<commit_before># CHANGELOG FOR `1.3.X`

## v1.3.14 (2019-12-03)

### CVE-2019-16768: Internal exception message exposure in login action.

#### Details

Exception messages from internal exceptions (like database exception) are wrapped by 
`\Symfony\Component\Security\Core\Exception\AuthenticationServiceException` and propagated through the system to UI. 
Therefore, some internal system information may leak and be visible to the customer.

A validation message with the exception details will be presented to the user when one will try to log into the shop.

#### Workaround

This release patches the reported vulnerability. The `src/Sylius/Bundle/UiBundle/Resources/views/Security/_login.html.twig` 
file from Sylius should be overridden and `{{ messages.error(last_error.message) }}` changed to `{{ messages.error(last_error.messageKey) }}`.

## v1.3.13 (2019-05-29)

#### Details

- [#10228](https://github.com/Sylius/Sylius/issues/10228) Improve taxon UI ([@kulczy](https://github.com/kulczy), [@Zales0123](https://github.com/Zales0123))
- [#10290](https://github.com/Sylius/Sylius/issues/10290) [Docs] Update "Customizing Repositories" ([@AdamKasp](https://github.com/AdamKasp))
- [#10299](https://github.com/Sylius/Sylius/issues/10299) [Docs] Update "Customizing Models" ([@Tomanhez](https://github.com/Tomanhez))
- [#10314](https://github.com/Sylius/Sylius/issues/10314) [Docs] Update "Customizing Forms" ([@Tomanhez](https://github.com/Tomanhez))
- [#10315](https://github.com/Sylius/Sylius/issues/10315) [Docs] Update "Customizing Factories" ([@Tomanhez](https://github.com/Tomanhez))
- [#10330](https://github.com/Sylius/Sylius/issues/10330) [Docs] Update "Customizing Controllers" ([@Tomanhez](https://github.com/Tomanhez))
- [#10344](https://github.com/Sylius/Sylius/issues/10344) [Docs] Update "Customizing Templates" ([@Tomanhez](https://github.com/Tomanhez))
- [#10348](https://github.com/Sylius/Sylius/issues/10348) [Docs] Update "customizing menus" ([@AdamKasp](https://github.com/AdamKasp))
- [#10349](https://github.com/Sylius/Sylius/issues/10349) [Docs] Update "Customizing Validation" ([@AdamKasp](https://github.com/AdamKasp))
- [#10351](https://github.com/Sylius/Sylius/issues/10351) [Docs] Update "Customizing translations" ([@AdamKasp](https://github.com/AdamKasp))
- [#10353](https://github.com/Sylius/Sylius/issues/10353) [Docs] Update "Customization flashes " ([@AdamKasp](https://github.com/AdamKasp))
- [#10359](https://github.com/Sylius/Sylius/issues/10359) [Docs] Update "Customizing Grids" ([@Tomanhez](https://github.com/Tomanhez))
- [#10363](https://github.com/Sylius/Sylius/issues/10363) [Behat][Shop] Wait for province form loading ([@Zales0123](https://github.com/Zales0123))
- [#10364](https://github.com/Sylius/Sylius/issues/10364) As an Administrator, I want always to have proper option values selected while editing a product variant ([@Tomanhez](https://github.com/Tomanhez), [@monro93](https://github.com/monro93))
- [#10365](https://github.com/Sylius/Sylius/issues/10365) [Admin][Promotion] Fix removing taxon used in promotion rule ([@GSadee](https://github.com/GSadee))
- [#10372](https://github.com/Sylius/Sylius/issues/10372) Image display in edit form ([@AdamKasp](https://github.com/AdamKasp))
- [#10375](https://github.com/Sylius/Sylius/issues/10375) [Docs] Update "Customizing State Machine" ([@AdamKasp](https://github.com/AdamKasp))
- [#10386](https://github.com/Sylius/Sylius/issues/10386) [Build Fix][Behat] Change scenarios to @javascript due to taxon tree changes ([@Zales0123](https://github.com/Zales0123))
- [#10394](https://github.com/Sylius/Sylius/issues/10394) Fix error caused by the taxon tree ([@kulczy](https://github.com/kulczy))
- [#10407](https://github.com/Sylius/Sylius/issues/10407) Bump the Sylius release versions in docs ([@teohhanhui](https://github.com/teohhanhui))
- [#10414](https://github.com/Sylius/Sylius/issues/10414) Use HTTPS links when possible ([@javiereguiluz](https://github.com/javiereguiluz))
<commit_msg>Generate changelog for v1.3.14 - improved<commit_after># CHANGELOG FOR `1.3.X`

## v1.3.14 (2019-12-03)

#### CVE-2019-16768: Internal exception message exposure in login action.

**Details:**

Exception messages from internal exceptions (like database exception) are wrapped by 
`\Symfony\Component\Security\Core\Exception\AuthenticationServiceException` and propagated through the system to UI. 
Therefore, some internal system information may leak and be visible to the customer.

