Sacerdote Pro 13.0.0

Changed​

• [BC BREAK] PRO Existing Sourcerer article output can be removed when its creator or last modifier does not pass the configured code-type permissions
• [BC BREAK] PRO PHP include attributes outside the configured include folder are now ignored
• [BC BREAK] Smart Search reindexing can remove Sourcerer output that is not visible to public guests
• [BC BREAK] Sourcerer now rejects previously accepted executable script and style tag variants
• FREE Clarifies the PHP security policy in the configuration
• PRO Preserves existing Sourcerer security settings during updates; review them to opt into the new defaults
• Increases minimum php version to 8.2
• Updates translations: bg-BG, ca-ES, da-DK, de-DE, el-GR, fi-FI, fr-FR, id-ID, it-IT, ja-JP, lt-LT, nl-BE, nl-NL, pl-PL, pt-BR, pt-PT, ru-RU, sk-SK, sl-SI, sv-SE, th-TH, tr-TR, uk-UA, zh-CN, zh-TW

• PRO Fixes issue with "All" user groups defaults appearing unselected in security level fields
• [SECURITY FIX] [BC BREAK] FREE Restricts PHP in articles to content created and last modified by Super Users
• [SECURITY FIX] [BC BREAK] PRO Enforces configured CSS, JavaScript, and PHP permissions across tags, attributes, files, and both article creators and modifiers
• [SECURITY FIX] [BC BREAK] PRO Fixes issue with Sourcerer PHP includes accepting paths outside the configured include folder
• [SECURITY FIX] [BC BREAK] Fixes issue with Smart Search failing in CLI or indexing Sourcerer output with the indexing administrator's access
• [SECURITY FIX] [BC BREAK] Fixes issue with Sourcerer script and style security checks missing executable tag variants
• [SECURITY FIX] Fixes issue with Regular Labs privileged AJAX endpoints not consistently enforcing valid tokens, matching permissions, and trusted form configuration
• [SECURITY FIX] Updates bundled HTTP message dependency to fix request start-line injection
• Fixes issue with component exclusions also affecting head and other-area processing
• Fixes issue with editor-button selections not being replaced reliably across supported editors
• Fixes issue with older Regular Labs extensions breaking after the shared library is updated
• Fixes issue with permitted PHP code being incorrectly removed in modules or when containing quoted strings
• Fixes issue with Regular Labs Library AJAX fields not loading after binding requests to signed form data
• Fixes issue with Regular Labs Library errors when loading parameters or processing malformed XML, CLI, and other non-web requests
• Fixes issue with Smart Search indexing failing when frontend browser assets are loaded
• Fixes issue with Sourcerer inserting empty code after rapidly reopening the editor popup
• Fixes issue with Sourcerer losing JCE source-mode selections when opening the editor popup
• Fixes issue with zero-width non-joiners being removed from generated Sourcerer PHP output

Added​

• Adds translations: ca-ES, nl-BE, pt-BR

Changed​

• Improves page load speed in some cases
• Refactors and improves general performance of the Regular Labs Library
• Updates translations: bg-BG, cs-CZ, da-DK, de-DE, el-GR, et-EE, fi-FI, fr-FR, id-ID, it-IT, ja-JP, lt-LT, nl-NL, pl-PL, pt-PT, ru-RU, sk-SK, sl-SI, sv-SE, th-TH, tr-TR, uk-UA, vi-VN, zh-CN, zh-TW

Fixed​

• Fixes issue with errors on indexing via SmartSearch in some cases using PHP

# Fixes issue with some php scripts breaking the smart search indexer

# Fixes issue with php error about argument being null in handleOnContentPrepare on some setups
# Fixes some PHP 8.5 deprecated code

# [J6] Fixes issue with breaking errors on Joomla 6 beta 2

• Fixes issue with php warning about implicitly marking parameter as nullable on PHP 8.4+
• J4 Fixes issue with editor button not showing

v12.2.3

• Fixes issue with php error on search

v12.2.2

• Fixes issue with php error about loadStylesAndScripts getting null

# Fixes issue with fatal php error about JFactory

Changed​

• Updates translations: sv-SE
• J6 Makes it possible to install on Joomla 6

Fixed​

• Fixes issue with some php deprecated warnings on PHP 8.4+

# Fixes issue with tmp path of temporary php code not being placed in correct folder of sites in subfolders