[TYPO3-dev] A ticking ticking timebomb with libxml update to 2.7.1?

David Bruchmann typo3-dev at bruchmann-web.de
Tue Aug 18 13:30:26 CEST 2009


----- Ursprüngliche Nachricht -----
Von:        Lee Perry <leeperry at slack.de>
Gesendet:   Dienstag, 18. August 2009 12:59:40
An:         typo3-dev at lists.netfielders.de
CC:
Betreff:    [TYPO3-dev] A ticking ticking timebomb with libxml update to 
2.7.1?
> Heya,
> 
> there is a known bug with libxml 2.7.1 - stripped brackets from XML 
> without CDATA: http://bugs.typo3.org/view.php?id=9359.
> 
> The patches, finding there, are integrated in the current TYPO3-Version 
> - so you can force CDATA inside flexforms by:
> [BE][flexformForceCDATA] = 1
> So this should be the solution for new TYPO3 installations.
> 
> But what about the thousands existing TYPO3 installations without 
> "[BE][flexformForceCDATA] = 1" and a libxml version below 2.7.1 - there 
> could be many many flexforms in the database (tt_content) without CDATA. 
> And when there will be an update of the libxml to version 2.7.1 all 
> flexforms will be parsed wrong (the brackets will be stripped).
> 
> So at this point the solution would be a downgrade to libxml 2.6.x or 
> you have to add the CDATA inside the database in all flexforms!
> 
> Is it right?
> If "YES" than this is a ticking ticking time bomb. If "NOT" than I will 
> calm down ...
> 
> 
> Please give me some response :)
> 


Hi,

I haven't tested it but first the patch from Steffen was commited 
already in march and should be included in TYPO3 v.4.28 and second 
concerning php there was also a patched version released in january 
already so the patch should be included in Version 5.10.

On both pages the patch was closed each with an own solution.

Best Regards
David




More information about the TYPO3-dev mailing list