forked from modxcms/revolution
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathchangelog.txt
4131 lines (4050 loc) · 293 KB
/
changelog.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
This file shows the changes in recent releases of MODX. The most current release is usually the
development release, and is only shown to give an idea of what's currently in the pipeline.
MODX Revolution 2.7.1-pl (TBD)
====================================
- Fixed CVE-2018-17556 [#14336]
- Fixes bunch of various XSS issues in the manager [#14335]
- Fix issue with resource list preventing parents from working correctly [#14329]
- Fixed issues with tab width and very long strings in the vertical tabs [#14317]
- Refactored tag input renderer to fix rendering with empty options list [#14319]
- Fix duplicating static templates, snippets etc. with an empty category [#14203]
- Don't include the resource ID in real time aliases [#14210]
- Move resource_uri and resource_uri_overide to page-settings-right-box-left region [#14297]
- Fix position slide-in/slide-out button of Resource tree [#14298]
- Fix context menu position on user page "Access Permissions" tab [#14295]
- Fixed bug with unexpected incremented TV ranks in Form Customization [#14281]
- Improve description of the system setting user_settings_desc to clarify meaning [#14249]
- Improved display of information about (missing) dependencies when you install a package/extra [#14255]
- Fix an issue where old static files where removed even if the automate static files system setting was turned off for that element type [#14208]
- Nested categories display their name instead of their id [#14205]
- Fixed case when empty date TVs can be saved even if "allow blank" is set to false [#14290]
- Fix empty Constraint column in Form Customization if constraint value is zero [#14287]
- Don't remove the trailing slash when redirecting to the manager after logging in [#14278]
- Added explanatory text with MODX tag to the description of the System Settings, Context Settings and Lexicon Management sections [#14265]
- Bugfix for transport resolution, if the package is not found on the current provider [#14260]
- When deleting an element in the tree, the confirmation window will show the translated element type name [#14272]
- Fix edit empty files from tree [#14284]
- Enhanced the error message of a wrong MODX_CORE_PATH [#14276]
- Fix checkDownloadedDependencies query to make package dependencies work properly [#14261]
- Don't remove static files if automated static files are turned off [#14228]
- Image template variable values escape/encode JavaScript tags only [#14263]
- Switch to the tab where the validation error occurs when saving an element [#14235]
- Make working Preview menu option in the recent edited resources widget [#14234]
- Apply Form Customization rules for TV's when a wildcard action is used [#14224]
- Add a Unit Test for testing the build process [#14213]
- Don't force the manager date time format for the date of birth field [#14214]
- Prevent symlinks and weblink to target itself [#14211]
- Checkbox Use current alias in alias path in the Form Customization sets [#14209]
- Use the right table name when fetching the MODX package providers [#14222]
- Fixed position of context menu in the media browser [#14199]
- Fix "undefined" text in Trash manager button tooltip. [#14191]
- Fix a broken top-menu [#14186]
- Fix the missing description for the system setting "Automatic Template Assignment" [#14173]
- Update config.js.php processor to be class based [#14161]
- Make the flat file processor deprecated message more useful [#14160]
- Fix missing styles on resource data heading [#14142]
- Remove unnecessary h2 on resource update heading [#14230]
- Use proper element icons in elements tree [#14001]
- Fix incorrect margin on the uberbar submit button [#14142]
- Fix error message overflowing on TVs [#14142]
MODX Revolution 2.7.0-pl (November 27, 2018)
====================================
- Add recursive method to replace reserved characters [#14156]
- Update phpThumb to 1.7.15-201810050741 [#14155]
- Fixed error log line wrapping problem [#13966]
- Fixed call to a member function deprecated() of null [#14139]
- Deprecate 0.9.x parser migration utilities for removal in 3.0 [#14131]
- Add some deprecated logging [#14136]
- Validate the ID target for symlinks and weblinks [#14041]
- Add native PHP password hashing [#13926]
- Enable automatic static elements workflow [#14135]
- Fix and normalize combo-boolean tv option values [#14129]
- Allow a middle mouse click to open links in a new tab/window [#14061]
- Fixing getlist processors for combos that have a page size [#14116]
- Improved messages on plugin editor page [#14128]
- Add "OnBeforeRegisterClientScripts" event [#14123]
- Trash manager [#14058]
- Implemented quick create buttons on tree nodes for documents [#13774]
- Copy file/folder path to clipboard [#14078]
- Add method for logging deprecated method usage [#14217]
- Fixing user combo with preselected user ids [#14113]
- Restore the setup options window title, if two packages are installed with setup options [#14120]
- On PHP 5.4+, clone the modSystemEvent object so values can be transmitted between plugins [#13116]
- Make path for custom MODX error handler class configurable [#14119]
- Resolve issue with package update window when clicked multiple times [#13985]
- Update Smarty to 3.1.33 [#14126]
- Fixed the name of system setting about allowing or not eval in TV [#14124]
- Hide Input Option Values for TV types where irrelevant [#14040]
- Improve display of double-height dashboard widget [#14117]
- Fix for the password length error message during setup [#14112]
- Apply containerOptions correctly when creating database during installation [#14069]
- Use max_input_nesting_level for max depth argument in modX::sanitize [#14098]
- Pass missing signature to lexicon when package uninstall fails [#14066]
- Prevent double-click resulting in blank page from media browser [#14076]
- Clear system/phpthumb connector properties to prevent unnecessary warnings [#14096]
- Constrain MODx.Window to browser's viewable area by default [#14090]
- Delete files in media browser with '&' in the file name [#14054]
- Prevent invalid relative media source path from revealing root path contents [#14038]
- Prevent an infinite loop in sendErrorPage() [#14108]
- Got rid of bower from theme build process [#14091]
- Set the min-height of a x-combo-list-item when it is empty (no text) [#14092]
- Fixed manager header height on resize [#14083]
- Improved performance and requests timing by changing the counting of children via subqueries [#14065]
- Improved the isBinary checks in modFileHandler class [#14027]
- Fixing images escaping their container in media browser [#14052]
- New RewriteRule to hide dot directories from the public access. [#13930]
- New system setting with default media source type value [#14012]
- Fixed handling $depth variable during recursive calls in getTree method [#14002]
- Prevent header overriding in included template of error unavailable [#13986]
- Add ability to see all elements under tree nodes for Categories [#13997]
- Correct display of policy permissions in access control grids [#13994]
- Make the resource class a little closer to SOLID principles [#13877]
- Smart detecting of used plugins for expanding rows in grids [#13992]
