817 Commits

Author SHA1 Message Date
73fe41ee9f Removed redundant condition 2018-02-10 12:40:50 +03:00
47e43a1b63 Try reverting init() 2018-02-10 11:50:14 +03:00
d86db78276 Extra checks 2018-02-10 01:39:17 +03:00
7924a22490 Remove extra condition 2018-02-10 01:07:20 +03:00
07e623e415 Don't use open() method because it registers handlers 2018-02-10 00:42:17 +03:00
a23a325ca7 Fixes #15627: Corrected session freezing/unfreezing not to attempt opening or closing connection if it isn't necessary 2018-02-10 00:06:10 +03:00
64d57043b1 Fixes #11401: Fixed yii\web\DbSession concurrency issues when writing and regenerating IDs 2018-02-09 03:13:50 +03:00
2e55570e1f Fixes #15621: Fixed yii\web\User::getIdentity() returning null if an exception had been thrown when it was called previously 2018-02-09 01:34:33 +03:00
24f4e3126a Bug #15523: yii\web\Session settings could now be configured after session is started (StalkAlex, rob006, daniel1302, samdark)
Co-authored-by: Alexander Makarov <sam@rmcreative.ru>
Co-authored-by: Robert Korulczyk <robert@korulczyk.pl>
Co-authored-by: daniel.1302 <daniel.1302@gmail.com>
2018-02-08 20:11:45 +03:00
7cafa65ad2 Fixes #15216: Added yii\web\ErrorHandler::$traceLine to allow opening file at line clicked in IDE 2018-02-07 22:36:29 +03:00
7bafb7bf09 Fixes #14488: Added support for X-Forwarded-Host to yii\web\Request, fixed getServerPort() usage 2018-02-07 00:01:50 +03:00
d16586334d Fixes #7640: Implemented custom data types support. Added JSON support for MySQL and PostgreSQL, array support for PostgreSQL 2018-02-05 04:59:14 +07:00
61b47014a2 Fixes #14643: Added yii\web\ErrorAction::$layout property to conveniently set layout from error action config
Co-authored-by: Stas So <etc@swods.ru>
Co-authored-by: Carsten Brandt <mail@cebe.cc>
2018-02-03 21:18:47 +03:00
e07219c812 Fixes #13996: Added yii\web\View::registerJsVar() method that allows registering JavaScript variables 2018-01-26 15:31:27 +03:00
65f6b59b35 @inheritdoc notation changed 2018-01-23 13:11:24 +02:00
acce1db53b Fixes #14135: Fixed yii\web\Request::getBodyParam() crashes on object type body params 2018-01-18 00:33:41 +03:00
6c0540aa2d Fixes #15496: CSRF token is now regenerated on changing identity 2018-01-14 02:13:24 +03:00
3c017b6b61 Fixes #15462: Fixed accessChecker configuration error 2018-01-13 20:49:33 +03:00
28e7f31a37 Fixes #15046: Throw an yii\web\HeadersAlreadySentException if headers were sent before web response 2017-12-20 00:31:59 +03:00
3b1ff661d8 Fixes #7996: Short syntax for verb in GroupUrlRule 2017-12-18 00:01:24 +03:00
0b413b0e08 Fixed PHP 5.4 compatibility 2017-12-14 14:12:50 +03:00
Sam
4d388f6cd2 Fixes #15317: Regenerate CSRF token if an empty value is given 2017-12-14 12:14:51 +03:00
185209957e Fixes #15270: Resolved potential race conditions when writing generated php-files 2017-12-02 18:24:56 +03:00
48bf8ce048 Fixes #14662: Added support for custom Content-Type specification to yii\web\JsonResponseFormatter 2017-11-15 00:39:32 +03:00
2246786483 Fixed jQuery onLoad event handling
Fixes #15086
2017-11-05 11:22:22 +02:00
2d672b6722 release version 2.0.13 2017-11-03 01:09:29 +03:00
2faf771118 Fixes #13436: Fixed migration for MSSQL DbSession 2017-10-31 12:50:37 +03:00
93bbf5b39d Fixes #15015: Added StringHelper::floatToString() to savely cast float values independent of the locale, also fixes some places in the framework that use it now 2017-10-27 11:41:45 +03:00
64d8af61a6 Fixes for PHP 7.2 compatibility (#14959) 2017-10-19 01:54:40 +03:00
8beb36c94f Use PHP core classes right from root namespace without importing for the sake of clarity 2017-10-17 18:27:23 +03:00
d11bed5340 Minor, added strict comparsion 2017-10-08 23:35:36 +03:00
ea2c475ea7 Moved HTTP_AUTHORIZATION header check to \yii\web\Request, added docs
Closes #13564
2017-10-08 23:22:11 +03:00
66723d0e74 Fixes #9438: yii\web\DbSession now relies on error handler to display errors 2017-10-06 22:22:59 +02:00
d7c93c9503 fix for #6226, symlinking files/directories during multithreading (#14905) 2017-10-06 17:52:15 +02:00
fa1ca1384f Fixes #14913: Assset hashing now takes asset linking into account to improve cache busting 2017-10-06 00:20:35 +02:00
3ee7629f13 Fixes #13486: Use DI container to instantiate cookies in order to be able to set defaults 2017-10-05 14:41:46 +02:00
b75a85d0da Fixes #14902: Fixed PHP notice in yii\web\MultipartFormDataParser 2017-10-04 17:23:58 +02:00
75e8bfdc58 Fixes #14087: Added yii\web\View::registerCsrfMetaTags() method that registers CSRF tags dynamically ensuring that caching doesn't interfere 2017-09-29 17:13:04 +03:00
1ce796ef0f Removed ability to define a hostname as trusted because of possible security issues
Closes #14691
2017-09-12 23:28:29 +03:00
18689c5ed1 Added missing bracket 2017-09-09 15:43:56 +03:00
3a8feb17a8 Updated yii\web\View to register JS in jQuery 3.0 compatible way 2017-09-09 15:39:11 +03:00
1278b018fa Add IIS specific header to secure headers (#14715)
See https://github.com/yiisoft/yii2/issues/14400#issuecomment-324233065
for more details.
2017-08-25 13:31:27 +03:00
9e713dba29 break if a matching trusted host is found
fix for https://github.com/yiisoft/yii2/pull/13780#discussion_r134186910
thanks to @krukru !

PR #13780
2017-08-21 16:37:01 +02:00
5a8c3d537b Enable phpdoc_summary rule in php-cs-fixer config (#14675)
* Enable `phpdoc_summary` rule in php-cs-fixer config.

* Fix case in "PHPDoc".
2017-08-21 11:19:35 +02:00
1501c659ac Add empty lines before return statements. (#14682) [skip ci] 2017-08-21 01:58:49 +03:00
b99e955627 Fix CS (#14665)
* Run php-cs-fixer.

* Enable phpdoc_types rule.
2017-08-18 12:10:42 +02:00
Sam
0017d9c660 Fixes #13780: Added support for trusted proxies in yii\web\Request 2017-08-17 13:14:51 +03:00
368540f8d0 Added tests 2017-08-13 21:15:06 +03:00
b6a5697c00 User can login by cookie only once when autoRenewCookie is set to false 2017-08-13 21:15:02 +03:00
648971a82b Fixes #14542: Ensured only ASCII characters are in CSRF cookie value since binary data causes issues with ModSecurity and some browsers 2017-08-07 13:55:10 +03:00