76 Commits

Author SHA1 Message Date
52e4a3e645 release version 2.0.50 2024-05-30 20:23:31 +03:00
f7baab16e7 Merge pull request from GHSA-qg5r-95m4-mjgj
* Hotfix: Reflected XSS in Debug mode

* Added entry for the security issue GHSA-qg5r-95m4-mjgj to the CHANGELOG

* Update CHANGELOG.md

* Update CHANGELOG.md

---------

Co-authored-by: Alexander Makarov <sam@rmcreative.ru>
2024-05-30 19:29:52 +03:00
7a8b9d63ad Fix #20165: Adjust pretty name of closures for PHP 8.4 compatibility 2024-05-27 16:08:59 +03:00
e2a167028b Upgrade to PSR12 coding standard (#20121) 2024-03-19 17:21:27 +03:00
161526cd41 HTTPS everywhere (#19503) 2022-08-03 12:32:18 +03:00
a87c02c712 Fix more types (#19333)
* Migration::upsert() returns void

* Unneeded `@property` tags

* Add missing `null` param/return types

* Null types for db\Query + db\ActiveQuery

* Fixed testSelect

* Null types for Validator

* Several more null types

* One more

* Make AccessRule::$allow always a boolean

It doesn't have any special null handling, so it's safe to default to false

* Validator::$skipOnEmpty is always a boolean

* Catch all throwable from Widget::widget()

* Don't limit $previous args to \Exception

The actual \Exception allows $previous to be any throwable in PHP 7+

* Add Throwable catch block to Instance::get()

* Throwable cleanup

Comment changes only.

- Document \Throwable instead of \Exception wherever appropriate
- Removed redundant exception/error classes when \Throwable is referenced

* Yii::setlogger() accepts null

* ArrayHelper::removeValue() can remove any type of value

* Change default $allow value to false
2022-04-03 11:20:21 +02:00
4628b91e73 Fix types (#19332)
* Migration::upsert() returns void

* Unneeded `@property` tags

* Add missing `null` param/return types

* Null types for db\Query + db\ActiveQuery

* Fixed testSelect
2022-03-30 18:40:10 +02:00
0041f034fd [doc] Update PHP doc links (#18957)
* Replace https://secure.php.net with https://www.php.net

* Replace http://www.php.net with https://www.php.net
2021-10-19 14:50:26 +02:00
8cc9aeb2f0 Fix #18749: Fix yii\web\ErrorHandler::encodeHtml() to support strings with invalid UTF symbols 2021-07-06 23:34:21 +03:00
affd796c5c Updated phpdoc return type for getExceptionName (#18296)
`getExceptionName` can return null, as described in phpdoc.
2020-09-21 23:03:02 +03:00
1a8c83ba43 Fix #17694: Fixed Error Handler to clear registered view tags, scripts, and files when rendering error view through action view 2019-12-03 21:36:48 +03:00
bdb7c64910 Update to https protocol for php.net links (#17168) [skip ci]
* Updated php.net link for some MemCache properties [skip ci]

* Changed protocol to https for links to php.net in comments

* Changed protocol to https for links to php.net in code

* Changed www.php.net (http) to secure.php.net (https) in comments

* Changed www.php.net (http) to secure.php.net (https) in code

* Changed protocol to https for links to php.net in UPGRADE.md

* Changed protocol to https for links to pecl.php.net in comments

* Changed us.php.net to secure.php.net (https) in comments

* Changed protocol to https for links to php.net in docs

* Changed www.php.net (http) to secure.php.net (https) in docs

* Changed protocol to https for links to pecl.php.net in docs

* Changed ru/jp.php.net to secure.php.net (https) in docs

Don't sure about russian guide: is this links meant to be for guide on russian, or not?
2019-02-28 13:09:27 +03:00
ab39246ab5 Fixes #16101: Fixed Error Handler to clear registered meta tags, link tags, css/js scripts and files in error view 2018-10-27 20:27:58 +03:00
1a74b3d4f8 [minor] SCA with Php Inspections (EA Ultimate) (#15871)
* Php Inspections (EA Ultimate): use type casting where applicable

* Php Inspections (EA Ultimate): use constants where applicable

* Php Inspections (EA Ultimate): CS

* Php Inspections (EA Ultimate): address some of one-time used variables

* Php Inspections (EA Ultimate): address some of performance-related findings

* Php Inspections (EA Ultimate): address some of performance-related findings

* Php Inspections (EA Ultimate): revert a constant usage

* Php Inspections (EA Ultimate): revert sequential assignments

* Php Inspections (EA Ultimate): build is green again

* Php Inspections (EA Ultimate): revert array_merge tweaks

* Php Inspections (EA Ultimate): revert BC-incompatible one-time used variable tweak