- Login forgotten password improvements [#13987]
- Enhancement for dashboard jumping around on page load [#14032]
- Set the caption for node elements inside categories [#14029]
- Make policies in grid sortable by enabled/disabled mark [#14004]
- Remove non-functional cache_disabled system setting [#14022]
- Reduce log level to WARN when calling non-cacheable tags inside cacheable ones [#14017]
- Remove cache_system_settings from system settings [#13832]
- Prevent directory traversal and limit files deleted when clearing modFileRegister [#13980]
- Filtering user parameters before passing them into phpthumb class #13979
- Update phpThumb to 1.7.15-201806071234 #13938
- Require minimal PHP version (in composer.json) #13939
- Prefer ampersand replacement of the the translit class [#13931]
- Add iconv_ascii transliteration [#13932]
- Add set_sudo permission [#13807]
- Log setlocale errors [#13878]
- Various improvements regarding password generation and validation [#13923]
- Make error.log location customizable [#13768]
- Add system setting for partial resource cache clearing feature [#13588]
- Prevent line-wrap in error log [#13843]
- Add template icon for resources in search results in the uberbar [#13882]
- Remove duplicate code of password generator and fix an issue with the empty value of password_generated_length setting [#13909]
- Add ID number to manager pages (resources and elements) [#13914]
- Add option to supply waitMsg on submit in MODX windows [#13915]
- Show validation errors when setting a new user password [#13585]
- Add CLI install script for use with composer create-project [#13790]
- Allow extension packages to have an empty table_prefix [#13716]
- Add wildcard support to form customization actions [#13775]
- Make HTTPS server check accept any non-empty value [#13794]
- Add ability to search by id on all objects in manager search [#13804]
- Add automatic_template_assignment feature [#13700]
- Media Browser optimizations [#13805]
- Add "Purge Old Versions" button to the package version listing to clean up old versions [#12818]
- New resource option "Use current alias in alias path" to allow hiding resources from the URI [#11153]
- Make $modx->setDebug support E_LEVEL constants (e.g. E_NOTICE/E_ERROR) and fix setting debug to 1 not working [#12579]
- Use stricter check for string type in resource tree to avoid uncaught error in edge cases [#13262]
- Allow plugins OnDocFormRender to set templates with $resource->set('template', 3) [#13049]
- Add "filterPathSegment" output filter to turn a string into url-safe string [#13699]
- Make sure requests to containers without the container suffix are redirected to the right url with container suffix [#13142]
- Ignore spaces in allowedExtensions properties and relevant system settings to ensure the right file types show up [#13702]
- Add list of recent manager log entries to the Resource Overview page [#13734]
- Prevent notices for undefined Smarty placeholders [#13748]
- Remove some unused images [#13788]
- Fix incorrect hex colors in TV input options description [#13776]
- Change modResource.description column to text [#13802]
- Fix modDbRegister->clear and use fully qualified name [#12965]
MODX Revolution 2.6.4-pl (June 7, 2018)
====================================
- Fix sorting by access column in Template Access tab of Template Variable edit view [#13893]
- Make sure category is not null before checking add_children permission when creating chunks [#13906]
- Address various minor XSS issues in the manager [#13887]
- Update xPDO to 2.7.0 to solve bug with getIterator and MODX Resource Group ACLs [#13889]
- Update phpmailer from 5.2.21 to 5.2.26 to fix various security issues [#13886]
MODX Revolution 2.6.3-pl (April, 19, 2018)
====================================
- Fix installation of transport packages with setup options [#13861]
MODX Revolution 2.6.2-pl (March 30, 2018)
====================================
- Display context name and key in Context dropdown [#13839]
- Only save properties modified from the default for an element in Property Sets [#13799]
- Replace usages of each() to avoid deprecated warnings in PHP 7.2 [#13829]
- Prevent adding ./ to filepath when in root of a mediasource [#13778]
- Fix error with getonline processor on systems with only_full_group_by sql_mode [#13835]
- Prevent logging errors for comments or empty tags [#13771]
- Fix typo preventing verbose CURL option from being set in modRest [#13798]
- Prevent http headers from being overwritten in modRest [#13797]
- Fix sending messages to wrong recipients in message/create processor [#13796]
- Stop sending too much data on package install request [#13813]
- Add events permission to Administrator policy on new installs [#13830]
- Remove max width from the tree sidebar [#13637]
- Select the correct media source when editing a static element [#13750]
- Fix the setup language being reset to English in the last step [#13611]
- Fix incorrect view url after changing the resource url [#13768]
- Fix silent fail on login without manager access [#12706]
- Fix incorrect media source being used on image TVs when creating new resource in different context [#13609]
MODX Revolution 2.6.1-pl (December 15, 2017)
====================================
- Increase efficiency of cache refresh on autopublish events [#13572]
- Remove concatenated key from name field in Contexts grid [#13372]
- Prevent infinite loop when a modSymLink refers to itself [#13710]
- Get only unique template paths for manager controllers [#13717]
- Ensure dashboard widget exists before calling methods on it [#13604]
- Fix phpthumb issue in files tree and media browser [#13704]
- Show correct Resource type icon in search results [#13705]
- Allow callback if nothing is selected in MODx.browser [#13684]
- Fix Flush Your Permissions top menu item [#13690]
- Improve changelog display in package browser [#13677]
- Revert behavior of image_width and image_height for media source images [#13672]
- Fix CLI installation to properly detect MySQL server version [#13680]
- Fix title format in various manager views [#13668]
- Fix javascript issue on resources containing quotes [#13669]
- Fix console error when editing resources with tv tab [#13683]
- Fix invokeEvent call for new OnResourceCacheUpdate event [#13676]
MODX Revolution 2.6.0-pl (November 1, 2017)
====================================
- Add top padding to .modx-alert and .modx-confirm classes [#13652]
- Improve setUserGroups/addUsers methods [#13653]
- Enable sorting by 'assigned' column in template variable grid [#13598]
- Return better error message if group name already exists [#13600]
- Hide empty template variable tabs in the resource panel [#13649]
- Add .less, .scss, .sass and .css.map as default allowed upload file types [#13592]
- Enable context setting overrides in modResource->cleanAlias() [#13622]
- Add OPTIONS request method to modRestController [#13636]
- Fix redirect when deleting elements [#13644]
- Fix format of chunk title [#13643]
- Prevent connector errors from invalid ctx parameter [#13627]
- Fix processing of noncacheable elements inside cached [#13530]
- Fix site_status issue when a session is not available [#13635]
- Fix endless loop when error log is too big [#13632]
- Fetch Lexicon lang and topic lists from database [#13599]
- Add CSS class to TV containers [#13602]
