TYPO3 9.5.22
30 September 2020
TYPO3 version 9.5.22 is now available (security release).
What's New in TYPO3 9.5.22
9.5.22
Bug Fixes and Changes
- [BUGFIX] Allow longer values in index_stat_word
- [BUGFIX] Deliver detected file type for IM identify
- [BUGFIX] Do not stop rewrite processing for favicon.ico
- [BUGFIX] Ensure cache entries in PageRepository consider groups
- [BUGFIX] Ensure composer update --prefer-lowest installs the lowest possible packages
- [BUGFIX] Page tree: Hide delete drop zone when not dragging
- [BUGFIX] Render plugin content element only if a plugin is selected
- [BUGFIX] Set correct return type for CommandRegistry::getCommandByIdentifier
- [TASK] Migrate uglify to terser
- [TASK] Omit composer install before composer update for test builds
- [TASK] Update all npm packages
- [TASK] Update ckeditor to 4.15.0
- [TASK] Update ckeditor-wordcount-plugin to 1.17.6
- [TASK] Upgrade codemirror to 5.58.1
9.5.21
Bug Fixes and Changes
- [BUGFIX] Allow more than 999 subpages in link browser pagetree
- [BUGFIX] Allow routes without actual route variables for ExtbaseEnhancer
- [BUGFIX] Correctly build query string without cHash
- [BUGFIX] Correctly call BackendUtility::selectVersionsOfRecord
- [BUGFIX] Correctly show changes in current workspace in the page tree
- [BUGFIX] Disable new content buttons until module is loaded
- [BUGFIX] Do not mark repeatable wizards executed during install
- [BUGFIX] Do not use hard-coded magic 1337 in admin panel
- [BUGFIX] Don't call ResourceFactory::getStorageObject twice
- [BUGFIX] Don't pre-calculcate asset paths in t3editor
- [BUGFIX] Ensure decoded parameters are a valid array
- [BUGFIX] Extract width and height meta data for all image files
- [BUGFIX] Fetch TYPO3 version in reports module only
- [BUGFIX] Fix install tool updates of user configuration on PostgreSQL
- [BUGFIX] Fix slug handling for sites not on root level
- [BUGFIX] Fix typo to show label description of tasks again
- [BUGFIX] Limit amount of data fetched by the page tree
- [BUGFIX] Make "showHiddenRecords" in adminpanel work again
- [BUGFIX] Prevent non-numeric value warning in ErrorHandler.php
- [BUGFIX] Prevent non-numeric value warning in PhpErrorCodeViewHelper
- [BUGFIX] Properly return integer within resolvePreviewRecordId
- [BUGFIX] Send warning email for backend login failure on all DBMS
- [BUGFIX] Skip processing of inline children which aren't workspace-aware
- [BUGFIX] Tests for translated content will prepare a translated page
- [BUGFIX] Use URI of current request for referrer check
- [BUGFIX] Wrap operands in parentheses
- [DOCS] Add RTE preset override for flexform field
- [DOCS] Avoid use of TYPO3_MODE checks in ext_localconf.php
- [TASK] Add possibility to create random values in JavaScript
- [TASK] Add security relevant .htaccess configuration as default
- [TASK] Add SECURITY.md
- [TASK] Add tests for SecurityUtility.getRandomHexValue
- [TASK] Clean up JavaScript code
- [TASK] CSV integrity test script can fix fixtures
- [TASK] Revert "Limit amount of data fetched by the page tree"
- [TASK] Update example of FormProtectionFactory validation
- [TASK] Use frontend requests when testing canonical URL behavior
9.5.20
Security
- [SECURITY] Apply file deny pattern to eID API used for file retrieval
- [SECURITY] Avoid ambiguous HMAC results
Bug Fixes and Changes
- [BUGFIX] Adjust processing order of routes during URL generation
- [BUGFIX] Allow deserialization of Area objects for processed files
- [BUGFIX] Always merge results from empty tabs
- [BUGFIX] Avoid SQL error in indexed_search indexer on PostgreSQL
- [BUGFIX] Deleting a localized page deletes its localized records
- [BUGFIX] Fix indenting in changelog
- [BUGFIX] Limit amount of data fetched by the page tree
- [BUGFIX] Provide example on how to limit phpunit test execution
- [BUGFIX] Respect different matcher config of ConstructorArgumentMatcher
- [BUGFIX] Show indexed_search backend module on PostgreSQL for pages with subpages
- [BUGIFX] Store state of PageTitleProviderManager in cache
- [TASK] Update description for lockIP and lockIPv6