Release 5.2.0 Beta 1

Author: Hackwar

administrator/components/com_associations/src/View/Associations/HtmlView.php

@@ -70,7 +70,7 @@ class HtmlView extends BaseHtmlView
      *
      * @var    string
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     public $extensionName;
 
@@ -79,7 +79,7 @@ class HtmlView extends BaseHtmlView
      *
      * @var    string
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     public $typeName;
 
@@ -88,7 +88,7 @@ class HtmlView extends BaseHtmlView
      *
      * @var    string[]
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     public $typeSupports;
 
@@ -97,7 +97,7 @@ class HtmlView extends BaseHtmlView
      *
      * @var    string[]
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     public $typeFields;
 

administrator/components/com_categories/src/View/Category/HtmlView.php

@@ -81,7 +81,7 @@ class HtmlView extends BaseHtmlView
      *
      * @var    string[]
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     public $ignore_fieldsets = [];
 

administrator/components/com_config/src/View/Component/HtmlView.php

@@ -56,7 +56,7 @@ class HtmlView extends BaseHtmlView
      *
      * @var    object[]
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     public $fieldsets;
 
@@ -65,7 +65,7 @@ class HtmlView extends BaseHtmlView
      *
      * @var    string
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     public $formControl;
 
@@ -74,7 +74,7 @@ class HtmlView extends BaseHtmlView
      *
      * @var    string
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     public $return;
 

administrator/components/com_contact/src/View/Contact/HtmlView.php

@@ -57,7 +57,7 @@ class HtmlView extends BaseHtmlView
      *
      * @var    string[]
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     public $ignore_fieldsets = [];
 

administrator/components/com_content/src/View/Article/HtmlView.php

@@ -74,7 +74,7 @@ class HtmlView extends BaseHtmlView
      *
      * @var    string[]
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     public $ignore_fieldsets = [];
 

administrator/components/com_finder/src/View/Filter/HtmlView.php

@@ -79,7 +79,7 @@ class HtmlView extends BaseHtmlView
      *
      * @var    string[]
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     public $ignore_fieldsets = [];
 

administrator/components/com_installer/src/View/Discover/HtmlView.php

@@ -29,7 +29,7 @@ class HtmlView extends InstallerViewDefault
      *
      * @var   array
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     protected $items;
 
@@ -38,7 +38,7 @@ class HtmlView extends InstallerViewDefault
      *
      * @var    \Joomla\CMS\Pagination\Pagination
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     protected $pagination;
 

administrator/components/com_mails/src/Field/MailtemplateLayoutField.php

@@ -25,15 +25,15 @@
  * Form Field to display a list of the layouts for a field from
  * the extension or template overrides.
  *
- * @since  __DEPLOY_VERSION__
+ * @since  5.2.0
  */
 class MailtemplateLayoutField extends FormField
 {
     /**
      * The form field type.
      *
      * @var    string
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     protected $type = 'MailtemplateLayout';
 
@@ -42,7 +42,7 @@ class MailtemplateLayoutField extends FormField
      *
      * @return  string   The field input.
      *
-     * @since   __DEPLOY_VERSION__
+     * @since   5.2.0
      */
     protected function getInput()
     {

administrator/components/com_menus/src/View/Item/HtmlView.php

@@ -78,7 +78,7 @@ class HtmlView extends BaseHtmlView
      *
      * @var    string[]
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     public $ignore_fieldsets = [];
 

administrator/components/com_modules/src/View/Module/HtmlView.php

@@ -64,7 +64,7 @@ class HtmlView extends BaseHtmlView
      *
      * @var    string[]
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     public $ignore_fieldsets = [];
 

administrator/components/com_newsfeeds/src/View/Newsfeed/HtmlView.php

@@ -63,7 +63,7 @@ class HtmlView extends BaseHtmlView
      *
      * @var    string[]
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     public $ignore_fieldsets = [];
 

administrator/components/com_plugins/src/View/Plugin/HtmlView.php

@@ -54,7 +54,7 @@ class HtmlView extends BaseHtmlView
      *
      * @var    string[]
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     public $ignore_fieldsets = [];
 

administrator/components/com_postinstall/src/View/Messages/HtmlView.php

@@ -32,7 +32,7 @@ class HtmlView extends BaseHtmlView
      *
      * @var   array
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     protected $items;
 

administrator/components/com_scheduler/src/View/Task/HtmlView.php

@@ -72,7 +72,7 @@ class HtmlView extends BaseHtmlView
      *
      * @var    string[]
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     public $ignore_fieldsets = [];
 