- Add OnResourceCacheUpdate event [#13590]
- Add new Who's Online dashboard widget [#13545]
- Additional SVG preview improvements [#13629]
- Enable rendering of SVG previews in Media Browser [#13517]
- Add stream upload support for binary files to modRestService [#13164]
- Remove null-byte character check [#13581]
- Add search/filtering to plugin event list [#13552]
- Search improvements for user management [#13551]
- Improve description of TemplateVariable Input Option Values [#13550]
- Replace all hardcoded http versions by $_SERVER['SERVER_PROTOCOL'] [#13518]
- Make searchbar accessible via assistive tech landmarks [#13437]
- Make ContextResource optional in query for rebuilding contexts [#13360]
- Reduce varchar and text index prefixes for utf8mb4 support in mysql [#13559]
- Change new installs to create tables with InnoDB engine on mysql [#13462]
- Fix set height of error log [#13566]
- Reset user session token if it is set but value is empty [#13577]
- Fix chmod feature on directories [#13580]
- Fix resource tree ignoring hide_children_in_tree value [#13578]
- Skip date format check when using resource quick update [#13534]
- Fix ability to drag files more than once [#13533]
- Fix permission check for updating user group settings [#13544]
- Fix collapsing secondary buttons [#13558]
- Add unique index for modTemplateVarResource values [#13535]
- Fix media browser active state in tree [#13496]
- Fix media browser tree refresh after creating a directory [#13501]
- Prevent "New User Group" button being covered with long translations [#13555]
- Add modx_media_sources_elements when a context is duplicated [#13529]
- Remove resource template values when context is removed (cherry-pick) [#13525]
- Fixed issue with incorrect signature during installing two packages with setup options (cherry-pick) [#13557]
- Added loading error log only via ajax to avoiding blank page in case bad characters in log file [#13560]
- Added DKIM attributes to PHPMailer [#13303]
- Hide user group tree panel splitbar if center panel is hidden (cherry-pick) [#13520]
- Added missing setting for primary user group during creating a new user [#13528]
- Remove exposing of full path from error message when controller not found in the Manager [#13430]
- Remove hardcoded modUser references in user processors [#13532]
- Secondary button height fixes [#13543]
- Add newNameField to modObjectDuplicateProcessor to correct error messages [#13521]
- Added ability to duplicate a context from the contexts grid & while editing a context [#13540]
- Honor the failed_login_attempts setting [#13516]
- Added option to allow double encoding to htmlentities output modifier [#13325]
- System events are now listed with their attached plugins [#13324]
- Added ability to return custom error message via plugin when a user authenticates [#13204]
- Create a new "please wait" windows on any package download instead of hide/show [#13506]
- News & security feeds in the manager welcome page are now loaded using AJAX [#13507]
- Added resource pagetitle & ID when deleting a resource [#13497]
- Remove unused path_search and url_search processors in setup [#13433]
- Fix logging an empty value in modUser->joinGroup() [#13445]
- Fix featured flag in package listing not interpreting the string value [#13470]
- Re-style the templated package provider thumbnail grid [#13274]
- No addition on a JS string! [#13401]
- Sessions are marked as staled after creating/updating/removing a user group/policy [#13311]
- Clearing cache from the manager is now logged in manager actions [#13350]
- Context sorting in trees is now enabled by default [#13356]
- Add events for package install, uninstall, and remove [#12936]
- Add setting to log when snippets are called that don't exist [#12984]
- Added option to disable EVAL binding in TVs [#13224]
- Allowing using keyboard modifiers to open some links in new tabs [#13103]
- Pass properties to the OnRichTextBrowserInit event [#13110]
- Add tag [^m^] to show used memory [#12981]
- Add Delete button to chunk/snippet/plugins-window [#13245]
- Add after(append) and before(prepend) output filters [#13021]
- Add class_key and item filter to the Manager Log [#13005]
- Change view_ permissions to edit_ permissions for elements in uberbar search [#13095]
- Allow manually editing rank of contexts [#13097]
- Pass the namespace to OnManagerPageInit event [#13104]
- Add new line and spaces regex to input filter [#13115]
- Add "UserProfile events" [#13153]
- List empty as default template in system settings [#12975]
- Add .x-form-display-field style [#12955]
- Add the ability to generate custom manager "top menus" [#12554]
- Replace dirname(dirname(__FILE__)) with dirname(__DIR__) [#13147]
- Add User Group description to UserGroups grid (with row toggle) [#13130]
- Add ExtJS Manager headers and descriptions components [#13118]
- Made modX::addEventListener & modX::removeEventListener actually work
- Correct email subscription form on help page [#13463]
- Add ability to see changelog of extras before downloading the update [#13410]
- Fix session_start error "Session callback expects true/false" on PHP 7 [#13041, #13073]
- Prevent "Call to member function get() on array" error, caused by TinyMCE [#13085]
- Prevent drag/dropping contexts when context_tree_sort is disabled [#13363]
- Improve user messaging with an outbox and improved message listing [#13390]
- Prevent dashboard breaking if a widget is missing a file [#13367]
- Fix positioning of TVs on the first resource tab [#13318]
- Prevent error on PHP 7 when using invalid output conditions [#13167]
- Allow use of date/strftime output filter on date strings without strtotime output filter [#8161]
- Make the save button available immediately when removing locks from the resource update page [#12028]
- Add option to skip duplicating resources when duplicating a context [#13277]
- Expand relative base paths in the file media source [#13295]
- Added pagetitle of the resource that has been duplicating into the title of duplication window [#13475]
- Fix incorrect pending changes warning when a resource was set to the empty template [#13483]
- Add optional $byName attribute to modResource->joinGroup to force joining a numeric group [#4014]
- Allow default TV values to use @BINDINGs [#3454]
- Make sure log_target being empty defaults to FILE instead of ECHO [#7659]
- Allow javascript handlers to be executed in the user-nav [#13094]
- Make sure the scripts cache uses the right file permissions [#12677]
- Add support for new_folder_permissions_cache and new_file_permissions_cache settings to change permissions on cache folders [#12677]
- Add new modDirectory->getFiles() method to list files/folders in a directory [#13096]
- Some modRest refactoring to clean up code style and doctypes [#13133]
- Fix output filter handling of non-existent TV tags to be consistent with placeholders [#13203]
- Automatically change to the resource tab that holds an error when encountering a validation error saving a resource [#13202]
- Move OnFileManagerBeforeUpload event so it can also be used to prevent uploads or change file info [#13067]
- Lower memory usage of duplicating contexts with lots of children [#13217]
MODX Revolution 2.5.8-pl (TBD)
====================================
- Use pageSize from system settings for system settings grid [#13493]