A validation message with the exception details will be presented to the user when one will try to log into the shop.

**Solution:**

This release patches the reported vulnerability. The `src/Sylius/Bundle/UiBundle/Resources/views/Security/_login.html.twig` 
file from Sylius should be overridden and `{{ messages.error(last_error.message) }}` changed to `{{ messages.error(last_error.messageKey) }}`.

## v1.3.13 (2019-05-29)

#### Details

- [#10228](https://github.com/Sylius/Sylius/issues/10228) Improve taxon UI ([@kulczy](https://github.com/kulczy), [@Zales0123](https://github.com/Zales0123))
- [#10290](https://github.com/Sylius/Sylius/issues/10290) [Docs] Update "Customizing Repositories" ([@AdamKasp](https://github.com/AdamKasp))
- [#10299](https://github.com/Sylius/Sylius/issues/10299) [Docs] Update "Customizing Models" ([@Tomanhez](https://github.com/Tomanhez))
- [#10314](https://github.com/Sylius/Sylius/issues/10314) [Docs] Update "Customizing Forms" ([@Tomanhez](https://github.com/Tomanhez))
- [#10315](https://github.com/Sylius/Sylius/issues/10315) [Docs] Update "Customizing Factories" ([@Tomanhez](https://github.com/Tomanhez))
- [#10330](https://github.com/Sylius/Sylius/issues/10330) [Docs] Update "Customizing Controllers" ([@Tomanhez](https://github.com/Tomanhez))
- [#10344](https://github.com/Sylius/Sylius/issues/10344) [Docs] Update "Customizing Templates" ([@Tomanhez](https://github.com/Tomanhez))
- [#10348](https://github.com/Sylius/Sylius/issues/10348) [Docs] Update "customizing menus" ([@AdamKasp](https://github.com/AdamKasp))
- [#10349](https://github.com/Sylius/Sylius/issues/10349) [Docs] Update "Customizing Validation" ([@AdamKasp](https://github.com/AdamKasp))
- [#10351](https://github.com/Sylius/Sylius/issues/10351) [Docs] Update "Customizing translations" ([@AdamKasp](https://github.com/AdamKasp))
- [#10353](https://github.com/Sylius/Sylius/issues/10353) [Docs] Update "Customization flashes " ([@AdamKasp](https://github.com/AdamKasp))
- [#10359](https://github.com/Sylius/Sylius/issues/10359) [Docs] Update "Customizing Grids" ([@Tomanhez](https://github.com/Tomanhez))
- [#10363](https://github.com/Sylius/Sylius/issues/10363) [Behat][Shop] Wait for province form loading ([@Zales0123](https://github.com/Zales0123))
- [#10364](https://github.com/Sylius/Sylius/issues/10364) As an Administrator, I want always to have proper option values selected while editing a product variant ([@Tomanhez](https://github.com/Tomanhez), [@monro93](https://github.com/monro93))
- [#10365](https://github.com/Sylius/Sylius/issues/10365) [Admin][Promotion] Fix removing taxon used in promotion rule ([@GSadee](https://github.com/GSadee))
- [#10372](https://github.com/Sylius/Sylius/issues/10372) Image display in edit form ([@AdamKasp](https://github.com/AdamKasp))
- [#10375](https://github.com/Sylius/Sylius/issues/10375) [Docs] Update "Customizing State Machine" ([@AdamKasp](https://github.com/AdamKasp))
- [#10386](https://github.com/Sylius/Sylius/issues/10386) [Build Fix][Behat] Change scenarios to @javascript due to taxon tree changes ([@Zales0123](https://github.com/Zales0123))
- [#10394](https://github.com/Sylius/Sylius/issues/10394) Fix error caused by the taxon tree ([@kulczy](https://github.com/kulczy))
- [#10407](https://github.com/Sylius/Sylius/issues/10407) Bump the Sylius release versions in docs ([@teohhanhui](https://github.com/teohhanhui))
- [#10414](https://github.com/Sylius/Sylius/issues/10414) Use HTTPS links when possible ([@javiereguiluz](https://github.com/javiereguiluz))

{'fraction_non_alphanumeric': 0.18000746918959293, 'fraction_numerical': 0.06846757126851737, 'mean_word_length': 5.700583819849875, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 88, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '715201', 'n_tokens_mistral': 3208, 'n_tokens_neox': 2747, 'n_words': 512}