Contao Open Source CMS changelog
================================

Version 3.4.5 (2015-03-27)
--------------------------

### Fixed
Consider the `$blnCache` flag when caching insert tags (see #7700).

### Updated
Updated TinyMCE to version 4.1.9 (see #7690).

### Fixed
Correctly calculate the max upload size in the DropZone uploader (see #7633).

### Fixed
Convert language codes to locales in the meta wizard (see #7667).

### Fixed
Replace only the `{{file}}` insert tag in the back end preview (see #7647).

### Fixed
Correctly convert date strings depending on their rgxp format (see #7721).

### Fixed
Update news and calendar feeds from the content view (see #7679).

### Fixed
Do not generally encode stand-alone ampersands (see #7684).

### Fixed
Restore some globals when catching the unused argument exception (see #7659).

### Fixed
Correctly set the CSS classes in the jQuery accordion and do not try to mess
with its ARIA handling (see #7622).

### Fixed
Handle language fragments without trailing slash when redirecting (see #7666).

### Fixed
Trigger the `load_callback` upon saving in "override all" mode (see #7670). 

### Fixed
Ensure a unique language file array in the `Automator` class (see #7687).


Version 3.4.4 (2015-02-12)
--------------------------

### Fixed
Fixed a directory traversal vulnerability discovered by Arnaud Buchoux. See
CVE-2015-0269 for more information.


Version 3.4.3 (2015-01-30)
--------------------------

### Fixed
Consider the error reporting level in the install tool (see #7593).

### Fixed
Handle variables and functions when importing style sheets (see #7448).


Version 3.4.2 (2015-01-22)
--------------------------

### Fixed
Fix an infinite recursion problem in the `FilesModel` class (see #7588).


Version 3.4.1 (2015-01-22)
--------------------------

### Fixed
Fix the position of the input field hints (see #7561).

### Fixed
Do not apply the GDlib maximum dimensions to SVG images (see #7435).

### Fixed
Do not show the diff icon if a record has been deleted (see #7429).

### Fixed
Remove a left-over headline from the `ce_text.xhtml` template (see #7502).

### Fixed
Preserve comments when exporting CSS files (see #7482).

### Fixed
Fix the LESS import path in the Combiner (see #7533).

### Fixed
Hide the width and height attributes if there is a sizes attribute (see #7500).

### Fixed
Remove the hardcoded figcaption width (see #7549).

### Fixed
Only load the model in the file/page picker if the class exists (see #7490).

### Fixed
Romanize style sheet names (see #7526).

### Fixed
Add the username to the "account has been locked" log entry (see #7551).

### Fixed
Consider the suhosin.memory_limit when raising the PHP limits (see #7035).

### Fixed
Added two missing `exclude` flags in the `tl_page` data container (see #7522).

### Fixed
Send an UTF-8 charset header in the `die_nicely()` function (see #7519).

### Fixed
Correctly validate dates in the `Widget` class (see #7498).

### Fixed
Back port the fixes from #7475 and #7473.

### Fixed
Send the same cache headers for cached and uncached pages (see #7455).

### Fixed
Fix the `current() expects parameter 1 to be array` issue (see #6739).

### Fixed
Correctly replace the `*_teaser` insert tags (see #7488).

### Fixed
Adjust the last and previous login labels (see #7426).

### Fixed
Unset the `postUnsafeRaw` cache in `Input::setPost()` (see #7481).


Version 3.4.0 (2014-11-25)
--------------------------

### Fixed
Consider image size IDs when overriding the default image size (see #7470).

### Fixed
Do not require to set a media query in the image sizes.

### Fixed
Fixed a potential directory traversal vulnerability.

### Fixed
Fixed a severe XSS vulnerability. In this context, the insert tag flags
`base64_encode` and `base64_decode` have been removed.

