4760 Commits

Author SHA1 Message Date
Luke Towers
fbb470c7ee UX improvements for managing plugins.
Fixes #5127, also will force a page reload after changing the status of a plugin (remove, disable, enable, etc) so that the menu structure is accurately reflected.
2020-10-22 16:14:14 -06:00
Luke Towers
86496ff818
Support disks that can't be serialized in ImageResizer. (#5324)
Requires https://github.com/octobercms/library/pull/532
2020-10-22 13:20:19 -06:00
TimFoerster
bd83f34ac4
Minor UX tweak (#5325)
Change order to plugin, theme to match the install page.
2020-10-22 09:02:22 -06:00
Luke Towers
a9a2c6e83b Improve handling of custom editor styles in the backend 2020-10-20 15:35:27 -06:00
Igor
baecc2c1e6
Fix codestyle (#5323) 2020-10-20 15:02:53 -06:00
Luke Towers
51d1c16369 More tweaks to the default publisher permissions, added separate permission for users to manage their own personal editor preferences. 2020-10-20 09:20:16 -06:00
Marc Jauvin
aa9c209e76
Hide stripe load indicator when a redirect response is returned (#5321)
Fixes #5055
2020-10-19 11:08:37 -06:00
Luke Towers
a9d54eaa97 Warn about unsupported cache drivers being used for image resizing 2020-10-15 09:48:46 -06:00
Samuel Georges
3dc105173a Only allow local files via view engine
The Laravel view engine wants to supply the Twig engine with an absolute path, even though this is outside the inclusion rules. This implements a temporary exception to wave it through. It seems like a suitable alternative instead of implementing a reverse lookup to ensure the path is a valid view file, since we can trust the source engine has passed the value through its resolver already

Fixes previous fix
2020-10-13 19:14:49 +11:00
4NIK3T
463cd57bc0
Add removeSideMenuItems function (#5285)
Similar to addSideMenuItems, add a helper function to removeSideMenuItems
2020-10-13 15:51:59 +08:00
Salvatore Brosio
8a9775428b
Improve Italian translation (#5310) 2020-10-12 12:11:24 -06:00
Ayumi
df4c2cf86e
Default session.same_site to Lax (#5293) 2020-10-12 12:10:17 -06:00
Marc Jauvin
20181b16de
Remove hidden CMS pages from menus (#5309) 2020-10-12 11:35:33 -06:00
Samuel Georges
11c93f0a3b Fixes View::make recursion
This logic is called via {% include %} (fixed) and as a custom .htm driver for View::make (broken). The previous change was too aggressive and broke the latter. This still fixes arbitrary file inclusion whilst retaining the original design. Both logic paths are now fixed and have been tested
2020-10-11 19:05:38 +11:00
Ben Thomson
af6db51b79
Allow "no records" message to be defined for relation widgets.
Both the "view" and "manage" widgets, in list mode, now support a custom message when no records are available. To maintain BC, if "emptyMessage" is provided in the relation config, this is still used for the "view" widget in list mode.

Fixes https://github.com/octobercms/october/issues/3594
2020-10-07 14:05:17 +08:00
Nick Khaetsky
f8f5e6e022
Changing translation of "layout" word in Russian (#5291)
Last commit changed translation of word "layout" from 'Шаблон' to 'Макет'. By "straightforward" translation this was maybe correct, but contextually not. We decided to make a poll, to vote for new translation.
2020-10-02 02:38:10 -06:00
Blaž Oražem
4d25ec6813
Improve Slovenian translation (#5292) 2020-10-02 02:35:39 -06:00
Samuel Georges
f9e14b02f5 Only allow view files in system twig
This no longer allows arbitrary inclusions, only views from the native Laravel view engine. Note this also affects the cms twig loader
2020-09-30 11:11:03 +10:00
Pierre-André Vullioud
b6ee7d9bca
Improve French translation (#5283) 2020-09-24 09:47:38 -06:00
Ben Thomson
789de0217d
Add styling for fancy breadcrumb based on Backend brand colors 2020-09-24 16:52:59 +08:00
Luke Towers
0101e1f96b Fix issue with image resizer URLs that contain URL-encoded characters (i.e. spaces)
Don't double decode the URL when validating it because the routing engine already decoded it once
2020-09-19 14:07:23 -06:00
Luke Towers
15ca68c22d No need to throw exceptions when generating MediaLibrary URLs 2020-09-18 16:01:02 -06:00
Luke Towers
fe2ca6c15e Fix issue where resized images were not correctly identified as already having been resized when atomic (blue/green) deployment strategies are used in conjunction with files being stored on the local filesystem in a shared symlinked storage folder. 2020-09-18 00:11:11 -06:00
Luke Towers
618e2b58ab
Ignore images that can't be processed by the resizer 2020-09-17 22:53:49 -06:00
Ben Thomson
ed06a6f1ac
Do minItem initialization before checking current value in repeater prep
Fixes https://github.com/octobercms/october/issues/5274
2020-09-17 12:45:55 +08:00
Ben Thomson
216b0d6004
Remove errors from october:fresh and indicate which demo files were moved
Follow-up work to fc9d6233a8da738b5b8bbdf2fb7e6fd67da12b66.
2020-09-14 08:09:00 +08:00
Marc Jauvin
fc9d6233a8
Allow october:fresh to remove remove the demo plugin even when the demo theme has already been removed (#5275) 2020-09-13 16:51:09 -06:00
Luke Towers
dca6128501 Change Twig template loading fallbacks
Previously:
- registered Laravel view file
- attempt to load file as a CMS partial

