Contao 5.4.8
2 January 2025
Contao version 5.4.8 is now available (major release).
What's New in Contao 5.4.8
5.4.8
Bug Fixes
- Make the SERP preview script compatible with Turbo (fritzmg)
5.4.7
Bug Fixes
- Fix a JS performance issue related to the registration of tooltips (m-vo)
5.4.6
Bug Fixes
- Disable Turbo in MODE_PARENT content section (fritzmg)
- Revert 'Add the turbo-root meta tag to the back end' (fritzmg)
5.4.5
Bug Fixes
- Adjust the tooltip performance (zoglo)
- Add an ALTCHA noscript warning message (CMSworker)
- Canonicalize purge paths (fritzmg)
- Make the slots concept compatible with Twig 3.15 (m-vo)
5.4.4
Bug Fixes
- Correctly set the ACE editor height (leofeyer)
- Fix the tooltips on mobile devices (fritzmg)
- Add the turbo-root meta tag to the back end (aschempp)
- Add display: grid for subpalettes on Ajax requests (zoglo)
- Add the missing widget-group classes (fritzmg)
5.4.3
Security
CVE-2024-45398: Remote command execution through file uploads
CVE-2024-45612: Insert tag injection via canonical URLs
5.4.2
Bug Fixes
- Always break out of Turbo frames when missing (fritzmg)
- Switch to a stable ALTCHA version (leofeyer)
- Disable Turbo for the 2FA backup codes form (leofeyer)
- Fix the loading time of the code editor (leofeyer)
5.4.1
Bug Fixes
- Fix the line height of the ellipsis containers (leofeyer)
- Add a Stimulus controller to handle back end tooltips (zoglo)
- Use Turbo.cache.exemptPageFromCache() in the SERP preview script (leofeyer)
- Do not initialize Chosen twice in the module wizard (leofeyer)
- Ensure that $this->style is never null (leofeyer)
- Disable Turbo on theme import forms (zoglo)
5.4.0
Bug Fixes
- Deprecate the service annotations (leofeyer)
5.4.0-RC4
Bug Fixes
- Use <turbo-frame> for DataContainer::edit() and fix other Turbo issues (fritzmg)
- Fix the Twig deprecations (ausi)
5.4.0-RC3
Bug Fixes
- Fix several Turbo issues (m-vo)
- Allow ALTCHA version 0.7 (leofeyer)
- Simplify the automatic ACE editor height (m-vo)
- Revert 'Move the assets folder to public/assets' (leofeyer)
- Add a Stimulus controller to configure TinyMCE instances (m-vo)
- Add a note about $GLOBALS['objPage'] to the DEPRECATED.md file (leofeyer)
5.4.0-RC2
Bug Fixes
- Load the TinyMCE and ACE scripts within be_main (zoglo)
- Show a warning if ALTCHA is used with an insecure connection (leofeyer)
- Fix the contao-setup command (leofeyer)
- Disable Turbo on editAll and overrideAll forms (fritzmg)
5.4.0-RC1
Highlights
- Add an "ARIA label" field to the navigation module (leofeyer)
- Add basic support for hotwired/turbo in the back end (m-vo)
- Store the back end popup session bag under a different storage key (fritzmg)
- Add Twig slots (m-vo)
- Move the assets folder to public/assets (leofeyer)
- Add an ALTCHA form field to the form generator (markocupic)
- Add more spacing in the back end views (leofeyer)
- Update the file icons in the file manager (leofeyer)
- Allow Symfony 7 (Toflar)
- Update Monolog to version 3 (Wusch)
- Use Lucide icons in the back end (leofeyer)
- Add sitemap information to the tl_page.robots help text (stefansl)
- Allow TinyMCE 7 (leofeyer)
- Use HtmlAttributes for fe_page (fritzmg)
- Use the attr() method in templates (leofeyer)
- Render widget groups in the back end with CSS grid (zoglo)
- Add a rich text Twig component (m-vo)
- Replace $GLOBALS['objPage'] in the model argument resolver (leofeyer)
- Replace $GLOBALS['objPage'] in the filesystem loader (leofeyer)
- Replace $GLOBALS['objPage'] in the fragment handler (leofeyer)
- Add the PageFinder::getCurrentPage() method (leofeyer)
- Fallback to the current request in the scope matcher (leofeyer)
- Remove the InterestCohortListener (bytehead)
- Allow to configure the components-dir (richardhj)
Bug Fixes
- Use the minified version of the ALTCHA scripts (leofeyer)
- Remove the redundant m12 CSS class (leofeyer)
- Add the missing dark icons (leofeyer)
- Fix the icon sizes (leofeyer)
- Use CSS grid to align checkboxes and their labels and drag handles (leofeyer)
- Fix the .nogrid backwards compatibility layer (leofeyer)