Contao 4.13.37

21 February 2024

Contao version 4.13.37 is now available.

Upgrading to Contao 4.13.37

What's New in Contao 4.13.37

• Improve the CAPTCHA (ausi)
  
• Do not add duplicate paths in our own Twig filesystem loader (m-vo)
  
• Do not load the sitemap from cache for authenticated users (fritzmg)
  
• Add the missing use statement for FormHidden (fritzmg)
  
• Improve the ConfigureFilesystemPass performance (fritzmg)
  
• Randomize CSRF tokens once per request (ausi)
  
• Add a foreign key declaration for form and module fields (rorych)
  
• Correctly show past events if "hide running events" is active (janborg)
  
• Handle empty sessions in the CSRF cookie subscriber (Toflar)
  
• Support HTML5 entities with double_encode: false (ausi)
  
• Ensure absolute paths in the ImageObject schema.org data (leofeyer)
  
• Correctly check the "show" permission in the site structure (leofeyer)
  
• Prevent argument errors on malicious login attempts (fritzmg)
  
• Fix mov mime type (ausi)
  
• Allow prefixing simple tokens with # (Toflar)
  
• Redirect in the BackendConfirm controller if there is no INVALID_TOKEN_URL in the session (leofeyer)
  

• Revert "Allow data-lightbox in TinyMCE by default" (fritzmg)
  
• Fix an error if a gallery image does not exist (fritzmg)
  
• Retrieve the PageModel correctly in ContaoMailer (fritzmg)
  
• Make FrontendTemplateTrait::getTemplate() static (Shadow-Devil)
  
• Fix the compression in the contao:backup:create command (Toflar)
  
• Fix tests when MAILER_DSN env var is defined (fritzmg)
  
• Do not overwrite id, pid, ptable and sorting when restoring a version (leofeyer)
  
• Fix a PHP8 error in the Frontend::addToUrl() method (zonky2)
  
• Fix a PHP 8 error in the Form class (zonky2)
  
• Fix the description of the "template data" field (fiedsch)
  
• Use the name of the related field when getting options from another record (asconsulting)
  
• Disallow the web profiler in the robots.txt file (aschempp)
  
• Fix NULL handling in the SerpPreview widget (aschempp)
  
• Cache the cteAlias references (fritzmg)
  
• Support the template_from_string() Twig function (richardhj)
  
• Correctly check the theme export permissions (aschempp)
  
• Add example content to the auto-generated .env file (aschempp)
  
• Update page registry when generating multiple page aliases (aschempp)
  
• Do not show the end time of open-ended events (ausi)
  
• Fix relative asset paths in feeds (fritzmg)
  
• Backport the cache warmer test fix (fritzmg)
  
• Add a data container setting to hide the orderBy column in the back end listing (ameotoko)
  
• Update the insert tags doc link (aschempp)
  

• Fix and improve logging deprecation messages (Toflar)
  
• Fix the safe analysis for the contao_html and contao_html_attr strategies (m-vo)
  
• Correctly reset the page registry (aschempp)
  
• Fix the news URL cache when the archive is added (aschempp)
  
• Add the missing autowiring alias for the image sizes service (Toflar)
  
• Improve performance when loading language files that do not exist (fritzmg)
  
• Fix ongoing events (ausi)
  
• Bubble the back end log entries to file logs (aschempp)
  
• Only consider the main request in the MergeHttpHeadersListener class (Toflar)
  
• Change the form permission constant (aschempp)
  
• Remove the XLIFF level restriction (fritzmg)
  
• Make sure the session cookie is always lax (Toflar)
  
• Fix undefined array key warning in DC_Table::deleteAll (fritzmg)
  
• Use placeholders for URLs in translation strings (leofeyer)
  
• Fix the date format in the Feed class (leofeyer)
  

• Fix the arguments of the contao.command.user_list service (xprojects-de)
  

• Focus the TinyMCE dialog after using the picker (ausi)
  
• Fixed debug log not shown when crawler is running (Toflar)
  
• Fix redirect to language without URL prefix (aschempp)
  
• Cast boolean to integer in DC_Table::copy (fritzmg)
  
• Correctly handle metadata in Dbafs (aschempp)
  
• Compare the actual row format instead of the create options (ausi)
  
• Correctly reset the context when generating preview URL fails (aschempp)
  
• Remove the kernel.reset tag (aschempp)
  
• Add member login preview links to known limitations (ausi)
  
• Change user commands to not use models (aschempp)
  
• Enable code highlighting for Twig (m-vo)
  

• Support themes from ZIP files (aschempp)
  
• Make sure valid URLs start with a slash (aschempp)
  
• Do not set database_version in the install tool (aschempp)