Pagekit Versions Save

Fixed

• Fixed internalization route in maintenance mode
• Fixed admin logout if an route alias exists
• Fixed location widget settings

Changed

• Make re-login modal available in front end by default

Changed

• Permission to access admin area now includes the right to use the site in maintenance mode

Fixed

• Fixed JS error during user role sorting
• Fixed unintentional duplication of dashboard widgets in rare cases
• Fixed re-login in maintenance mode for certain API routes
• Fixed login interceptor to not intercept CORS requests

Added

• Twig debug mode
• Float filter for request arguments

Fixed

• Fixed wrong user role assignment in very rare cases (SQLite)

Security

• XSS vulnerabilities at 404 page, discovered by Onur Yilmaz (https://www.netsparker.com)
• XSS vulnerabilities at login page, discovered by Raphael de la Vienne and Luuk Spreeuwenberg
• SQL injection vulnerability, which can be misused by users with admin privileges, discovered by Raphael de la Vienne and Luuk Spreeuwenberg

Fixed

• Fixed asset upload

Added

• Added node's access check

Fixed

• Fixed access check for user and site settings
• Fixed admin dashboard for Safari private window
• Fixed a situation where a node could be assigned as its own parent
• Fixed backend password recovery
• Fixed user approval if verification is activated as well
• Fixed user verification state

Added

• Parse MySQL Port from hostname in installer
• SSL support for location widget

Changed

• Improved widget visibility settings
• Redirect to extensions/themes overview after install and activation from marketplace
• Changed signature of setup command

Fixed

• Fixed touch support in backend
• Fixed superfluous request caching
• Fixed widget settings validation
• Fixed relative date for languages without plural
• Fixed non expiring local storage
• Fixed style and script helper for use in Twig templates

Fixed

• Fixed notice when og:image in site meta settings not defined

Added

• Added OpenGraph image option for site nodes
• Added file extension check for storage uploads
• Added maintenance logo option
• Added cache break for language file

Changed

• Smoothed packages updates
• Optimized .htaccess

Fixed

• Fixed save shortcut in Firefox
• Fixed reordering in site tree
• Fixed missing territory data
• Fixed redirect after login
• Fixed missing initial active state at pagination
• Fixed duplicated request occasionally caused by pagination

Fixed

• Temporarily fixed menu params bug

Fixed

• Fixed blank widget settings page
• Fixed missing marketplace icons
• Fixed RFC 3986 encoding of static URLs
• Fixed render params
• Fixed CLI command enables extensions
• Fixed db prefix check in installer
• Fixed different prefixes with SQLLite
• Fixed SQLite collations

Removed

• Removed Guzzle dependency

Changed

• CLI setup command requires admin password to be specified