[TYPO3-dev] config.baseURL, lt_basetag and security

[Oliver Klee]

Hi Ernesto,

thanks for the explanation.

Ernesto, Marc, generally please do not discuss possible security
vulnerabilities of extensions or the Core in public newsgroups, forums
or mailing lists. Instead, please notify the security team at security
AT typo3 DOT org.

Concerning lt_basetag, we now have a ticket for this in the security
team and will decide whether any action is needed.

Thanks,


Oliver