Vendor Import v4.6.11

[TASK] Raise submodule pointer (TYPO3 Release Team)
[BUGFIX] Exception "Could not create directory" (Michael Klapper)
[BUGFIX] Pass $fieldName when processing FlexForm DS in t3lib_transferData (Claus Due)
[BUGFIX] t3lib_db - expects parameter 1 to be resource, boolean given (Michael Klapper)
[BUGFIX] unlink issues warnings for lock files (Markus Klein)
[BUGFIX] IRRE childs don't expand in Internet Explorer (Stefan Aebischer)
[BUGFIX] t3lib_db::exec_SELECTgetRows method annotation (Nicole Cordes)
[BUGFIX] Properly check disabled versioning within tcemain (Tolleiv Nietsch)
[BUGFIX] PHP warnings may show up in the List module (Dmitry Dulepov)
[BUGFIX] Shell command arguments are not escaped (Dmitry Dulepov)
[BUGFIX] RTE transformation transforms LF/CR between div and hr into space (Stanislas Rolland)
[BUGFIX] Exclude E_STRICT from errors with PHP 5.4 (Philipp Gampe)
[TASK] Always return a boolean in t3lib_div::validPathStr (Andy Grunwald)
[BUGFIX] Invalid fallback for non-localized labels (Xavier Perseguers)
[TASK] Improve error message of "broken rootline" (Georg Ringer)
[BUGFIX] stdWrap numRows fails due to wrong SELECT clause (Ernesto Baschny)
[BUGFIX] Update extension must invalidate autoloader cache (Philipp Gampe)
[TASK] Raise submodule pointer (TYPO3 Release Team)
[BUGFIX] QT movies prefixed abusively in Media CE (Francois Suter)
[BUGFIX] Send sane HTTP response in showpic on error (Christian Kuhn)
[BUGFIX] Remove bogus template in template analyzer (Helmut Hummel)
[BUGFIX] Drag&Drop inside the root page of the pagetree isn't possible (Stefan Galinski)
[BUGFIX] Check if user is allowed to paste page to pagetree (Max Roesch)
[BUGFIX] Add rootline workspace overlay for backend_layouts. (Timo Webler)
[BUGFIX] accessibilityWrap ignores simple value (Jigal van Hemert)
[BUG] t3lib_div::getFilesInDir order differs from order in Filelist (Benjamin Mack)
[BUGFIX] RTE: Importing google webfonts breaks style sheet parsing (Stanislas Rolland)
[BUGFIX] RTE spellcheck issue on Windows server (Stanislas Rolland)
[BUGFIX] RTE 4.6: Force IE9 to use IE8 mode in frontend (Stanislas Rolland)
Vendor Import v4.6.12

[SECURITY] XSS in install tool (Mario Rimann)
[SECURITY] Page Link Target vulnerable to XSS (Markus Bucher)
[SECURITY] XSS in validateForm (Markus Bucher)
[SECURITY] XSS in TCE forms (Christian Kuhn)
[SECURITY] XSS in Scheduler Example Task (Mario Rimann)
[SECURITY] HTML5 support in RemoveXSS (Franz G. Jahn)
[SECURITY] Information Disclosure in the Configuration Module (Mario Rimann)
[SECURITY] Untrusted GP data is unserialized in old CSH handling (Helmut Hummel)
[SECURITY] XSS in Indexed Search statistics (Steffen Gebert)
[SECURITY] t3lib_div::quoteJSvalue allows XSS (Helmut Hummel)
Vendor Import v4.6.13

