MODX Revolution 2.5.2-pl

MODX 2.5.2-pl was released 2 years ago on 2016-11-14.

Downloads Changelog

Changelog

  • [SECURITY] Hide critical settings in MODx.config [#13170]
  • [SECURITY] Prevent local file inclusion/traversal/manipulation [#13177]
  • [SECURITY] Prevent path traversal in $modx->runProcessor [#13176]
  • [SECURITY] Prevent unauthenticated access to processors [#13175]
  • [SECURITY] Prevent path traversal in modConnectorResponse action param [#13173]
  • [SECURITY] Update xPDO to 2.5.1 release
  • Add security/login support for action based connector [#13158]
  • Make one single connector file possible [#13157]
  • Don't create a DirectoryIterator on non existing folders [#13127]
  • Fixing tvLabel output filter empty needle warning [#13138]
  • Fix session extension call using action based connector [#13146]
  • Select modTemplateVarTemplate.rank for MySQL 5.7 ONLY_FULL_GROUP_BY SQL Mode [#13098]
  • Fix new category option duplicating view of elements [#13137]
  • Consistency in error messages, based on error type [#13126]
  • Make sure things do not break when no valid json/empty string is returned OnMediaSourceGetProperties event [#13119]
  • Removed superfluous code in the manager "gateway" [#13120]
  • Set temporary directory for files processing in phpThumb [#13128]
  • Upgraded phpThumb to 1.7.14-201608101311 [#13125]
  • Force display errors during setup [#13107]
  • Added duplicating caption field for TVs [#13100]
  • Fix PHP warning if the response message is empty [#13111]
  • Removed duplicate element ID [#13105]