


| Directory | Changes | Lines of Code | Lines per Change |
|---|---|---|---|
| Totals | 136 (100.0%) | 1576 (100.0%) | 11.5 |
| typo3/sysext/install/mod/ | 4 (2.9%) | 422 (26.8%) | 105.5 |
| t3lib/ | 30 (22.1%) | 284 (18.0%) | 9.4 |
| tests/t3lib/ | 2 (1.5%) | 199 (12.6%) | 99.5 |
| / | 53 (39.0%) | 189 (12.0%) | 3.5 |
| typo3/sysext/css_styled_content/static/ | 6 (4.4%) | 98 (6.2%) | 16.3 |
| typo3/ | 12 (8.8%) | 68 (4.3%) | 5.6 |
| typo3/sysext/css_styled_content/pi1/ | 4 (2.9%) | 65 (4.1%) | 16.2 |
| typo3/sysext/cms/tslib/ | 7 (5.1%) | 60 (3.8%) | 8.5 |
| typo3/sysext/css_styled_content/static/v4.2/ | 2 (1.5%) | 35 (2.2%) | 17.5 |
| typo3/sysext/css_styled_content/static/v3.9/ | 2 (1.5%) | 35 (2.2%) | 17.5 |
| typo3/sysext/css_styled_content/static/v3.8/ | 1 (0.7%) | 34 (2.2%) | 34.0 |
| t3lib/unidata/ | 1 (0.7%) | 29 (1.8%) | 29.0 |
| typo3/sysext/cms/ | 5 (3.7%) | 24 (1.5%) | 4.8 |
| typo3/sysext/cms/layout/ | 1 (0.7%) | 18 (1.1%) | 18.0 |
| typo3/sysext/css_styled_content/ | 1 (0.7%) | 5 (0.3%) | 5.0 |
| typo3/sysext/indexed_search/pi/ | 1 (0.7%) | 4 (0.3%) | 4.0 |
| typo3/sysext/beuser/mod/ | 1 (0.7%) | 4 (0.3%) | 4.0 |
| typo3/templates/ | 1 (0.7%) | 1 (0.1%) | 1.0 |
| typo3/sysext/indexed_search/ | 1 (0.7%) | 1 (0.1%) | 1.0 |
| typo3/sysext/extra_page_cm_options/ | 1 (0.7%) | 1 (0.1%) | 1.0 |

Fixed bug #11876 and #12342: stripSlashesOnArray creates references where you want copies (in some PHP versions). Affects usage of _GP (e.g. in the Install Tool and some frontend extensions).
6 lines of code changed in 2 files:
Fixed bug #5120: SQL parse error in "Who is online" with DBAL (PostgreSQL / Oracle)
8 lines of code changed in 2 files:
Fixed bug #12371: Warning issued on first load of install tool with open_basedir set
10 lines of code changed in 2 files:
Fixed bug #12321: Follow-up to #11586, fixes FE editing
8 lines of code changed in 2 files:
* Fixed bug #12090: Filenames should be escaped with escapeshellarg before passing them to imagemagick
14 lines of code changed in 3 files:
* Fixed bug #12310: Encryption key can be recalculated when using normal mailform when [FE][strictFormmail] == 0 (thanks to Oliver Klee)
18 lines of code changed in 2 files:
* Fixed bug #12309: It was possible to gain access to the Install Tool by only knowing the md5 hash of the password.
394 lines of code changed in 3 files:
* Fixed bug #10501: XSS vulnerability in the install tool (thanks to Oliver Klee)
24 lines of code changed in 2 files:
* Fixed bug #12307: XSS vulnerability in alt_palette (thanks to Oliver Klee)
27 lines of code changed in 2 files:
* Fixed bug #12306: XSS vulnerability in module dispatcher
3 lines of code changed in 3 files:
* Fixed bug #12305: XSS vulnerability in view_help.php / tfID parameter (thanks to Oliver Klee)
5 lines of code changed in 2 files:
* Fixed bug #12304: Frame inclusion in the backend through alt_mod_frameset (thanks to Oliver Klee)
94 lines of code changed in 4 files:
* Fixed bug #12303: XSS vulnerability due to not proper sanitizing in function t3lib_div::quoteJSvalue (thanks to Oliver Klee)
146 lines of code changed in 3 files:
* Fixed bug #11586: Potential SQL injection in frontend editing (thanks to Oliver Klee)
11 lines of code changed in 2 files:
* Added feature #2421: CSC: Move static HTML from render_uploads to TypoScript, providing flexible rendering of "Filelinks" content elements
169 lines of code changed in 6 files:
* Fixed Bug #5381: Added htmlSpecialChars to rendering page titles in Sitemap/menu content elements
15 lines of code changed in 3 files:
Added feature #11107: CSC: Provides more flexible rendering for the images block in "text with image"
76 lines of code changed in 3 files:
Fixed bug #11094: CSC: maxWInText setting was being ignored (since #10320).
7 lines of code changed in 4 files:
* Fixed bug #8746: Date/time field problem with timezone shifting when using the "+NN", "d" or "d+NN" shortcuts
* Fixed bug #10033: Date/time field shortcut "d" doesn't work on already filled date fields since 4.2.0
* Fixed issue that on a datetime field entering just a "date" wasn't possible: It is now, and time will be set to "0:00"
38 lines of code changed in 2 files:
Fixed bug #9511: getHtmlTemplate should use resolveBackPath. Fixes bug for extension BE modules using templates in certain environments (symlinked typo3/ dir) (thanks to Steffen Gebert)
5 lines of code changed in 2 files:
(34 more)