### Fixed
Also use simple tokens for the newsletter subscription modules (see #7446).

### Fixed
Only show the root page languages in the meta wizard (see #7112).

### Fixed
Correctly create the initial version in the personal data module (see #7415).

### Fixed
Check if a DB driver has been configured in Config::isComplete() (see #7412).

### Fixed
Correctly mark deleted versions in Versions::addToTemplate() (see #7442).

### Fixed
Replace insert tags of RTE fields in the back end preview (see #7428).

### Fixed
Handle nested insert tags in strip_insert_tags().

### Fixed
Correctly store the model in Dbafs::addResource() (see #7440).

### Fixed
Send the request token when toggling the visibility of an element (see #7406).

### Fixed
Always apply the IE security fix in the Environment class (see #7453).

### New
Added the CSS units `vw`, `vh`, `vmin` and `vmax` (see #7417).

### Fixed
Replace leafo/lessphp with oyejorge/less.php (see 7012).

### Fixed
Show the correct root icon in the page/file picker (see #7409).

### Fixed
Add an empty option to the image size select menu (see #7436).

### Fixed
Nest wrapper elements in the back end preview (see #7434).

### Fixed
Correctly handle archives being part of multiple RSS feeds (see #7398).

### Fixed
Correctly handle `0` in utf8_convert_encoding() (see #7403).

### Fixed
Send a 301 redirect to forward to the language root page (see #7420).

### Fixed
Handle SVG images in the default back end uploader.


Version 3.4.0-RC1 (2014-10-31)
------------------------------

### New
Pass the parent ID of a page to the navigation template (see #7391).

### Improved
Support the "min", "max" and "step" attributes on number fields (see #7363).

### Improved
Show the database query duration in debug mode (see #7323).

### New
Added the "executeResize" hook (see #7404).


Version 3.4.0-beta1 (2014-10-03)
--------------------------------

### Fixed
Handle disabled modules in the module loader.

### New
Support responsive images and the `<picture>` element (see #7296).

### New
Added the "compareThemeFiles", "extractThemeFiles" and "exportTheme" hooks.

### Improved
Use the image meta data in `Controller::addEnclosuresToTemplate()` (see #6746).

### New
Add the `dir="rtl"` attribute if the page language is RTL (see #7171).

### Improved
Export `.sql` files in the theme folder and allow to reimport them (see #7048).

### Changed
Do not mark pages as active if there are query parameters (see #7189).

### Changed
Use `addImageToTemplate()` in the `ContentHyperlink` class (see #7296).

### Changed
Removed the H2 sub-headlines in the back end (see #7248).

### Improved
Only create one `DcaExtractor` instance per table (see #7324).

### Improved
Add a CSS class indicating the number of columns in a gallery (see #7138).

### Improved
Allow to switch between the page and file picker in TinyMCE (see #6974).

### Improved
Show a message if logging in is required to comment (see #7031).

### New
Added the "sendNewsletter" hook (see #7222).

### Improved
Make the pagination template more flexible (see #7174).

### Improved
Limit the selectable file types depending on the element type (see #7003).

### New
Prevent timing attacks when verifying passwords (see #7115, #5853).

### Changed
Hide the "start" and "stop" fields if an element is not published (see #7148).

### New
Support the `backlink` configuration setting in the parent view (see #7083).

### New
Added a regex to check for nonnegative natural numbers (see #4392). This also
includes the "minval" and "maxval" flags to specify a miminum or maximum value.

### Improved
Optionally hide files without matching meta data in downloads (see #6874).

### New
Preserve the original CSS ID and classes in the alias elements (see #6638).

### Improved
Do not directly query the `INFORMATION_SCHEMA` database (see #7302).

### New
Added the "doNoTrim" flag to the `Widget` class (see #4287).

### Improved
Support simple tokens in registration and lost password mails (see #7101).

### Changes
Consider the options array in `Model::countBy()` (see #7033).

### New
Support SVG and SVGZ images (see #7108, #5908).

### Changed
Move the mime types array to a configuration file (see #6843).

### New
Added the `sort` flag to the `eval` section of the DCA (see #4072).

### New
Added the "onundo_callback" (see #7258).

### Improved
Consider the values of referenced fields in the back end search (see #4376).

### New
Add an option to export style sheets (see #7049).

### New
Added `widget-*` CSS classes to front end form fields (see #7041).

### Improved
Make the loading order of the style sheets configurable (see #6937).

### Removed
Remove the `rel="author` support (see #7291).

### New
Added `$item['isTrail']` to the navigation menu templates (see #7096).

### Improved
Handle `data-` and `ng-` attributes in `Widget::addAttributes()` (see #7095).

### Changed
Add the class "tableless" to the `member_` templates (see #7207).

### Improved
Added the `|async` flag to `$GLOBALS['TL_JAVASCRIPT']` (see #7172).

### New
Added the "link_name" insert tag (see #7218).

### Improved
Simplify the "member_grouped" template (see #7015).

### Changed
Make the front controller classes overwritable.
