[TYPO3-english] "com_simpledownload"??

Jigal van Hemert jigal.van.hemert at typo3.org
Wed Feb 26 09:16:42 CET 2014


Hi,

On 25-2-2014 22:19, Axel Joensson wrote:
> This is however just a workaround, an extension like sr_language_menu
> must not be susceptible to integrating manipulated strings into internal
> URLs:

It's very difficult to distinguish between URL parameters which are part 
of TYPO3 and those which are invented by visitors.
On one hand everybody expects that the current parameters of a page 
which are necessary to build the content are preserved while switching 
languages. On the other hand you expect that no other parameters are 
included. How is sr_language_menu supposed to known which parameters are 
valid and which are added by a visitor?

sr_language_menu chose for the option to exclude specific parameters 
(there is a configuration setting for that) and include everything else.
Another approach would be to only include specific parameters. That 
would mean that if you install extension "XYZ" you would need to add a 
list of parameters used by that extension to the configuration of the 
language menu.

-- 
Jigal van Hemert
TYPO3 CMS Active Contributor

TYPO3 .... inspiring people to share!
Get involved: typo3.org


More information about the TYPO3-english mailing list