Skip to content

[5.4] Upmerge 2025-08-26#45985

Merged
richard67 merged 20 commits intojoomla:5.4-devfrom
muhme:5.4-upmerge-2025-08-26
Aug 26, 2025
Merged

[5.4] Upmerge 2025-08-26#45985
richard67 merged 20 commits intojoomla:5.4-devfrom
muhme:5.4-upmerge-2025-08-26

Conversation

@muhme
Copy link
Contributor

@muhme muhme commented Aug 26, 2025

Summary of Changes

This pull request (PR) merges the changes from 5.3-dev up into 5.4-dev which have been made since the last upmerge PR from 19 August, one week ago, after release.

There were 18 real PRs from 5.3-dev merged.
1 file with version conflict was:

Testing Instructions

Review. Check the commits of this PR and those in the 5.3-dev branch.

Actual result BEFORE applying this Pull Request

5.4-dev branch is not up to date with 5.3-dev.

Expected result AFTER applying this Pull Request

5.4-dev branch is up to date with 5.3-dev.

Link to documentations

Please select:

  • Documentation link for docs.joomla.org:

  • No documentation changes for docs.joomla.org needed

  • Pull Request link for manual.joomla.org:

  • No documentation changes for manual.joomla.org needed

brianteeman and others added 19 commits August 20, 2025 16:59
* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

---------

Co-authored-by: Richard Fath <richard67@users.noreply.github.com>
Co-authored-by: Stefan Wendhausen <stefan.wendhausen@tec-promotion.de>
* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

---------

Co-authored-by: Richard Fath <richard67@users.noreply.github.com>
Co-authored-by: Stefan Wendhausen <stefan.wendhausen@tec-promotion.de>
This is considered a failing metric in automated PCI scans under the
"session hijacking" category and thus should be avoided.

PHP 4.3 introduced the "session.use_only_cookies" PHP configuration
option which meant that passing in a session ID via GET/POST variables
can be disabled. The code in Joomla should at very least honour this
setting.

Alternatively, if no good reason for this code exists, it should be
removed entirely.

Co-authored-by: Hannes Papenberg <info@joomlager.de>
Co-authored-by: Richard Fath <richard67@users.noreply.github.com>
Co-authored-by: Allon Moritz <allon.moritz@digital-peak.com>
* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

* Language update

---------

Co-authored-by: Richard Fath <richard67@users.noreply.github.com>
Co-authored-by: Stefan Wendhausen <stefan.wendhausen@tec-promotion.de>
@muhme muhme added this to the Joomla! 5.4.0 milestone Aug 26, 2025
@joomla-cms-bot joomla-cms-bot added Language Change This is for Translators NPM Resource Changed This Pull Request can't be tested by Patchtester PR-5.4-dev labels Aug 26, 2025
@richard67 richard67 merged commit c514a25 into joomla:5.4-dev Aug 26, 2025
40 checks passed
@richard67
Copy link
Member

Thanks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Language Change This is for Translators NPM Resource Changed This Pull Request can't be tested by Patchtester PR-5.4-dev

Projects

None yet

Development

Successfully merging this pull request may close these issues.