Skip to content
Switch branches/tags
Go to file
Cannot retrieve contributors at this time

Change log

4.6.14 (2019-01-24)

  • Correctly cancel the 2FA process (see #292).
  • Check the database configuration the install tool (see #285).
  • Validate the primary key when registering or saving a model (see #230).
  • Exempt the "page" insert tag from caching (see #284).
  • Correctly sort the tree view records if there is an active filter (see #269).
  • Fix two routing issues (see #263, #264).

4.6.13 (2019-01-16)

  • Support comma separated values in Model::getRelated() (see #257).
  • Do not check the user's file permissions in the template editor (see #224).
  • Do not show pretty errors if "text/html" is not accepted (see #249).
  • Return null in Model::findMultipleByIds() if there are no models (see #266).
  • Restore compatibility with Doctrine DBAL 2.9 (see #256).

4.6.12 (2018-12-19)

  • Fix another compatibility issue with Doctrine DBAL 2.9 (see #238).
  • Correctly check the permission to move child records as non-admin user (see #247).
  • Do not parse form templates twice (see #214).

4.6.11 (2018-12-13)

  • Prevent information disclosure through incorrect access control in the back end (see CVE-2018-20028).

4.6.10 (2018-12-04)

  • Do not add a favicon.ico file by default (see #181).
  • Fix a compatibility issue with Doctrine DBAL 2.9 (see #212).

4.6.9 (2018-11-22)

  • Fix a BC break in the FileUpload class (see #188).
  • Do not convert line breaks in table cells if there are HTML block elements (see #159).
  • Automatically enable image sizes created by regular users (see contao/core#8836).
  • Handle unknown languages in the meta editor (see #127).

4.6.8 (2018-11-12)

  • Correctly redirect in the "close account" module (see #93).
  • Correctly rebuild the symlinks in the maintenance module (see #150).

4.6.7 (2018-10-31)

  • Correctly rebuild the symlinks in the maintenance module (see #150).
  • Hide members without login in the "rebuild search index" drop-down (see #91).
  • Check the member status when sending newsletters (see contao/core#8812).
  • Fix the markup of the breadcrumb menu (see contao/core-bundle#1561).
  • Allow to set the target directory when installing the web directory (see #142).
  • Correctly render the back end forms in Firefox (see #79).
  • Show the info messages in the DropZone uploader (see #83).

4.6.6 (2018-10-01)

  • Drop indexes when changing engine or collation (see #106).
  • Also check innodb_file_per_table in the DCA schema provider (see #103).

4.6.5 (2018-09-20)

  • Fix an error when creating new pages (see #63).

4.6.4 (2018-09-18)

  • Check wether the database supports dynamic rows in the install tool (see #59).
  • Correctly detect Chrome on iOS in the environment class (see #61).
  • Optimize generating sitemaps (see contao/core#6830).
  • Use min-height for .w50 widgets in the back end (see contao/core#8864).
  • Prevent arbitrary code execution through .phar files (see CVE-2018-17057).

4.6.3 (2018-09-05)

  • Make the contao.controller.backend_csv_import controller public (see #49).
  • Re-add the installation bundle commands (see #45).
  • Also check the row format when updating an InnoDB table.
  • Allow SwiftMailer 5 and 6 (see contao/core-bundle#1613).
  • Also add the youtubeStart and youtubeStop fields in the version 4.5 update (see #28).
  • Ignore the uncached and refresh insert tag flags in the unknown insert tags (see #48).
  • Make the ID of the subscription modules unique (see #40).
  • Use the correct table when handling root nodes in the picker (see #44).

4.6.2 (2018-08-28)

  • Replace the Set-Cookie header when merging HTTP headers (see #35).

4.6.1 (2018-08-28)

  • Restore compatibility with symfony/http-kernel in version 3.4 (see #34).
  • Do not merge the session cookie header (see #11, #29).
  • Update the list of countries (see #12).
  • Add the tl_content.youtubeOptions field in the version 4.5 update (see #28).

