Merge remote-tracking branch 'main/develop' into epam-4

Author: Andrey Konosov

.htaccess

@@ -65,13 +65,6 @@
     SecFilterScanPOST Off
 </IfModule>
 
-<IfModule mod_headers.c>
-############################################
-## prevent clickjacking
-
-    Header set X-Frame-Options SAMEORIGIN
-</IfModule>
-
 <IfModule mod_deflate.c>
 
 ############################################
@@ -187,4 +180,4 @@
 ## If running in cluster environment, uncomment this
 ## http://developer.yahoo.com/performance/rules.html#etags
 
-    #FileETag none
+    #FileETag none

.travis.yml

@@ -9,6 +9,11 @@ env:
   - TEST_SUITE=integration_integrity
   - TEST_SUITE=static_phpcs
   - TEST_SUITE=static_annotation
+cache:
+  apt: true
+  directories:
+    - $HOME/.composer/cache
+    - $HOME/.cache/bin
 matrix:
   exclude:
     - php: 5.6
@@ -18,6 +23,16 @@ matrix:
 before_install:
   - sudo apt-get update -qq
   - sudo apt-get install -y -qq postfix
+  - sh -c 'if [ "$CASHER_DIR" ]; then
+         if [ -x $HOME/.cache/bin/composer ]; then
+           $HOME/.cache/bin/composer self-update; echo '';
+         else
+           mkdir -p $HOME/.cache/bin;
+           curl --connect-timeout 30 -sS https://getcomposer.org/installer \
+           | php -- --install-dir $HOME/.cache/bin/ --filename composer;
+         fi
+       fi'
+  - export PATH="$HOME/.cache/bin:$PATH"
 before_script:
   # Mock mail
   - sudo service postfix stop
@@ -46,7 +61,7 @@ before_script:
   # Change memory_limit for travis
   - echo 'memory_limit = -1' >> ~/.phpenv/versions/$(phpenv version-name)/etc/conf.d/travis.ini
   - phpenv rehash;
-  - composer install --no-interaction --dev
+  - composer install --no-interaction --prefer-dist
 script:
   # Unit tests
   - sh -c "if [ '$TEST_SUITE' = 'unit' ]; then ./vendor/bin/phpunit -c dev/tests/unit/phpunit.xml.dist; fi"
@@ -59,4 +74,4 @@ script:
   # Static tests [Code Style]
   - sh -c "if [ '$TEST_SUITE' = 'static_phpcs' ]; then cd dev/tests/static; ./../../../vendor/bin/phpunit -c phpunit.xml.dist --filter 'Magento\\\\Test\\\\Php\\\\LiveCodeTest::testCodeStyle'; fi"
   # Static tests [Code Style]
-  - sh -c "if [ '$TEST_SUITE' = 'static_annotation' ]; then cd dev/tests/static; ./../../../vendor/bin/phpunit -c phpunit.xml.dist --filter 'Magento\\\\Test\\\\Php\\\\LiveCodeTest::testAnnotationStandard'; fi"
+  - sh -c "if [ '$TEST_SUITE' = 'static_annotation' ]; then cd dev/tests/static; ./../../../vendor/bin/phpunit -c phpunit.xml.dist --filter 'Magento\\\\Test\\\\Php\\\\LiveCodeTest::testAnnotationStandard'; fi"

CHANGELOG.md

@@ -1,3 +1,59 @@
+0.74.0-beta15
+=============
+* Framework Improvements:
+  * Introduced Drag&Drop Columns functionality in scope of Enhanced Data Grids on CMS 
+  * Improved Column Actions functionality in scope of Enhanced Data Grids on CMS
+  * Adapted Payment\Gateway framework to client requirements
+  * Removed 'field_expr' option from filters
+  * Added product details renderer list support on Catalog category page
+  * Security: Clickjacking solution - introduced X-Frame-Options
+  * Gift message was moved to shopping cart
+  * Improved simple products export
+  * Separated import of advanced prices
+  * Changed 'updated_at' filter for products export
+  * Added the link with sample product import file
+  * Cleared and improved the  messages and names in different modules
+  * Added mbstring extension as a requirement
+* Tests
+  * Increased test coverage for the CatalogInventory, Email and Newsletter modules
+  * Added wait to form element before filling a value in functional tests
+  * Increased test coverage of Reports module
+  * Functional tests were fixed and maintained
+* Fixed Bugs:
+  * Fixed loading of images from database media storage with separate connection
+  * Eliminated duplication of ComposerInformation class in Magento Framework and Setup Application
+  * Fixed an error message format inconsistency in theme uninstall command
+  * Fixed an issue where incorrect action name checks led to customer info leak
+  * Fixed an issue where /magento_version exposed too detailed version information
+  * Fixed an issue where generate data failed when table prefix exceeded length of 5
+  * Fixed an issue where product options were displayed not styled on "Edit Product from Wishlist" Frontend page
+  * Fixed an issue where payment information was displayed broken on "Order Management" Backend page forms
+  * Fixed an issue where admin panel pop-ups contained lots of empty space
+  * Fixed an issue where Customer account form was displayed broken
+  * Fixed an issue where all text fields were invisible in Backend "Add New Customer" page
+  * Fixed XSS issues in Magento - wishlist sending
+  * Fixed an issue where it was unable to specify all values of "Multiple Select" Product Custom Option to purchase
+  * Fixed an issue where setting a permission for 'ALL Groups' produced an error if other permissions existed
+  * Fixed an issue where stock was not updated when Stock indexer was in Update on Schedule mode
+  * Fixed an issue where it was not possible to update stock items of product using API service
+  * Fixed an issue where Customer review changes in backend were not reflected in frontend until cache was cleared
+  * Fixed an issue where cache was not updated when changing stock status using mass action
+  * Fixed an issue where Stock Items API service to return low stock information did not return correct results
+  * Fixed an issue where found records in global search in Backend could not be selected via keyboard
+  * Fixed an issue where Category menu items went out of screen when page side was reached
+  * Fixed an issue where subcategories in menu were shown instantly when user moved mouse quickly
+  * Fixed an issue where popup header was our of window range while creating group product
+  * Fixed an issue where region field was absent in customer address form on backend for "United Kingdom" country
+  * Fixed an ability to edit the Order from Admin panel
+  * Fixed an issue where email could not be retrieved from \Magento\Quote\Api\Data\AddressInterface after adding an address on OnePageCheckout
+  * Fixed an issue where Products were not displayed correctly across all storeviews of the catalog
+* Github Issues:
+  * [#1378](https://github.com/magento/magento2/issues/1319) -- jquery-cookie.js is not published by deploy tool in production mode
+  * [#1314](https://github.com/magento/magento2/pull/1314)-- Fixed a bug where type attribute for tag button was missing
+  * [#1354](https://github.com/magento/magento2/pull/1354) -- Add gitter.im badge to ReadMe.
+  * [#1378](https://github.com/magento/magento2/pull/1378) -- Fix incorrect js filename
+
+
 0.74.0-beta14
 =============
 * Framework improvements:

README.md

@@ -1,4 +1,5 @@
 [![Build Status](https://travis-ci.org/magento/magento2.svg?branch=master)](https://travis-ci.org/magento/magento2)
+[![Gitter](https://badges.gitter.im/Join%20Chat.svg)](https://gitter.im/magento/magento2?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge)
 <h2>Welcome</h2>
 Welcome to Magento 2 installation! We're glad you chose to install Magento 2, a cutting edge, feature-rich eCommerce solution that gets results.
 

app/code/Magento/AdminNotification/Block/Window.php

@@ -76,7 +76,7 @@ protected function _toHtml()
         if ($this->canShow()) {
             $this->setHeaderText($this->escapeHtml(__('Incoming Message')));
             $this->setCloseText($this->escapeHtml(__('close')));
-            $this->setReadDetailsText($this->escapeHtml(__('Read details')));
+            $this->setReadDetailsText($this->escapeHtml(__('Read Details')));
             $this->setNoticeMessageText($this->escapeHtml($this->_getLatestItem()->getTitle()));
             $this->setNoticeMessageUrl($this->escapeUrl($this->_getLatestItem()->getUrl()));
             $this->setSeverityText('critical');

app/code/Magento/AdminNotification/Controller/Adminhtml/Notification.php

@@ -14,26 +14,6 @@ class Notification extends \Magento\Backend\App\AbstractAction
      */
     protected function _isAllowed()
     {
-        switch ($this->getRequest()->getActionName()) {
-            case 'markAsRead':
-                $acl = 'Magento_AdminNotification::mark_as_read';
-                break;
-
-            case 'massMarkAsRead':
-                $acl = 'Magento_AdminNotification::mark_as_read';
-                break;
-
-            case 'remove':
-                $acl = 'Magento_AdminNotification::adminnotification_remove';
-                break;
-
-            case 'massRemove':
-                $acl = 'Magento_AdminNotification::adminnotification_remove';
-                break;
-
-            default:
-                $acl = 'Magento_AdminNotification::show_list';
-        }
-        return $this->_authorization->isAllowed($acl);
+        return $this->_authorization->isAllowed('Magento_AdminNotification::show_list');
     }
 }

app/code/Magento/AdminNotification/Controller/Adminhtml/Notification/MarkAsRead.php

@@ -36,4 +36,12 @@ public function execute()
         }
         $this->_redirect('adminhtml/*/');
     }
+
+    /**
+     * @return bool
+     */
+    protected function _isAllowed()
+    {
+        return $this->_authorization->isAllowed('Magento_AdminNotification::mark_as_read');
+    }
 }

app/code/Magento/AdminNotification/Controller/Adminhtml/Notification/MassMarkAsRead.php

@@ -38,4 +38,12 @@ public function execute()
         }
         $this->_redirect('adminhtml/*/');
     }
+
+    /**
+     * @return bool
+     */
+    protected function _isAllowed()
+    {
+        return $this->_authorization->isAllowed('Magento_AdminNotification::mark_as_read');
+    }
 }

app/code/Magento/AdminNotification/Controller/Adminhtml/Notification/MassRemove.php

@@ -33,4 +33,12 @@ public function execute()
         }
         $this->getResponse()->setRedirect($this->_redirect->getRedirectUrl($this->getUrl('*')));
     }
+
+    /**
+     * @return bool
+     */
+    protected function _isAllowed()
+    {
+        return $this->_authorization->isAllowed('Magento_AdminNotification::adminnotification_remove');
+    }
 }

app/code/Magento/AdminNotification/Controller/Adminhtml/Notification/Remove.php

@@ -35,4 +35,12 @@ public function execute()
         }
         $this->_redirect('adminhtml/*/');
     }
+
+    /**
+     * @return bool
+     */
+    protected function _isAllowed()
+    {
+        return $this->_authorization->isAllowed('Magento_AdminNotification::adminnotification_remove');
+    }
 }