[BUGFIX] No sorting in TypoScript Object Browser when browsing

If you enable "Sort alphabetically" the correct value (1) is submitted to
extension settings. But when you use any other functionality of the page
(e.g. setting some conditions or use search filter) the value is set to
"on" which disables the sorting.

Change-Id: I88233f94edba032c9b23072fb5e9132b276c8f1e
Fixes: #39677
Releases: 6.0, 4.7, 4.6, 4.5
Reviewed-on: http://review.typo3.org/16148
Reviewed-by: Christian Kuhn
Tested-by: Christian Kuhn
Reviewed-by: Wouter Wolters
Tested-by: Wouter Wolters
Reviewed-by: Nicole Cordes
Tested-by: Nicole Cordes
Reviewed-by: Jigal van Hemert
Tested-by: Jigal van Hemert
[TASK] Raise submodule pointer

Change-Id: I7411c36df30b8f4c9256be0d23838da0eae5bed3
Reviewed-on: http://review.typo3.org/16289
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team
[SECURITY] Fix potential XSS in t3lib_BEfunc::getFuncCheck

The method getFuncCheck creates an URL from input variables and puts
it in JavaScript context without properly encoding them.

This might lead to XSS if the input variables come from untrusted source.

Fixes: #42776
Releases: 6.0, 4.7, 4.6, 4.5

Change-Id: I7d36b594a7596b02ccb620a8f6aced0eafb56388
Security-Commit: c21c84dad9c1fe2efa7c376316ca1c6485087bf7
Security-Bulletin: TYPO3-CORE-SA-2012-005
Reviewed-on: http://review.typo3.org/16302
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] XSS in TCA Tree

Properly html encode the label of tree nodes.

Fixes: #42774
Releases: 6.0, 4.7, 4.6, 4.5

Change-Id: I6b0b305c42e30c6a520000b80b76bb66065ed1e3
Security-Commit: 66cd95bb74bf9290c961d6a1809ab5b122ba5536
Security-Bulletin: TYPO3-CORE-SA-2012-005
Reviewed-on: http://review.typo3.org/16303
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] Fix SQL injection and XSS in record history

This patch fixes the SQL injection possibilities in the record
history view as well as fixing XSS possibilities. The submitted
GET/POST data gets sanitized now besides that.

Change-Id: I6b99549ddceb8d82b7ab05e590c44aad8be0676c
Fixes: #42696
Releases: 6.0, 4.7, 4.6, 4.5
Security-Commit: fd2d404a54dcf764789e1c27b0f73383ff7c41e3
Security-Bulletin: TYPO3-CORE-SA-2012-005
Reviewed-on: http://review.typo3.org/16304
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[RELEASE] Release of TYPO3 4.7.6

Change-Id: I80bff9651adb898f456841e79ba8c9cd59467b35
Reviewed-on: http://review.typo3.org/16312
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team
[TASK] Set TYPO3 version to 4.7.7-dev

Change-Id: I6e1edfaf29e2d490975348a4b15ea4073a1c3751
Reviewed-on: http://review.typo3.org/16313
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team
[BUGFIX] getFuncCheck must quotes wrong

The security fix preventing XSS included a regression
since the quoting has been backported wrong.

This results in an JS error which prevens all jumpURL
calls in the backend from working.

Change-Id: I80210a30ad9e7bb1d7b9da3b9d09490c428a24ff
Releases: 4.5, 4.6, 4.7
Resolves: #42812
Reviewed-on: http://review.typo3.org/16375
Reviewed-by: Steffen Ritter
Tested-by: Steffen Ritter
[TASK] Fix TYPO3 logos

The logos have been changed to match the new CI,
but were cut out sloppily.

Exchange the most prominent logos with proper ones.

Fixes: #42850
Releases: 6.0, 4.7, 4.6, 4.5

Change-Id: Id5ac815b8c2b381bef89f9e152345fd29a822bf6
Reviewed-on: http://review.typo3.org/16395
Reviewed-by: Steffen Ritter
Tested-by: Steffen Ritter
[BUGFIX] Regression in t3lib_iconWorks::imagecopyresized

t3lib_iconWorks::imagecopyresized was refactored
in #26660. Unfortunatelly that change introduced
a regression. Parameter names were changed in
method definition, but inside this method.

This change makes parameter names consistent.