[TASK] Raise submodule pointer (TYPO3 Release Team)
[TASK] Update md5 sums for 4.6.13 (Steffen Ritter)
[TASK] Update backend sprites according to rebranding (Steffen Ritter)
[!!!][BUGFIX] Localization fallback does not work in Backend (Xavier Perseguers)
[TASK] Adjust Logos to new style-guide (Felix Kopp)
[BUGFIX] BE user switch impossible when in adminOnly mode (Philipp Kitzberger)
[BUGFIX] Validation of umlaut URLs and mail addresses (Mario Rimann)
[BUGFIX] Excludefieds must exclude admin only tables (Georg Ringer)
[BUGFIX] undefined variable imgExt (Simon Schaufelberger)
[BUGFIX] t3lib_iconWorks must check if array exists before using it (Jigal van Hemert)
[TASK] Introduce "TYPO3 CMS" in EXT: about (Felix Kopp)
[BUGFIX] Make generated thumbnails browser-cachable (Dmitry Dulepov)
[BUGFIX] TCEForms.Suggest wizard in IRRE records (Nicole Cordes)
[BUGFIX] Warning in list module (Philipp Gampe)
[BUGFIX] Endless loop in flushOutputBuffers() (Christian Kuhn)
[BUGFIX] Take versioned record into account for showHidden flag. (Bart Dubelaar)
[BUGFIX] Fix SQL error in Livesearch with empty TCA sortby setting (Laurent Cherpit)
[BUGFIX] Pagetree - Prevent a call to moveNode while creating nodes (Tobias Schultheiss)
[BUGFIX] FLUIDTEMPLATE - Serialization of 'Closure' is not allowed (Oliver Hader)
[BUGFIX] Prevent saltedpasswords destroying the password (Xavier Perseguers)
[BUGFIX] RTE: Localization to content language does not work (Stanislas Rolland)
[BUGFIX] imagecopyresized: correct invalid parameters (Stefan Neufeind)
[BUGFIX] RTE: Paste as plain text doesn't work in Safari (Mac only) (Stanislas Rolland)
[BUGFIX] CE with "All languages" doesn't show with every lang (Marcus Schwemer)
[BUGFIX] CE with "All languages" isn't shown in Page module (Georg Ringer)
[BUGFIX] Proper cursor icon in access module (Georg Ringer)
[TASK] Group excludefields by table (Johannes Feustel)
[BUGFIX] User settings don't remember that default language is selected (Jigal van Hemert)
[BUGFIX] Make alphanum. filter work with umlauts (Andreas Lappe)
[BUGFIX] Fix the additional icon check (Wouter Wolters)
[BUGFIX] Fix translation moving in workspaces (Tolleiv Nietsch)
[BUGFIX] strftime expects parameter 2 to be long, string given (Simon Schaufelberger)
[BUGFIX] RTE: array_flip warning on array of languages (Stanislas Rolland)
[BUGFIX] Fix compressor flooding typo3temp (Xavier Perseguers)
[BUGFIX] JS error in IE7 while starting RTE (Stanislas Rolland)
[BUGFIX] Words with special characters not added to personal dictionary (Stanislas Rolland)
[BUGFIX] RTE is not loading in IE8, when used with feedit (Stefan Aebischer)
[BUGFIX] htmlArea RTE: Cursor jumps to first letter with Chrome 22 (Stanislas Rolland)
[BUGFIX] Do not save expand state for root node in TCA tree (Christoph Gerold)
[BUGFIX] File upload button is collapsed in Chrome 21 (Steffen Gebert)
[BUGFIX] Switch to List module on root page leads to blank page (Thomas Löffler)
[BUGFIX] Error handler registration accepts way too much PHP error types (Marcus Krause)
[BUGFIX] Tree view in admin panel is broken with PHP 5.4 (Philipp Gampe)
[BUGFIX] Error handler callback causes fatal error for parse time errors (Marcus Krause)
[BUGFIX] Error messages are not shown in 123 installation process (Nicole Cordes)
[TASK] Database creating fails due to not allowed characters (Jigal van Hemert)
[BUGFIX] autoloader should ignore non existing extensions (Georg Ringer)
[BUGFIX] Link to install tool in reports leads to old page (Thomas Löffler)
[BUGFIX] pi_getLL() alternative language translation fails (Xavier Perseguers)
[BUGFIX] L10n PHP parser stores NULL for unknown key (Xavier Perseguers)
[BUGFIX] L10n parser interface is wrongly defined (Xavier Perseguers)
[BUGFIX] Compressor: filemtime(): stat failed in Help > About TYPO3 (Xavier Perseguers)
[BUGFIX] Set charset property after cloning t3lib_PageRenderer (Laurent Cherpit)
Revert "[BUGFIX] Invalid fallback for non-localized labels" (Xavier Perseguers)
[BUGFIX] PHP warning when no language pack is available (Xavier Perseguers)
[BUGFIX] Multi-table relationship not recognized in t3lib_loadDBGroup (Markus Opahle)
Vendor Import v4.6.14

