4.0.0-beta4#

Change log#

Security#

• 2017-09-04 f0262a8fd User enumeration via timing attack mitigated (Daniel Hensby) - See ss-2017-005

API changes#

• 2017-10-05 4ea8a30 Support stateless versioned extensions (Damian Mooyman)
• 2017-10-05 b996e2c22 Extensions are now stateless (Damian Mooyman)
• 2017-09-29 cbde8ed Allow thumbnails to be conditionally generated (Damian Mooyman)
• 2017-09-27 f686b5082 Rename assert dos to assert list (Werner M. Krauß)
• 2017-09-27 8832b31 Implement config modifications via middleware and new DeltaConfigCollection (Damian Mooyman)
• 2017-09-16 ded64ba Pass the member to alternateAccessCheck (Mike Cochrane)
• 2017-09-05 496b9c8c Implement insert-anchor modal (Damian Mooyman)

Features and enhancements#

• 2017-10-10 11b2c7453 Improve upgrade experience for beta3 -> beta4 upgrade (Damian Mooyman)
• 2017-10-08 eee3025 Inherit canView for shortcodes to speed up rendering (Damian Mooyman)
• 2017-10-05 cdf6ae45a Ensure changePassword is called by onBeforeWrite for a consistent API (Robbie Averill)
• 2017-10-03 43ec2f87e Implement accept attribute in FileField (closes #7279) (Loz Calver)
• 2017-10-03 6b5241269 Make Member::changePassword extensible (Robbie Averill)
• 2017-10-01 ab57766 update gallery items, so that it isn't just a visually blank white background when there are no thumbnails (Christopher Joe)
• 2017-09-29 f4b141761 Use less expensive i18n defaults in Member::populateDefaults() (Damian Mooyman)
• 2017-09-29 a4be4e8 Use new conditional thumbnail generation API (Damian Mooyman)
• 2017-09-27 36397c787 add notice for MigrateFileTask if FileMigrationHelper doesn't exist (Christopher Joe)
• 2017-09-27 347d8e3 pull out thumbnail generation to another method, add extension point for any other thumbnails that possibly need to be generated (Christopher Joe)
• 2017-09-27 a718731 update LeftAndMain to call setRewriteHashLinksDefault (Christopher Joe)
• 2017-09-27 90d0361a6 update set_themes to not update config (Christopher Joe)
• 2017-09-26 28552155c Add actWithPermission to SapphireTest for shortcut to perform actions with specific permissions (Daniel Hensby)
• 2017-09-25 5d481e0 Expose stand-alone i18n.js (Damian Mooyman)
• 2017-09-21 fa57deeba Allow vendor modules with url rewriting (Damian Mooyman)
• 2017-09-21 7e92b053f Add setter and getter for certain classes, so that LeftAndMain no longer updates config during init (Christopher Joe)
• 2017-09-19 261302a12 Don't force all class names to lowercase (Damian Mooyman)
• 2017-09-13 04b1bb816 RateLimiter for Security controller (Daniel Hensby)
• 2017-09-12 a0eae9b rename action props with on prefix, and action methods with handle prefix (Christopher Joe)
• 2017-09-12 51cc5b5 rename action props with on prefix, and action methods with handle prefix (Christopher Joe)
• 2017-09-12 f607547 rename action props with on prefix, and action methods with handle prefix (Christopher Joe)
• 2017-09-11 609a070 Allow LeftAndMain::getClientConfig to be extensible (Robbie Averill)
• 2017-09-05 c707fccf6 Allow GridFieldEditButton to have configurable HTML classes. Change edit icon. (Sacha Judd)
• 2017-08-28 0b34066f0 incorrect scalar types in doc blocks, add chainable returns in setters (Robbie Averill)
• 2017-08-24 fdd501182 Ability to override SS_TemplateManifest via Injector (fixes #7305) (Patrick Nelson)

