Stephan
9ba08f275e
Merge branch 'temp-U4-9337' of https://github.com/umbraco/Umbraco-CMS into temp-U4-9337
2017-01-06 09:15:43 +01:00
Stephan
aadd0c9129
U4-9337 - asymmetric route caching
2017-01-06 09:12:25 +01:00
Shannon
b3b79a792f
Merge branch 'refs/heads/dev-v7' into temp-U4-9337
2017-01-06 17:40:40 +11:00
Sebastiaan Janssen
a10b59d03b
Revert "Fixes: U4-9217 - Sanitize tags before storing them in the database"
...
This reverts commit 47c8e6854e
2017-01-05 17:14:14 +01:00
Sebastiaan Janssen
e6b1ecb851
Better way of cleaning the file extension to prevent XSS attacks
2017-01-05 11:52:06 +01:00
Claus
2196ab3713
changing this to use ToSafeFileName instead of just trimming for blank characters.
...
issuing a request with any character not allowed in a file path, appended to the filename - allows you to trick the validation like with the blank characters appended.
2017-01-05 11:10:21 +01:00
Stephan
d5e66252dc
U4-9337 - minor simplification
2017-01-05 09:25:30 +01:00
Sebastiaan Janssen
05cb30d79c
Trim the file name so that it doesn't get accepted by the server if it's a disallowed file
2017-01-04 17:01:26 +01:00
Sebastiaan Janssen
c472d4975e
Add some extra logging to ScheduledPublishing to more easily see where errors are coming from
2017-01-04 16:31:55 +01:00
Stephan
13ed3303f5
U4-9337 - url routing perfs
2017-01-04 13:56:41 +01:00
Shannon
256ceef875
changes PublishedContentCache to explicitly cast to XmlElement (perf)
2017-01-04 18:12:28 +11:00
Niels Hartvig
60f6a60ca9
Update install post url to https
2017-01-03 16:11:32 +01:00
hartvig
5de21734c0
Merge pull request #1650 from Bitmapped/U4-9298
...
Fix U4-9298
2017-01-03 12:56:46 +01:00
Sebastiaan Janssen
18deb8ad99
Merge pull request #1666 from defsteph/patch-1
...
Fixes issue U4-9332
2017-01-03 12:54:09 +01:00
Shannon
4e2fb8e5dc
Fixes IP nuget references and fixes up several other Nuget assembly references.
2017-01-03 10:36:26 +11:00
Stephan Lonntorp
1b8c68af02
Fixes issue U4-9332
...
U4-9332 Language of DefaultCultureDictionary is cached without the current Culture identifier
2017-01-02 14:53:57 +01:00
Sebastiaan Janssen
f2f4c23c80
Merge pull request #1652 from umbraco/U4-9301
...
Updates login controller to not accept non local urls
2016-12-20 13:55:31 +01:00
Shannon
39505cd868
U4-9262 CleanForXss breaks rgba() values set as grid background color style
2016-12-20 13:27:53 +11:00
Niels Hartvig
da27108d0d
Updates login controller to not accept non local urls
2016-12-19 10:44:22 +01:00
Brian Powell
afa39866ad
Fix U4-9298
2016-12-17 21:12:45 -05:00
Shannon
7254db40eb
publicizes ExamineExtensions.ConvertSearchResultToPublishedContent
2016-12-15 17:44:32 +11:00
Sebastiaan Janssen
c607ceda48
Merge pull request #1557 from tompipe/U4-9127-SortMemberProperties
...
Fixed issue with member properties sort order
2016-12-09 08:59:52 +01:00
Claus
960040e51e
U4-9255 Not having access to settings section causes backoffice user to be logged out when browsing media list views
2016-12-07 12:57:29 +01:00
Shannon
4823235bf5
Ensures the cleaned value isn't double html encoded
2016-12-05 17:21:24 +11:00
Shannon
90f30c3f3c
Ensures tag values are Html encoded both on the client side and on the server side to prevent any xss
2016-12-05 17:13:07 +11:00
Stephan
22397ded9b
Be more tolerant with Xml cache document
2016-12-02 11:53:37 +01:00
Stephan
de1da4b060
Merge pull request #1635 from umbraco/temp-startuphandler-ordering
...
