Commit Graph

1996 Commits

Author SHA1 Message Date
Kerim d6e4c9171b from mac 2022-12-14 20:55:13 +05:00
merdan 683fe655df tag bag fixed 2021-10-11 11:37:52 +05:00
merdan b4667f1975 update and video tag 2021-04-16 14:15:27 +05:00
merdan 9489f49958 home page start 2021-03-11 15:16:57 +05:00
Ben Thomson d7d6faeedb
Generate random password for seeded admin account through october:up (#4866) 2020-11-20 03:43:33 -06:00
hackolein 96fd2ec657
Match paths sent to theme:sync more exactly (#5334)
`artisan theme:sync --target=database --force --paths=layouts/,pages/,partials/`

But at the moment it also synchronizes paths that should not be synchronized. For example: `content/static-pages/`. Because here the pattern applies to `pages/`.

The fix is that the pattern starts at the beginning of the line.

Co-authored-by: Heiko Böhme <hboehme@menadwork.com>
2020-11-20 03:02:10 -06:00
Samuell 5d0988559b
Component property can be mixed value (#5355) 2020-11-16 01:36:55 -06:00
Luke Towers d34fb8ab51 Improve Twig security policy
Follow up to 106daa2930...7cb148c167. Thanks to @ka1n4t for the additional review.
2020-11-13 03:48:27 -06:00
Ben Thomson 50816a9556
Add support for defining quick actions in the Backend's main nav (#5344)
Plugins now have the ability to define quick actions through a "registerQuickActions" method, which follows the same configuration as the "registerNavigation" method. It is still recommended and preferred that most plugin functionality be defined in their own main menu items, but this will allow a plugin to easily define a shortcut (or remove one).
2020-11-10 12:53:17 +08:00
Marc Jauvin f18769e282
Check that mail templates/layouts exist before extracting view content (#5322)
Co-authored-by: Luke Towers <github@luketowers.ca>
Co-authored-by: Ben Thomson <git@alfreido.com>
2020-11-10 10:47:56 +08:00
Salvatore Brosio df91c529a1
Improved Italian translations (#5338)
Co-authored-by: salvatore brosio <salvatore.brosio@gmail.com>
2020-10-29 11:25:19 -06:00
Bertware 6fb3708440
Improve Dutch translation (#5328)
Sources:
https://www.vandale.nl/gratis-woordenboek/nederlands/betekenis/component
http://de-of-het.nl/component/
2020-10-23 14:14:59 -06:00
Luke Towers fbb470c7ee UX improvements for managing plugins.
Fixes #5127, also will force a page reload after changing the status of a plugin (remove, disable, enable, etc) so that the menu structure is accurately reflected.
2020-10-22 16:14:14 -06:00
Luke Towers 86496ff818
Support disks that can't be serialized in ImageResizer. (#5324)
Requires https://github.com/octobercms/library/pull/532
2020-10-22 13:20:19 -06:00
TimFoerster bd83f34ac4
Minor UX tweak (#5325)
Change order to plugin, theme to match the install page.
2020-10-22 09:02:22 -06:00
Luke Towers 51d1c16369 More tweaks to the default publisher permissions, added separate permission for users to manage their own personal editor preferences. 2020-10-20 09:20:16 -06:00
Marc Jauvin aa9c209e76
Hide stripe load indicator when a redirect response is returned (#5321)
Fixes #5055
2020-10-19 11:08:37 -06:00
Luke Towers a9d54eaa97 Warn about unsupported cache drivers being used for image resizing 2020-10-15 09:48:46 -06:00
Samuel Georges 3dc105173a Only allow local files via view engine
The Laravel view engine wants to supply the Twig engine with an absolute path, even though this is outside the inclusion rules. This implements a temporary exception to wave it through. It seems like a suitable alternative instead of implementing a reverse lookup to ensure the path is a valid view file, since we can trust the source engine has passed the value through its resolver already