Now:
- registered Laravel view file
- valid CMS partials
- any file that Twig can access (from the project root) rendered as a plain twig template (but with support for the CMS twig environment)

Fixes 80aab47f04 (commitcomment-42223643), https://github.com/octobercms/october/issues/5261#issuecomment-691235167
2020-09-11 15:47:49 -06:00
Luke Towers
8a785e4393 Tightened up the default permissions granted to the "Publisher" system role out of the box 2020-09-11 02:10:59 -06:00
serega-kasyanow
4c41eee1b3
Update module facade docblocks (#5273) 2020-09-11 10:49:16 +08:00
Luke Towers
b407f26e02 Add support for \Path\To\Class::staticMethodName for defining field options.
Related: 95d0b61a29
2020-09-10 12:12:46 -06:00
Ben Thomson
619be11d23
Make "october:env" command privileged.
This allows developers to use the command even if plugins are failing to boot due to missing configuration options (such as the DB configuration being incorrect). Previously, plugins which use the database in boot would prevent the command from running if the database details were incorrect.

This change removes a barrier from configuring your site correctly.
2020-09-09 17:47:18 +08:00
Ben Thomson
b251867f56
Use path.config binding in "october:env" to allow unit test to work 2020-09-09 12:38:48 +08:00
Raja Khoury
561815cac1
Define beforeAddAsset properties as references in docs. (#5269) 2020-09-09 10:18:51 +08:00
Luke Towers
2c4d3c9f98 Fix issue where URLs generated by the ImageResizer were not correctly encoded.
Related https://github.com/laravel/framework/issues/34199
2020-09-08 16:04:40 -06:00
Luke Towers
ce47c0248f Fix issue displaying protected file thumbnails when width or height is empty.
Related #5267
2020-09-07 15:23:00 -06:00
lctoan
1ef50d4751
Improve Taiwanese translations (#5264) 2020-09-07 09:48:12 -06:00
Luke Towers
79cbfa34a6 Composer updates for 1.1.0 2020-09-06 21:07:10 -06:00
Luke Towers
fd2d634b5e Composer updates for 1.0.469 2020-09-06 21:05:00 -06:00
Luke Towers
482167d1d1 Merge branch '1.0' into develop 2020-09-04 15:23:02 -06:00
Luke Towers
e9e4210842 Allow infinitely nested CmsObjects that may have been permitted to load previously through the filesystem continue to load. 2020-09-04 15:22:48 -06:00
Luke Towers
91e4e96929 Allow the Filter widget container to be targeted by the AJAX framework 2020-09-04 14:29:06 -06:00
Luke Towers
dd5fd34ae7 Merge branch '1.0' into develop 2020-09-04 01:27:53 -06:00
Luke Towers
7cb148c167 minor cleanup and docblocks 2020-09-04 01:23:03 -06:00
Samuel Georges
ceb2ff8a6e Clean up redundancies 2020-09-04 13:35:21 +10:00
Samuel Georges
4c650bb775 Security fixes for v1.0.469
Introduces sandbox policy to block extendable methods allowing arbitrary code execution
2020-09-04 13:02:01 +10:00
Ben Thomson
5bceda9496
Add "changes" option for "october:version" command.
Will include a list of added/modified/removed files when detecting the October CMS build.
2020-09-03 11:48:35 +08:00
Ben Thomson
4141646105
Implement improved "set build" replacement (#5087)
This change implements an improved "set build" utility through the "october:version" Artisan command that, instead of checking the October CMS server for the latest build, checks the module files against a source manifest kept on GitHub.

This check allows us to accurately determine the build based on the module files in the October CMS installation, and can even detect versions if the module files are modified (except in the cases of extreme modification).

An additional utility has been implemented, "october:manifest", which will build the manifest JSON file in order to provide the maintainers with a way of generating this manifest file as required.

Replaces #4615.
2020-09-02 14:48:08 +08:00
Web-VPF
50bdfa0c39
Improve Russian translations (#5258) 2020-09-02 11:58:00 +08:00
Luke Towers
bf241baee7 Fix handling some target values for linkable tabs.
Replaces #5257
2020-09-01 13:27:03 -06:00