- Fix date format for created field of package in the package provider [#13509]
- Add a mouseout listener to the 'Clear Filter' buttons across the manager [#13510]
- Add view_template:true for the "Content Editor" access policy [#13508]
- Refresh the parent (resource) node when creating the first children [#13499]
- Refresh element in tree after changing name in element's panel [#13502]
- Remove unused path_search and url_search processors
- Fix logging an empty value
- Update xPDO to fix issue with validation rules
MODX Revolution 2.5.7-pl (April 20, 2017)
====================================
- Try all available methods when attempting to download transport packages [#13419]
- Prevent stored XSS in UserGroup names and various other fields [#13418]
- Prevent user/email enumeration in forgot password feature [#13408]
- Prevent XSS cache poisoning via Host header [#13426]
- Proper use of json_encode and error handling for outputArray() in processors [#13389]
- Prevent reflected XSS in setup [#13424]
- Fix local file inclusion vulnerability in setup action parameter [#13422]
- Fix various local file inclusion preventions to also protect on windows [#13428]
- Remove htaccess from allowed file types on new installations [#13423]
- Prevent stored XSS in resource pagetitle [#13415]
- Make search bar work as expected on Chrome & Firefox [#13405]
MODX Revolution 2.5.6-pl (March 28, 2017)
====================================
- Enable Resource Group access column to be sorted [#12426]
- Prevent warning from array_key_exists when aliasMap not available [#13297]
- Fix broken images in File tree when media source above doc root [#13292]
- Encode HTML in the template description to prevent potential XSS [#13290]
- Use (but limit) setting for results per page in package management grid [#12518]
- Added validation for min and max length of text TV configuration [#9039]
- Allow value '0' for multi select TV items [#9492]
- Fix "undefined" on package management breadcrumb when updating [#12567]
- Reduce log level to INFO for links not found by modContext->makeUrl() [#13268]
- Fix error in Firefox preventing using enter in the uberbar [#12714]
- Fix error when deleting a file from a TV [#12417]
- On new installs set base_help_url setting to the new docs subdomain [#13309]
- Refresh resource tree and context grid on create and delete [#12495]
- Only call generateContext once when saving a resource [#13347]
- In get/setTVValue, consider numeric strings as ID instead of name [#12542]
- Validate chmod input [#13352]
- Prevent drag/drop of directories messing up directory structures [#13165]
- Get rid of duplicate scrollbars in the help window [#12914]
- Show proper error page when viewing an inaccessible symlink [#12380]
- Avoid duplication of modLexiconEntry objects when updating context settings [#12823]
- Fix system info's database tables tab on sqlsrv [#9854]
- Add comment to config.core.php files that its contents are overwritten on update [#10299]
- Fix double dots in the filename of downloaded static resources [#10267]
- Fix duplicating resource children which are hidden from the tree [#13298]
- Show proper error message when trying to rename a file/folder that already exists [#13256]
- Fix missing caption when duplicating a TV via the Edit TV page [#13317]
- Fix empty error popup when adding a usergroup to a media source without a policy [#12701]
- Fix close button on resource overview page [#12822]
- Hide database username, password and database name from advanced setup [#13090]
- Fix "Cannot read property 'style' of undefined" error when resizing viewport after closing a modal [#13294]
- Fix "o.field is undefined" error when checking a resource group [#13296]
- Fix phpdoc for modAccessibleObject->checkPolicy [#13301]
MODX Revolution 2.5.5-pl (February 8, 2017)
====================================
- Respect new_file_permissions setting when create/upload files in manager [#13246]
- Escape regular expression special characters in last query string of a superboxselect [#13236]
- Improve logging of bad links [#13268]
- Fix a few Smarty variables not being defined [#13117]
- Only load manager layout when the controller is not "browser" [#13135]
- Add autoHeight in the Create/UpdateSetting window [#13220]
- Address various potential security issues in setup [#13261]
- Validate file extension when renaming/creating files in file browser [#13240]
- Examples to rewrite all domains of one installation with/without www [#13249]
- Update MODX Transport Provider to use SSL URL [#13260]
- Add site name to the login title [#13254]
- Fix File Unzip feature [#13223]
- Fix truncating filename at space by downloading via filemanager [#13171]
MODX Revolution 2.5.4-pl (January 3, 2017)
====================================
- Update xPDO to 2.5.3 release to avoid xPDOQuery class not found error
MODX Revolution 2.5.3-pl (January 3, 2017)
====================================
- Fix listing packages on systems with non-utf8 locales [#13182]
- Update PHPMailer to 5.2.21 for CVE-2016-10045 patch [#13229]
- Access chunk array instead of chunk object instance [#13210]
- Update PhpMailer to 5.2.19 to protect against RCE vulnerability [#13227]
- Add various missing permission checks to processors [#13174]
- Update xPDO to 2.5.2 release
- Improve phpThumb InitializeTempDirSetting [#13151]
- Validate Resources when dropped onto weblinks and symlinks [#13212]
- Fix Resources not loading in the tree in sqlsrv [#12845]
- More specific removal of critical settings in MODX.config [#13180]
- Fix broken list of previously installed package versions [#13179]
- Fix incorrect media source name on Files tab [#12596]
- Update Font Awesome to 4.7.0
- Remove placeholders from login screen to fix accessibility bug/confusing screenreading [#13186]
MODX Revolution 2.5.2-pl (November 14, 2016)
====================================
- [SECURITY] Hide critical settings in MODx.config [#13170]
- [SECURITY] Prevent local file inclusion/traversal/manipulation [#13177]
- [SECURITY] Prevent path traversal in $modx->runProcessor [#13176]
- [SECURITY] Prevent unauthenticated access to processors [#13175]
- [SECURITY] Prevent path traversal in modConnectorResponse action param [#13173]
- [SECURITY] Update xPDO to 2.5.1 release
- Add security/login support for action based connector [#13158]
- Make one single connector file possible [#13157]
- Don't create a DirectoryIterator on non existing folders [#13127]
- Fixing tvLabel output filter empty needle warning [#13138]
- Fix session extension call using action based connector [#13146]
- Select modTemplateVarTemplate.rank for MySQL 5.7 ONLY_FULL_GROUP_BY SQL Mode [#13098]
- Fix new category option duplicating view of elements [#13137]
- Consistency in error messages, based on error type [#13126]
- Make sure things do not break when no valid json/empty string is returned OnMediaSourceGetProperties event [#13119]
- Removed superfluous code in the manager "gateway" [#13120]
- Set temporary directory for files processing in phpThumb [#13128]
- Upgraded phpThumb to 1.7.14-201608101311 [#13125]
- Force display errors during setup [#13107]
- Added duplicating caption field for TVs [#13100]
- Fix PHP warning if the response message is empty [#13111]
- Removed duplicate element ID [#13105]
MODX Revolution 2.5.1-pl (July 21, 2016)
====================================
- Preserve original behavior for 3PC RTE TVs [#13071]