Fixes previous fix
2020-10-13 19:14:49 +11:00
Salvatore Brosio 8a9775428b
Improve Italian translation (#5310) 2020-10-12 12:11:24 -06:00
Ayumi df4c2cf86e
Default session.same_site to Lax (#5293) 2020-10-12 12:10:17 -06:00
Samuel Georges 11c93f0a3b Fixes View::make recursion
This logic is called via {% include %} (fixed) and as a custom .htm driver for View::make (broken). The previous change was too aggressive and broke the latter. This still fixes arbitrary file inclusion whilst retaining the original design. Both logic paths are now fixed and have been tested
2020-10-11 19:05:38 +11:00
Nick Khaetsky f8f5e6e022
Changing translation of "layout" word in Russian (#5291)
Last commit changed translation of word "layout" from 'Шаблон' to 'Макет'. By "straightforward" translation this was maybe correct, but contextually not. We decided to make a poll, to vote for new translation.
2020-10-02 02:38:10 -06:00
Blaž Oražem 4d25ec6813
Improve Slovenian translation (#5292) 2020-10-02 02:35:39 -06:00
Samuel Georges f9e14b02f5 Only allow view files in system twig
This no longer allows arbitrary inclusions, only views from the native Laravel view engine. Note this also affects the cms twig loader
2020-09-30 11:11:03 +10:00
Pierre-André Vullioud b6ee7d9bca
Improve French translation (#5283) 2020-09-24 09:47:38 -06:00
Luke Towers 0101e1f96b Fix issue with image resizer URLs that contain URL-encoded characters (i.e. spaces)
Don't double decode the URL when validating it because the routing engine already decoded it once
2020-09-19 14:07:23 -06:00
Luke Towers 15ca68c22d No need to throw exceptions when generating MediaLibrary URLs 2020-09-18 16:01:02 -06:00
Luke Towers fe2ca6c15e Fix issue where resized images were not correctly identified as already having been resized when atomic (blue/green) deployment strategies are used in conjunction with files being stored on the local filesystem in a shared symlinked storage folder. 2020-09-18 00:11:11 -06:00
Luke Towers 618e2b58ab
Ignore images that can't be processed by the resizer 2020-09-17 22:53:49 -06:00
Ben Thomson 216b0d6004
Remove errors from `october:fresh` and indicate which demo files were moved
Follow-up work to fc9d6233a8.
2020-09-14 08:09:00 +08:00
Marc Jauvin fc9d6233a8
Allow october:fresh to remove remove the demo plugin even when the demo theme has already been removed (#5275) 2020-09-13 16:51:09 -06:00
Luke Towers 8a785e4393 Tightened up the default permissions granted to the "Publisher" system role out of the box 2020-09-11 02:10:59 -06:00
Ben Thomson 619be11d23
Make "october:env" command privileged.
This allows developers to use the command even if plugins are failing to boot due to missing configuration options (such as the DB configuration being incorrect). Previously, plugins which use the database in boot would prevent the command from running if the database details were incorrect.

This change removes a barrier from configuring your site correctly.
2020-09-09 17:47:18 +08:00
Ben Thomson b251867f56
Use path.config binding in "october:env" to allow unit test to work 2020-09-09 12:38:48 +08:00
Raja Khoury 561815cac1
Define beforeAddAsset properties as references in docs. (#5269) 2020-09-09 10:18:51 +08:00
Luke Towers 2c4d3c9f98 Fix issue where URLs generated by the ImageResizer were not correctly encoded.
Related https://github.com/laravel/framework/issues/34199
2020-09-08 16:04:40 -06:00
Luke Towers ce47c0248f Fix issue displaying protected file thumbnails when width or height is empty.
Related #5267
2020-09-07 15:23:00 -06:00
lctoan 1ef50d4751
Improve Taiwanese translations (#5264) 2020-09-07 09:48:12 -06:00
Luke Towers 79cbfa34a6 Composer updates for 1.1.0 2020-09-06 21:07:10 -06:00
Luke Towers fd2d634b5e Composer updates for 1.0.469 2020-09-06 21:05:00 -06:00
Luke Towers dd5fd34ae7 Merge branch '1.0' into develop 2020-09-04 01:27:53 -06:00
Luke Towers 7cb148c167 minor cleanup and docblocks 2020-09-04 01:23:03 -06:00
Samuel Georges ceb2ff8a6e Clean up redundancies 2020-09-04 13:35:21 +10:00
Samuel Georges 4c650bb775 Security fixes for v1.0.469
Introduces sandbox policy to block extendable methods allowing arbitrary code execution
2020-09-04 13:02:01 +10:00
Ben Thomson 5bceda9496
Add "changes" option for "october:version" command.
Will include a list of added/modified/removed files when detecting the October CMS build.
2020-09-03 11:48:35 +08:00
Ben Thomson 4141646105
Implement improved "set build" replacement (#5087)
This change implements an improved "set build" utility through the "october:version" Artisan command that, instead of checking the October CMS server for the latest build, checks the module files against a source manifest kept on GitHub.

This check allows us to accurately determine the build based on the module files in the October CMS installation, and can even detect versions if the module files are modified (except in the cases of extreme modification).

An additional utility has been implemented, "october:manifest", which will build the manifest JSON file in order to provide the maintainers with a way of generating this manifest file as required.

Replaces #4615.
2020-09-02 14:48:08 +08:00
Luke Towers bf241baee7 Fix handling some target values for linkable tabs.
Replaces #5257
2020-09-01 13:27:03 -06:00
Ben Thomson 32c63e0e3c
Reorder cases to keep default at bottom as per established style 2020-08-31 16:00:21 +08:00
Ben Thomson dce3931f20
Clean up uncustomised partials if they are no longer provided.
An exception was being thrown in some instances if a partial had been added to the DB that was provided by a plugin that no longer exists, or had been disabled. This will remove any partials provided by non-existent plugins, only if they haven't been subsequently customised by the developer.

Fixes https://github.com/octobercms/october/issues/5065
2020-08-31 14:18:53 +08:00