Commit Graph

248 Commits (7e24033472b2e9fc35cdfbe853483bb2e16233dd)

Author SHA1 Message Date
Alex Pott 98377d5725 Issue #2221699 by mpdonadio, mikey_p, alexpott, kim.pepper, arlinsandbulte: HTTP_HOST header cannot be trusted 2015-01-22 18:57:56 +00:00
Alex Pott a8cccfce62 Revert "Issue #2221699 by mpdonadio, mikey_p, kim.pepper, arlinsandbulte: HTTP_HOST header cannot be trusted"
This reverts commit 2c9eddf3ac.
2015-01-21 10:03:23 +00:00
Alex Pott 2c9eddf3ac Issue #2221699 by mpdonadio, mikey_p, kim.pepper, arlinsandbulte: HTTP_HOST header cannot be trusted 2015-01-21 09:46:25 +00:00
Nathaniel Catchpole 73069e05e8 Issue #2392319 by alexpott, effulgentsia: Config objects (but not config entities) should by default be immutable 2015-01-16 10:43:35 +00:00
Alex Pott aff95777ed Issue #2309737 by rpayanm, hussainweb, max-kuzomko, herom, millerbennett, ianthomas_uk, quietone, Sutharsan, sumitmadan, toddmbloom: Remove deprecated format_plural usage 2015-01-10 13:56:47 +00:00
Alex Pott f41585c8d3 Issue #2170235 by Berdir, penyaskito, larowlan, alexpott, sushyl: file_private_path should be in $settings, like file_public_path 2014-12-14 14:01:24 +01:00
Alex Pott 502c78a64c Issue #2290261 by webchick: Revert php_fileinfo requirement 2014-12-04 22:27:03 +00:00
Nathaniel Catchpole 66fa3fa9f9 Issue #2384853 by alexpott: Both configuration directories have to be specified in settings.php 2014-12-04 12:05:33 +00:00
webchick 8d601c74b1 Issue #2342593 by znerol, grendzy, David_Rothstein: Remove mixed SSL support from core 2014-12-01 08:26:28 -08:00
Nathaniel Catchpole 7177b56464 Issue #2346287 by bserem, rteijeiro, Zekvyrin, alexpott: Fixed Installer requirements errors escaped HTML in variables. 2014-11-10 13:34:31 +00:00
webchick 89c6ae701d Issue #2267551 follow-up by jfhovinne: [meta] Deal with PHP requirement vs. Debian PHP version numbering. 2014-10-20 11:44:35 -07:00
catch df20c166d9 Issue #2267551 by jfhovinne, ParisLiakos, catch: PHP 5.4.5 needed to avoid zend failure when using autoloaded traits. 2014-10-07 23:14:37 +01:00
Alex Pott 9315a45e01 Issue #2338759 by StryKaizer, tom_ek | alexpott: Fixed core/update.php is now just update.php. 2014-10-04 17:29:36 +02:00
Alex Pott 4f49087b71 Issue #2277103 by tim.plunkett, pwolanin, Wim Leers, dawehner, hotpizzas: Switch Drupal::l() and LinkGenerator to expect a Url object. 2014-09-29 15:41:29 +02:00
webchick a6492ce9d9 Issue #2343651 by xjm, tim.plunkett, Wim Leers, dinarcon, dawehner: Remove most remaining l() calls. 2014-09-28 00:21:34 -07:00
webchick 0eda196d46 Issue #2340251 by iMiksu, alexpott, tim.plunkett, dawehner, Wim Leers: Remove most remaining url() calls. 2014-09-27 00:03:46 -07:00
Alex Pott 32d5530e58 Issue #2333113 by effulgentsia, plach: Add an EntityDefinitionUpdateManager so that entity handlers can respond (e.g., by updating db schema) to code updates in a controlled way (e.g., from update.php). 2014-09-15 21:37:27 +01:00