Bugfixes#

• 2017-10-11 eaed0e8 Add title for file to the download template (Robbie Averill)
• 2017-10-10 c8f95182 icon urls (Damian Mooyman)
• 2017-10-10 b230778 icon urls and deprecated resource api usages (Damian Mooyman)
• 2017-10-10 6a55dcfc1 references to resource paths / urls (Damian Mooyman)
• 2017-10-10 340de63 references to resource paths / urls (Damian Mooyman)
• 2017-10-10 bd99dd0 fix to not use array index for component key... (Christopher Joe)
• 2017-10-10 494bfc9 Fix to prevent folders being dragged onto itself (Christopher Joe)
• 2017-10-10 56dee81 fix double checkbox displaying in Safari for "enlarged" folders (Christopher Joe)
• 2017-10-10 57e9a6a dragging count indicator used wrong component (Christopher Joe)
• 2017-10-10 ca884d8 Fix clipped badge indicator (Christopher Joe)
• 2017-10-10 1781d1e fix selecting the same item multiple items in our redux store (Christopher Joe)
• 2017-10-09 84999e0 fix for IE11 losing selection (Christopher Joe)
• 2017-10-09 9d873db9 paths in Install_successfullyinstalled.ss (Damian Mooyman)
• 2017-10-09 fd630a99b Fix decimal scaffolding (Damian Mooyman)
• 2017-10-09 f34f7cb66 surname behat test (Christopher Joe)
• 2017-10-08 6bc716d7c ed incorrect statement on ID generation (Sam Minnée)
• 2017-10-08 89db5870b typo in docs (Christopher Joe)
• 2017-10-08 504e762c6 Fix missing property in requirements minificaction docs (Damian Mooyman)
• 2017-10-06 bd874ca91 ed docs paths (fixes #7075) (Ingo Schommer)
• 2017-10-06 bb2c326 Fixes back button in mobile view (Christopher Joe)
• 2017-10-06 578f3f208 behat test (Christopher Joe)
• 2017-10-05 3bdc8c7e6 Trim whitespace off names in Injector (Robbie Averill)
• 2017-10-05 e07658ef5 linting issues and fix doc (Christopher Joe)
• 2017-10-05 a1a834192 refactor TreeMultiselectField to be clearable if nothing is selected (Christopher Joe)
• 2017-10-04 d94e5f6 right margin of more actions button for bulk action (Saophalkun Ponlu)
• 2017-10-04 ca60b94f Fix vendor bootstrap path (Damian Mooyman)
• 2017-10-04 924e2a714 sake path relative to vendor (Ingo Schommer)
• 2017-10-04 f6ce07dc8 behat bootstrap path (Ingo Schommer)
• 2017-10-04 04f2ab7 silverstripe/admin module path in CI (Damian Mooyman)
• 2017-10-04 dc29a78 file submissions in tests (Damian Mooyman)
• 2017-10-04 1b6d0144c Fix resource mapping for TinyMCE (Damian Mooyman)
• 2017-10-03 5c5eff1 Allow ss to run in a subdirectory (Sam Minnée)
• 2017-10-03 6f8d311 phpunit bootstrap path (Damian Mooyman)
• 2017-10-03 b555d15 regressions in vendor migration (Damian Mooyman)
• 2017-10-03 2fc3f80f tinymce issue (Damian Mooyman)
• 2017-10-03 fa45057 phpunit module path (Damian Mooyman)
• 2017-10-03 ab4044e2 CI config (Damian Mooyman)
• 2017-10-03 16840e4 bootstrap path and travis dist (Damian Mooyman)
• 2017-10-03 3fc6b08 test paths (Damian Mooyman)
• 2017-10-03 f4a77649a requirements tests (Damian Mooyman)
• 2017-10-03 5ffe64f02 tinymce plugins (Damian Mooyman)
• 2017-10-02 916a65f wrong invalid class name (#281) (Saophalkun Ponlu)
• 2017-10-02 e1b98d154 tinymce operation for resource paths (Ingo Schommer)
• 2017-10-02 8688a1e Move image orientation to load time (Daniel Hensby)
• 2017-10-02 7de2e07 main.php path in install.php (Ingo Schommer)