This allows for sorting startup handlers and modifying the list of startup handlers before they execute
2016-12-02 11:48:57 +01:00
Stephan
13f7f96101
Refactor app event resolver weights
2016-12-02 08:45:36 +01:00
Stephan
3e8f85a4b4
Be more tolerant with Xml cache document
2016-12-01 14:30:50 +01:00
Stephan
309081cccf
Merge branch origin/dev-v7 into temp-U4-9222
2016-11-28 13:06:06 +01:00
Shannon
1221c0e416
Merge branch 'dev-v7' of https://github.com/umbraco/Umbraco-CMS into dev-v7
2016-11-28 12:04:06 +01:00
Shannon
c505cc689b
Obsoletes access to ApplicationContext from UmbracoContext
2016-11-28 12:03:46 +01:00
Stephan
3a216c055e
U4-9222 - use HasPublishedVersion test
2016-11-28 09:52:45 +01:00
Sebastiaan Janssen
ee3a4614c3
Refactor all usages of SqlHelper, ExecuteReader and ExecuteXmlReader into using blocks
2016-11-26 18:02:57 +01:00
Shannon
eeb94e1668
U4-9222 The in memory XML cache is cloned everytime there is a content save even if there is nothing published
2016-11-25 18:07:27 +01:00
Stephan
0179540023
Rename WeightAttribute, change default to 100, cleanup
2016-11-24 18:13:05 +01:00
Shannon
e9b2175506
Fixes null check problem in ExamineEvents.ContentTypeCacheRefresherCacheUpdated
2016-11-22 15:16:07 +01:00
Sebastiaan Janssen
a2a4ad3947
Fixes U4-9212
2016-11-22 14:31:29 +01:00
Sebastiaan Janssen
d95f818e43
Fixes U4-9212
2016-11-22 14:04:31 +01:00
Shannon
0e57d558f6
updates cdf version
2016-11-18 14:34:31 +01:00
Shannon
93ee850bcc
publicize 2 events on UmbracoModule
2016-11-18 13:48:18 +01:00
Sebastiaan Janssen
0a883ae109
Make sure Umbraco runs in Visual Studio 2017
2016-11-16 18:55:12 +01:00
Sebastiaan Janssen
47dbb648fb
Merge pull request #1614 from umbraco/temp-u4-9077
...
U4-9077 - relation type repository cache
2016-11-15 18:30:01 +01:00
Shannon Deminick
ff499bff04
Merge pull request #1607 from umbraco/temp-u4-backport
...
U4-8909 backport from 7.6
2016-11-15 13:11:05 +01:00
Sebastiaan Janssen
26a04ca7e9
Merge pull request #1610 from umbraco/temp-U4-9134
...
U4-9134 XSS security issue in the grid
2016-11-15 12:56:21 +01:00
Claus
34d4b284fe
Merge pull request #1613 from umbraco/temp-U4-7833
...
U4-7833 Changing doc type results in invalid cache, lucene indexes, e…
2016-11-15 11:14:56 +01:00
Shannon
2de465e8f3
Ensures that indexes are rebuild for items that have had their content type's or property type's aliases changed, also ensures that the content refresher kicks in if a property type alias has changed (this wasn't previously being done)
2016-11-14 17:39:28 +01:00
Claus
f2c406f168
Merge pull request #1572 from umbraco/temp-U4-4196-gkonings-html5-dropzone
...
U4-4196 U7 - Umbraco HTML5 Drop Zone should honor media types
2016-11-14 09:59:22 +01:00
Claus
4f5bc9eb89
updating MediaController with AutoSelect option.
2016-11-10 12:36:52 +01:00
Stephan
b441c73604
U4-9077 - relation type cache refresher + policy
2016-11-09 13:05:23 +01:00