webchick 4fb0f9d8fd Issue #2251113 by alexpott, damiankloip, Crell, Wim Leers, dawehner, sun: Use container parameters instead of settings. 2014-08-23 13:19:53 -07:00
Alex Pott 8f04acbb77 Issue #2309221 by mikey_p: Drupal\Core\Datetime\Date should be renamed to DateFormatter. 2014-08-05 11:39:21 +01:00
Alex Pott 5783e08f16 Issue #2149197 by penyaskito, mikey_p, vijaycs85, herom: Replace format_interval with \Drupal::service('date')->formatInterval(). 2014-07-24 15:54:28 +01:00
Alex Pott 87e675f09b Issue #1825952 by Fabianx, joelpittet, bdragon, heddn, chx, xjm, pwolanin, mikey_p, ti2m, bfr, dags, cilefen, scor, mgifford: Turn on twig autoescape by default 2014-07-18 10:05:22 +01:00
Alex Pott 6a8faf5552 Issue #2290261 by tim.plunkett, amool: Fixed Full configuration export crashing without the php_fileinfo extension. 2014-07-06 18:14:59 +01:00
Alex Pott eed52b4d82 Issue #2003800 by jhedstrom, filijonka, YesCT, ParisLiakos, steeloctopus, damiankloip, sun, LinL, amateescu: Move drupal_check_memory_limit() and parse_size() functionality to components. 2014-05-23 20:25:52 +01:00
Nathaniel Catchpole 7bc792063e Issue #2263273 by alexpott: Config_snapshot table can be created by the storage class itself. 2014-05-12 10:58:09 +01:00
Nathaniel Catchpole 44b38852b8 Issue #2158571 by tstoeckler, dawehner, kgoel, tim.plunkett, catch, effulgentsia: Routes added in RouteSubscribers cannot be altered. 2014-05-01 10:46:02 +01:00
Alex Pott 8a56782390 Issue #2208475 by sun, Xano, Jalandhar, andrei.dincu: Move Settings into Drupal\Core\Site\Settings. 2014-04-25 20:13:44 +01:00
webchick 2c90c67c4e Issue #1067408 by alexpott, Jalandhar, jessebeach, Désiré, neetu morwani, dawehner, sun: Themes do not have an installation status. 2014-04-22 11:37:12 -07:00
catch 8ad79cebb5 Issue #2224777 by pwolanin, dawehner: Unlimited allowed length of path in menu router allows DoS attack on Drupal 8. 2014-03-28 15:22:01 +01:00
Alex Pott 000966e0dd Issue #2219009 by pwolanin: Improve DX of Settings class. 2014-03-24 09:51:28 +01:00
webchick 8608fed622 Issue #2107533 by tim.plunkett, dawehner, pwolanin, Berdir: Remove {menu_router}. 2014-02-28 20:58:58 -08:00
Dries 3a5c3b322a Issue #2152073 by dmouse, sun, Xano: Bump Drupal core's PHP requirement to 5.4.2. 2014-02-27 20:14:53 +01:00
webchick b8ef3c6bff Issue #2140433 by pwolanin, chx, Owen Barton, dstol, Heine, Damien Tournoud: Port SA-CORE-2013-003 to Drupal 8. 2014-02-26 20:48:12 -08:00
Nathaniel Catchpole db460fe78b Issue #2171683 by sun, alexpott, tstoeckler, larowlan: Remove all Simpletest overrides and rely on native multi-site functionality instead. 2014-02-10 17:31:31 +00:00
Nathaniel Catchpole ec06f877a4 Revert "Issue #2171683 by sun, tstoeckler, larowlan: Remove all Simpletest overrides and rely on native multi-site functionality instead."
This reverts commit 91db25eba4. Broke web
tests.