* Update description [skip ci]

* Php Inspections (EA Ultimate): CS
2018-03-12 01:37:19 +03:00
22832b7c49 release version 2.0.14 2018-02-19 00:27:09 +02:00
d934d9f6f6 Improved phpdoc for ErrorHandler::$traceLine [skip ci] 2018-02-17 21:54:21 +03:00
7cafa65ad2 Fixes #15216: Added yii\web\ErrorHandler::$traceLine to allow opening file at line clicked in IDE 2018-02-07 22:36:29 +03:00
5a8c3d537b Enable phpdoc_summary rule in php-cs-fixer config (#14675)
* Enable `phpdoc_summary` rule in php-cs-fixer config.

* Fix case in "PHPDoc".
2017-08-21 11:19:35 +02:00
1501c659ac Add empty lines before return statements. (#14682) [skip ci] 2017-08-21 01:58:49 +03:00
Sam
0017d9c660 Fixes #13780: Added support for trusted proxies in yii\web\Request 2017-08-17 13:14:51 +03:00
a50d9d8e3e Enable include rule in php-cs-fixer (#14418) 2017-07-10 13:19:57 +03:00
fe8a0a6a2e Enable no_useless_else rule in php-cs-fixer (#14420) 2017-07-10 11:26:21 +03:00
f67d8d5a79 Fixed broken error page when calling an undefined method
fixes #14269
2017-07-06 13:51:36 +02:00
ba0ab403b5 Added php-cs-fixer coding standards validation to Travis CI (#14100)
* php-cs-fixer: PSR2 rule.

* php-cs-fixer: PSR2 rule - fix views.

* Travis setup refactoring.

* Add php-cs-fixer to travis cs tests.

* Fix tests on hhvm-3.12

* improve travis config

* composer update

* revert composer update

* improve travis config

* Fix CS.

* Extract config to separate classes.

* Extract config to separate classes.

* Add file header.

* Force short array syntax.

* binary_operator_spaces fixer

* Fix broken tests

* cast_spaces fixer

* concat_space fixer

* dir_constant fixer

* ereg_to_preg fixer

* function_typehint_space fixer

* hash_to_slash_comment fixer

* is_null fixer

* linebreak_after_opening_tag fixer

* lowercase_cast fixer

* magic_constant_casing fixer

* modernize_types_casting fixer

* native_function_casing fixer

* new_with_braces fixer

* no_alias_functions fixer

* no_blank_lines_after_class_opening fixer

* no_blank_lines_after_phpdoc fixer

* no_empty_comment fixer

* no_empty_phpdoc fixer

* no_empty_statement fixer

* no_extra_consecutive_blank_lines fixer

* no_leading_import_slash fixer

* no_leading_namespace_whitespace fixer

* no_mixed_echo_print fixer

* no_multiline_whitespace_around_double_arrow fixer

* no_multiline_whitespace_before_semicolons fixer

* no_php4_constructor fixer

* no_short_bool_cast fixer

* no_singleline_whitespace_before_semicolons fixer

* no_spaces_around_offset fixer

* no_trailing_comma_in_list_call fixer

* no_trailing_comma_in_singleline_array fixer

* no_unneeded_control_parentheses fixer

* no_unused_imports fixer

* no_useless_return fixer

* no_whitespace_before_comma_in_array fixer

* no_whitespace_in_blank_line fixer

* not_operator_with_successor_space fixer

* object_operator_without_whitespace fixer

* ordered_imports fixer

* php_unit_construct fixer

* php_unit_dedicate_assert fixer

* php_unit_fqcn_annotation fixer

* phpdoc_indent fixer

* phpdoc_no_access fixer

* phpdoc_no_empty_return fixer

* phpdoc_no_package fixer

* phpdoc_no_useless_inheritdoc fixer

* Fix broken tests

* phpdoc_return_self_reference fixer

* phpdoc_single_line_var_spacing fixer

* phpdoc_single_line_var_spacing fixer

* phpdoc_to_comment fixer

* phpdoc_trim fixer

* phpdoc_var_without_name fixer

* psr4 fixer

* self_accessor fixer

* short_scalar_cast fixer

* single_blank_line_before_namespace fixer

* single_quote fixer

* standardize_not_equals fixer

* ternary_operator_spaces fixer

* trailing_comma_in_multiline_array fixer

* trim_array_spaces fixer

* protected_to_private fixer

* unary_operator_spaces fixer

* whitespace_after_comma_in_array fixer

* `parent::setRules()` -> `$this->setRules()`

* blank_line_after_opening_tag fixer

* Update finder config.

