TYPO3 9.5.22

30 September 2020

TYPO3 version 9.5.22 is now available (security release).

What's New in TYPO3 9.5.22

• [BUGFIX] Allow longer values in index_stat_word
  
• [BUGFIX] Deliver detected file type for IM identify
  
• [BUGFIX] Do not stop rewrite processing for favicon.ico
  
• [BUGFIX] Ensure cache entries in PageRepository consider groups
  
• [BUGFIX] Ensure composer update --prefer-lowest installs the lowest possible packages
  
• [BUGFIX] Page tree: Hide delete drop zone when not dragging
  
• [BUGFIX] Render plugin content element only if a plugin is selected
  
• [BUGFIX] Set correct return type for CommandRegistry::getCommandByIdentifier
  
• [TASK] Migrate uglify to terser
  
• [TASK] Omit composer install before composer update for test builds
  
• [TASK] Update all npm packages
  
• [TASK] Update ckeditor to 4.15.0
  
• [TASK] Update ckeditor-wordcount-plugin to 1.17.6
  
• [TASK] Upgrade codemirror to 5.58.1
  

• [BUGFIX] Allow more than 999 subpages in link browser pagetree
  
• [BUGFIX] Allow routes without actual route variables for ExtbaseEnhancer
  
• [BUGFIX] Correctly build query string without cHash
  
• [BUGFIX] Correctly call BackendUtility::selectVersionsOfRecord
  
• [BUGFIX] Correctly show changes in current workspace in the page tree
  
• [BUGFIX] Disable new content buttons until module is loaded
  
• [BUGFIX] Do not mark repeatable wizards executed during install
  
• [BUGFIX] Do not use hard-coded magic 1337 in admin panel
  
• [BUGFIX] Don't call ResourceFactory::getStorageObject twice
  
• [BUGFIX] Don't pre-calculcate asset paths in t3editor
  
• [BUGFIX] Ensure decoded parameters are a valid array
  
• [BUGFIX] Extract width and height meta data for all image files
  
• [BUGFIX] Fetch TYPO3 version in reports module only
  
• [BUGFIX] Fix install tool updates of user configuration on PostgreSQL
  
• [BUGFIX] Fix slug handling for sites not on root level
  
• [BUGFIX] Fix typo to show label description of tasks again
  
• [BUGFIX] Limit amount of data fetched by the page tree
  
• [BUGFIX] Make "showHiddenRecords" in adminpanel work again
  
• [BUGFIX] Prevent non-numeric value warning in ErrorHandler.php
  
• [BUGFIX] Prevent non-numeric value warning in PhpErrorCodeViewHelper
  
• [BUGFIX] Properly return integer within resolvePreviewRecordId
  
• [BUGFIX] Send warning email for backend login failure on all DBMS
  
• [BUGFIX] Skip processing of inline children which aren't workspace-aware
  
• [BUGFIX] Tests for translated content will prepare a translated page
  
• [BUGFIX] Use URI of current request for referrer check
  
• [BUGFIX] Wrap operands in parentheses
  
• [DOCS] Add RTE preset override for flexform field
  
• [DOCS] Avoid use of TYPO3_MODE checks in ext_localconf.php
  
• [TASK] Add possibility to create random values in JavaScript
  
• [TASK] Add security relevant .htaccess configuration as default
  
• [TASK] Add SECURITY.md
  
• [TASK] Add tests for SecurityUtility.getRandomHexValue
  
• [TASK] Clean up JavaScript code
  
• [TASK] CSV integrity test script can fix fixtures
  
• [TASK] Revert "Limit amount of data fetched by the page tree"
  
• [TASK] Update example of FormProtectionFactory validation
  
• [TASK] Use frontend requests when testing canonical URL behavior
  

• [SECURITY] Apply file deny pattern to eID API used for file retrieval
  
• [SECURITY] Avoid ambiguous HMAC results
  

• [BUGFIX] Adjust processing order of routes during URL generation
  
• [BUGFIX] Allow deserialization of Area objects for processed files
  
• [BUGFIX] Always merge results from empty tabs
  
• [BUGFIX] Avoid SQL error in indexed_search indexer on PostgreSQL
  
• [BUGFIX] Deleting a localized page deletes its localized records
  
• [BUGFIX] Fix indenting in changelog
  
• [BUGFIX] Limit amount of data fetched by the page tree
  
• [BUGFIX] Provide example on how to limit phpunit test execution
  
• [BUGFIX] Respect different matcher config of ConstructorArgumentMatcher
  
• [BUGFIX] Show indexed_search backend module on PostgreSQL for pages with subpages
  
• [BUGIFX] Store state of PageTitleProviderManager in cache
  
• [TASK] Update description for lockIP and lockIPv6