2014-02-10 11:14:28 +00:00
Nathaniel Catchpole 91db25eba4 Issue #2171683 by sun, tstoeckler, larowlan: Remove all Simpletest overrides and rely on native multi-site functionality instead. 2014-02-10 10:36:12 +00:00
webchick 2fbe2b565b Issue #2182423 by Berdir, joelpittet: Key_value_expire doesn't get reset and balloons the PDO execution time for form pages. 2014-02-09 10:33:06 -08:00
Nathaniel Catchpole bcc57baf0b Issue #1881582 by sun: Change configuration overrides to use $config instead of $conf. 2014-02-05 18:21:55 +00:00
webchick bc058bada9 Issue #2168011 by xjm, jessebeach, Damien Tournoud, znerol, Xano: Remove all 7.x to 8.x update hooks and disallow updates from the previous major version. 2014-01-31 09:26:04 -08:00
Nathaniel Catchpole e373ebee34 Issue #2167109 by Berdir, sun, alexpott, ACF, acrollet, adamdicarlo, Albert Volkman, andreiashu, andyceo, andypost, anenkov, aspilicious, barbun, beejeebus, boombatower, cam8001, chriscalip, chx, cosmicdreams, dagmar, damiankloip, dawehner, deviance, disasm, dixon_, dstol, ebrowet, Gábor Hojtsy, heyrocker, Hydra, ianthomas_uk, japicoder, jcisio, jibran, julien, justafish, jvns, KarenS, kbasarab, kim.pepper, larowlan, Lars Toomre, leschekfm, Letharion, LinL, lirantal, Lukas von Blarer, marcingy, Mike Wacker, mrf, mtift, mtunay, n3or, nadavoid, nick_schuch, Niklas Fiekas, ParisLiakos, pcambra, penyaskito, pfrenssen, plopesc, Pol, Rok Žlender, rvilar, swentel, tim.plunkett, tobiasb, tsvenson, typhonius, vasi1186, vijaycs85, wamilton, webchick, webflo, wizonesolutions, xjm, yched, YesCT, znerol: Remove Variable subsystem. 2014-01-28 13:07:47 +00:00
Nathaniel Catchpole 318d178b6e Issue #2164025 by skipyT, pwolanin: Improve security of session ID against DB exposure or SQL injection. 2014-01-27 11:44:25 +00:00
Alex Pott a3c8c88fa4 Issue #2121849 by moshe weitzman: Move chmod.directory and chmod.file out of config and into settings so that file writes are independant of the config system. 2014-01-24 10:45:47 +01:00
Nathaniel Catchpole 0b55dcd841 Issue #1862202 by plach, Berdir, katbailey, ParisLiakos, alexpott, chx, sun, larowlan, Gábor Hojtsy, cosmicdreams, vijaycs85, YesCT, penyaskito, andypost, Albert Volkman, joelpitett: Objectify the language system. 2014-01-15 16:27:37 +00:00
Nathaniel Catchpole 68ce258d63 Issue #2166065 by alexpott, mtift: Replace config_install_default_config with ConfigInstaller service. 2014-01-10 11:48:37 +00:00
webchick d5efc596c8 Issue #2133325 by mtift, alexpott, sun: Create a site UUID on install and only allow config sync between sites with the same UUID. 2014-01-02 23:48:25 -08:00
Nathaniel Catchpole a6cdd740f8 Issue #1954892 by dawehner, David_Rothstein, tim.plunkett: Replace 'theme callback' and hook_custom_theme() with a clean theme negotiation system. 2013-12-17 11:03:15 +00:00
Nathaniel Catchpole 52d3b49336 Issue #2097189 by damiankloip, sun, Albert Volkman, chx: Add a rebuild script. 2013-12-10 13:50:21 +00:00
webchick 3bb5f796f6 Issue #1998638 by damiankloip, dawehner, kim.pepper, cosmicdreams, alexpott, larowlan, Damien Tournoud: Replace almost all remaining superglobals (, , etc.) with Symfony Request object. 2013-12-05 10:02:36 -08:00
webchick dc7a5b27ef Revert of Issue #1998638, since it broke drush si and other command-line scripts. 2013-12-04 21:13:05 -08:00
webchick a38172dc20 Issue #1998638 by damiankloip, dawehner, kim.pepper, cosmicdreams, larowlan, Damien Tournoud: Replace all remaining superglobals (, , etc.) with Symfony Request object. 2013-12-03 10:57:18 -08:00
Nathaniel Catchpole a1b0d2480d Issue #2031219 by deneo, crowdcg: Remove theme_link from system.performance.yml 2013-12-03 11:10:08 +00:00