* Revert changes for YiiRequirementChecker.

* Fix array formatting.

* Add missing import.

* Fix CS for new code merged from master.

* Fix some indentation issues.
2017-06-12 12:25:45 +03:00
705dae9964 Fixes #14052: Fixed processing parse errors on PHP 7 since these are instances of \ParseError 2017-04-26 12:56:54 +03:00
6792099bcc Fixes #13689: Fixed handling of errors in closures 2017-04-26 03:34:25 +03:00
5bbf372f85 cleanup some phpdoc 2017-04-04 10:33:30 +02:00
ea75068a92 Fixes #13813: Fixed PHP 7 compatibiltiy by adding support for passing instances of Error to the yii\web\Response::setStatusCodeByException() 2017-03-23 01:20:42 +03:00
bc59d5da85 Fixes #13707: Fixed \yii\web\ErrorHandler and \yii\web\ErrorAction not setting correct response code to response object before rendering error view 2017-03-16 12:03:23 +03:00
a6d266405d Fixes #13671: Fixed error handler trace to work correctly with XDebug 2017-03-06 15:24:18 +03:00
97171a0db7 Fixes #13401: Fixed lack of escaping of request dump at exception screens 2017-01-18 01:05:50 +03:00
4aa935e69e Fixes #12055: Changed boolean to bool and integer to int in phpdoc 2016-11-07 02:51:39 +03:00
32f4dc8997 Fixes #5385: links created from classes to corresponding guide articles (#12920) 2016-11-04 18:55:14 +03:00
bea7c63664 And another leftover
No pushes to master today anymore. Need more sleep :(
2016-11-02 14:17:56 +03:00
3d9945958d Removed accidentally committed leftovers 2016-11-02 14:13:49 +03:00
dd71fa3958 Fixes #4113: Error page stacktrace was generating links to private methods which are not part of the API docs 2016-11-02 13:42:11 +03:00
eb02b362be Revert "Replaced extract() function usages with custom polyfill in order to fix HHVM compatibility"
This reverts commit f7bd7c2b6b1b9941e3c50d99e4f07ff17d513cca.
2016-09-07 11:33:57 +03:00
f7bd7c2b6b Replaced extract() function usages with custom polyfill in order to fix HHVM compatibility 2016-09-06 22:50:00 +03:00
b54ef3f9e3 Typos in docblock of $errorAction (#12250) [skip ci] 2016-08-22 16:38:58 +03:00
c7d5e69cda Eliminated unused variables 2016-07-29 23:06:38 +03:00
55b858df6d use already existing error string
this one is already available and translated to some languages.
2016-04-28 02:53:39 +02:00
59ed5e18d6 ErrorHandler HttpException message translation (#11303) 2016-04-07 19:26:25 +03:00
f620f4de90 phpdoc fixes 2016-02-07 19:48:13 +01:00
7ac2bc13f7 Overrides c651dbb7. yii\web\ErrorHandler::loggableGlobals renamed to displayVars 2015-11-22 17:47:48 +02:00
c651dbb798 Added yii\web\ErrorHandler::loggableGlobals, removed $_ENV and $_SERVER from dumping by default 2015-11-22 17:14:16 +02:00
ac7b0ef6ff ErrorHandler - hardcoded UTF-8 in mb_* functions
As `Yii::$app` may be not initialized on the moment of error,
decided to hardcode UTF-8.

PR  #10169
2015-11-17 14:18:26 +02:00
a6e1ba2cf6 Fixed mb_ functions calls to use UTF-8 or app charset 2015-11-17 09:02:22 +02:00
5ab4f0f090 Better quotes usage in strings
- Use single quote where interpolation isn't necessary
- Use interpolation when it's better than concatenation
2015-10-10 00:23:52 +03:00
3a313ac652 Fixes #9874: Fixed outputting exception stacktrace in non-debug mode when Response::FORMAT_RAW is used 2015-10-09 23:41:15 +03:00
c2f83da8d8 Fix phpdoc 2015-10-05 15:00:13 +06:00