[TYPO3-dev] disableNoCacheParameter=1 can substitutes page?
    Vladimir Podkovanov 
    admin at sitesfactory.ru
       
    Sun Dec 20 22:10:40 CET 2009
    
    
  
Popy wrote:
> You're right : http://bugs.typo3.org/view.php?id=5531
> 
Thank you for the link.
I got you point there, however if disableNoCacheParameter = 0 then 
plugin can call function tslib_fe::reqCHash() and caching will switch 
off if cHash absent.
But it is not the case when disableNoCacheParameter = 1 - the page will 
be cached anyways. And I think it even leads to security problems in 
some cases, as anybody can do spoofing by removing cHash and thus 
getting wrong page cached.
Fast workaround would be not to let user set disableNoCacheParameter 
without setting pageNotFoundOnCHashError at the same time.
-- 
-rgds-
Vladimir
    
    
More information about the TYPO3-dev
mailing list