4.6.0-RC1 (2018-07-16)

  • Add two factor authentication for the back end login (see contao/core-bundle#1545).
  • Add the "markAsCopy" config option to the DCA (see contao/core-bundle#586).
  • Sort the custom layout sections by their position (see contao/core-bundle#1529).
  • Make the DropZone error messages translatable (see contao/core-bundle#1320).
  • Do not stack the buttons if the screen is wide enough (see contao/core#8816).
  • Remove registrations that are not activated within 24 hours (see contao/core-bundle#1512).
  • Remove the "number of columns" field from the login module (see contao/core-bundle#1577).
  • Also use the file meta data in the download element (see contao/core-bundle#1459).
  • Purge the system log by default after 7 days (see contao/core-bundle#1512).
  • Use "noreferrer noopener" for links that open in a new window (see contao/core-bundle#1125).
  • Do not store IP addresses in tl_log (see contao/core-bundle#1512).
  • Append the module ID to the form field IDs to prevent duplicate IDs (see contao/core-bundle#1493).
  • Add the page picker to the meta fields in file manager (see contao/core-bundle#1568).
  • Remove the "flash movie" front end module.
  • Add extended video support (see contao/core-bundle#1348).
  • Pass all search result data to the search template (see contao/core-bundle#1558).
  • Auto-clear the session form data (see contao/core-bundle#1550).
  • Add abstract controllers for fragment content elements and front end modules (see contao/core-bundle#1376).
  • Handle manifest.json files in public bundle folders (see contao/core-bundle#1510).
  • Introduce auto cache tag invalidation on DCAs for better DX (see contao/core-bundle#1478).
  • Throw a "page not found" exception if a download file does not exist (see contao/core#8375).
  • Allow multi-root and multi-page searches (see contao/core-bundle#1462).
  • Handle case-sensitive file names in the file manager (see contao/core-bundle#1433).
  • Simplify the slug handling when auto-creating aliases (see contao/core-bundle#1334).
  • Do not notify the admin via e-mail if an account is locked (see contao/core-bundle#7728).
  • Only start the session if needed to find data in FORM_DATA (see contao/core-bundle#1471).
  • Add template blocks to be_login.html5 (see contao/core-bundle#1424).
  • Improve cache busting of the .css and .js files (see contao/core-bundle#1404).
  • Add a translator insert tag (see contao/core-bundle#1400).
  • Distinguish between error 401 and 403 (see contao/core-bundle#1381).
  • Enable drag and drop for the file manger (see contao/core-bundle#1394).
  • Add drag and drop file upload for the file tree (see contao/core-bundle#1386).
  • Hide the end time of open-ended events in the back end form (see contao/calendar-bundle#23).
  • Link to the event if no image link has been defined (see contao/news-bundle#30).
  • Hide running non-recurring events (see contao/calendar-bundle#30).
  • Pass the number of events to the main template (see contao/calendar-bundle#32).
  • Make the calendar model available in the event reader (see contao/core#8869).
  • Remove subscriptions that are not activated within 24 hours (see contao/core-bundle#1512).
  • Append the parent ID to the form field IDs to prevent duplicate IDs (see contao/core-bundle#1493).
  • Replace <div class="quote"> with <blockquote> (see contao/core#2244).
  • Support sorting enclosures (see contao/calendar-bundle#16).
  • Migrate the search module settings (see contao/installation-bundle#89).
  • Enable the FOS cache bundle (see contao/manager-bundle#67).
  • Add a default robots.txt file (see contao/manager-bundle#56).
  • Link to the news article if no image link has been defined (see contao/news-bundle#30).
  • Show the 404 page if an external news is opened in the news reader (see contao/news-bundle#33).
  • Add a custom text field to the subscribe module (see contao/core-bundle#1512).
  • Use type="email" in the default template (see contao/newsletter-bundle#20).