This PR was merged into the 1.12 branch.
Discussion
----------
| Q | A
|-----------------|-----
| Branch? | 1.12
| Bug fix? | no
| New feature? | no
| BC breaks? | no
| Deprecations? | no
| Related tickets | N/A
| License | MIT
Commits
-------
6ca4a6aaae [Maintenance] Update docker docs
3fa947e4c9 [Maintenance] Remove unnecessary line
This PR was merged into the 1.12 branch.
Discussion
----------
| Q | A
|-----------------|-----
| Branch? | 1.12
| Bug fix? | yes
| New feature? | no
| BC breaks? | no
| Deprecations? | no
| Related tickets |
| License | MIT
This PR aims to solve 2 issues:
- Potential Cross Site Scripting (XSS) via the "Province" field in the Checkout and Address Book (https://github.com/r2tunes/Reports/blob/main/Sylius.md)
- Potential Cross Site Scripting (XSS) via the "Name" field (Taxons, Products, Options, Variants) in the Admin Panel
Commits
-------
Fix potential xss in admin panel
Use function from UIBundle
Fix product-auto-complete
Add js sanitizeInput function
Add sanitizer function to UIBundle
Use function from UIBundle
[AddressBook] Add scenario for preventing from a potential XSS attack
[Checkout] Add scenario for preventing from a potential XSS attack
[Behat] Minor scenarios improvements after code review
Test adding new taxon
Test adding new simple product
Test adding similar products
Fixes after CR
bug #69 Fix potential xss in AdressBook and Checkout (mpysiak, GSadee)
bug #76 Fix potential xss in admin panel (mpysiak)
[Behat] Minor scenarios improvements
This PR was merged into the 1.12 branch.
Discussion
----------
| Q | A
|-----------------|-----
| Branch? | 1.12
| Bug fix? | yes
| New feature? | no
| BC breaks? | no
| Deprecations? | no
| Related tickets | n/a
| License | MIT
Fixes potential xss in admin panel (Taxons and Products)
Commits
-------
d4812f9c14 Fix potential xss in admin panel
29d18a3993 Use function from UIBundle
c11c424c1c Fix product-auto-complete
a17de6d1ed Test adding new taxon
d25edf3ff0 Test adding new simple product
63c3cf7a12 Test adding similar products
679e793521 Fixes after CR
This PR was merged into the 1.12 branch.
Discussion
----------
| Q | A
| --------------- | -----
| Branch? | 1.12
| Bug fix? | yes
| New feature? | no
| BC breaks? | no
| Deprecations? | no
| Related tickets | n/a
| License | MIT
Fixes CVE-2024-29376. Reported here: https://github.com/r2tunes/Reports/blob/main/Sylius.md
Commits
-------
0a7fe9ee4b Add js sanitizeInput function
89880cd7b3 Add sanitizer function to UIBundle
19cea9aa1b Use function from UIBundle
3d66fb0672 [AddressBook] Add scenario for preventing from a potential XSS attack
925554057b [Checkout] Add scenario for preventing from a potential XSS attack
30de6ff277 [Behat] Minor scenarios improvements after code review
This PR was merged into the 1.12 branch.
Discussion
----------
| Q | A
|-----------------|-----
| Branch? | 1.12
| Bug fix? | yes
| New feature? | no
| BC breaks? | no
| Deprecations? | no
| Related tickets | #16193
| License | MIT
Fixes build error with symfony/validator 6.4.7
Commits
-------
Fix product review validation's notInRangeMessage
| Q | A |
|-----------------|--------------------------------------------------------------|
| Branch? | 1.12
| Bug fix? | no |
| New feature? | no |
| BC breaks? | no |
| Deprecations? | no<!-- don't forget to update the UPGRADE-*.md file
--> |
| Related tickets | |
| License | MIT |
<!--
- Bug fixes must be submitted against the 1.12 branch
- Features and deprecations must be submitted against the 1.13 branch
- Make sure that the correct base branch is set
To be sure you are not breaking any Backward Compatibilities, check the
documentation:
https://docs.sylius.com/en/latest/book/organization/backward-compatibility-promise.html
-->
This PR was merged into the 1.12 branch.
Discussion
----------
| Q | A |
|-----------------|--------------------------------------------------------------|
| Branch? | 1.12 or 1.13 <!-- see the comment below --> |
| Bug fix? | no/yes |
| New feature? | no/yes |
| BC breaks? | no/yes |
| Deprecations? | no/yes <!-- don't forget to update the UPGRADE-*.md file --> |
| Related tickets | fixes #X, partially #Y, mentioned in #Z |
| License | MIT |
<!--
- Bug fixes must be submitted against the 1.12 branch
- Features and deprecations must be submitted against the 1.13 branch
- Make sure that the correct base branch is set
To be sure you are not breaking any Backward Compatibilities, check the documentation:
https://docs.sylius.com/en/latest/book/organization/backward-compatibility-promise.html
-->
Commits
-------
Update dead link in drivers.rst
This PR was merged into the 1.12 branch.
Discussion
----------
| Q | A |
|-----------------|--------------------------------------------------------------|
| Branch? | 1.12 |
| Bug fix? | no |
| New feature? | no |
| BC breaks? | no |
| Deprecations? | no |
| Related tickets | n/a |
| License | MIT |
Fixes missing Sylius logo in ~~docs~~ READMEs of Bundles & Components
Commits
-------
Add Sylius logo to docs
This PR was merged into the 1.12 branch.
Discussion
----------
| Q | A |
|-----------------|--------------------------------------------------------------|
| Branch? | 1.12|
| Bug fix? | no |
| New feature? | no |
| BC breaks? | no |
| Deprecations? | no<!-- don't forget to update the UPGRADE-*.md file --> |
| Related tickets | |
| License | MIT |
I would like to remove the added conflict to `twig/intl-extra` as the newest [v3.9.1 tag](https://github.com/twigphp/Twig/releases/tag/v3.9.1) of `twig/twig` seems to resolve this problem.
<!--
- Bug fixes must be submitted against the 1.12 branch
- Features and deprecations must be submitted against the 1.13 branch
- Make sure that the correct base branch is set
To be sure you are not breaking any Backward Compatibilities, check the documentation:
https://docs.sylius.com/en/latest/book/organization/backward-compatibility-promise.html
-->
Commits
-------
Revert conflict to twig/intl-extra
This PR was merged into the 1.12 branch.
Discussion
----------
| Q | A |
|-----------------|--------------------------------------------------------------|
| Branch? | 1.12 |
| Bug fix? | no |
| New feature? | no |
| BC breaks? | no |
| Deprecations? | no |
| Related tickets | n/a |
| License | MIT |
Commits
-------
Add twig 3.9.0 conflict
Add conflicts in bundles
Add twig/intl-extra conflict
Add conflicts
This PR was merged into the 1.12 branch.
Discussion
----------
| Q | A |
|-----------------|--------------------------------------------------------------|
| Branch? | 1.12 |
| Bug fix? | no |
| New feature? | no |
| BC breaks? | no |
| Deprecations? | no<!-- don't forget to update the UPGRADE-*.md file --> |
| Related tickets | |
| License | MIT |
<!--
- Bug fixes must be submitted against the 1.12 branch
- Features and deprecations must be submitted against the 1.13 branch
- Make sure that the correct base branch is set
To be sure you are not breaking any Backward Compatibilities, check the documentation:
https://docs.sylius.com/en/latest/book/organization/backward-compatibility-promise.html
-->
Commits
-------
[Documentation] Update release dates for 1.13 and 2.0 versions