- Fix with of install button after text change [#13078]
- Fix server port check in setup start script [#13037]
- Update phpThumb to version 1.7.14 [#13039]
- Show image preview in file tree for S3 media source [#13059]
- Fix problem with S3 bucket names containing dots [#13031]
- Add missing properties in modX class [#13035]
- Fix pagination in the "New event create" dialog [#13062]
- Fixing padding-top issue in MODx.Window [#13038]
- Use sans-serif font for TV textareas [#13045]
- Prevent reflected XSS in connector's JSONP support [#13051]
- Fix a SQL injection [#13052]
- Fix uberbar user search return invalid User ID [#13056]
- Fix width of the install button [#13057]
- Extended grunt build tasks [#13026]
- Remove deprecated curl option [#13032]
- Show resources marked as container with a folder icon in the tree, even if it has no children. [#13027]
- Restore missing Duplicate buttons on weblinks and symlinks [#12910]
- Fix changing labels via manager customisations on checkboxes [#12890]
- Fix extracting the title if it contains newlines when importing HTML [#12937]
- Fix code smell issues in modPhpThumb [#13022]
- Prevent using double quotes in extended user fields and containers to prevent breaking the context menu [#13012]
- Fix saving a resource if the pagetitle of the parent contains tags [#13017]
- Fix JavaScript error when editing an extended user field that contains markup [#12841]
- Increase the delay for opening top nav menu items to 0.5s to prevent misclicks [#12931]
- Allow email addresses validated by the extjs email vtype to have longer TLDs [#12940]
- Fix updating user settings [#12988]
- Fixed permissions for new files [#13000]
- Fix for 500 error after install using STRICT_TRANS_TABLES mode in mySQL [#13001]
- Fixed typo in scss [#12993]
- Remove all traces of manager HTML5 cache manifest [#12985]
- Fix rare database connection setup error (new installs/advanced upgrades) [#12997]
- Remove :first-of-type, reduce padding on container [#12973]
- Fix problem with multiple placeholders in a system setting [#12692]
- Set correct title to edit fc set [#12974]
- Corrected $_lang array index and $_lang string typo [#12979]
- Error 500 + installer fails when MYSQL Strict SQL Mode is ON [#12838]
- Use rawurlencode in modparser [#12675]
- Reference to values passed by reference got lost [#12951]
- Add uri to mysql/modcontext.class.php [#12971]
- Add missing viewport meta tag needed to enable the responsive manager [#12977]
- Avoid empty manager theme [#12989]
- Fix: expression is always true [#12956]
- Make sure uberbar resource search respects ACLs [#12960]
MODX Revolution 2.5.0-pl (April 21, 2016)
====================================
- Fix issue where site_start and default_template settings get the wrong ID on certain environments [#12959]
- Replace hard-coded charset in Default template with MODX setting [#12916]
MODX Revolution 2.5.0-rc2 (April 6, 2016)
====================================
- Set the leaf property to true instead of 1 [#12734]
- Increase the space between the content and the logo areas in the base template [#12898]
- Add missing preserve_menuindex setting [#12905]
- Fix displaying categories in Package Manager
- Update FileAPI to 2.0.20
- Fixing partial import of content with UTF-8 chars inside [#12896]
- Fix Media Browser when compress_js is enabled [#12899]
- Restore backwards compatibility in updated Smarty [#12897]
MODX Revolution 2.5.0-rc1 (February 3, 2016)
====================================
- Implement X-Powered-By header to send "MODX Revolution" on all requests [#12885]
- Add cleanup script to remove legacy files during upgrades
- Fix installed package list in package detail page when the package's name has spaces [#12870]
- Add filter and search to the templates grind in TV panel [#12873]
- Add typeahead for templates in resource panel [#12872]
- Fix session warning on HHVM [#12868]
- Add new stripmodxtags output filter [#12860]
- Add new base template and resource content [#12855]
- Fix re-definition of function mkdirs
- Add `createdon` date field to modUser [#12581]
- Ensure $restarted in templates/language.tpl always exists [#12847]
- Update LinkedIn link description on Help page [#12851]
- Fix undefined index in modOutputFilter->filter [#12856]
- Add new output filter 'htmlspecial' [#12861]
- compress_js no longer dynamically minifies javascript, instead it uses a prebuilt min.js for better performance [#12611]
- Autoload third party packages when viewing manager actions [#11866]
- Fix example core/ht.access file to properly lock down access to the core when used [#12503]
- Fix selecting values on the tag TV input type [#12627]
- Fix the insert element by drag & drop feature remembering properties it shouldn't [#12729]
- Potential improved speed on certain pages thanks to processElementTags optimisation [#12717]
- Fix checking for duplicate URIs when resources are unpublished [#12844]
- Add border for grids
- Change modResource Children to Composite relation [#12279]
- Allow searching by Resource ID in Uberbar [#12783]
- Add modParsedManagerController which can be used for developing CMPs with snippets and chunks [#12555]
- Allow custom redirect method for each action button in action bar
- Fire emptyTrash event after emptying recycle bin [#12673]
- Add anonymous_sessions to allow session-less access for anonymous users [#12616]
- Make the manager a lot more mobile friendly [#12776]
- Fix .icon-coffee class to show a coffee cup, use .icon-coffeescript for the code icon [#12784]
- Update Font Awesome to 4.5 (includes `icon-modx`!) [#12774]
- Make use of the maximum available height when viewing the error log [#12746]
- Improve usability of the tree by limiting click target for editing containers to the name [#12773]
- Add published_resources and unpublished_resources to result of OnResourceAutoPublish event [#12747]
- Improve keyboard navigation and screen reader support on the login screen [#12784]
- Update PHPMailer to 5.2.14: https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.14 [#12808]
- Update Smarty to 3.1.27: https://github.com/smarty-php/smarty/blob/v3.1.27/change_log.txt [#12807]
- Allow uberbar labels and icons to be set server-side in extended search processors [#12749]
- Add ability to unpack zip files in the file tree / media manager [#12775]
- Ensure setup can continue if date.timezone is not set [#12738]
- Make modPhpThumb class compatible with PHP7 [#12809]
MODX Revolution 2.4.4-pl (April 5, 2016)
====================================
- Make sure only recipient can mark user messages read/unread [#12944]
- Do not attempt to clean cache_db_handler if cache_db not enabled [#12942]
- Fix broken output filters on undefined placeholders introduced by #12835 [#12906]
MODX Revolution 2.4.3-pl (February 11, 2016)
====================================
- Various config_check improvements [#12628]
- Fix error embedding images in modPhpMailer [#12645]
- Prevent uncacheable elements from being cached in cacheable elements [#12835]
- Fix the DocBlock comment for leaveGroup() [#12877]
- Fix modX->getUser to force load settings when parameter is passed [#12840]
- Fix issue with parent name not showing when creating a new resource under a parent [#12849]
- Fix system settings pagination issue if default_per_page is > 30 [#12862]
- Remove the 'Installed on' part of the language string.
