Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Check array keys existence prior to their usage when removing methods #8707

Conversation

michalkleiner
Copy link
Contributor

The updated piece of code throws a Notice when trying to use the failover mechanism with a custom object other than the standard SiteTree via a ContentController.

@kinglozzer
Copy link
Member

This looks very similar to #8703

@michalkleiner
Copy link
Contributor Author

I think in our case it would get past that added condition and still fail on checking unset array keys.
Also, our problem is with 4.2.1, perhaps I should retarget the PR to 4.2?

@michalkleiner michalkleiner force-pushed the pulls/4/check-array-props-in-custom-methods branch from f9311c9 to 91a2062 Compare February 19, 2019 05:29
robbieaverill and others added 27 commits February 21, 2019 21:35
Correct links in 13_CSS_Coding_Conventions.md
- Enable viewing of draft assets
- Disable viewing of .htaccess and .method
- Enforce File.allowed_extensions (manually for now)
DOCS Update HTTP Cache headers docs to include note about testing in dev mode
…givimeo-a-relevant-lesson

DOCS Updating "lesson 0" to a relevant link
Moved the guts to "making a core release", since it's only really relevant to that audience.
There's more work to do around making security and non-security releases the same (less special handling),
but I think this is a good start.

[ci-skip]
…ding-your-module-doc

Adding a Upgrade module guide
…legacy-filenames

DOCS Clarify file migration and mention known bug
Update nginx example to support assets better
This lets us replace classes that extend certain other classes with a provided list of traits.
Throw error message when searchable_field does not return a object
robbieaverill and others added 20 commits September 3, 2019 09:55
…3/strip-bom-on-csv-import

FIX Byte Order Marks (BOM) are now stripped when importing CSV files
…ursive-writeComponent

BUG Allow infinite loop when calling DataObject::writeComponent() recursively
…4/stream-ree-tags

FIX Skip md5-ing the whole contents of a stream for etags
 # Conflicts:
 #	src/View/ThemeResourceLoader.php
…erstripe#9248)

Allow non summary fields to be used as grid field export fields
…ix-file-permission

Fix administrators not being able to see files that are restricted to groups
In some situations, a caption is used in place of a value in the alt
attribute, and in others an image may be cosmetic and not in need of an
alt attribute value (though the alt attribute must still be rendered in
this case).
…verstripe#9257)

FIX Add 'legal empty attributes' to allow empty alt values on imgs
A potential account hijacking may happen if an attacker has physical access to
victim's computer to perform session fixation. Also possible if the targeted application contains an XSS vulnerability.
Requires the victim to click the password reset link sent to their email.
If all the above happens, attackers may reset the password before the actual user does that.
@michalkleiner michalkleiner force-pushed the pulls/4/check-array-props-in-custom-methods branch 2 times, most recently from fee8392 to 9244730 Compare September 27, 2019 00:50
@michalkleiner michalkleiner force-pushed the pulls/4/check-array-props-in-custom-methods branch from 9244730 to 52a039f Compare September 27, 2019 02:57
@robbieaverill
Copy link
Contributor

I think this PR needs a rebase

@michalkleiner
Copy link
Contributor Author

Will look into it

@michalkleiner
Copy link
Contributor Author

For a couple minutes I was super confused why there are no changes, but a newer PR #9271 has already been merged.

@michalkleiner michalkleiner deleted the pulls/4/check-array-props-in-custom-methods branch December 16, 2019 00:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet