[TYPO3-ttnews] Extra characters in URL ?L=/../..

[Georg Ringer]

Hi,

Am 16.02.2011 18:33, schrieb Lily Wong:
> http://www.mysite.com/video/?L=/../../../../../../../../../etc/passwd\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\0

usually it is correct to ask the security team but this is no security 
issue but a misconfiguration.

Set something like config.linkVars = L(int)
or = L(1-3)

otherwise any parameter is cached

Georg