Joomla por fin ha lanzado la versión 4.3.2 de su sistema operativo con la que ha tapado algunos problemas de seguridad, uno de ellos de relativa importancia, e introduce nuevas mejoras en prácticamente todas sus áreas, por lo que la lista de arreglos y mejoras es realmente extensa.
Cambia de CMS gratis con expertos
¿Tu CMS te tiene desesperado?
Cambia a un nuevo CMS más rápido y seguro, con inteligencia artificial (IA) e incluso consigue ahorro:
Es obligado actualizar, aunque conveniente hacerlo después de unos días para asegurarnos de que esta actualización no da problemas, en gran parte por los temas de seguridad que se solucionan, uno de poco impacto, pero un seguro un poco más importante.
Problemas de seguridad resueltos en Joomla 4.3.2
- [20230501] Low Severity – Low Impact – Low Probability – Open Redirect and XSS within the mfa selection (affecting Joomla! 4.2.0 – 4.3.1)
- [20230502] Moderate Severity – Critical Impact – Low Probability – Bruteforce prevention within the mfa screen (affecting Joomla! 4.2.0 – 4.3.1)
Arreglos y mejoras
Accesibilidad
- hide table headers in tables rather than omit them when ‘show headings’ is set to ‘no’
Banners
- aria-label not translated in com_banners
- reset statistics on banner duplication
- cannot batch copy banners
Contacts
- cannot batch copy contacts
Content
- Content component improved validation when only positive integers are allowed
Editors
- TinyMCE prevents white text on a white background in preview
- TinyMCE editor plugin language of parts fails if subform fields are empty
- Codemirror corrects path for keybinding script
Fields
- re-introduction of specific layouts to render Contact custom fields
- calendar type min/max year
- PHP warning when preparing Text field
Guided Tours
- escaping of data on update or new installs is unnecessary for the ‘extensions’ column
- banners tour is skipping a few fields
- order of the tours in the modal should no be sorted automatically, use the tour’s view order instead
Media Manager
- replace ‘an error occurred’ with ‘this file type is not supported’
- refactor the session fallback
- remove warning in console
Mail Templates
- tag needs to be quoted before being passed onto the regular expression
- newly created mail template is not properly recorded in the database (missing extension data and double arrayed tags)
Smart Search
- add padding to highlighted search words in smart search
- detect whether Memory engine is supported
Tags
- router issues on multilingual sites, breaking old URLs
- hide the filter_tag parameter from the URL when the menu item is created with category type and filtering by tag or tags
Template
- template parameter invalid json string
- template manager PHP 8.1 warnings removal
- missing Cassiopeia black color variable
- Cassiopeia menu breakpoint for hamburger to prevent vertical menu
User
- javascript error on login page when MFA
- Text() not found on user login
- category access levels should not apply to users having core.admin access
- User groups tab use invalid checkbox ids
- Module positions do not show in com_user settings
- removed login message on login in the frontend
- Fix submit button focus on frontend MFA captive login page when using Webauthn
Others
- allow new category when no other category exists
- when a component is disabled, menu items’ icon should show ‘component not found’ and represent a warning rather than a cross with ‘publish item’ tooltip
- improved messaging when an extension is missing checksum information (hash codes proving the file is genuine)
- Articles categories module caching no longer fails
- make schedule runner/keepalive work with adblockers/no script
- remove any spaces from the disable_functions string in the php.ini before exploding into an array for checking and prevent error
- undefined key in HTMLDocument setBuffer
- PluginHelper::getLayoutPath should work in CLI (in non web context)
- show empty state layout only when cache contains no data
- improved RSS page title
- update of the help table of content
- PHP 8.2 warnings in Multilingual Sample Data plugin
- list-view .js should work with Ajax content
Apúntate gratis al boletín semanal
*Al suscribirte confirmas que aceptas recibir la newsletter semanal de mejorCMS.com y las Condiciones de uso y Política de privacidad de mejorCMS.com y de Mailchimp.
Artículos relacionados:
Tu empresa está muy ocupada. Todas lo están. Pero si no mejoras ahora, tu competencia lo hará:
