/
changelog.txt
4635 lines (4540 loc) · 323 KB
/
changelog.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
This file shows the changes in recent releases of MODX. The most current release is usually the
development release, and is only shown to give an idea of what's currently in the pipeline.
- Remove deprecated resource fields privateweb, privatemgr, donthit (#16174)
- Fix cache_resource_clear_partial functionality (#16346)
- Fix horizontal overflow on Context Access grid (#16380)
- Grid filtering via URL parameters added to most grids in the manager (#16089, #16369)
- Store last opened media browser path in browser history / URL parameters to re-open last path (#16394)
- Fix template picker to avoid errors in certain edge cases (#16400)
- Only show resource types in template picker and context menus if the user has permission to create them (#15893)
- Make sure left margin is consistent when expanding/collapsing the tabs (#16406)
MODX Revolution 3.0.3-pl (January 17, 2023)
====================================
- Add new error reporting for grids (#16331)
- Fix Validation Error When Switching TV Types (#16319)
- Fix TypeError exceptions when restoring deleted resources (#16303)
- Permissions Combo Fix (#16273)
- Grid filtering via URL parameters -- Usergroup ACL (#16089)
- Fix issues with TV Media Sources upgrading from 2.x (#16338)
- Update legacy Element class references for PropertySets (#16337)
- Ensure modHashing::getHash is limited to modHash instances (#16320)
- Catch dashboard widget errors on a per-widget basis (#16289)
MODX Revolution 3.0.2-pl (November 16, 2022)
====================================
- Remove the scrolling overflow from the modx-browser panel (#16280)
- Determine upload path based on the tree node's path attribute (#16292)
- Fix getTag() side effects in MODX 3 (#16294)
- Fix nested tag parsing in filters (#16288)
- Fix ability to edit .htaccess (#16249)
- Exclude @SELECT binding from properties check (#16286)
- Ignore symlinks to avoid errors (#16272)
- Enable SVG thumbnail preview for image TVs (#16271)
- Avoid PHP warnings by only requiring deprecated.php once (#16269)
- Fix installation for specific MySQL passwords (#16264)
- Fix rendering of user-entered values in editable listbox-multiple TVs (#16242)
- Check if modx-content is defined before calling doLayout (#16230)
- Avoid instantiating namespaces, extension packages, and the OnMODXInit event during setup (#16291)
- Include missing Flysystem FTP adapter (#16203)
- Correct processor action names (#16246)
- Add support for WebP images in the Media Browser (#16235)
- Change behavior of ENTER key in settings grid cell editor (#16220)
- Handle package provider API error (#16217)
- Fix fatal TypeError in modRestService (#16190)
- Restore download listeners (#16184)
- Fix typeahead in settings combo for Context/User section (#16176)
- Prevent PHP warning: Undefined variable $nvalue (#16199)
- Revert copy paths for a directory / file in tree (#16180)
- Follow-up element lexicon and style changes (#16170)
MODX Revolution 3.0.1-pl (April 28, 2022)
====================================
- Make sure file name and line number are included in error messages (#16106)
- Add MODx.util.FileDownload helper method (#16150)
- Fix hidden TVs for all core resource types (#16163)
- Fix count in Element/Template/GetList processor (#16160)
- Normalize boolean value of the combo property (#16161)
- Add Unit Test for modInputFilter (#16165)
- Rework concatenated lexicon entries (#16156)
- Don't show Configuration Check dashboard widget if all checks pass (#16151)
- Fix file downloads from Media Browser (#16152)
- Improve Form Panel Validation and Field Display - Part 6, Plugin Panel (#16125)
- Improve Form Panel Validation and Field Display - Part 5, Chunk Panel (#16128)
- Improve Form Panel Validation and Field Display - Part 4, Template Panel (#16122)
- Improve Form Panel Validation and Field Display - Part 3, Snippet Panel (#16119)
- Improve Form Panel Validation and Field Display - Part 2, TV Panel (#16118)
- Remove console.logs from layout (#16153)
- Adjust placeholder filtering and accessible options for @SELECT (#16149)
- Fix typo in setup error message (#16112)
- Fix uncaught TypeError when calling a deprecated method from file (#16142)
- Use random hash in getTag if Element name is blank (#16127)
- Fix display of optimize and truncate links in Database Tables panel (#16132)
- Treat email contents as UTF-8 to fix mangled characters (#16130)
- Fix inability to specify password in user create/update (#16126)
- Improve Form Panel Validation and Field Display (#16012)
MODX Revolution 3.0.0-pl (March 30, 2022)
====================================
- Ensure non-standard ports are maintained in URL (#16087)
- Fix incorrect word wrapping in manager panel (#16094)
- Prevent autofilling passwords (#16105)
- Fix static file field visibility in Element panels (#16102)
- Fix various static element issues (#16098)
- Add missing prefix to static_elements_html_extension lexicons (#16090)
- Update xPDO to 3.1.0 and fix Container method signatures (#16088)
- Fix Element Panel Static File UI (#16082)
- Update PHP versions in setup tests (#16077)
- Correct config check lexicon for cache mutability (#16085)
- Enable popper for submenus on hover (#16041)
- Fix typo for permission 'delete_static_resource' (#16079)
- Call OnFileManagerFileRename if upload_translit renames new file (#16051)
- Stay on current page after language switch (#16069)
- Move existing value of mail_smtp_prefix to mail_smtp_secure (#16065)
- Match Form Customization field order with resource form (#16052)
- Fix dates on dashboard feeds (#15980)
- Add explanatory text to create category (#16050)
- Change lexicon key and text of mail_smtp_prefix (#16062)
- Fix static element save issue (#16043)
- Correct policy group descriptions (#16057)
- Change brackets for category child elements (#16027)
- Optionally determine context from config.context.php (#16045)
- Change height of content (#16037)
- Change minWidth of popup window in trash (#15984)
- Cleanup unused background image logic (#16020)
- Fix rename attribute or container in user extended field (#16039)
MODX Revolution 3.0.0-rc2 (February 3, 2022)
====================================
Increase the specificity for dashboard table CSS rules (#15979)
Revert passing script variables by reference (#16030)
Prevent random container conversion on resource move (#16001)
Apply JSON_INVALID_UTF8_SUBSTITUTE flag to json_encode (#16025)
Make MessageBox minWidth configurable (#15996)
Change Children to composite relation for modUserGroup (#15968)
Improve regex for stripping MODX tags in dashboard widgets (#15974)
Fix selecting parent in quick create resource (#16002)
Add cache-busting to manager JS (#16016)(#16026)
Fix 'undefined' error if TV under content (#16008)
Split logs permission into mgr_log_view/erase (#15981)
Improve stripmodxtags output filter (#15975)
Remove unnecessary uses of deprecated strftime() (#15999)
Mark modX::parseChunk as deprecated (#15978)
Fix Zend OPcache API warning when upgrading MODX (#15911)
Fix aliases for resource controllers (#15997)
Fix disabled trash button (#15994)
Fix blank page when creating dashboard widget (#15987)
Fix empty files not being clickable in the file tree (#15985)
Display username in user menu (#15973)
Switch resource_preview to resource_view (#15902)
MODX Revolution 3.0.0-rc1 (January 20, 2022)
====================================
- Fix ability to edit empty files (#15977)
- Simplify lexicons in grids (#15673)
- Flatten lexicon parameters by dot notation (#15492)
- Fix PHP warning: trim() expects parameter 1 to be string, array given (#15624)
- Fix subsubnav position issue (#15970)
- Fix undefined index in modMediaSource (#15966)
- Fix combobox not expanding if processor response is slow (#15926)
- Pass correct type to setlocale (#15961)
- Update category's rank in the tree after save (#15956)
- Fix setStaticElementPath method (#15921)
- Add loading mask to Package Manager (#15907)
- Form customization bug fixes and improvements (#15889)
- Remove redundant session test in setup (#15941)
- Add error_page and site_unavailable_page protection (#15579)
- Fix Firefox rendering issues (#15962)
- Fix UpdateFromGrid processor for Form Customization Sets (#15955)
- Fix labels and descriptions in TV quick create/edit (#15951)
- Add permissions to enforce access to specific resource types (#15888)
- Setup context improvements (#15868)
- Make validation error messages consistent on save (#15937)
- Add PHP 8.1 to CI matrix (#15960)
- Update xPDO to 3.0.1 for PHP 8.1 compatibility (#15959)
- Add missing Static Resources lexicon key (#15931)
MODX Revolution 3.0.0-beta2 (November 23, 2021)
====================================
- Change order of Directory/File menu items in tree [#15759]
- Remove unused processor Security/User/Group/GetList [#15910]
- Fix isBinary check [#15901]
MODX Revolution 3.0.0-beta1 (November 9, 2021)
====================================
- Fix problems in lexicon creation form [#15892]
- Remove superfluous lexicon entries [#15884]
- Configurable extension for static html files [#15855]
- Add zero-padded decimal option for number TVs [#15890]
- Restrict static resources to predefined path [#15885]
- Remove unused refreshTVs method [#15882]
MODX Revolution 3.0.0-alpha3 (October 27, 2021)
====================================
- Fix accessing $modx->controller from plugins and services [#15871]
- Fix POST requests through modTransportProvider::request [#15869]
- Remove reference to renamed upgrade script [#15863]
- Upgrade Smarty to v4 [#15859]
- Use Guzzle HTTP factory [#15856]
- Fix duplicate array key [#15860]
- Improve text styles in package manager [#15862]
- Fix typo in lexicon [#15853]
- Hide denied context menu items in elements tree [#15634]
- Fix errors in Resource\GetNodes processor [#15834]
- Fix form customization on static resources [#15637]
- Remove 'import resources' and 'import site' from core [#15841]
- Remove legacy class log message in modX::loadClass [#15842]
- Fix create tv panel broken by non-English lexicons [#15846]
- Fix preview_file field in schema [#15847]
- Various security patches [#15843]
- Make CI build command agnostic to the build tool itself [#15845]
- Refactor template variable creation [#15773]
- Remove obsolete contentType field [#15822]
- Allow language selection with Tab key in setup [#15823]
- Add policy count column to policy templates [#15839]
- Correct edit media source lexicon in tree [#15738]
- Improve action buttons UX [#15574]
- Move deprecated logging into dedicated table/view [#15002]
- Improve Button Styling in Modals [#15826]
- Hide broken navigation in trees [#15746]
- Add build assets to CI workflow [#15810]
- Fix issues for plugins that pass around xPDOObjects [#15809]
- Add template picker for creating new resources [#15535]
- Hide user settings tab based on permissions [#15776]
- Lazy load thumbnails in media browser [#15805]
- Fix Tab Visibility in User Group Editing Panel [#15802]
- Modernize manager template build workflow [#15793]
- Fix image TV display via hash [#15775]
- Prevent phpcs from failing on warnings [#15803]
- Presume default patch level of 0 when not defined by package [#15791]
- Improve field selection error for package provider [#15789]
- Resolve S3 Media Source issues from Flysystem upgrade [#15786]
- Refactor modTransportProvider using PSR-7 client [#15781]
- Improve RTL styles [#15758]
- Restore user password display [#15629]
- Assorted modRest improvements [#15777]
- Add PSR-7/17/18 HTTP services [#15779]
- Avoid removing Element/GetClasses processor [#15780]
- Add typeahead to Resource List TV [#15734]
- Add missing user password validation characters [#15630]
- Require auth token to access MODx.config to prevent XSSI [#15645]
- Remove SQL Server support [#15761]
- Skip session configuration check in CLI setup [#15769]
- Decrease LOG_LEVEL for cache errors [#15753]
- Upgrade flysystem to v2 [#15757]
- Make naming consistent when duplicating user in grid [#15755]
- Filter sensitive config values from placeholders [#15754]
- Strip base_url only from beginning of relative url [#15751]
- Update MODX logo in base template [#15750]
- Change order of menu items for Context in tree [#15749]
- Fix import section lexicons [#15747]
- Fix displaying big SVG images in media browser [#15481]
- Update minimum PHP version to 7.2
- Change file creation behavior in media browser [#15654]
- Support SameSite attribute in session cookies [#15669]
- Set code of conduct for the repo [#15671]
- Fix ignoring phpcs configuration file [#15668]
- Fix the appearance of PHP notices on the dashboard page [#15650]
- Fix issue when sending an internal message to the user [#15511]
- Add return link to package management on a page of single package [#15612]
- Switch non-index fields back to 255 char limit [#15398]
- Add intermediate tablet breakpoint to improve view on small screens [#15259]
- Improve language selector accessibility on the login page [#15627]
- Add possibility to translate message about site unavailability [#15537]
- Fix style of information messages in installer view [#15642]
- Add clarity within creating folders in media sources [#15652]
- Add endpoint property to S3 media source [#15641]
- Add PHP Code Sniffer configuration file [#15640]
- Fix filterPathSegment method call [#15638]
- Rename Admin group to proper name of Access Policy Template Group [#15628]
- Fix missed Developer Access Policy [#15626]
- Fix permissions checking in modAccessibleObject objects [#15632]
- Fix unavailable toggle language menu item because missed permission [#15621]
- Fix link to the proper version in welcome dialog [#15613]
- Update favicon in the installation folder [#15602]
- Add the EXTR_REFS flag to the extract function [#15578]
- Fix class key default value in the user creation form [#15620]
- Add code quality GitHub Action [#15603]
- Fallback to username when full name is missed in the Who is online widget [#15596]
- Add an required attribute for admin creation fields during installation [#15601]
- Fix MakeUrlTest->testSingleParameter test provider [#15594]
- Remove deprecated modClassMap [#15079]
- Fix context sub-menu not appearing in resource tree [#15593]
- Fix the lexicon entries of upload_translit [#15600]
- Fix trash page permission issues [#15482]
- Hide dependent forms until items are not selected in trees [#15478]
- Update base_help_url system settings with new link to documentation [#15572]
- Change lexicon on update widget [#15591]
- Simplify lexicons for grids [#15420]
- Fix Add button style glitches in dashboards [#15599]
- Add transliteration of files when uploading to a media source #modxbughunt [#15457]
- Increase required php version to 7.1 [#15589]
- Update information about the project in the readme file [#15562]
- Implement isDirty function in MODx.panel.ImageTV [#15516]
- Correct fields in the User / Account sections [#15539]
- Change display styles for system information [#15554]
- Remove TV with "list-multiple-legacy" type [#15489]
- Translate descriptions for policies, policy templates and policy template groups [#14009]
- Adjust class names in principal_targets system setting [#15529]
- Fix preview thumbnail issue [#15526]
- Fix image rotation in media browser [#15484]
- Fix PHP notices on login page [#15456]
- Adds missing lexicon file_folder_err_update [#15547]
- Set controller property in config [#15552]
- Change old class name to FCQN class_key for resources in tree [#15424]
- Remove unnecessary type attribute in script tags [#15533]
- Update logo and icon [#15444]
- Add mail_smtp_autotls system setting [#15549]
- Fix typo and change the name of upgrade scripts [#15548]
- Adjust PR template to encourage using right format to connect issues [#15545]
- Remove unnecessary type="text/javascript" [#15533]
- Support properties for @CHUNK/@SNIPPET bindings [#15488]
- Fix legacy class names [#15521]
- Update editorconfig rules [#15520]
- Replace 'modPlugin' with modPlugin::class in elementClassKey checks [#15519]
- Decode URI of directory in quick create file [#15517]
- Fix regular expression for file download [#15512]
- Improve changelog display when installing extras [#15486]
- Increase width of text TV input [#15485]
- Import missing classes [#15477]
- Fix loading package metadata for modx.transport [#15466]
- Display name of elements in delete messages [#15463]
- Fix PHP notices about undefined variables [#15459]
- Remove http:// from empty weblink field on resource create form [#15422]
- Update url in system setting base_help_url [#15411]
- Fix HTTPS check on setup bootstrap [#15487]
- Allow installation to work as expected behind a reverse proxy with HTTPS [#15470]
- Improve behavior of blocking users [#15442]
- Fix resource breadcrumbs if the resource is deleted [#15243]
- Only log session info if session is initialized [#15308]
- Improve removal of nested MODX tag content in sanitizeRequest [#15370]
- Improve Navigation for Access Control Lists > User Groups & Users [#15159]
- Various quick search improvements [#15158]
- Improve layout of additional options for TV List Box (Single Select) type [#15150]
- Remove allowNegative parameter for TV with number type [#15119]
- Fix incorrect path setting when uploading files [#15227]
- Add indication of selected file and expand active source in tree [#15228]
- Display caption instead of description in template TV grid [#15231]
- Make error_handler_class available as service [#15162]
- UI improvements for site_name in header [#15180]
- Changed "remove" to "delete", "update" to "edit" in lexicons [#15155]
- Localize anonymous in context interface [#15153]
- Fix drop animation appearing at the wrong position for dragged elements [#15111]
- Resize static fields on statick checkbox toggle [#15100]
- Change xtype to textarea for description in grids [#15126]
- Change isfolder field in active resource [#15078]
- Use 0 if id is undefined [#15102]
- Set error message by field name instead of id [#15098]
- Fix typeAhead parameter check [#15069]
- Link to help localize MODX added to Help & Support [#15138]
- Prevent path traversal when sending registry message [#15134]
- Fix a second refresh of the grid when opening a combo box [#15123]
- New lexicon for edit content type [#15094]
- Fix resource drag & drop setting `is_folder` to mark parent as container [#15076]
- Add numberfield as Field Type option for system settings [#15093]
- Remember filter properties for system setting grid from browser url [#15086]
- Prevent rewrite of .well-known directory used by LetsEncrypt [#15033]
- Allow custom values in Listbox (Multi-Select) TV [#14957]
- Fix DSN creation during an update with an existing port [#15083]
- Clear phpThumb connector properties [#15068]
- Date TV improvements [#15000]
- Improve navigation styles in element tree [#14989]
- Prevent overwriting apache_request_headers() in modRestServiceRequest [#15060]
- Fix checkbox toggling for custom context paths in setup [#15008]
- Remove references to safe_mode and related lexicons [#15058]
- Fix nested output filters [#14458]
- Add JSON Grid xtype [#14959]
- Fix `allowedFileTypes` being ignored in the Media Browser [#15046]
- Remove "allowBlank: false" for symlink/weblink in quick update [#14981]
- Improve styles for login [#15018]
- Add missing AddToGroup events in Security/Group/User/Create processor [#15022]
- Use single-quotes in MySQL queries for modTransportPackage for ANSI_QUOTES compatibility [#15011]
- Add context key to reload URL when switching templates [#14998]
- Fix package dependency restrictions not working [#14904]
- Fix fatal error when updating a git alpha1 install without running composer update [#14996]
- Fix positioning of reset-to-default button on TVs [#14686]
- Change style for uninstalled packages in the package manager [#14686]
- Improve modal styling with more padding around buttons [#14978]
- Fix resource drag & drop ordering [#14987]
MODX Revolution 3.0.0-alpha2 (January 28, 2020)
====================================
- Add header breadcrumbs throughout manager [#14890]
- Remove modAction and legacy controller support [#14927]
- Apply `MODx.util.safeHtml` to feed dashboards [#14946]
- Fixed transparency in .png for TV [#14906]
- Add missing unsigned attribute to integer foreign key fields in mysql schema [#14902]
- Remove legacy grids [#14875]
- Change the way deprecated class aliases are included [#14912]
- Make sure processors are instantiated with getInstance for derivative logic [#14921]
- Add updated DI Container and add support for namespaces to define a bootstrap.php file to init/register services [#14920]
- Fix resources showing twice in the tree when marking a resource as deleted from the resource panel [#14893]
- Remove actions icon for the list of permissions in a policy [#14936]
- Fix invalid media source path causing root to be shown [#14024, #14038]
MODX Revolution 3.0.0-alpha1 (December 12, 2019)
====================================
- Fix deprecation warnings on curly brace string offset access syntax for PHP 7.4 compatibility [#14863]
- Format timestamp to date & time in edit file panel [#14883]
- Add links to grid items in manager [#14864]
- Fix stretched user avatars in dashboard widgets [#14840]
- Set autocomplete to off on username in user edit form [#14839]
- Fix limit for context settings [#14819]
- Allow in-line editing in FC sets grid [#14781]
- Prevent users without edit_locked permission from editing locked elements [#14739]
- Lock setup after it is successfully executed [#14692]
- Generate sortable tag signature with serialized array values [#14689]
- Escape instances of new MySQL reserved word rank [#14705]
- Fix broken avatar when default media source is modified [#14544]
- Define IMG_WEBP constant in version of PHP without it [#14647]
- Setup redesign [#14507]
- Add widget welcome dashboard changes [#14607]
- Media browser reload [#14570]
- Fixed bug for checking the table prefix while installing MODX [#14543]
- Refactor model for xPDO 3.x and PSR-4 autoloading [#14534]
- Automatically marking required fields by an asterisk [#14522]
- Using a single pattern for elements action buttons like for resources [#14463]
- A status notification is shown when optimizing the database via System Information [#14525]
- Fixes an issue that would cause no results to display when using spaces before/after a search term in the search field [#14523]
- System Information now shows the correct version numbers of Smarty and PHPMailer [#14517]
- The minimum required PHP version for MODX is PHP 7.0 [#14488]
- If you edit a resource and at the same time move it in the tree through drag and drop the menuindex will now stay in sync [#14423]
- Alter modUserProfile gender field to tinyint from int [#14412]
- Return empty string for empty xml tag in modRestService [#14305]
- Missing file size translation and proper description for selected files in Media Source Browser [#14360]
- Change default values of automatic template assignment, tree node name fallback, and preserve menuindex system settings [#14328]
- Added normalize.css [#14369]
- Adds check for tree render on Access Control Lists page [#14451]
- Fixes the bug when matches names of policy before saving [#14449]
- Will add the image format `webp` to the list of allowed `Uploadable File Types` and `Uploadable Image Types` [#14356]
- Added a new property `contentField` to the `modx-panel-resource` component [#14446]
- Customized icons for content types [#14383]
- Changes the font stack for displaying code [#14427]
- Protect system directories from removing and renaming [#14374]
- Prevent Google Chrome translations at the admin panel [#14414]
- Improve the file preview in the media manager [#14372]
- Add "redirect to duplicate" option when duplicating resources and elements
- Protect MODx.grid.Grid against XSS vulnerabilities by default [#14344]
- Using (single) square brackets around MODX tags is now possible [#13904]
- The default manager time format (`manager_time_format`) for new installations is set to the 24-hour clock format [#14325]
- Template Variables tab is now before the Settings tab when editing a resource [#14067]
- Setup will now try to find the core folder by looking at existing config.core.php [#11888]
- Correction on the consistency of design and buttons [#14306]
- Use more consistent naming of "New" buttons [#1188]
- Disabled Gravatar by default for new installations [#14215]
- Sanitize parameters in the RestServiceRequest class [#14056]
- Update access policy description to include warnings [#13999]
- Fixed a fatal error that might occur when running setup on Windows after using `composer create-project` [#14241]
- In the manager navbar, show visual indicators for menu items with children [#14292]
- Remove support for "Uploadable Flash Types" [#14252]
- FontAwesome 5.6.3 and updated versions of frameworks [#14031]
- Add modifiers to get information from filepath: dirname, basename, filename, extension [#14198]
- Remove outdated classes for converting evo tags to revo [#14133]
- Fixed hover styles on login and forget password buttons [#14044]
- Ability to switch manager language on the fly in the manager [#14046]
- Make dashboard buttons go full width [#14080]
- Update minimum supported version to PHP 5.6, and recommended to 7.2 [#14097]
- Do not give TVs with output type as HTML an ID if no ID is set [#14039]
- Load all manager permissions at once to MODx.perm object [#13924]
- Remove outdated custom xmlrss classes and replace them by SimplePie library [#14034]
- Remove unused and outdated xmlrpc and jsonrpc and related classes [#14033]
- Changed appearance and position of status message after saving action [#14003]
- Resource and Media Browser CSS Improvements [#13998]
- Custom manager logo in the manager and design tweaks [#13934]
- Added active/selected row color for resource tree and media browser [#13995]
- Sidebar styles glitches improvements [#13996]
- Fixed error log line wrapping problem in Firefox. [#13966]
- Various UI improvements on Resource controllers [#13875]
- Various Media Browser improvements for uploading and deleting files [#13851]
- Fix Regex validation for TV's of the input type "Text" [#13916]
- Change the result from type "warning" to type "success" and change the message for the install summary [#13897]
- Remove @EVAL binding from TVs to prevent arbitrary code execution by admins [#13865]
- Removed obsolete system settings [#13859, #14841, #14843, #14848, #14868]
- Added missed upgrading script to database related upgrading files [#13870]
- Support of Markdown in package attributes (changelog, readme, license) [#13853]
- New class-based ConfigCheck processor [#13864]
- Returned showing help block on login screen [#13820]
- Remove second nocompress checkbox from the setup [#13785]
- Dashboards, widgets system and built-in widgets were fully remastered [#13844]
- Implement a new login design for the manager, with a configurable big background and logo image
- Forgot password on manager login now requires user to enter a new password instead of sending a pass via email [#13786]
- Manager login now automatically detects browser language [#13786]
- Manager language is now stored in the session, based on the chosen language in login, instead of settings [#13786]
- User related emails are now nice HTML emails [#13786]
- Load xPDO, Smarty and Phpmailer dependencies via composer instead of including source files [MAB-01, #13781, #13706]
- Use League/Flysystem under the hood for media sources [#13701]
- Update to xPDO 3.x via Composer
- Remove manager/min/ folder (deprecated since 2.5)
- Remove "disable compress" checkbox from the setup [#12857]
- Remove flash-based copy to clipboard function from ExtJS [#13697]
- Restore core/cache/.gitignore after accidentally removing it in earlier merge [#13826]
- Minor code style fixes [#14178]
- Set manager favicon to the MODX logo by default [#14324]
- Reorder tabs on the template and template variable panels [#14251]
- Remove nested menu items when deleting the parent [#14530]
- Move deleted checkbox from Settings tab to Publishing section [#14501]
- Add manager_tooltip_enable and manager_tooltip_delay settings to manage if/how long tooltip descriptions are shown [#12732]
- In recently edited resources and online users widget, make sure user has "logs" permission before showing the link to more [#14522]
- Add passwordless login to the manager [#14351]
- Add edit date to the list of recently edited resources in the user panel [#11264]
- Fix xtype for various settings [#12284]
- Update the layout for editing users and your own account [#13988]
- Rename "Top Menu" to "Main Menu" now that it is no longer at the top [#14852]
- Change styling of resources in the tree: unpublished resources are now dimmed, with italics indicating menu visibility [#13969]
- Add name of edited media source, form customisation profile, dashboard, and dashboard widget to the title in the browser [#14830]
- Add a gear icon to all grids by default to access the context menu [#14806]
- Show a pencil icon and subtle color change when hovering over an editable field in a grid [#14176]
MODX Revolution 2.7.2-pl (TBD)
====================================
- The default RSS feed URLs `feed_modx_security` and `feed_modx_news` now use HTTPS [#14392]
- The value for the preview tooltip in the trash manager is now properly encoded [#14401]
- Change icon to propper one for descending sort order [#14413]
- Don't execute the upgrade script for the last installed version again [#14396]
- Fix friendly_alias_realtime system setting not working as expected [#14438]
- Fix deprecated create_function() calls in modProcessor and modConnectorResponse [#14399]
- Fix deprecated each() in the lang.js.php connector [#14397]
MODX Revolution 2.7.1-pl (February 14, 2019)
====================================
- Fix ctl/cmd+click behavior to open URL in new window/tab [#14348]
- Show all resources to purge in the trash manager and change tree options for deleted resources [#14350]
- Handle deprecated warnings for sendRedirect in modX class instead of modResponse [#14359]
- Updated phpThumb to version 1.7.15-201902101903 which has basic support for WebP [#14366]
- Fixed CVE-2018-17556 [#14336]
- Fixes bunch of various XSS issues in the manager [#14335]
- Fix issue with resource list preventing parents from working correctly [#14329]
- Fixed issues with tab width and very long strings in the vertical tabs [#14317]
- Refactored tag input renderer to fix rendering with empty options list [#14319]
- Fix duplicating static templates, snippets etc. with an empty category [#14203]
- Don't include the resource ID in real time aliases [#14210]
- Move resource_uri and resource_uri_overide to page-settings-right-box-left region [#14297]
- Fix position slide-in/slide-out button of Resource tree [#14298]
- Fix context menu position on user page "Access Permissions" tab [#14295]
- Fixed bug with unexpected incremented TV ranks in Form Customization [#14281]
- Improve description of the system setting user_settings_desc to clarify meaning [#14249]
- Improved display of information about (missing) dependencies when you install a package/extra [#14255]
- Fix an issue where old static files where removed even if the automate static files system setting was turned off for that element type [#14208]
- Nested categories display their name instead of their id [#14205]
- Fixed case when empty date TVs can be saved even if "allow blank" is set to false [#14290]
- Fix empty Constraint column in Form Customization if constraint value is zero [#14287]
- Don't remove the trailing slash when redirecting to the manager after logging in [#14278]
- Added explanatory text with MODX tag to the description of the System Settings, Context Settings and Lexicon Management sections [#14265]
- Bugfix for transport resolution, if the package is not found on the current provider [#14260]
- When deleting an element in the tree, the confirmation window will show the translated element type name [#14272]
- Fix edit empty files from tree [#14284]
- Enhanced the error message of a wrong MODX_CORE_PATH [#14276]
- Fix checkDownloadedDependencies query to make package dependencies work properly [#14261]
- Don't remove static files if automated static files are turned off [#14228]
- Image template variable values escape/encode JavaScript tags only [#14263]
- Switch to the tab where the validation error occurs when saving an element [#14235]
- Make working Preview menu option in the recent edited resources widget [#14234]
- Apply Form Customization rules for TV's when a wildcard action is used [#14224]
- Add a Unit Test for testing the build process [#14213]
- Don't force the manager date time format for the date of birth field [#14214]
- Prevent symlinks and weblink to target itself [#14211]
- Checkbox Use current alias in alias path in the Form Customization sets [#14209]
- Use the right table name when fetching the MODX package providers [#14222]
- Fixed position of context menu in the media browser [#14199]
- Fix "undefined" text in Trash manager button tooltip. [#14191]
- Fix a broken top-menu [#14186]
- Fix the missing description for the system setting "Automatic Template Assignment" [#14173]
- Update config.js.php processor to be class based [#14161]
- Make the flat file processor deprecated message more useful [#14160]
- Fix missing styles on resource data heading [#14142]
- Remove unnecessary h2 on resource update heading [#14230]
- Use proper element icons in elements tree [#14001]
- Fix incorrect margin on the uberbar submit button [#14142]
- Fix error message overflowing on TVs [#14142]
MODX Revolution 2.7.0-pl (November 27, 2018)
====================================
- Add recursive method to replace reserved characters [#14156]
- Update phpThumb to 1.7.15-201810050741 [#14155]
- Fixed error log line wrapping problem [#13966]
- Fixed call to a member function deprecated() of null [#14139]
- Deprecate 0.9.x parser migration utilities for removal in 3.0 [#14131]
- Add some deprecated logging [#14136]
- Validate the ID target for symlinks and weblinks [#14041]
- Add native PHP password hashing [#13926]
- Enable automatic static elements workflow [#14135]
- Fix and normalize combo-boolean tv option values [#14129]
- Allow a middle mouse click to open links in a new tab/window [#14061]
- Fixing getlist processors for combos that have a page size [#14116]
- Improved messages on plugin editor page [#14128]
- Add "OnBeforeRegisterClientScripts" event [#14123]
- Trash manager [#14058]
- Implemented quick create buttons on tree nodes for documents [#13774]
- Copy file/folder path to clipboard [#14078]
- Add method for logging deprecated method usage [#14217]
- Fixing user combo with preselected user ids [#14113]
- Restore the setup options window title, if two packages are installed with setup options [#14120]
- On PHP 5.4+, clone the modSystemEvent object so values can be transmitted between plugins [#13116]
- Make path for custom MODX error handler class configurable [#14119]
- Resolve issue with package update window when clicked multiple times [#13985]
- Update Smarty to 3.1.33 [#14126]
- Fixed the name of system setting about allowing or not eval in TV [#14124]
- Hide Input Option Values for TV types where irrelevant [#14040]
- Improve display of double-height dashboard widget [#14117]
- Fix for the password length error message during setup [#14112]
- Apply containerOptions correctly when creating database during installation [#14069]
- Use max_input_nesting_level for max depth argument in modX::sanitize [#14098]
- Pass missing signature to lexicon when package uninstall fails [#14066]
- Prevent double-click resulting in blank page from media browser [#14076]
- Clear system/phpthumb connector properties to prevent unnecessary warnings [#14096]
- Constrain MODx.Window to browser's viewable area by default [#14090]
- Delete files in media browser with '&' in the file name [#14054]
- Prevent invalid relative media source path from revealing root path contents [#14038]
- Prevent an infinite loop in sendErrorPage() [#14108]
- Got rid of bower from theme build process [#14091]
- Set the min-height of a x-combo-list-item when it is empty (no text) [#14092]
- Fixed manager header height on resize [#14083]
- Improved performance and requests timing by changing the counting of children via subqueries [#14065]
- Improved the isBinary checks in modFileHandler class [#14027]
- Fixing images escaping their container in media browser [#14052]
- New RewriteRule to hide dot directories from the public access. [#13930]
- New system setting with default media source type value [#14012]
- Fixed handling $depth variable during recursive calls in getTree method [#14002]
- Prevent header overriding in included template of error unavailable [#13986]
- Add ability to see all elements under tree nodes for Categories [#13997]
- Correct display of policy permissions in access control grids [#13994]
- Make the resource class a little closer to SOLID principles [#13877]
- Smart detecting of used plugins for expanding rows in grids [#13992]
- Login forgotten password improvements [#13987]
- Enhancement for dashboard jumping around on page load [#14032]
- Set the caption for node elements inside categories [#14029]
- Make policies in grid sortable by enabled/disabled mark [#14004]
- Remove non-functional cache_disabled system setting [#14022]
- Reduce log level to WARN when calling non-cacheable tags inside cacheable ones [#14017]
- Remove cache_system_settings from system settings [#13832]
- Prevent directory traversal and limit files deleted when clearing modFileRegister [#13980]
- Filtering user parameters before passing them into phpthumb class #13979
- Update phpThumb to 1.7.15-201806071234 #13938
- Require minimal PHP version (in composer.json) #13939
- Prefer ampersand replacement of the the translit class [#13931]
- Add iconv_ascii transliteration [#13932]
- Add set_sudo permission [#13807]
- Log setlocale errors [#13878]
- Various improvements regarding password generation and validation [#13923]
- Make error.log location customizable [#13768]
- Add system setting for partial resource cache clearing feature [#13588]
- Prevent line-wrap in error log [#13843]
- Add template icon for resources in search results in the uberbar [#13882]
- Remove duplicate code of password generator and fix an issue with the empty value of password_generated_length setting [#13909]
- Add ID number to manager pages (resources and elements) [#13914]
- Add option to supply waitMsg on submit in MODX windows [#13915]
- Show validation errors when setting a new user password [#13585]
- Add CLI install script for use with composer create-project [#13790]
- Allow extension packages to have an empty table_prefix [#13716]
- Add wildcard support to form customization actions [#13775]
- Make HTTPS server check accept any non-empty value [#13794]
- Add ability to search by id on all objects in manager search [#13804]
- Add automatic_template_assignment feature [#13700]
- Media Browser optimizations [#13805]
- Add "Purge Old Versions" button to the package version listing to clean up old versions [#12818]
- New resource option "Use current alias in alias path" to allow hiding resources from the URI [#11153]
- Make $modx->setDebug support E_LEVEL constants (e.g. E_NOTICE/E_ERROR) and fix setting debug to 1 not working [#12579]
- Use stricter check for string type in resource tree to avoid uncaught error in edge cases [#13262]
- Allow plugins OnDocFormRender to set templates with $resource->set('template', 3) [#13049]
- Add "filterPathSegment" output filter to turn a string into url-safe string [#13699]
- Make sure requests to containers without the container suffix are redirected to the right url with container suffix [#13142]
- Ignore spaces in allowedExtensions properties and relevant system settings to ensure the right file types show up [#13702]
- Add list of recent manager log entries to the Resource Overview page [#13734]
- Prevent notices for undefined Smarty placeholders [#13748]
- Remove some unused images [#13788]
- Fix incorrect hex colors in TV input options description [#13776]
- Change modResource.description column to text [#13802]
- Fix modDbRegister->clear and use fully qualified name [#12965]
MODX Revolution 2.6.5-pl (July 11, 2018)
====================================
- Prevent directory traversal and limit files deleted when clearing modFileRegister [#13980]
- Filter user input used in phpthumb [#13979]
MODX Revolution 2.6.4-pl (June 7, 2018)
====================================
- Fix sorting by access column in Template Access tab of Template Variable edit view [#13893]
- Make sure category is not null before checking add_children permission when creating chunks [#13906]
- Address various minor XSS issues in the manager [#13887]
- Update xPDO to 2.7.0 to solve bug with getIterator and MODX Resource Group ACLs [#13889]
- Update phpmailer from 5.2.21 to 5.2.26 to fix various security issues [#13886]
MODX Revolution 2.6.3-pl (April, 19, 2018)
====================================
- Fix installation of transport packages with setup options [#13861]
MODX Revolution 2.6.2-pl (March 30, 2018)
====================================
- Display context name and key in Context dropdown [#13839]
- Only save properties modified from the default for an element in Property Sets [#13799]
- Replace usages of each() to avoid deprecated warnings in PHP 7.2 [#13829]
- Prevent adding ./ to filepath when in root of a mediasource [#13778]
- Fix error with getonline processor on systems with only_full_group_by sql_mode [#13835]
- Prevent logging errors for comments or empty tags [#13771]
- Fix typo preventing verbose CURL option from being set in modRest [#13798]
- Prevent http headers from being overwritten in modRest [#13797]
- Fix sending messages to wrong recipients in message/create processor [#13796]
- Stop sending too much data on package install request [#13813]
- Add events permission to Administrator policy on new installs [#13830]
- Remove max width from the tree sidebar [#13637]
- Select the correct media source when editing a static element [#13750]
- Fix the setup language being reset to English in the last step [#13611]
- Fix incorrect view url after changing the resource url [#13768]
- Fix silent fail on login without manager access [#12706]
- Fix incorrect media source being used on image TVs when creating new resource in different context [#13609]
MODX Revolution 2.6.1-pl (December 15, 2017)
====================================
- Increase efficiency of cache refresh on autopublish events [#13572]
- Remove concatenated key from name field in Contexts grid [#13372]
- Prevent infinite loop when a modSymLink refers to itself [#13710]
- Get only unique template paths for manager controllers [#13717]
- Ensure dashboard widget exists before calling methods on it [#13604]
- Fix phpthumb issue in files tree and media browser [#13704]
- Show correct Resource type icon in search results [#13705]
- Allow callback if nothing is selected in MODx.browser [#13684]
- Fix Flush Your Permissions top menu item [#13690]
- Improve changelog display in package browser [#13677]
- Revert behavior of image_width and image_height for media source images [#13672]
- Fix CLI installation to properly detect MySQL server version [#13680]
- Fix title format in various manager views [#13668]
- Fix javascript issue on resources containing quotes [#13669]
- Fix console error when editing resources with tv tab [#13683]
- Fix invokeEvent call for new OnResourceCacheUpdate event [#13676]
MODX Revolution 2.6.0-pl (November 1, 2017)
====================================
- Add top padding to .modx-alert and .modx-confirm classes [#13652]
- Improve setUserGroups/addUsers methods [#13653]
- Enable sorting by 'assigned' column in template variable grid [#13598]
- Return better error message if group name already exists [#13600]
- Hide empty template variable tabs in the resource panel [#13649]
- Add .less, .scss, .sass and .css.map as default allowed upload file types [#13592]
- Enable context setting overrides in modResource->cleanAlias() [#13622]
- Add OPTIONS request method to modRestController [#13636]
- Fix redirect when deleting elements [#13644]
- Fix format of chunk title [#13643]
- Prevent connector errors from invalid ctx parameter [#13627]
- Fix processing of noncacheable elements inside cached [#13530]
- Fix site_status issue when a session is not available [#13635]
- Fix endless loop when error log is too big [#13632]
- Fetch Lexicon lang and topic lists from database [#13599]
- Add CSS class to TV containers [#13602]
- Add OnResourceCacheUpdate event [#13590]
- Add new Who's Online dashboard widget [#13545]
- Additional SVG preview improvements [#13629]
- Enable rendering of SVG previews in Media Browser [#13517]
- Add stream upload support for binary files to modRestService [#13164]
- Remove null-byte character check [#13581]
- Add search/filtering to plugin event list [#13552]
- Search improvements for user management [#13551]
- Improve description of TemplateVariable Input Option Values [#13550]
- Replace all hardcoded http versions by $_SERVER['SERVER_PROTOCOL'] [#13518]
- Make searchbar accessible via assistive tech landmarks [#13437]
- Make ContextResource optional in query for rebuilding contexts [#13360]
- Reduce varchar and text index prefixes for utf8mb4 support in mysql [#13559]
- Change new installs to create tables with InnoDB engine on mysql [#13462]
- Fix set height of error log [#13566]
- Reset user session token if it is set but value is empty [#13577]
- Fix chmod feature on directories [#13580]
- Fix resource tree ignoring hide_children_in_tree value [#13578]
- Skip date format check when using resource quick update [#13534]
- Fix ability to drag files more than once [#13533]
- Fix permission check for updating user group settings [#13544]
- Fix collapsing secondary buttons [#13558]
- Add unique index for modTemplateVarResource values [#13535]
- Fix media browser active state in tree [#13496]
- Fix media browser tree refresh after creating a directory [#13501]
- Prevent "New User Group" button being covered with long translations [#13555]
- Add modx_media_sources_elements when a context is duplicated [#13529]
- Remove resource template values when context is removed (cherry-pick) [#13525]
- Fixed issue with incorrect signature during installing two packages with setup options (cherry-pick) [#13557]
- Added loading error log only via ajax to avoiding blank page in case bad characters in log file [#13560]
- Added DKIM attributes to PHPMailer [#13303]
- Hide user group tree panel splitbar if center panel is hidden (cherry-pick) [#13520]
