13 17:45:40 -06:00
Andy Miller
9d01140a63
Fix for dangerous tags in |map filter
2023-06-13 17:07:39 -06:00
Andy Miller
259e775db8
Added languages debug option
2023-06-08 14:50:52 -06:00
Andy Miller
d4c617ff19
Merge branch 'release/1.7.41.2'
2023-06-01 15:19:12 -06:00
Andy Miller
c7680bb50a
Merge tag '1.7.41.2' into develop
...
Release v1.7.41.2
2023-06-01 15:19:12 -06:00
Andy Miller
722ce55ccb
prepare for release
2023-06-01 15:18:53 -06:00
