Permalink
Commits on Feb 3, 2017
Commits on Nov 17, 2016
  1. Fix EZP-26405: SQL Injection in Search Component (ezsearchengine) (#105)

    (cherry picked from commit 4005a9092178cc485868b1067a2101c59a80be4f)
    glye committed Oct 20, 2016
Commits on Nov 14, 2016
  1. Merge pull request #1265 from lolautruche/fix/cloneContentAttributes

    Fix EZP-26449: Wrong version translation list in eZContentOperationCollection
    yannickroger committed on GitHub Nov 14, 2016
Commits on Oct 17, 2016
  1. Fix EZP-26449: Wrong version translation list in eZContentOperationCo…

    …llection
    
    > https://jira.ez.no/browse/EZP-26449
    
    When publishing a content from legacy (e.g. from admin interface),
    `content/publish` operation copies missing translations on the published
    version.
    However, `eZContentOperationCollection::copyTranslations()` ignores the version
    language mask when retrieving the translation list for the version to
    publish, using `$version->translationList( false, false )`. While this is usually fine
    as a translation is generally a full bunch of translated attributes,
    this can lead to unexpected behavior, especially when using a mix of
    legacy and platform scripts.
    
    Typical example is when using a _wait until date_ workflow (legacy
    admin/kernel), combined with several scripts from Symfony stack, like
    migration scripts for example:
    
    - Webmaster publishes from admin interface with a publication date set
      in the future. Content has several translations.
    - DevOps deliver a new version of code with migration scripts to update
      ContentTypes, including the one used by the webmaster, to add 1 new
    field
    - Workflow cronjob is run to publish content from webmaster
    
    The result here will be:
    
    - Translation published by the webmaster will be OK
    - All other translations will be broken, only having the new field.
    
    This is due to `$version->translationList( false, false )` used in
    `eZContentOperationCollection::copyTranslations`, called by the workflow
    cronjob. This method will list all available translations for given
    version, by calling a `SELECT DISTINCT language_code FROM
    ezcontentobject_attribute`. As we
    added a new field using the public API, all translations are taken into
    account, instead of only published language.
    
    Use `language_mask` from version instead of
    `$version->translationList()`.
    lolautruche committed Oct 17, 2016
  2. Merge pull request #1264 from joaoinacio/ezp26427_ezoe_popuputils_url…

    …encode
    
    Fix EZP-26427: ezoe popup search string not urlencoded
    joaoinacio committed on GitHub Oct 17, 2016
Commits on Oct 14, 2016
Commits on Oct 12, 2016
Commits on Sep 22, 2016
  1. Fix EZP-25031: eZContentUpload is not providing original file name to…

    … custom UploadHandler (#1228)
    pkamps committed with glye Sep 22, 2016
Commits on Sep 20, 2016
  1. Fix EZP-26276: Exclamation mark followed by non-chars at end of URL d…

    …oes not work in emails (#1260)
    gabrielfin committed with glye Sep 20, 2016
Commits on Sep 14, 2016
  1. Merge pull request #1261 from lolautruche/patch-1

    Fix EZP-26300: Fatal error when going through defaultExceptionHandler with PHP7
    andrerom committed on GitHub Sep 14, 2016
  2. Fix EZP-26300: Fatal error when going through defaultExceptionHandler…

    … with PHP7
    
    > https://jira.ez.no/browse/EZP-26300
    
    With PHP 7, exception handlers can now receive `Error` exceptions. Those exceptions are internal to PHP and are not directly linked to `Exception` class, except that they both implement `Throwable` interface, which is present in PHP 7 only.
    
    This patch just removes `Exception` type hint in `eZExecution::defaultExceptionHandler()` in order to avoid fatal errors when receiving the new `Error` exceptions.
    lolautruche committed on GitHub Sep 14, 2016
Commits on Sep 13, 2016
  1. EZP-25417: ezjscore: add hard limit in ezjscnode::subtree

    (cherry picked from commit a94effb)
    yannickroger committed with glye Mar 22, 2016
  2. Merge pull request #90 from joaoinacio/EZP-25692_escape_language

    Fix EZP-25692: escape language param in eZContentObjectTreeNode::getName
    (cherry picked from commit ef0af8b)
    joaoinacio committed with glye Apr 21, 2016
Commits on Sep 7, 2016
  1. Merge pull request #1259 from ezsystems/ports

    Port of EZP-25089 (object state) & EZP-26028 (ezoe php7 support)
    andrerom committed on GitHub Sep 7, 2016
  2. Fix EZP-25089: Object state changes/assignments does not clear persis…

    …tence cache in platform stack
    andrerom committed Nov 12, 2015
Commits on Sep 1, 2016
  1. Merge pull request #1258 from joaoinacio/ezp26224_nbspaces_escape

    Fix EZP-26224: escape xml data string in update script
    joaoinacio committed on GitHub Sep 1, 2016
Commits on Aug 31, 2016
Commits on Aug 29, 2016
  1. Fix EZP-26096: additional fix to handle several attributes with speci…

    …al characters (#1256)
    dpobel committed on GitHub Aug 29, 2016
Commits on Aug 9, 2016
  1. Merge pull request #1252 from joaoinacio/ezp19376_ezjsc_packer_urls

    Fix EZP-19376: ezjscore CSS packer duplicate url path replacement
    joaoinacio committed on GitHub Aug 9, 2016
  2. Merge pull request #1251 from joaoinacio/ezp26058_nbspaces_update

    EZP-26058: update script for non-breaking spaces in ezxmltext
    joaoinacio committed on GitHub Aug 9, 2016
Commits on Jul 29, 2016
Commits on Jul 28, 2016
Commits on Jul 27, 2016
  1. Fix EZP-25087: additional check for display of collected info.

    (cherry picked from commit 8cceb2c)
    joaoinacio committed with glye Nov 11, 2015
Commits on Jul 26, 2016
Commits on Jul 18, 2016
  1. Merge pull request #1247 from ezsystems/EZP-25771

    EZP-25771: Verify existence of constructor in eZExtension->getHandler()
    andrerom committed on GitHub Jul 18, 2016
Commits on Jul 12, 2016
  1. EZP-25771: Add handler constructor existance verification to ezextens…

    …ion getHandler()
    Miguel Jacinto committed with andrerom Jul 12, 2016
Commits on Jun 8, 2016
  1. Merge pull request #1243 from ezsystems/travis_ssl

    [Travis] Test on latests 5.3 release instead of 5.3.3
    andrerom committed Jun 8, 2016
  2. [Travis] Test on latests 5.3 release instead of 5.3.3

    As 5.3.3 is missing SSL and that is now a requriment for Composer.
    andrerom committed Jun 8, 2016