- Added missing setting for primary user group during creating a new user [#13528]
- Remove exposing of full path from error message when controller not found in the Manager [#13430]
- Remove hardcoded modUser references in user processors [#13532]
- Secondary button height fixes [#13543]
- Add newNameField to modObjectDuplicateProcessor to correct error messages [#13521]
- Added ability to duplicate a context from the contexts grid & while editing a context [#13540]
- Honor the failed_login_attempts setting [#13516]
- Added option to allow double encoding to htmlentities output modifier [#13325]
- System events are now listed with their attached plugins [#13324]
- Added ability to return custom error message via plugin when a user authenticates [#13204]
- Create a new "please wait" windows on any package download instead of hide/show [#13506]
- News & security feeds in the manager welcome page are now loaded using AJAX [#13507]
- Added resource pagetitle & ID when deleting a resource [#13497]
- Remove unused path_search and url_search processors in setup [#13433]
- Fix logging an empty value in modUser->joinGroup() [#13445]
- Fix featured flag in package listing not interpreting the string value [#13470]
- Re-style the templated package provider thumbnail grid [#13274]
- No addition on a JS string! [#13401]
- Sessions are marked as staled after creating/updating/removing a user group/policy [#13311]
- Clearing cache from the manager is now logged in manager actions [#13350]
- Context sorting in trees is now enabled by default [#13356]
- Add events for package install, uninstall, and remove [#12936]
- Add setting to log when snippets are called that don't exist [#12984]
- Added option to disable EVAL binding in TVs [#13224]
- Allowing using keyboard modifiers to open some links in new tabs [#13103]
- Pass properties to the OnRichTextBrowserInit event [#13110]
- Add tag [^m^] to show used memory [#12981]
- Add Delete button to chunk/snippet/plugins-window [#13245]
- Add after(append) and before(prepend) output filters [#13021]
- Add class_key and item filter to the Manager Log [#13005]
- Change view_ permissions to edit_ permissions for elements in uberbar search [#13095]
- Allow manually editing rank of contexts [#13097]
- Pass the namespace to OnManagerPageInit event [#13104]
- Add new line and spaces regex to input filter [#13115]
- Add "UserProfile events" [#13153]
- List empty as default template in system settings [#12975]
- Add .x-form-display-field style [#12955]
- Add the ability to generate custom manager "top menus" [#12554]
- Replace dirname(dirname(__FILE__)) with dirname(__DIR__) [#13147]
- Add User Group description to UserGroups grid (with row toggle) [#13130]
- Add ExtJS Manager headers and descriptions components [#13118]
- Made modX::addEventListener & modX::removeEventListener actually work
- Correct email subscription form on help page [#13463]
- Add ability to see changelog of extras before downloading the update [#13410]
- Fix session_start error "Session callback expects true/false" on PHP 7 [#13041, #13073]
- Prevent "Call to member function get() on array" error, caused by TinyMCE [#13085]
- Prevent drag/dropping contexts when context_tree_sort is disabled [#13363]
- Improve user messaging with an outbox and improved message listing [#13390]
- Prevent dashboard breaking if a widget is missing a file [#13367]
- Fix positioning of TVs on the first resource tab [#13318]
- Prevent error on PHP 7 when using invalid output conditions [#13167]
- Allow use of date/strftime output filter on date strings without strtotime output filter [#8161]
- Make the save button available immediately when removing locks from the resource update page [#12028]
- Add option to skip duplicating resources when duplicating a context [#13277]
- Expand relative base paths in the file media source [#13295]
- Added pagetitle of the resource that has been duplicating into the title of duplication window [#13475]
- Fix incorrect pending changes warning when a resource was set to the empty template [#13483]
- Add optional $byName attribute to modResource->joinGroup to force joining a numeric group [#4014]
- Allow default TV values to use @BINDINGs [#3454]
- Make sure log_target being empty defaults to FILE instead of ECHO [#7659]
- Allow javascript handlers to be executed in the user-nav [#13094]
- Make sure the scripts cache uses the right file permissions [#12677]
- Add support for new_folder_permissions_cache and new_file_permissions_cache settings to change permissions on cache folders [#12677]
- Add new modDirectory->getFiles() method to list files/folders in a directory [#13096]
- Some modRest refactoring to clean up code style and doctypes [#13133]
- Fix output filter handling of non-existent TV tags to be consistent with placeholders [#13203]
- Automatically change to the resource tab that holds an error when encountering a validation error saving a resource [#13202]
- Move OnFileManagerBeforeUpload event so it can also be used to prevent uploads or change file info [#13067]
- Lower memory usage of duplicating contexts with lots of children [#13217]
MODX Revolution 2.5.8-pl (TBD)
====================================
- Use pageSize from system settings for system settings grid [#13493]
- Fix date format for created field of package in the package provider [#13509]
- Add a mouseout listener to the 'Clear Filter' buttons across the manager [#13510]
- Add view_template:true for the "Content Editor" access policy [#13508]
- Refresh the parent (resource) node when creating the first children [#13499]
- Refresh element in tree after changing name in element's panel [#13502]
- Remove unused path_search and url_search processors
- Fix logging an empty value
- Update xPDO to fix issue with validation rules
MODX Revolution 2.5.7-pl (April 20, 2017)
====================================
- Try all available methods when attempting to download transport packages [#13419]
- Prevent stored XSS in UserGroup names and various other fields [#13418]
- Prevent user/email enumeration in forgot password feature [#13408]
- Prevent XSS cache poisoning via Host header [#13426]
- Proper use of json_encode and error handling for outputArray() in processors [#13389]
- Prevent reflected XSS in setup [#13424]
- Fix local file inclusion vulnerability in setup action parameter [#13422]
- Fix various local file inclusion preventions to also protect on windows [#13428]
- Remove htaccess from allowed file types on new installations [#13423]
- Prevent stored XSS in resource pagetitle [#13415]
- Make search bar work as expected on Chrome & Firefox [#13405]
MODX Revolution 2.5.6-pl (March 28, 2017)
====================================
- Enable Resource Group access column to be sorted [#12426]
- Prevent warning from array_key_exists when aliasMap not available [#13297]
- Fix broken images in File tree when media source above doc root [#13292]
- Encode HTML in the template description to prevent potential XSS [#13290]
- Use (but limit) setting for results per page in package management grid [#12518]
- Added validation for min and max length of text TV configuration [#9039]
- Allow value '0' for multi select TV items [#9492]
- Fix "undefined" on package management breadcrumb when updating [#12567]
- Reduce log level to INFO for links not found by modContext->makeUrl() [#13268]
- Fix error in Firefox preventing using enter in the uberbar [#12714]
- Fix error when deleting a file from a TV [#12417]
- On new installs set base_help_url setting to the new docs subdomain [#13309]
- Refresh resource tree and context grid on create and delete [#12495]
- Only call generateContext once when saving a resource [#13347]
- In get/setTVValue, consider numeric strings as ID instead of name [#12542]