[SECURITY] Fix SQL injection and XSS in record history (Oliver Hader)
[SECURITY] XSS in TCA Tree (Oliver Hader)
[SECURITY] Fix potential XSS in t3lib_BEfunc::getFuncCheck (Helmut Hummel)
[TASK] Raise submodule pointer (TYPO3 Release Team)
[BUGFIX] No sorting in TypoScript Object Browser when browsing (Nicole Cordes)
[BUGFIX] Translated non-published page in workspace breaks live workspace (Oliver Hader)
[BUGFIX] Illegal string offsets in t3lib_stdgraphic (Wouter Wolters)
[BUGFIX] PHP 5.4 warning in CLI context in switch back user (Christian Kuhn)
[BUGFIX] t3lib_div: adjust substUrlsInPlainText to also work on URLs at end of sentence (Robert Heel)
[BUGFIX] Wrong call to TSFE in FrontendEditing (Steffen Ritter)
[BUGFIX] PHP warning: open_basedir restriction (Xavier Perseguers)
[TASK] Fix generation of ext_emconf.php (Wouter Wolters)
[BUGFIX] t3lib_div::unlink_tempfile does not always work on Windows (Stanislas Rolland)
[BUGFIX] New form wizard not loading in IE8 (Sebastian Schawohl)
[BUGFIX] Fix case of tests folder (Xavier Perseguers)
[BUGFIX] Unit test for saltedpasswords fail (Xavier Perseguers)
[BUGFIX] RTE: Link to disabled page doesn't show in FE, link icon does (Stanislas Rolland)
[BUGFIX] RTE: Words containing umlauts not added to personal dictionary (Stanislas Rolland)
[BUGFIX] Extension Import not working with postgresql and DBAL (Ernesto Baschny)
[BUGFIX] Creating new pages via drag'n'drop respects page TS (Philipp Kitzberger)
Vendor Import v4.6.15

[TASK] Raise submodule pointer (TYPO3 Release Team)
[TASK] Raise version numbers of system extensions (Steffen Ritter)
[TASK] Fix TYPO3 logos (Helmut Hummel)
[BUGFIX] getFuncCheck must quotes wrong (Michael Späth)
Vendor Import v4.6.16

[BUGFIX] L10n fallback does not work for TS labels (Xavier Perseguers)
[BUGFIX] L10n fallback does not work for ExtJS in BE (Xavier Perseguers)
[TASK] Raise submodule pointer (TYPO3 Release Team)
[BUGFIX] Allow "en" as language key (Xavier Perseguers)
[TASK] Raise submodule pointer (Christian Kuhn)
[BUGFIX][Cache][PDO] Duplicate cache entry possible (Leon Dietsch)
[BUGFIX] IE9 compatibility clear cache menu (Andreas Kiessling)
[BUGFIX] Hook call modifyDBRow in ContentContentObject (Alina Fleser)
[BUGFIX] Fix misspelling in RTE meta menu (Tomita Militaru)
[BUGFIX] load TCA before manipulation (Jigal van Hemert)
[BUGFIX] add check for empty form values in FORM View (Christian Kuhn)
[TASK] DataHandler::getAutoVersionId() should be public (Oliver Hader)
[BUGFIX] Quick Edit triggers warnings of missing key uid (Philipp Gampe)
[TASK] Raise submodule pointer (Christian Kuhn)
[BUGFIX] Fix warnings in em on tab Maintenance (Philipp Gampe)
[BUGFIX] Correct TCA inclusion for uploads rendering (Georg Ringer)
[BUGFIX] Update description on changed error reporting defaults (Mario Rimann)
[BUGFIX] Fix typos in stdWrap_crop description (Wouter Wolters)
[BUGFIX] Apc Cache backend has side effects (Daniel Pötzinger)
[BUGFIX] Invalid call to t3lib_TCEmain::processRemapStack() (Oliver Hader)
[TASK] Raise submodule pointer (TYPO3 Release Team)
[BUGFIX] Suggest wizard is behind form inputs (Xavier Perseguers)
[BUGFIX] phpdoc: $urlParameters can be a string (Stefan Neufeind)
[BUGFIX] FE session records are never removed (Steffen Müller)
[BUGFIX] INTincScript_loadJSCode() causes PHP warnings (Markus Klein)
[BUGFIX] Fix broken logo file in Install Tool (Tomita Militaru)
[BUGFIX] Remove HTML in RuntimeException from sysext 'install' (Philipp Gampe)
[BUGFIX] Fix wrong column title in web>list for field colpos (Martin Kästner)
[BUGFIX] SqlParser: trim all kinds of whitespaces (Stefan Neufeind)
[TASK] Remove typo3.pageModule.js (Falk Kühnel)
[BUGFIX] Installer: Reference images wrong (Christian Kuhn)
[BUGFIX] Page Information shows incorrect number of total hits (Andrew Moore)
[BUGFIX] Old logo on "Install Tool is locked" page (Nikolas Schmidt-Voigt)
[BUGFIX] Form values with newlines escaped in email (Helmut Hummel)
[TASK] openid: Update php-openid to 2.2.2 (Stefan Neufeind)
[BUGFIX] Wizard in HTML element moved to t3editor (Georg Ringer)
[BUGFIX] Livesearch toolbar should close others (Tolleiv Nietsch)
[BUGFIX] Hide version selector if workspaces are used (Helmut Hummel)
[BUGFIX] Subject field in FormWizard (Florian Scholz)
[TASK] Raise submodule pointer (TYPO3 Release Team)
[BUGFIX] Invalid behavior of search for integer in Backend search (Soren Malling)