3.3.3#

Change Log#

Security#

• 2016-08-02 049cdef Fix value / title escaping in CheckboxSetField and OptionsetField (Damian Mooyman) - See ss-2016-015
• 2016-07-25 fa7f5af Autologin cookies are ignored if autologin is disabled (Daniel Hensby) - See ss-2016-014
• 2016-07-22 83e3302 Uncasted member name (Daniel Hensby) - See ss-2016-013
• 2016-07-15 f85dea2 Reset Member::Salt on password change (Daniel Hensby) - See ss-2016-008
• 2016-07-14 6d41db7 ChangePasswordForm does not check $member->canLogin before login (Daniel Hensby) - See ss-2016-011
• 2016-07-14 efa20d2 Missing ACL check on ReportAdmin (Daniel Hensby) - See ss-2016-012
• 2016-05-03 3fa84cf Encode user supplied URL for embeding into page (Daniel Hensby) - See ss-2016-007

Bugfixes#

• 2016-08-15 a6a9cd7 Fix regression in FormField casting (Damian Mooyman)
• 2016-08-02 cd80d50 Fix unset config options returning isset() = true (Damian Mooyman)
• 2016-07-25 3306deb Fix link concatenation in SilverStripeNavigator (#1560) (Damian Mooyman)
• 2016-07-20 319d6d2 Fix doclink (#5827) (Damian Mooyman)
• 2016-07-19 10e06dc Fixes #1054 By preventing errors in the CMS only. (Russell Michell)
• 2016-07-15 b3fea37 Fixes support for "inline" form actions (fixes #2534) (Loz Calver)
• 2016-07-12 24efc7e Fix sorting ArrayList with sql-like syntax (Damian Mooyman)
• 2016-07-12 8123c43 Fix getAbsoluteLiveLink() concatenation (Damian Mooyman)
• 2016-07-12 87477a1 Fix incorrect url manipulation (Damian Mooyman)
• 2016-07-07 4aa1fc2 Changed form fields that call renderWith in Field() to call parent::Field() instead (#5783) (Ed Chipman)
• 2016-07-07 27cea80 SS_ConfigStaticManifest_Parser failed to handle ::class syntax (fixes #5701) (#5781) (Loz Calver)
• 2016-07-01 39238d9 falsey attribute values in shortcodes now work (Daniel Hensby)
• 2016-06-30 2cdfe6c Use RAW for DBField template helpers (Daniel Hensby)
• 2016-06-30 b0f237b Use RAW instead of Value for parsing shortcodes (Daniel Hensby)
• 2016-06-13 f0d4951 for #5683: Address security warning in CMS when attempting to access <iframe> contents (Back-porting fix from PR #5163) (Patrick Nelson)
• 2016-06-08 bf00810 Fix buttonClicked() error (Damian Mooyman)
• 2016-05-31 eba89b9 OldPageRedirector no longer loops infinitely if 404 thrown on existing page (Daniel Hensby)
• 2016-05-31 341f49c Fixed lookup of next closest visible field for focus restoring (fixes #5618) (UndefinedOffset)
• 2016-05-27 f1a0aef fix CMS_ACCESS permission being ignored if in incorrect order in array (Damian Mooyman)
• 2016-05-21 decd7e5 Fix getFinalisedQuery not including all queried columns (Damian Mooyman)
• 2016-05-20 8382685 #5557 Tests with no DB requirements wont create test DB (Daniel Hensby)
• 2016-05-18 62bd26d Fix suppression of display_errors in ErrorControlChain (Damian Mooyman)
• 2016-05-16 79d0590 Fix singleton('DBLocale') (Damian Mooyman)
• 2016-05-10 3738d88 Empty FROM clause (Daniel Hensby)
• 2016-05-10 d1df67d SQLSelect count methods now cast to int (fixes #5498) (Loz Calver)
• 2016-05-05 cc7a2ae Add framework/admin tests (#118) (Daniel Hensby)
• 2016-05-02 096f30e Fix GridFieldAddExistingAutocompleter (Damian Mooyman)
• 2016-04-28 6934083 for #5410 to help focus errors occurring on tabs within GridField controlled DataObjects (et al). (Patrick Nelson)
• 2016-04-19 43dcde5 Hierarchy was incorrectly unexpanding nodes that had been previously expanded (madmatt)
• 2016-01-22 4bd66b9 for #4909: Ensure RSSFeed_Entry is instantiated using the injector. (Patrick Nelson)
• 2015-04-21 a7100e9 Object::parse_class_spec failed to parse associative arrays (Loz Calver)