- Validate chmod input [#13352]
- Prevent drag/drop of directories messing up directory structures [#13165]
- Get rid of duplicate scrollbars in the help window [#12914]
- Show proper error page when viewing an inaccessible symlink [#12380]
- Avoid duplication of modLexiconEntry objects when updating context settings [#12823]
- Fix system info's database tables tab on sqlsrv [#9854]
- Add comment to config.core.php files that its contents are overwritten on update [#10299]
- Fix double dots in the filename of downloaded static resources [#10267]
- Fix duplicating resource children which are hidden from the tree [#13298]
- Show proper error message when trying to rename a file/folder that already exists [#13256]
- Fix missing caption when duplicating a TV via the Edit TV page [#13317]
- Fix empty error popup when adding a usergroup to a media source without a policy [#12701]
- Fix close button on resource overview page [#12822]
- Hide database username, password and database name from advanced setup [#13090]
- Fix "Cannot read property 'style' of undefined" error when resizing viewport after closing a modal [#13294]
- Fix "o.field is undefined" error when checking a resource group [#13296]
- Fix phpdoc for modAccessibleObject->checkPolicy [#13301]
MODX Revolution 2.5.5-pl (February 8, 2017)
====================================
- Respect new_file_permissions setting when create/upload files in manager [#13246]
- Escape regular expression special characters in last query string of a superboxselect [#13236]
- Improve logging of bad links [#13268]
- Fix a few Smarty variables not being defined [#13117]
- Only load manager layout when the controller is not "browser" [#13135]
- Add autoHeight in the Create/UpdateSetting window [#13220]
- Address various potential security issues in setup [#13261]
- Validate file extension when renaming/creating files in file browser [#13240]
- Examples to rewrite all domains of one installation with/without www [#13249]
- Update MODX Transport Provider to use SSL URL [#13260]
- Add site name to the login title [#13254]
- Fix File Unzip feature [#13223]
- Fix truncating filename at space by downloading via filemanager [#13171]
MODX Revolution 2.5.4-pl (January 3, 2017)
====================================
- Update xPDO to 2.5.3 release to avoid xPDOQuery class not found error
MODX Revolution 2.5.3-pl (January 3, 2017)
====================================
- Fix listing packages on systems with non-utf8 locales [#13182]
- Update PHPMailer to 5.2.21 for CVE-2016-10045 patch [#13229]
- Access chunk array instead of chunk object instance [#13210]
- Update PhpMailer to 5.2.19 to protect against RCE vulnerability [#13227]
- Add various missing permission checks to processors [#13174]
- Update xPDO to 2.5.2 release
- Improve phpThumb InitializeTempDirSetting [#13151]
- Validate Resources when dropped onto weblinks and symlinks [#13212]
- Fix Resources not loading in the tree in sqlsrv [#12845]
- More specific removal of critical settings in MODX.config [#13180]
- Fix broken list of previously installed package versions [#13179]
- Fix incorrect media source name on Files tab [#12596]
- Update Font Awesome to 4.7.0
- Remove placeholders from login screen to fix accessibility bug/confusing screenreading [#13186]
MODX Revolution 2.5.2-pl (November 14, 2016)
====================================
- [SECURITY] Hide critical settings in MODx.config [#13170]
- [SECURITY] Prevent local file inclusion/traversal/manipulation [#13177]
- [SECURITY] Prevent path traversal in $modx->runProcessor [#13176]
- [SECURITY] Prevent unauthenticated access to processors [#13175]
- [SECURITY] Prevent path traversal in modConnectorResponse action param [#13173]
- [SECURITY] Update xPDO to 2.5.1 release
- Add security/login support for action based connector [#13158]
- Make one single connector file possible [#13157]
- Don't create a DirectoryIterator on non existing folders [#13127]
- Fixing tvLabel output filter empty needle warning [#13138]
- Fix session extension call using action based connector [#13146]
- Select modTemplateVarTemplate.rank for MySQL 5.7 ONLY_FULL_GROUP_BY SQL Mode [#13098]
- Fix new category option duplicating view of elements [#13137]
- Consistency in error messages, based on error type [#13126]
- Make sure things do not break when no valid json/empty string is returned OnMediaSourceGetProperties event [#13119]
- Removed superfluous code in the manager "gateway" [#13120]
- Set temporary directory for files processing in phpThumb [#13128]
- Upgraded phpThumb to 1.7.14-201608101311 [#13125]
- Force display errors during setup [#13107]
- Added duplicating caption field for TVs [#13100]
- Fix PHP warning if the response message is empty [#13111]
- Removed duplicate element ID [#13105]
MODX Revolution 2.5.1-pl (July 21, 2016)
====================================
- Preserve original behavior for 3PC RTE TVs [#13071]
- Fix with of install button after text change [#13078]
- Fix server port check in setup start script [#13037]
- Update phpThumb to version 1.7.14 [#13039]
- Show image preview in file tree for S3 media source [#13059]
- Fix problem with S3 bucket names containing dots [#13031]
- Add missing properties in modX class [#13035]
- Fix pagination in the "New event create" dialog [#13062]
- Fixing padding-top issue in MODx.Window [#13038]
- Use sans-serif font for TV textareas [#13045]
- Prevent reflected XSS in connector's JSONP support [#13051]
- Fix a SQL injection [#13052]
- Fix uberbar user search return invalid User ID [#13056]
- Fix width of the install button [#13057]
- Extended grunt build tasks [#13026]
- Remove deprecated curl option [#13032]
- Show resources marked as container with a folder icon in the tree, even if it has no children. [#13027]
- Restore missing Duplicate buttons on weblinks and symlinks [#12910]
- Fix changing labels via manager customisations on checkboxes [#12890]
- Fix extracting the title if it contains newlines when importing HTML [#12937]
- Fix code smell issues in modPhpThumb [#13022]
- Prevent using double quotes in extended user fields and containers to prevent breaking the context menu [#13012]
- Fix saving a resource if the pagetitle of the parent contains tags [#13017]
- Fix JavaScript error when editing an extended user field that contains markup [#12841]
- Increase the delay for opening top nav menu items to 0.5s to prevent misclicks [#12931]
- Allow email addresses validated by the extjs email vtype to have longer TLDs [#12940]
- Fix updating user settings [#12988]
- Fixed permissions for new files [#13000]
- Fix for 500 error after install using STRICT_TRANS_TABLES mode in mySQL [#13001]
- Fixed typo in scss [#12993]
- Remove all traces of manager HTML5 cache manifest [#12985]
- Fix rare database connection setup error (new installs/advanced upgrades) [#12997]
- Remove :first-of-type, reduce padding on container [#12973]
- Fix problem with multiple placeholders in a system setting [#12692]
- Set correct title to edit fc set [#12974]
- Corrected $_lang array index and $_lang string typo [#12979]
- Error 500 + installer fails when MYSQL Strict SQL Mode is ON [#12838]
- Use rawurlencode in modparser [#12675]
- Reference to values passed by reference got lost [#12951]
- Add uri to mysql/modcontext.class.php [#12971]
- Add missing viewport meta tag needed to enable the responsive manager [#12977]
- Avoid empty manager theme [#12989]
- Fix: expression is always true [#12956]
- Make sure uberbar resource search respects ACLs [#12960]
MODX Revolution 2.5.0-pl (April 21, 2016)
====================================
- Fix issue where site_start and default_template settings get the wrong ID on certain environments [#12959]
- Replace hard-coded charset in Default template with MODX setting [#12916]