Contao 5.1.10
31 July 2023
Contao version 5.1.10 is now available (major release).
What's New in Contao 5.1.10
5.1.10
Security
- Validate unit select menus in widgets (ausi)
5.1.9
Bug Fixes
- Correctly encode URLs in the sitemap (aschempp)
- Increase Symfony filesystem dependency version (ausi)
- Remove field permissions on favorites table (aschempp)
5.1.8
Bug Fixes
- Log the bad credentials exception in the security channel (bytehead)
- Support vimeo unlisted video privacy hash (ausi)
- Skip insert tags when converting relative URLs (leofeyer)
- Fix a typo in the _download component (fritzmg)
- Allow saving serialized strings in DC_File again (zoglo)
5.1.7
Bug Fixes
- Add a title to the collapsed element button (aschempp)
- Improve the main navigation hover style (aschempp)
- Pass the ID to getCurrentRecord() in "override all" mode (leofeyer)
- Fix the list and table wizards in news and events (leofeyer)
5.1.6
Bug Fixes
- Hide fields that are not to be displayed in the undo details (leofeyer)
5.1.5
Bug Fixes
- Add a double encoding setting to the HtmlAttributes class (ausi)
- Unwrap response exceptions thrown while rendering a template (m-vo)
- Use the title instead of the filename in the download component (m-vo)
5.1.4
Bug Fixes
- Harden the file manager against directory traversal attacks (ausi)
5.1.3
Bug Fixes
- Correctly count the skipped recipients (leofeyer)
- Add the header.svg and settings.svg icons again (leofeyer)
- Load the default language when generating the calendar feeds (leofeyer)
- Prevent double slashes in version URLs (leofeyer)
- Add the "adjustDca" load callback to tl_news_archive again (leofeyer)
- Do not treat sub-directories of Twig namespace roots as template paths (m-vo)
- Correctly pass null values in findBy queries (ausi)
5.1.2
Bug Fixes
- Fix bug in Hybrid::generate() with missing ID (ausi)
- Add a unit test for invalid files to the ImagesController (m-vo)
- Filter non-image files in the ImagesController (leofeyer)
- Handle null in the html.html.twig template (fritzmg)
- Handle basic entities in the SERP preview (leofeyer)
- Allow using basic entities in texts (heimseiten)
- Allow using basic entities in headlines (leofeyer)
- Add the missing data container permission checks (aschempp)
- Always allow toggling a field that is not excluded (aschempp)
5.1.1
Bug Fixes
- Add the TokenDeauthenticatedListener (bytehead)
- Explicitly set the legacy template in the TwoFactorController (m-vo)
- Fix the split button alignment (leofeyer)
- Surround the togglePassword images with a button (cliffparnitzky)
- Fix deleting multiple records (Toflar)
- Add missing type hints to translation classes (ausi)
- Remove tl_settings.doNotCollapse (aschempp)
- Return BinaryFileResponse when handling downloads (m-vo)
- Fix PHPUnit deprecation warnings (m-vo)
- Move the favorites voter to the correct namespace (aschempp)
5.1.0
Bug Fixes
- Do not deep merge messenger workers (Toflar)
- Fix header notification color (ausi)
5.1.0-RC3
5.1.0-RC2
Bug Fixes
- Do not require overwriting the console path (leofeyer)
- Use the HTML sanitizer component as Twig filter (ausi)
- Fix the module wizard (leofeyer)
- Fix the Gulp watch task (fritzmg)
- Make $consolePath a required argument (leofeyer)
- Use two different icons for light and dark mode (leofeyer)
- Correctly toggle the favorites menu group (leofeyer)
- Move the dark mode toggle to the header bar (leofeyer)
- Make console_path a general Contao configuration (Toflar)
- Fix the icons when toggling structures in dark mode (leofeyer)
5.1.0-RC1
Highlights
- Add a new feed reader implementation (bezin)
- Allow to pass an array of allowed attributes to Input::stripTags() (leofeyer)
- Add more back end grid classes (leofeyer)
- Add an attributes_callback for DCA fields (aschempp)
- Allow a minimum amount of workers for autoscaling (Toflar)
- Add the URI and page ID to log entries (SeverinGloeckle)
- Check the administrator e-mail address (fritzmg)
- Introduce background workers (Toflar)
- Implement a dark scheme toggle (aschempp)
- Enable the login rate limit (bytehead)
- Also minify the core.js and mootao.js scripts with Webpack (leofeyer)
- Add a dark mode for the back end (leofeyer)
- Support the native date input type for text fields in the form generator (fritzmg)
- Add a confirmation message to forms and provide Ajax out of the box (qzminski)
- Add error handling to the form data processing (rabauss)
- Allow sorting DCA fields ascending and descending (aschempp)
- Add a button to copy multiple records and paste them multiple times (aschempp)
- Remove localconfig.disableCron in favor of a new zero config approach (Toflar)
- Adjust the name of the default guests group (leofeyer)
- Add the MemberActivationMailEvent (fritzmg)
- Add the #[\SensitiveParameter] attribute (ausi)
- Allow to set the locale in Template::trans (fritzmg)
- Improve the content elements view (leofeyer)
- Use CSS variables for all colors and CSS classes instead of inline styles (leofeyer)
- Add a favorites menu in the back end (leofeyer)
- Also add the new "idempotent actions" logic to DC_Folder (leofeyer)
- Add stimulus controllers in the back end (aschempp)
- Add support for async CLI cron jobs (Toflar)
- Disable the request token check for idempotent actions (aschempp)
- Allow defining a default search field (leofeyer)
- Add a user option to not collapse content elements (aschempp)
- Use sendfile for local files downloads (m-vo)
- Change the default value for tl_layout.viewport (leofeyer)
- Add a markdown help text (leofeyer)
- Add a lock overlay for protected articles (leofeyer)
Bug Fixes
- Fix the skippable cronjobs (fritzmg)
- Add isRequired() for desired_size and max settings on workers (Toflar)
- Add a default value for the worker "min" configuration (Toflar)
- Do not add the request token to idempotent actions (leofeyer)
- Skip cron execution for minutely cron and messenger cron in web scope (Toflar)
- Fix the tree indentation (leofeyer)
- Only hide the dark/light theme icons via CSS (leofeyer)
- Ensure Doctrine connections are closed after message handling (Toflar)
- Use enumNode instead of custom validation (Toflar)
- Correctly open and close tree nodes if there is a filter (leofeyer)
- Fix the aria-hidden attribute in the tips.js file (leofeyer)