- Fix getOption call in modUser->getProfilePhoto
- Sets correct responseType in the rest service for multiple packages via a single request [#12669]
- Fix loading rich text editors on non-document resource types [#12632]
- Fix dashboard and dashboard widget save button [#12711]
- Fix failure message in Export processor [#12709]
- Fix tree style for deactivated plugin [#12712]
- Fix fatal error if user not found [#12772]
- Fix warning generated by configcheck dashboard widget if safe_mode or open_basedir is enabled [#12745]
- Include a random hash for core assets being loaded to refresh browser caches [#12700]
- Fix fatal errors in the manager on PHP7 [#12741]
- Fix "Remember Me" on the manager login [#12802]
- Show message after triggering a URI refresh [#12800]
MODX Revolution 2.4.2-pl (October 6, 2015)
====================================
- Fix emptying property sets on element save [#12580]
- Different tree styles for unpublished + hidemenu [#12699]
- Add patch for ExtJS Drag & Drop issue [#12617]
- Fix initialization of modUserGroupSettingUpdateProcessor processor [#12678]
- Add resource title in Manager Log for edited resources [#12589]
- Update Font-Awesome to 4.4 [#12598]
- Update setup to check the minimum supported PHP version [#12637]
- Add hover effect to tree expand/collapse icon [#12664]
- Fix not rendering output properties of custom TVs [#12635]
- Fix image width and add transparency pattern [#12670]
- Disable trash icon and set proper tooltip after removing resources [#12672]
- Pass 0 as id of default property set instead of "Default" [#12674]
MODX Revolution 2.4.1-pl (September 23, 2015)
====================================
- Update PHPMailer to v5.2.13
- Make user grid in ACL view consistent with user group view
- Update xPDO to 2.4.1-pl
- Fix dropping elements in template [#12572]
- On policy template update sync policies with policy template [#12654]
- Restore backwards compatibility for addons interacting with modTransportProvider [#12633]
MODX Revolution 2.4.0-pl (August 18, 2015)
====================================
- Preselect core namespace if it is available in namespace combo box [#12562]
- Fix namespace and policy filter in namespace access grid [#12560]
- Escape Site name in header
- Fix double nocompress option in advanced install
MODX Revolution 2.4.0-rc1 (August 12, 2015)
====================================
- Fix installing package dependencies when there are setup options [#12556]
- Fix potential E_RECOVERABLE (and other) errors in package download [#12543]
- Add missing return statement in the package download processor [#12539]
- Allow comma-separated list of constraints in Form Customization [#11239]
- Prevent firing OnDoc*Form* Events on the Resource Overview page [#11865]
- Automatically select the setup language based on Accept Language headers [#12011]
- Change the modUserProfile.country field to use ISO codes rather than localised country names [#12534]
- Add ability to prefill certain resource values in OnDocFormRender [#12535]
- Allow setup options in packages to execute javascript [#12298]
- Allow pressing enter in text areas [#12524]
- Make sure registered CSS/JS are loaded on deprecated manager controllers [#12529]
- New setting manager_use_fullname will show the fullname of the logged in user, instead of the username [#12527]
- Parse the forgot_login_email message using the parser, to allow lexicons or other tags in the email [#12266]
- Show error message when grid autosave fails
- Disable setup options button when dependencies are not met [#12531]
- Add config check to make sure the core folder is not web accessible [#12504]
- Add ability to search for resources by template in resource/search processor [#12268]
- Add download() method to modFileHandler [#11371]
- Remove unnecessary caching headers from the manager request [#12254]
- Fix logout from manager in case of broken javascript [#12344]
- Fix limited width of TV descriptions [#12494]
- Convert usergroup tree to usergroup tree & grid in ACL page
- Prevent dashboard widgets with no output to be displayed
- Add a reference of executed modPlugin object in modSystemEvent
- Add JSONP support to the modConnectorResponse
- Travis-CI automated test suite
- Enhance config check style & add check for min PHP version
- Log login action
- Log empty trash action
- Prevent displaying packages without a name from package provider
- Fix adding anonymous use group to ACL groups
- Clean "onAjaxException" to remove full HTML document tag to avoid breaking manager
- Target user menu wrapper to change "sub menu direction" instead of targeted IDs
- Implement new use_frozen_parent_uris option to respect frozen parent URIs in generating child URIs
- System Events Manager page
- Anonymous username as System Setting
- Prevent JS error when Media Source is not in the first combo store page
- Add regexp validation into text TV
- Various MySQL performance optimizations via new database indexes
- Fix TV's output properties column name in get properties processor
- Auto suggest setting key in contexts and users settings
- Add namespace permissions
- Added Property Set file and color input field
- Added option to not submit the emptyText of a form field
- Links in description for extras opens in new tabs
- Added ability send to provider information about language
- Fixing cancel button not actually closing the popup window
- a11y enhancements
- Added qtip for tree root nodes & media sources to display their description
- Updated setting groupingConfig options to grid
- Media browser improvements
- Fixed import HTML unicode error
- Added tvLabel output modified
- Added user photo profile field to user panel
- Added system settings to enable customization of the top bar navigation
- Added modMenu.description as tooltip in menu tree
- Added ability to customize media source icons
- Added ability to edit a media source from the files tree
- Added ability to customize context icons
- Added rank parameter to modUser->joinGroup method
- Added rank to categories
- Fixed package browser tree
- Added package dependencies
- Added contentType=string option to modRestCurlClient service [#11279]
- Added realtime resource alias generation [#11799]
- Added saveObject and removeObject methods to create and update processors [#12345]
- Improved error message styling in the manager [#12349]
- Added new option to date TV to hide the time from the users [#12348]
MODX Revolution 2.3.6-dev
====================================
- Unset modx.user.userGroups in leaveGroup [#12410]
- Fix fatal error when the database password contains a quote [#12528]
- Fix several "language string not found" errors [#12546, #12545]
- Add ability to disable on the fly compression to traditional installs [#12486]
- Fix output of [^p^] tag on certain locales [#12514]
- Fix counting rank of dashboard widgets [#12437]
- Prevent XSS in file create/update processors [#12513]
- Fix checking modMenu permissions with the same action value [#12361, #12255]
- Fix missing pagination on category dropdowns [#12469]
- Setup Options window is now bigger and grows as needed [#12297]
- Set request-specific cultureKey option dynamically [#12227]
- Make sure object processors pass a generic $object alongside the $objectType-based variable [#12243]
- Fix issue editing users when extended fields contain multibyte characters [#12484]
- Limit the size of images in Image TVs to 400px [#12498]
- Show MODX version and flavor as tooltip on the MODX logo [#12496]
- Normalize thumbnail size for image TV
- Set default background color for thumbs to WHITE instead of BLACK
- Updated default uploadable file types, including SVG and TIFF [#12526]
MODX Revolution 2.3.5-pl (June 25, 2015)
====================================
- Fix Account dropdown hover on small screens
- Compile Sass with libsass
- Update npm packages
- Update and Relax bower packages
- Fix D&D resource sort when auto_isfolder setting is enabled
MODX Revolution 2.3.4-pl (June 23, 2015)
====================================
