230 Commits

Author SHA1 Message Date
161526cd41 HTTPS everywhere (#19503) 2022-08-03 12:32:18 +03:00
827db6c90e Revert "Fix #19290: Fix Request::getHostInfo() doesn’t return the port if a Host header is used"
This reverts commit 8046d3a50f207e1033e1b23ff571da5bced0c822.
2022-07-01 10:28:31 +03:00
34708b4cf4 Fix #19400: Fix passing null in yii\web\Response::redirect() 2022-06-21 00:15:07 +03:00
45519d3c18 Fix #19437: Add support to specify request port by trusted proxies in \yii\web\Request::getServerPort() 2022-06-17 20:18:18 +03:00
8046d3a50f Fix #19290: Fix Request::getHostInfo() doesn’t return the port if a Host header is used 2022-04-16 00:37:55 +04:00
f6d328335e GroupUrlRule slash in prefix (#19330)
* Bring back slash

* changelog

* group url rule test
2022-03-29 21:37:25 +02:00
60c91eb433 Fix BC introduced in #19188 (#19194) 2022-01-27 21:47:37 +03:00
dbb157fd32 Fix #19187: Fix yii\filters\PageCache to store original headers names instead of normalized ones 2022-01-27 00:52:32 +03:00
1271bc419f Fix #19041: Fix PHP 8.1 issues 2022-01-14 13:52:01 +03:00
12763a146e Fix #19067: Fix constant session regeneration (#19113)
* Fix constant session regeneration
* Add tests for session ID, always regenerating session ID for switching identity
2021-12-29 12:45:13 +03:00
f3956a4eec Fix header collection from array (#18883)
* Fixed HeaderCollection::fromArray() key case