administrator/components/com_tags/src/View/Tag/HtmlView.php

@@ -72,7 +72,7 @@ class HtmlView extends BaseHtmlView
      *
      * @var    string[]
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     public $ignore_fieldsets = [];
 

administrator/components/com_templates/src/View/Style/HtmlView.php

@@ -64,7 +64,7 @@ class HtmlView extends BaseHtmlView
      *
      * @var    string[]
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     public $ignore_fieldsets = [];
 

administrator/components/com_users/src/Model/LevelModel.php

@@ -38,7 +38,7 @@ class LevelModel extends AdminModel
      *
      * @return  boolean  True if successful, false if an error occurs.
      *
-     * @since   __DEPLOY_VERSION__
+     * @since   5.2.0
      */
     public function delete(&$pks)
     {

administrator/components/com_users/src/Model/UserModel.php

@@ -268,6 +268,15 @@ public function save($data)
             }
         }
 
+        // Unset the username if it should not be overwritten
+        if (
+            !$my->authorise('core.manage', 'com_users')
+            && (int) $user->id === (int) $my->id
+            && !ComponentHelper::getParams('com_users')->get('change_login_name')
+        ) {
+            unset($data['username']);
+        }
+
         // Bind the data.
         if (!$user->bind($data)) {
             $this->setError($user->getError());

administrator/components/com_users/src/View/Group/HtmlView.php

@@ -57,7 +57,7 @@ class HtmlView extends BaseHtmlView
      *
      * @var    string[]
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     public $ignore_fieldsets = [];
 

administrator/components/com_users/src/View/User/HtmlView.php

@@ -83,7 +83,7 @@ class HtmlView extends BaseHtmlView implements UserFactoryAwareInterface
      *
      * @var    string[]
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     public $ignore_fieldsets = [];
 

administrator/components/com_workflow/src/View/Transition/HtmlView.php

@@ -99,7 +99,7 @@ class HtmlView extends BaseHtmlView
      *
      * @var    string[]
      *
-     * @since  __DEPLOY_VERSION__
+     * @since  5.2.0
      */
     public $ignore_fieldsets = [];
 

administrator/manifests/files/joomla.xml

@@ -6,7 +6,7 @@
 	<authorUrl>www.joomla.org</authorUrl>
 	<copyright>(C) 2019 Open Source Matters, Inc.</copyright>
 	<license>GNU General Public License version 2 or later; see LICENSE.txt</license>
-	<version>5.2.0-alpha4-dev</version>
+	<version>5.2.0-beta1</version>
 	<creationDate>2024-08</creationDate>
 	<description>FILES_JOOMLA_XML_DESCRIPTION</description>
 

components/com_contact/src/Controller/ContactController.php

@@ -283,6 +283,7 @@ private function _sendEmail($data, $contact, $emailCopyToSender)
             $mailer->addRecipient($contact->email_to);
             $mailer->setReplyTo($templateData['email'], $templateData['name']);
             $mailer->addTemplateData($templateData);
+            $mailer->addUnsafeTags(['name', 'email', 'body', 'customfields']);
             $sent = $mailer->send();
 
             // If we are supposed to copy the sender, do so.

components/com_users/src/Model/RegistrationModel.php

@@ -512,6 +512,7 @@ public function register($temp)
             $mailer = new MailTemplate($mailtemplate, $app->getLanguage()->getTag());
             $mailer->addTemplateData($data);
             $mailer->addRecipient($data['email']);
+            $mailer->addUnsafeTags(['username', 'password_clear', 'name']);
             $return = $mailer->send();
         } catch (\Exception $exception) {
             try {

composer.json

@@ -35,6 +35,10 @@
       "type": "vcs",
       "url": "https://github.com/joomla-backports/php-tuf.git",
       "no-api": true
+    },
+    {
+      "type": "vcs",
+      "url": "https://github.com/joomla-framework/security-filter.git"
     }
   ],
   "autoload": {
@@ -59,7 +63,7 @@
     "joomla/database": "^3.2",
     "joomla/di": "^3.0.1",
     "joomla/event": "^3.0.1",
-    "joomla/filter": "^3.0.1",
+    "joomla/filter": "dev-3x-outputfilter-case as 3.0.2",
     "joomla/filesystem": "^3.0.1",
     "joomla/http": "^3.0.1",
     "joomla/input": "~3.0",