- Allow access via id or alias when request_method_strict is false
- Fix resource caching in multiple contexts
- Bypass aliasMap for preview urls in manager
- Fix custom theme CSS
- Add Element/Resource name to the Quick update window's title
- Improve drag & drop resource sorting
- Fix row edit in site schedule grid
- Fix float value of input options
- Correct permission for Contexts menu item to "view_context"
- Show the template icons at the template tree section
- Fix saving binary field when creating content type
- Fix edit action for S3 media source
- Prevent using Ext.getCmp() when not needed in resource tree
- Improvement to news and security widget DNS check
- Better modMenu management
- Set media source config in RTE media browser
- Don't count Resources hidden from tree as children
- Hide the "Forgot your login?" link if allow_manager_login_forgot_password is set to false
- Update logo on setup page
- Remove unnecessary DIV from file TV tpl
- Remove unnecessary DIV from image TV tpl
- Remove resource locks correctly based on current user
- Fix tooltip full viewport width
- Update Font Awesome to version 4.3.0
- Update bower to build css correctly
MODX Revolution 2.3.3-pl (January 29, 2015)
====================================
- Add OnCacheUpdate event to refresh() method
- Check for valid google.com DNS before trying to load feeds
- Fix case of table_prefix and service_class in modX->_loadExtensionPackages()
- Fixed showing RTE in all resource types
- Fixed sorting in MODX browser
- Fixed updating resources from recent resources in user's profile
- Fixed duplicating user
- Unset modx.user.userGroups in joinGroup()
- Use window.location.search to populate MODx.request
- Added option to delete property from Property Set using the UI
- Fixed preserving locked attribute in elements after quick update
- Allow copy&paste system information page
- Fixed urlAbsolute path in media sources
- Fixed column width grid head/content
- Fixed connector's URL when getting media source list
- Make syncsite checkbox a system setting
- Added system setting for automatic/manual switching container property in resources
- Fixed showing lock tree icon for locked resources
- Fixed @INHERIT binding in TVs
- Make FC profiles sortable by template
- Removed limit to getnodes for menu items
- Fixed error message and missed lexicon for create chunk
- Fix timezone problem
- Fix javascript error while revert to default new property
- Hide Duplicate buttons from Resource panel when user don't have permissions
- Fix Password tab visible in edit profile to users without permission
- Remove C:\fakepath\ from filename when importing property sets
- Fix unnecessary scrollbars in windows
- Fix wrong error message for creating new namespace
- Remove limit from modx-combo-category combobox
- Improved generateContext method to be quicker
- Fixed loading theme based styles on login screen
- Fixed selecting the same file to upload again
- Fixed removing plugin from an event via the Update plugin event window
- Fixed autoredirect after creating user
- Fix context settings remove and update from window
- Fixed showing minLength and maxLength value in error msg for text TVs
- Prevent $this->resourceArray['resource_groups'] from being undefined
- Fixed disabling caching of a chunk's output
- Fixed Duplicate resource button visibility
- Updated memberof output filter to return integer
- Fixed setting resource as it's own parent
- Trim setting's key before saving
- Sort plugin events by enabled
- Restore permission for menu help
- Fixed processor path in user panel
- Move refreshURIs() call from clear cache to new menu item Refresh URIs
- Fix uploading packages on Windows
MODX Revolution 2.3.2-pl (October 21, 2014)
====================================
- Fixed issue with S3 buckets containing dots
- Fixes issue with Form Customizations containing multiple constraints on TVs
- Single-Select TVs now retain custom values in the dropdown select options
- Fixed birthdate on 1970/01/01 resulting in false
- Restores horizontal scrolling to the Resource tree [#11949]
- Language simplification for context menu items
- Fixed property set creation which allowed empty 'name'
- Fix for arrow that pointed wrong way in collapse areas
- Fixed rendering TVs to modx-resource-content by Manager customizations
- Fix default category name when creating a new element instead of showing 0
- Fix store load if init combobox value is 0
- Display context name in combo box
- Fixed elements search results icons
- Removed listeners/actions on Media browser data view double click
- Added visual indication in elements trees when an element is edited (active class)
- Removed unused code in Resource Tree Panel
- Enable path style on AWS driver if the bucket's name contains a dot
- More use of 'manager_date_format' in the manager
- Use FontAwesome checkbox icons instead of sprite images
- Made MODx.combo.Browser Media Source defaulting to the defined default Media source instead of hard coded id "1"
- Replace security/forms/set/export processor with a class based one and fix
- Fixed issue where batch removing access policies was only allowed for "core" policies (instead of preventing deletion for core policies)
- Updated alias length to 255 in ExtJS
- Fix superbox selects in toolbars
- Prevent combobox lists being taller than the screen, mainly from windows
- Fix MODx.Ajax.request ot handle multiple concurrent requests
- Fix loading default manager controller without changing the manager theme when the manager theme does not include the requested controller
- Fix encoded htmlspecialchars in resource overview > cache output tab
- Fix creation of folders in S3 media source root
- Disable keyboard shortcut to focus the search bar
- Updated "far" parameter to "C" (to provide correct thumbnails aspect ratio) in modfilemediasource
- When using resource_tree_node_tooltip system setting, make sure the given field is not empty before displaying the quick tip
- Updated welcome url for 2.3
- User / User Group Settings update and delete fix
- Fixed modx_user_group_settings table on SQLServer
- Make sure modContext config is "prepared" before using makeUrl()
- Have [[++server_port]] report the port number
- Consider dev version lower than alpha
- Handles "site preview" when default_context is not "web" context or when manager is on its own (sub)domain
- Fixes missing Permissions tabs for anonymous User Group
- Updated modPHPMailer to use getService instead of creating new instance of modError
- Refresh context's name in tree after changing it
- Use modx_browser_default_sort setting for sorting in RTE browser
- Fix front-end user group comparison bug when assigning new user groups [#11399]
- Prevent XSS via GET param for manager controller action [#11966]
- Fix CRC icons in tree
- Refresh/expand appropriate tree node when creating a resource using "quick create"
- Limit property set name/description length
- Added ability to update a namespace within a window
- Use lexicon strings instead of hard coded ones in manager login form
- Display an error when updating a user from grid with duplicate email address
- Create new instance of console on every action with package manager
- Reset addresses list on failure send
- Fixed superboxselect close button in Safari
- Fixed typo forcing empty calls to modError::addError() for all sent emails
- Fixed issue with tree node "jump" on expand/collapse
- Added some client side validation when creating a new user group
- Fixed mimetype issue on s3 Media Source
- Do not display setting modification date if no modification has been done [#11762]
- Moved user groups access tabs within a single permissions tab [#11769]
- Make use of FontAwesome for files icons [#11851]
- Fixed issue where required field was not highlighted [#11826]
- Updated NodeJS dependencies [#11827]
- Removed limit on Media Sources in the tree panel [#11834]
- File and directory sorting improvements, more natural and consistent [#10286]
- Accessibility improvements for new checkbox / radios [#11772]