• 2017-10-02 8e49b563a installer paths for vendorised module (Ingo Schommer)
• 2017-10-02 e88f765 main.php path (Ingo Schommer)
• 2017-10-02 85255891b test environment type (Damian Mooyman)
• 2017-10-02 defe025 test environment type (Damian Mooyman)
• 2017-10-02 a2f0a79b test environment type (Damian Mooyman)
• 2017-10-02 9122ca2 wrong direction of popover arrow in mobile breakpoint (Saophalkun Ponlu)
• 2017-10-02 26f7f0482 typos in FilesystemCacheFactory (Christopher Joe)
• 2017-10-01 1b3902d Ensure folder permissions are flushed when modified (Damian Mooyman)
• 2017-10-01 d3338d8 lint errors (Saophalkun Ponlu)
• 2017-09-29 a2667bc ed path reference in TinyMCE config (Ingo Schommer)
• 2017-09-29 e2750c03f Restore SS_USE_BASIC_AUTH env var (Damian Mooyman)
• 2017-09-29 6661d5e prevent opening file dialog when pressing enter key (Saophalkun Ponlu)
• 2017-09-28 4040922 popover arrow style and position (Saophalkun Ponlu)
• 2017-09-27 1cf6bcb tooltip arrow style and position (Saophalkun Ponlu)
• 2017-09-27 e1d5f6e update asset files to be module aware (Christopher Joe)
• 2017-09-27 53b2fcd1e amend TinyMCE combined generator's unit test to be more lenient with encoding (Christopher Joe)
• 2017-09-27 51ac297c5 es to ratelimiter and new features (Daniel Hensby)
• 2017-09-27 c7cbbb29f links on paginated lists when there are GET vars (Andrew O'Neil)
• 2017-09-27 4dbd72720 Config updates are now applied after middleware not before (Damian Mooyman)
• 2017-09-26 f998a16 treedropdown field using out of date properties (Mike Cochrane)
• 2017-09-26 ebe1de8d8 ArrayList sort error with old (supported) PHP (Dylan Wagstaff)
• 2017-09-26 3e09e16 Text collection in AddToCampaignHandler (Robbie Averill)
• 2017-09-26 6a5161b Correct translation key in ChangeSet and run text collector (Robbie Averill)
• 2017-09-26 33ae463e5 Class name in _t() call in installer and run text collector (Robbie Averill)
• 2017-09-26 c51c1c9 update treedropdown field when urlTree has changed (Saophalkun Ponlu)
• 2017-09-25 b8e5a2ce3 readonly PermissionCheckboxSetField (Mike Cochrane)
• 2017-09-21 3688db6 issue user can't dismiss insert embed modal (Saophalkun Ponlu)
• 2017-09-21 117bbdb Gallery button title alignment (Saophalkun Ponlu)
• 2017-09-21 fe4688b93 gridfield button title alignment (Saophalkun Ponlu)
• 2017-09-20 007e60a behat errors with text changes (Christopher Joe)
• 2017-09-20 e850e9b remove right margin button editor close button (Saophalkun Ponlu)
• 2017-09-20 8830a69 search button alignment when in modal (Saophalkun Ponlu)
• 2017-09-20 47d8bc9 made updating the file Class representation for an extension less aggressive and allows for subclasses of registered file extensions (Christopher Joe)
• 2017-09-20 f1a12e15b Fix sub-template lookup for includes (Damian Mooyman)
• 2017-09-20 ac78f45 behat tests on trusty (Damian Mooyman)
• 2017-09-20 265f91060 phpcs error (Christopher Joe)
• 2017-09-19 5acf062 Update translations from "only these people" to "only these groups" to match CMS (Robbie Averill)
• 2017-09-19 f5b97b18 Update translation default from "only these people" to "only these groups" to match CMS (Robbie Averill)