Change-Id: I819da83ea059ecc7d17348c12ca64b37fac6dae0
Fixes: #39563
Releases: 6.0, 4.7
Reviewed-on: http://review.typo3.org/13489
Reviewed-by: Wouter Wolters
Reviewed-by: Stefan Neufeind
Reviewed-by: Jigal van Hemert
Tested-by: Jigal van Hemert
[TASK] Raise version numbers of system extensions

Change-Id: Ieac9c8eacf939bebc9a517bbef4c710dfa88dcca
Reviewed-on: http://review.typo3.org/16408
Reviewed-by: Steffen Ritter
Tested-by: Steffen Ritter
[TASK] Raise submodule pointer

Change-Id: Iab17d9e457e8a704227ea5df5dcf9805cdf5014c
Reviewed-on: http://review.typo3.org/16428
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team
[RELEASE] Release of TYPO3 4.7.7

Change-Id: If1907298be3ca5d442e17706d8f9ab66d1af2741
Reviewed-on: http://review.typo3.org/16434
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team
[TASK] Set TYPO3 version to 4.7.8-dev

Change-Id: I9700f8c1a064f9e8703d4ea9b6d11c545a05a6b0
Reviewed-on: http://review.typo3.org/16435
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team
[BUGFIX] Invalid behavior of search for integer in Backend search

In fact current implementation does not replace the LIKE
operator with an SQL equal statement for numeric fields
but whenever a query that can be interpreted as integer
is encountered, regardless of the underlying column type.

Example: If you have pages "102 W", "102 E", you used
to be able to search for "102" and get them, but now
the query is casted to an integer and the page title
is search for an equality on "102" resulting in
an empty result list.

The underlying column type should be used
instead (code to cache this information is already
available within DBAL and Helmut started months
ago to backport it to Core itself: #28654).

Thanks to Clio Online for sponsoring this fix!

Change-Id: I527b2eb742f663985866e717fcf572f2a7e33574
Resolves: #33700
Releases: 6.0, 4.7, 4.6
Reviewed-on: http://review.typo3.org/16477
Reviewed-by: Marco Bresch
Tested-by: Marco Bresch
Reviewed-by: Soren Malling
Tested-by: Soren Malling
Reviewed-by: Dmitry Dulepov
Tested-by: Dmitry Dulepov
[TASK] Raise submodule pointer

Change-Id: I4ac5ae4a9db0304a0debf4afe7c46220afe6314c
Reviewed-on: http://review.typo3.org/16646
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team
[BUGFIX] Subject field in FormWizard

Allow setting the subject of an Email
by adding a 3rd input field to the
post processor section of the form tab.

Change-Id: Ib444c517d829554b2388e7ec2039116aecba7ab1
Releases: 6.0, 4.7, 4.6, 4.5
Resolves: #35787
Reviewed-on: http://review.typo3.org/14333
Reviewed-by: Andreas Wolf
Reviewed-by: Wouter Wolters
Reviewed-by: Stefan Neufeind
Reviewed-by: Florian Scholz
Tested-by: Florian Scholz
Reviewed-by: Steffen Ritter
Tested-by: Steffen Ritter
[BUGFIX] Hide version selector if workspaces are used

All versioning information and actions should be
hidden if workspaces are used.

One remaining selector is in the page module when
a page has been versioned in a workspace.

Hide this selector when workspaces extension is installed.

Fixes: #43264
Related: #27969, #25962
Releases: 4.5, 4.6, 4.7, 6.0

Change-Id: If96f1fe99f2a7a5b5b48f1f8a1aca8f053a6622a
Reviewed-on: http://review.typo3.org/16707
Reviewed-by: Jigal van Hemert
Tested-by: Jigal van Hemert
[TASK] openid: Update php-openid to 2.2.2

Update to current version.
Github-version contains several small
fixes / cleanups, so a current
checkout was used here.

Change-Id: I8a07907949737c2109c0e293bce86cded7612184
Resolves: #42236
Releases: 4.7
Reviewed-on: http://review.typo3.org/16042
Reviewed-by: Dmitry Dulepov
Tested-by: Dmitry Dulepov
[BUGFIX] Form values with newlines escaped in email

nl2br() is executed before htmlspecialchars(). Needs to be
the other way round so the <br/> is not encoded as well.

Change-Id: Ia4ea558bbf75ca838ce3b0e6129ae5ed2f692123
Fixes: #32515
Releases: 6.1, 6.0, 4.7, 4.6
Reviewed-on: http://review.typo3.org/16798
Reviewed-by: Christian Kuhn
Tested-by: Christian Kuhn