MODX Revolution 2.3.1-pl (July 22, 2014)
====================================
- Make Gravatar optional (enabled by default)
- Update logos, login and help view
- Update base_help_url to be protocol relative
- Fix login after a session expired [#11763]
- Fix manager menus for sqlsrv driver [#11677]
- Refactor validation of a connector being included [#11738]
- Updated RSS security feed to be Revo specific [#9440]
- Do not output modScript include result w/o explicit string return [#11705]
- Move OnInitCulture event to parser service [#10366]
- Fix password reset feature [#11725]
- Adjust appearance of saving window for new design
- Fix labels / TVs in custom FC tabs [#11758]
- Fix hover-preview thumbnail border width in Files tree
- Fix long category name overflow in vertical tabs [#11728]
- Enable usernav menus for mobile devices
- Update phpthumb release to v1.7.13 [#11742]
- Fix pagination in Topic combobox [#11713]
- Simplify Gravatar profile image fallback [#11716]
- Correct duplicate method declarations in phpthumb class [#11700]
MODX Revolution 2.3.0-pl (July 15, 2014)
====================================
- Respect automatic_alias regardless of friendly_urls
- Prevent use of GET vars in login controller/processor
- Restrict returnUrl in login processor to url of login context
- Added drag/drop reordering of template variables on the templates TV grid [#11560]
- Added ability to use conditional custom output modifiers [#11610]
- Updated MagpieRSS Snoopy to 2.0.0
- Add strftime as alias for date output filter [#11550]
- Validate and sanitize _ctx placeholder used by ResourceManagerController
- Fixed incorrect sorting by rank in TV grid on template create/update screen
- Remove references to deprecated modX::getMicroTime()
- Fix parent ResourceGroup inheritance on create
- Preserve order of selected values in multiselect
- Updated PHPMailer to v5.2.8
- Updated phpThumb to 1.7.12-pre (current GitHub status)
- Added resource_tree_node_name_fallback system setting
- [#11297] Allow passing options to modRestCurlClient
- Ease reuse of media sources panel
- [#9245] Fix context menu position on custom resources that define a certain menu
- Added OnResourceAutoPublish system event
- Fix incorrect sorting by rank in TV grid on template create/update screen
- Fixed Categories with a sub-category would always be shown in an Element's tree even if it didn't contain any elements of that type
- Fix media source directive in TV when accessed from another context
- List only user related resources in recently edited resources widget
- Fixed colors/states not changing on subsequent database connection attempts in installer
- Make ddGroups unique for resource, element and file tree
- Fixed collapsing tree after quick creating an element
- Add back Legacy modX.getFullTableName() method
- Make OnFileManagerBeforeUpload event selectable
- Added ability to define a default package provider via default_provider setting
- Return nothing when toPlaceholder output filter is used
- Added replace closing php tag for inline php dashboard widget
- Fix to tv,chunk,snippet name validator per scottboryses observation
- New manager theme
- Move fax field near other telephone related fields
- Option to disable CSS/JS compression during setup
- Changed extension of JSON content type from .js to .json
- Added modResource.isMember and modResource.getResourceGroupNames methods
- Replaced uploaddialog with more modern multiuploaddialog
- Added Other gender
- Fixed events called in modResourceGroupCreateProcessor
- Added dedicated page with media manager
- Add icon/markup to modMenu items, allow new entries for topmenu and usermenu
- An instance of modError added to modMail
- Make sure connector responses return application/json content type
- Removed hard coded "index.php" in manager assets
- Preselect media source in static elements browser
- Added ability to refresh a media source (tree)
- Prevent duplication in context root if new_document_in_root != true
- Sanitize filename when editing a file
- Adds validateOldPassword flag to optionally skip passwordMatches() call
- Make preview possible if session_enabled = 0
- Improved widget of active users
- Calling modUser->joinGroup sets rank to count(UserGroupMembers) instead of to 0
- Call getNodesFormatted with parent property in modResourceSortProcessor
- Hide back button during installation
- Fixed regex for element names
- Added system settings to change default action
- Check for "theme_path/js/layout.js" before trying to load it
- Clean modx->user on context init
- Added shift modifier to tree click, that will open resource in a new window
- Removing duplicate windows
- Updated context setting's update window to appear as a create window
- Load setting topic to allow 3PC components to use it for system setting translations
- Allow filtering of namespace by request on lexicon page
- Add proper validation for modSession id
- Updated phpmailer class to 5.2.7
- Fallback http_host to prevent cache issues under HTTP/1.0
- Added ctx option to isloggedin/isnotloggedin output filters
- Ensure opcache.revalidate_freq is set to 0 during setup
- Clear menus cache on actions with menu
- [#11123] Added "success":true to modProcessor response
- [#11182] Fix issue where grid stores loaded only 20 records by default when pagination were disabled
- [#828] handlePreview is called only if the deleted value changed
- Update xPDO for additional SQL injection protection
- [#11186][#11176][#9880][#2896][#5850] Disabled dirty check on save button in Resource's panel
- Validate context key provided to modX::initialize()
- [#11170] Added pdf to content type
- [#675] Add upload functionality directly to package manager grid
- [#703] Added OnElementNotFound system event
- [#11149] Make sure hitting the close button does not trigger double prevent navigation warnings
- Add refreshURIs call as part of clearing the site cache
- Update parent field in Resource panel after drag and drop current resource
- Check if template exissts before using it's icon in getNodes processor
- Prevent content duplication when using [css|js|html]To[Head|Bottom]
- [#11099] Removed C:\fakepath\ from filename during uploads
- Fix path issue with phpthumb after 1.7.11-beta update
- Prevent redirect of base_url when query string exists
- Enable Template-based icons in Resource tree
- Increase message_limit for ExtJS HttpStateProvider
- Fix lexicon getList processor
- Improve Confirm Navigation feature and make configurable
- Confirm navigation when unsaved changes exist in resource panel
- Fix deprecated returnValue to prevent confirm navigation alert
- Fix xPDO->parseBindings bug triggering modDbRegisterMessage errors
- Prevent processor property overwriting in modX::runProcessor()
- Add open in new window action to middle mouse button click in trees
- Preserve value types in modSystemEvent::output()
- Prevent removal of user groups after validation fails
- Remove extra dot in filename for Content Disposition attachment
- Fix unescaped backslash in file and image TV
- Remove cache clearing logic from system setting model
- Update phpthumb to 1.7.11-beta to close security vulnerability
- Add options and context filtering to modX::getTree()
- Auto-resize modal window height to fit browser height
- Add modSoftRemoveProcessor for marking records deleted
- Ensure property not set when creating new property in Property Set
- Implement auto-save on Content Types grid
- Support PHP use statements in Snippets and Plugins
- Add in/inarray conditional output filter
- Add preg_quote to friendly_alias_word_delimiters characters
- Do not prepend base_url when baseUrlRelative in modFileMediaSource
- Add filterPathSegment() methods to modX and modResource
- Remove check for children on Categories in Elements Tree
- Allow Categories to have same name with different parents
- Add case-insensitive contains/containsnot conditional output filters
- Add modResource::clearCache() to clear cache for single Resource