[TYPO3-dev] Request: mark csh_* as obsolete

Marcus Krause marcus#exp2009 at t3sec.info
Thu Feb 19 09:21:43 CET 2009


Michael Stucki schrieb am 02/18/2009 11:24 PM Uhr:
> Hi Steffen,
> 
>> delete will be much work - in TER all versions of extensions are still
>> there, and not easy to detect.
>> There is a possibility in DB which is used by security team to mark
>> them, so they don't appear on t3.org or in EM when search for, that's
>> the way i would suggest.
> 
> Good point!
> 
> Well I just received an offer from Xavier Perseguers who offers to do
> the updates.
> 
> So now we can choose:
> a) mark the extensions as insecure, so they don't appear anymore (and
>    provide t3x backups at some place that Google knows)
> b) upload ~40 new versions

b)

AFAIK a) has always been used in regards to extension security;
therefore I'd like to stick to this and not to start a misuse now


Marcus.





More information about the TYPO3-dev mailing list