• 2017-09-19 09b3a24f3 Detect, warn, and fix invalid SS_BASE_URL (Damian Mooyman)
• 2017-09-19 8e58056 Don't force all class names to lowercase (Damian Mooyman)
• 2017-09-19 dba6a23 jquery casing issue (Christopher Joe)
• 2017-09-18 cda78e2d add space below report filter form (Saophalkun Ponlu)
• 2017-09-18 d825526 add null check for lastSynced (Christopher Joe)
• 2017-09-15 68128b46 toolbar title layou (Saophalkun Ponlu)
• 2017-09-15 df957681 toolbar title layout (Saophalkun Ponlu)
• 2017-09-15 5351ba67 toolbar title layout (Saophalkun Ponlu)
• 2017-09-14 919f0bf vertical alignment of search button (Saophalkun Ponlu)
• 2017-09-14 9277099 TreeDropdownFieldMenu to accept array, string or number as a possible value (Chris Joe)
• 2017-09-13 919831365 HTTP Headers are case insensitive (Daniel Hensby)
• 2017-09-13 cbe62d0 Fix multi-selection treefield (Damian Mooyman)
• 2017-09-13 f8ef97c16 Fix import modal (Damian Mooyman)
• 2017-09-12 1892a0207 Fix gridfield print styles (Damian Mooyman)
• 2017-09-12 6c209f7 Fix background of disabled buttons (Damian Mooyman)
• 2017-09-12 0aac4ddb Default LoginForm generated from default_authenticator (Daniel Hensby)
• 2017-09-12 091d99f59 Authenticators are more resilient to incomplete configuration (Daniel Hensby)
• 2017-09-12 e15373ba ed linting errors and tests (Christopher Joe)
• 2017-09-12 a575cbe incorrect data type obtained sometimes through html dataset (Christopher Joe)
• 2017-09-12 6613826ed SSViewer::add_themes() to properly prepend (Andrew Aitken-Fincham)
• 2017-09-12 52b6cf5 ed linting errors and turned some of the newer ones off temporarily (Christopher Joe)
• 2017-09-12 0705791 ed linting errors and turned some of the newer ones off temporarily (Christopher Joe)
• 2017-09-12 de5a276 Fix gridfield print styles (Damian Mooyman)
• 2017-09-12 2b2cdb4c Fix yarn build (Damian Mooyman)
• 2017-09-12 5cfa854 gridfield row's actions alignment (Saophalkun Ponlu)
• 2017-09-12 0752f06 Fix bad image url (Damian Mooyman)
• 2017-09-12 905c4e04d Incorrect path for requirements file (Damian Mooyman)
• 2017-09-12 2408f42 Fix incorrect login styles (Damian Mooyman)
• 2017-09-12 12480633b grid field button styles (Saophalkun Ponlu)
• 2017-09-12 b27cb1d gridfield pagination button styles and position (Saophalkun Ponlu)
• 2017-09-11 785c87d space between button group and another button (Saophalkun Ponlu)
• 2017-09-11 d2a83ca Change icon (Saophalkun Ponlu)
• 2017-09-11 046cdf9 Fine-tune button styles (Saophalkun Ponlu)
• 2017-09-11 4f3b4f76 Fine-tune button styles (Saophalkun Ponlu)
• 2017-09-11 d477850 ed linting errors and turned some of the newer ones off temporarily (Christopher Joe)
• 2017-09-11 d18568c3 Ensure client config merging includes existing parent "form" attributes (Robbie Averill)
• 2017-09-11 dee9e72 Rewrite legacy namespaced CMS class name (Damian Mooyman)
• 2017-09-07 49fd3391 Prevent icons CSS being included twice (Damian Mooyman)
• 2017-09-06 2dde7771 Add styles for url segment field (Sacha Judd)
• 2017-08-28 7b200a2a6 add combinedFiles to clear logic (Christopher Joe)
• 2017-08-14 b04a1ab41 Truncate Error Issue when using views in a Unittest. (James Pluck)
• 2017-07-05 0c8613d Only show user's first name in CMS header (Robbie Averill)