Zend Framework 2 v2.3.1 Release Notes
Release Date: 2014-04-15 // about 10 years ago-
- 5392: Zend Db: Multiple nested selects - Zend Paginator with nested select bind parameters error
- 🛠 5857: Fixes #4521
- 5863: patch #5860
- ✅ 5948: Circular dependency test for #5651
- 5956: Prevent fatal error in JsonRpc-Client
- 5957: php 5.6 compatibility
- 5958: fix typo
- 👻 5959: Issue - AbstractDiServiceFactory ,MvcTranslatorFactory throws Exception
- ⬆️ 5964: Upgrading branch aliases for components: 2.2-dev -> 2.3-dev, 2.3-dev -> 2.4-dev
- 5968: Collection Input Filter fix messages
- 5970: Adds disableInArrayValidator check to Radio
- 5972: permissions : docBlock
- 5973: Rbac::getRole() : check object->getName()
- ⚡️ 5975: Update wrong DocBlock comment
- 5978: ZF 2.3.0 BC break in MvcTranslator
- 5979: Fix BC break in TranslatorServiceFactory
- 🔧 5983: [cs-fixer\ Centralize configuration in a single file
- 🌐 5985: Corrected placeholder token '%' for some translations
- 5986: InputFilter\Factory can't handle config with null input
- 5988: Fix patterns for mobile (allows 7 as fisrt number)
- 5989: Allow aria-labelledby and aria-describedby attributes in form elements
- 🚚 5991: ---removed---
- ⚡️ 5997: Update segment route to TranslatorInterface
- 🔌 5998: Add missing bitwise validator in pluginmanager
- 6000: Blackhole cache adapter : docblock corrections
- 🛠 6003: typo on comment fixed
- 🔌 6004: InputFilterPluginManager needs to allow InputInterface retrieval
- 0️⃣ 6007: ZendMvc depends on ZendLog by default in 2.3.0, add it to composer
- 6009: Form\Element\Select multiple is always required
- 6012: Zend\ProgressBar\Adapter\Console::notify should use mb_substr
- 6019: Fix for #6012 - Use wrapper for substr() in ProgressBar
- 6021: Missed variable, renamed to one which exists.
- 6022: Invalid instantiator of type "NULL" for "Zend\I18n\Translator\TranslatorInterface"
- 6023: Parameter generator backslash escaping
- 6024: Dispatch error should be preventable
- 6026: decompress() Zend/Filter/Compress/Zip fix
- 6027: Allow empty response strings in \Zend\Http\Response::fromStream
- 6028: Method getValue should check the type of input inside InputFilter
- 🚚 6030: Remove duplicate comment
- 🚚 6031: remove double semicolon
- 6032: fix comment on PhpMemoryArray loader
- 👻 6035: fix exception message. Must be Stdlib\Hydrator
- 6037: Require PHP extension mcrypt in composer.json
- 🚑 6041: Hotfix : Zend\Test trace error flag
- 📚 6042: Fix documentation
- 6045: File Form Element don't works
- 🔌 6046: Allow InputInterface retrieval from InputFilterPluginManager
- ✅ 6047: Fix Zend\Test test
- 6049: Fix for issue 6048
- ⚡️ 6050: update copyright year that still using 2013 to 2014
- 6051: 2.2.6 -> 2.3.0 causes DI to try to instantiate
Zend\I18n\Translator\TranslatorInterfaceinstead ofZend\I18n\Translator\Translator - 🛠 6056: Fixes a typo
- 6061: added missing License header
- 🛠 6062: fixed typo
- ✅ 6070: code-to-explain-code test in MultiCheckboxTest to check multi selected
- ✅ 6071: Re enable zip compression tests on Travis
- 6077: fix for issue 6076. avoid GlobIterator globbing to directories which it ...
- 6082: Using \Zend\Db\Sql\Expression as part of join name. Object of class Zend\Db\Sql\Expression could not be converted to string
- 6083: NumberOfParameterFilter correctly handles argument count greater than 0.
- 🚚 6085: Fixes #5929 - Remove a page recursively
- 6089: Problems with serializing Zend\Stdlib\ArrayObject
- 🚑 6092: Hotfix for #6089 - ArrayObject serialization doesn't restore
protectedProperties - 6093: Fix unused imports and local variables
- 6094: Fix undefined classes, constants and methods
- 6096: Prevent ArrayObject recursion in 5.6
- ✅ 6100: More tests for nested form fieldsets
- 6102: Zend\Filter\Compress\Tar::setMode() would not work
- 6103: Zend\Filter\Compress\Tar::setMode() should work with case-insensitive
- 6104: Validator\Ip should not allow newlines in any case.
- ✅ 6105: add missing resource messages at en - Bitwize & Datestep
- 6106: suggest ext-mcrypt
- 6110: Allow session garbage collection to use an index
- ✏️ 6116: fixed typos
- 6118: Extra fieldsets are created when calling form bind multiple times
- 6123: Mail: Require Zend\Validator
- 6125: added missing { and } after if
- 6126: Tiny typo fix in docblock
- 6128: Fix class description
- 6129: change is_null($var) to (null === $var) for consistency
- 6130: change docblocks and comments that still using "Zend_" to "Zend"
- 6132: FormElementManager: Only initialize a shared element once
- 6136: Fix: No need to prefix imports
- ✅ 6139: Fix: Test name
- 6140: Fix: Indentation in array initialization, trailing commas
⚡️ SECURITY UPDATES
- ZF2014-03: Potential XSS vector in multiple view helpers due to
inappropriate HTML attribute escaping. Many view helpers were using the
escapeHtml()view helper in order to escape HTML attributes. This release patches them to use theescapeHtmlAttr()view helper in these situations. If you use form or navigation view helpers, or "HTML element" view helpers (such asgravatar(),htmlFlash(),htmlPage(), orhtmlQuicktime()), we recommend upgrading immediately.