To prevent issues with selecting the wrong CSFR Token in the DOM, we now have a more precise selection of the DomNode with the CSFR token.
fixes: #4822
Review instructions
Install a version before 1.0.1 of the Shel.Neos.WorkspaceModule and go to the user management module to impersonate a user. Then switch to the Workspace module and try to restore the original user. Without this patch, it should fail. With version 1.0.1 it will not fail btw.
- Packages:
Media.Browser
Neos
This adds a check in the preview of assets in the media module and checks for malicous content in svgs. If detected, the direct links to the original url get removed from the preview pages and a warning is shown.
Fixes neos/flow-development-collection#3248
- Packages:
Neos
Media.Browser
- Packages:
Neos
Fusion
Fixes the following crash during node:repair
`shell ./flow node:repair --dry-run --only removeBrokenEntityReferences Dry run, not committing any changes. Checking for broken entity references ... Object of class Neos\\Flow\\Persistence\\Doctrine\\Proxies\\__CG__\\Neos\\Media\\Domain\\Model\\ImageVariant could not be converted to string Type: Error File: Data/Temporary/Development/SubContextWbWeb/Cache/Code/Flow_Object_Classes/Neos_ContentRepository_Command_NodeCommandControllerPlugin.php Line: 836
`
resolved #4794
Upgrade instructions
- [x] Code follows the PSR-2 coding style
- ~~Tests have been created, run and adjusted as needed~~
- There are not tests in place and I added none.
- [x] The PR is created against the lowest maintained branch -> 7.3
- [ ] Reviewer - PR Title is brief but complete and starts with
FEATURE|TASK|BUGFIX
- [ ] Reviewer - The first section explains the change briefly for change-logs
- [ ] Reviewer - Breaking Changes are marked with
!!!
and have upgrade-instructions - Packages:
Neos
ContentRepository
Summary: When attempting to install Neos version 8.3 using the command composer create-project neos/neos-development-distribution neos-development 8.3.x-dev --keep-vcs
, the installation results in the neos-setup (version 1.x) being installed. The neos/cli-setup
tool has been removed and the default command ./flow welcome
is still called. But the command is no longer available due to the absence of the CLI setup tool. Consequently, the setup process is not possible as the recommended command is missing.
We remove the dependency from the development collection and adds the neos/neos-setup
in the latest version to the neos-development-distribution
- Packages:
Neos