This version fixes several permission checks, including for articles without access to the page structure. Reader modules are now loaded before other content in order to generate breadcrumbs correctly. The frontend preview toolbar has been moved to the shadow DOM to prevent it from being affected by page CSS. Additionally, a bug with recursive insert tags has been fixed and security-related dependencies have been updated.
Changelog of the fixed issues in Contao 5.3.40:
- #8853 Use a pointer cursor for the preview toolbar toggle (fritzmg)
- #8879 Update `paragonie/constant_time_encoding` (paragonie-security)
- #8881 Handle directories in the file image preview (aschempp)
- #8859 Fix the `undefined method named "shouldPreload"` error (ausi)
- #8819 Do not hardcode the file preview (aschempp)
- #8751 Fix the template module class (aschempp)
- #8814 Do not check the page type when adding child pages (aschempp)
- #8805 Fix the permission check on pages in article view (aschempp)
- #8085 Preload the reader modules (ausi)
- #8795 Remove the deprecation from `Input::stripTags()` (ausi)
- #8780 Move the preview toolbar into the shadow DOM (zoglo)
- #8787 Handle infinite recursion in the insert tag parser (ausi)
- #8779 Check if the `Content-Type` header exists before using it in the `PreviewToolbarListener` (lukasbableck)
About Contao 5.3 LTS
The first stable version of Contao 5.3 has been released on February 16, 2024, replacing Contao 4.13 as the long term support version. As an LTS version, 5.3 will be provided with bug fixes until February 14, 2027 and security-related updates until February 14, 2028. Contao 5.7 has been the next LTS version of Contao and will be released in February 2026, ensuring a stress-free transition.