* Added CHANGELOG.md line for #18883 (Fixed HeaderCollection::fromArray() key case)
2021-09-17 09:29:33 +02:00
ffe7904d80 Minor tests cleanup (#18811) 2021-09-03 12:41:10 +03:00
0b29ba870e Fix #18762: Added yii\helpers\Json::$keepObjectType and yii\web\JsonResponseFormatter::$keepObjectType in order to avoid changing zero-indexed objects to array in yii\helpers\Json::encode() 2021-08-24 22:30:33 +03:00
ec07ad9ff9 Fix #18783: Add support for URI namespaced tags in XmlResponseFormatter, add XmlResponseFormatter::$objectTagToLowercase option to lowercase object tags
Co-authored-by: Alexander Makarov <sam@rmcreative.ru>
2021-08-24 16:54:50 +03:00
13f27e4d92 Fix #18817: Use paragonie/random_compat for random bytes and int generation 2021-08-09 10:25:36 +03:00
7ebaaf0216 Fix #18789: Added JSONP support in yii\web\JsonParser::parse() 2021-08-07 15:31:35 +03:00
8cc9aeb2f0 Fix #18749: Fix yii\web\ErrorHandler::encodeHtml() to support strings with invalid UTF symbols 2021-07-06 23:34:21 +03:00
e83a86fd30 Fix #18648: Fix yii\web\Request to properly handle HTTP Basic Auth headers 2021-07-01 13:06:38 +03:00
a6dba47963 Fix #18590: Fix yii\web\UrlManager to instantiate cache only when it's actually needed 2021-04-10 13:02:23 +03:00
14a581562a Fix #18566: Throw the original exception when yii\web\Controller::bindInjectedParams() catches HttpException 2021-03-23 21:38:52 +03:00
3883d73cea Fix #9718: Fix user staying authorized despite authKey change 2021-03-03 13:18:06 +03:00
50831e6f08 Travis leftovers cleanup 2021-03-03 02:21:39 +03:00
d610853fdf Fix #18450: Allow empty string to be passed as a nullable typed argument to a controller's action 2021-03-02 14:24:17 +03:00
2774f3ea6c Fix #18529: Fix asset files path with appendTimestamp option for non-root-relative base URLs 2021-02-27 15:06:08 +03:00
03befccd48 Fix #18487: Allow creating URLs for non-GET-verb rules 2021-01-26 14:47:53 +03:00
bceba86952 Fix #18414: Fix AssetManager::appendTimestamp() not appending timestamp for website root in sub-directory 2020-12-23 12:57:29 +03:00
6b33ddf441 Fix #18199: Fix content body response on 304 HTTP status code, according to RFC 7232 2020-11-23 23:05:04 +03:00
ce088e05df Fix #18247: Added support for the 'session.use_strict_mode' ini directive in yii\web\Session 2020-10-31 11:58:34 +03:00
7ff516063d Fix #18160, fix #18192: Fixed registerFile with argument depends set does not use the position and appendTimestamp argument, also modify the unit view 2020-10-11 15:03:12 +03:00
3dabcdb6ab Fix #18313: Fix multipart form data parse with double quotes 2020-10-05 13:08:32 +03:00
88e79d3f8e Fix #18290: Fix response with non-seekable streams 2020-10-02 11:48:02 +03:00
2e21a8275c Fix #18115: Allow to load action-injected services from module's container 2020-06-22 23:49:02 +03:00
fc4f449e21 Fix #18083: Add Controller::$request and $response 2020-06-14 21:19:27 +03:00
d317e41b21 Fix #18101: Fix behavior of OUTPUT INSERTED.* for SQL Server query: "insert default values"; correct MSSQL unit tests; turn off profiling echo message in migration test 2020-06-14 14:20:21 +03:00
Sam
4ea484ca68 Fix #17722: Add action injection support 2020-06-12 10:06:18 +03:00
eb7b23d117 Fix #18048: Use Instance::ensure() to set User::$accessChecker 2020-05-19 18:42:13 +03:00
975937e531 Fix #18006: Allow SameSite cookie pre PHP 7.3 2020-05-01 13:28:23 +03:00
65e5640810 Fix #17932: Fix regression in detection of AJAX requests (#17937) 2020-03-26 12:30:56 +03:00
7f88acb313 Fix #17878: Detect CORS AJAX requests without X-Requested-With in Request::getIsAjax() 2020-03-24 19:01:52 +03:00
4b6d3c0290 Fix #17929: Actions can now have bool typed params bound 2020-03-24 18:44:43 +03:00
55793471ea Fix #17875: Revert move_uploaded_file() function instead of copy() and unlink() for saving uploaded files when POST request 2020-02-20 12:22:01 +03:00
82b7ecbdf3 Fix #17828: Fix yii\web\UploadedFile::saveAs() failing when error value in $_FILES entry is a string 2020-02-01 12:56:22 +03:00
038ce9f77e Fix #17755: Fix a bug for web request with trustedHosts set to format ['10.0.0.1' => ['X-Forwarded-For']] 2020-01-15 15:51:57 +03:00
cf0e56907f Fix #17037, Fix #17729: Fix uploaded file saving for multipart forms, add path alias support for UploadFile::saveAs() 2020-01-15 00:57:45 +03:00
5e71b11d8d #17733: Additional fixes for #17665, Forwarded header parsing in Request
- Remove header from secure headers
- Regexp and return null fix
- Fix tests, fix in array case sensitivity, rx duplicated group name
- Simplify code
- Add phpdoc

Co-Authored-By: Alexander Makarov <sam@rmcreative.ru>
2019-12-17 21:53:55 +03:00
83055dcc33 Fix #17665: Implement RFC 7239 Forwarded header parsing in Request 2019-12-12 23:29:54 +03:00
1a8c83ba43 Fix #17694: Fixed Error Handler to clear registered view tags, scripts, and files when rendering error view through action view 2019-12-03 21:36:48 +03:00
40797c1139 Fix #17701: Throw BadRequetHttpException when request params can’t be bound to bool, int, and float controller action arguments 2019-12-03 12:40:56 +03:00
6c1b2db9de Fix #17434: IE Ajax redirect fix for non 11.0 versions 2019-11-18 12:45:35 +03:00
9c5cd51a3b Fix #17632: Unicode file name was not correctly parsed in multipart forms 2019-11-05 14:42:22 +03:00