[TYPO3-team-templavoila] FYI: #13180: Sanitize returnUrl

Tolleiv.Nietsch info at tolleiv.de
Fri Jan 8 14:22:04 CET 2010


Am 08.01.2010 12:41, schrieb Steffen Kamper:
> Hi,
>
> FYI: the patch was committed to svn, 1_4 rev 28536 and trunk rev 28537
>
> Bugtracker references:
> http://bugs.typo3.org/view.php?id=13180
>
> Branches:
> trunk, 1_4
>
> To be sure that the returnUrl is local and contains no XSS attack, this
> patch sanitize the returnUrl.
>
> Therefore a new static class is included, as the check has to be
> differentiated for 4.1/4.2/4.3.
>
> vg Steffen

Thanks for taking care of that.

Cheers,
Tolleiv
-- 
Tolleiv Nietsch
www.tolleiv.de - www.aoemedia.de


More information about the TYPO3-team-templavoila mailing list