Contao Open Source CMS Changelog for the version 5.3

About Contao 5.3 LTS

The first stable version of Contao 5.3 has been released on February 16, 2024, replacing Contao 4.13 as the long term support version. As an LTS version, 5.3 will be provided with bug fixes until February 14, 2027 and security-related updates until February 14, 2028. Contao 5.7 will be the next LTS version of Contao and will be released in February 2026, ensuring a stress-free transition.

Changelog Contao 5.3

Contao 5.3.20 (2024-12-10)

Changelog of the fixed issues in Contao 5.3.20:

#7785 Use `CAST(… AS BINARY)` instead of `BINARY` (leofeyer)
#7690 Fix the help wizard (bytehead)
#7773 Add the missing relations to the DCAs (aschempp)
#7732 Add the domain to the "root page dependent module" configuration (aschempp)
#7757 Disallow creating or updating elements with invalid parent record (aschempp)
#7755 Handle ampersands in the alt attribute of the picture insert tag (markocupic)
#7772 Use the correct session bag in the preview link listener (leofeyer)
#7758 Make the default (global) operations more consistent (aschempp)
#7765 Disable `overlayClick` for SimpleModal (zoglo)
#7767 Fix the base path for canonical URLs (fritzmg)
#7778 Do not normalize the `resampling-filter` array key (ausi)
#7751 Make sure the correct test-case package is installed in Contao (aschempp)

Contao 5.3.19 (2024-11-28)

Changelog of the fixed issues in Contao 5.3.19:

#7752 Fix the sorting when copying multiple form fields as a non-admin user (qzminski)
#7753 Replace insert tags in Twig surrogate parent templates (ausi)
#7556 Enable double encoding for JSON in Twig (ausi)
#7750 Handle null result in 404 router provider (aschempp)
#7749 Make Contao 5.3 compatible with PHP 8.4 (bytehead)
#7744 Fix the "lost password" module (leofeyer)

Contao 5.3.18 (2024-11-20)

Changelog of the fixed issues in Contao 5.3.18:

#7730 Show section headlines in the back end preview (leofeyer)
#7729 Allow basic entities in section headlines (leofeyer)
#7727 Make the abstract entities migration case-sensitive (leofeyer)
#7670 Prevent possible type error in `DC_Table::getClipboardPermission` (fritzmg)
#7699 Do not load the CAPTCHA script in the back end preview (leofeyer)
#7698 Skip fragments which inherit legacy modules in debug:fragments (bytehead)
#7682 Remove superfluous domain encoding (falkgeist)
#7720 Cache hot path in model (Toflar)
#7631 Allow page controllers to create the response context (fritzmg)
#7715 Consider the `doNotDeleteRecords` setting when deleting child records (patrickjDE)
#7716 Fix login redirect and session usage (fritzmg)
#7712 Fix the permissions check for "save and duplicate" (aschempp)
#7708 Decode entities for favorites labels (fritzmg)
#7717 Use the `RateLimiter` component to limit password reset requests (bytehead)
#7674 Flag deprecated Twig functions as deprecated (m-vo)
#7667 Harden CSP header parsing (bytehead)

Contao 5.3.17 (2024-10-23)

Changelog of the fixed issues in Contao 5.3.17:

#7665 Fix the `ContentElementTypeListener` (Toflar)

Contao 5.3.16 (2024-10-22)

Changelog of the fixed issues in Contao 5.3.16:

#7617 Deprecate `Controller::sendFileToBrowser()` and add the `postDownload` hook to the `UPGRADE.md` file (Toflar)
#7637 Check permissions on all operations in the `PermissionCheckingVirtualFilesystem` decorator (m-vo)
#7516 Use a listener to set the allowed element types (aschempp)
#7650 Enable `pauseOnMouseEnter` in the Swiper template by default (fritzmg)
#7660 Fix a type error in `CalendarContentVoter` (fritzmg)
#7639 Improve the template DX when overwriting variables (m-vo)
#7626 Improve the VFS extra metadata handling (m-vo)
#7012 Do not redefine existing fragments (bytehead)
#7622 Replace newlines in CSP headers (bytehead)
#7623 Fix an invalid array access in the `Model::cloneOriginal()` method (Toflar)
#7618 Add the missing `root--dark` icon (zoglo)
#7583 Fix tooltips on mobile devices (fritzmg)
#7570 Do not save long file extensions during filesync (fritzmg)
#7555 Use the resource finder in the Twig template locator (aschempp)
#7527 Move fieldset legend padding to button (fritzmg)
#7553 Remove PDF remnants (fritzmg)
#7561 Fix a type error in `NewsContentVoter` (fritzmg)
#7537 Add a null check for a possible empty array (bytehead)

Contao 5.3.15 (2024-09-17)

Security vulnerabilities closed:

Remote command execution through file upload (CVE-2024-45398)
Insert tag injection via canonical URL (CVE-2024-45612)

Contao 5.3.14 (2024-09-12)

Changelog of the fixed issues in Contao 5.3.14:

#7509 Handle string IDs in the article content voter (aschempp)
#7525 Only add the `galleryTpl` field to the legacy gallery element (fritzmg)
#7467 Correctly handle news feed URLs in the page routing listener (leofeyer)
#7513 Fix the parent record loading in the dynamic parent table voter (aschempp)
#7489 Fix the description list markup for `template` templates (fritzmg)
#7484 Fix type error in `downloads` content element (fritzmg)
#7485 Fix the name of symlinked filesystem adapters (fritzmg)
#7477 Fix the line height of the ellipsis containers (leofeyer)
#7472 Consider subfolders and Twig templates within the theme export (zoglo)

Contao 5.3.13 (2024-08-06)

Changelog of the fixed issues in Contao 5.3.13:

#7465 Fix the content element player start time (kllmanu)
#7443 Show a warning if a personal data module allows to change the password (leofeyer)
#7088 Add voters for content elements (aschempp)
#7440 Generate a new session ID after a member has changed their password (leofeyer)
#7235 Allow toggling fieldset states with keyboard actions (A11Y) (zoglo)
#7428 Improve the web worker time limit (ausi)
#7435 Restore the previous messages order in `DC_Table` (fritzmg)
#7439 Use `ERR.submit` in all DC forms (fritzmg)
#7367 Improve the visibility of the `.limit_toggler` in the back end (lukasbableck)
#7416 Encode mailto addresses in the markdown element (Toflar)
#7407 Add the `DataContainer::getActiveRecord()` method (Toflar)
#7422 Prevent endless recursion when copying elements with children (ausi)

Contao 5.3.12 (2024-08-06)

Changelog of the fixed issues in Contao 5.3.12:

#7385 Clone content elements with all data (aschempp)
#7411 Make sure to add the assets/files context to all image paths (leofeyer)
#7397 Use `maxLines: Infinity` to automatically resize the ACE editor (leofeyer)
#7398 Make the theme icons forward compatible (leofeyer)
#7382 Fix the double form submission script (leofeyer)
#7376 Skip database backups if the remaining migrations will not be executed (fritzmg)
#7381 Fix the padding of the main content area on mobile devices (leofeyer)
#7374 Fix the z-index of the limit height toggle (leofeyer)
#7364 Use the modified element when cloning (aschempp)
#7358 Use the widget attributes to generate the DCA row (aschempp)
#7348 Cleanup a leftover service argument (Toflar)
#7343 Do not limit the number of download items (mpitz)
#7327 Add the `:never` return type to methods that never return (aschempp)
#7319 Generate public URIs for automatically mounted adapters replacing symlinks (m-vo)
#7320 Handle `.<ext>.twig` file extensions in DC_Folder (m-vo)

Contao 5.3.11 (2024-06-28)

Changelog of the fixed issues in Contao 5.3.11:

#7315 Fix the priority of the web worker and improve memory handling (Toflar)
#7317 Fix missing submitter in form data (ausi)
#7309 Fix infinite loop in `encore dev --watch` (zoglo)

Contao 5.3.10 (2024-06-25)

Changelog of the fixed issues in Contao 5.3.10:

#7300 Remove two leftover clearing DIVs (leofeyer)
#7293 Prevent double form submission (ausi)
#7294 Fix symlinked file not inside root directory (ausi)
#7292 Evaluate scripts in Ajax form responses (ausi)
#7296 Fix toggling nodes if there is no global operation (leofeyer)
#7291 Fix drag and drop in the file manager (leofeyer)
#7289 Skip sleeping in messenger web worker (ausi)
#7055 Return to the list view after adding items to the clipboard (aschempp)
#7287 Fix missing query parameters in the file insert tag (ausi)
#7283 Use the translator language instead of the request language for the `iflng` and `ifnlng` insert tags (Toflar)
#7282 Check CSRF and private response after the session (ausi)
#7270 Replace non-routable URLs with an empty string for the `{{link*}}` insert tags (fritzmg)
#7268 Initialize the Contao framework when working with opt-in tokens (aschempp)
#7253 Rework the messenger integration (Toflar)
#7262 Remove the process timeout in the `SuperviseWorkersCommand` (md-netdesign)
#6985 Undeprecate using `$model->classes` (aschempp)
#6991 Cache relative paths in the ContaoFilesystemLoader (m-vo)
#7244 Replace insert tags when parsing widget templates (fritzmg)
#7241 Use the original ID for nested fragments if available (aschempp)
#7239 Fix more edge cases in the `HtmlAttributes` class (ausi)
#7228 Overwrite the page metadata before parsing the news article (lukasbableck)
#7237 Fix an endless loop in the `DC_Folder::getParentFilemounts()` method (leofeyer)
#7225 Do not trigger the PHP `header()` deprecation for certain headers (fritzmg)

Contao 5.3.9 (2024-05-24)

Changelog of the fixed issues in Contao 5.3.9:

#7102 Invalidate the pagemounts cache in the back end access voter when duplicating a page (lukasbableck)
#7197 Remove a redundant `strlen()` check (leofeyer)
#7223 Correctly set the status code of the fallback route to 404 (veronikaplenta)
#7214 Make Twig 3.10.2 the minimum requirement (leofeyer)
#7202 Fix the CSS class of legacy templates in new elements and modules (veronikaplenta)

Contao 5.3.8 (2024-05-07)

Changelog of the fixed issues in Contao 5.3.8:

#7195 Handle quoted columns names in the boolean fields migration (ausi)
#7133 Skip permissions checks for child records (aschempp)
#7192 Hide migrated news feeds in the navigation menu (leofeyer)
#7189 Fix the `ParsedSequence::serialize()` method (ausi)
#7186 Allow `contao.insert_tag` tags without method and priority (fritzmg)
#7164 Do not use the deprecated `replaceInsertTags` hook (ausi)
#7175 Check access to `fieldsOfTable` for the file edit operation (aschempp)
#7149 Show all page types in the help wizard (leofeyer)
#7145 Allow hyphens in custom legacy template names (fritzmg)
#7151 Add the component style sheets before the user style sheets (leofeyer)
#7049 Implode arrays recursively when showing undo records (leofeyer)
#7168 Allow to move an error page within its root (aschempp)
#7173 Correctly set the `defer` attribute for combined deferred scripts (ReneLuecking)
#7170 Use the new `onpalette_callback` to unset fields in the file manager (aschempp)
#7165 Fix invalid HTML markup in splash screens (bennyborn)
#7154 Store enum fields in the DCA extractor cache (SeverinGloeckle)
#7153 Fix non-existent "contao.image.image_factory" in FeedItem.php (stefansl)
#7148 Disable the search index listener in the back end (Toflar)
#7144 Fix the PHP subprocess call once again (Toflar)
#7147 Catch the URL generator exception in the news insert tag (qzminski)
#7146 Test the `deserialize` Twig filter (ausi)
#7139 Add a `deserialize` Twig filter (leofeyer)

Contao 5.3.7 (2024-04-19)

Changelog of the fixed issues in Contao 5.3.7:

#7089 Make the member group voter cacheable (aschempp)
#7129 Make the `PhpTemplateProxyNode` class compatible with Twig 3.9 (ausi)
#7130 Fix the elements check in the `sectionwizard.js` script (qzminski)
#7127 Use `PhpSubprocess` instead of `Process` in the `ProcessUtil` class (Toflar)

Contao 5.3.6 (2024-04-17)

Changelog of the fixed issues in Contao 5.3.6:

#7122 Ensure compatibility with Twig 3.9 (leofeyer)
#7112 Handle empty strings in the `StringResolver` class (qzminski)

Contao 5.3.5 (2024-04-16)

Changelog of the fixed issues in Contao 5.3.5:

#7113 Fix the order of the media block in the text element markup (ausi)
#7107 Use Encore to minify the SVG icons (leofeyer)
#7071 Add the missing styles to the new table element (zoglo)
#7106 Enable the `sortAttrs` option in the SVGO configuration (leofeyer)
#7017 Fix the elements check in the `modulewizard.js` script (qzminski)
#7073 Use `display: grid` in the image gallery preview (zoglo)
#7074 Initialize Handorgel on the element (zoglo)
#7081 Add the missing `WysiwygStyleProcessor ` autowiring alias (Toflar)
#7064 Also unset the `disable`, `start` and `stop` fields when an admin edits themselves (aschempp)
#7057 Cache SQL queries in the page type voter (aschempp)
#7046 Fix some edge cases when parsing HTML style attributes (ausi)

Contao 5.3.4 (2024-04-09)