[TYPO3-english] config.baseURL match

[Victor Livakovsky]

Hi.

>> So, the solution should be this:
>> baseURL.data = getIndpEnv : HTTP_HOST
>>
>> Cheers.
>
> There are two problems with this:
>
> 1. config.baseURL does NOT have .stdWrap, so the above code simply
> will not work [1], and

You're right - I didn't look at TSref before answer. It has 'string' type.


> 2. setting config.baseURL on the basis of the request may cause
> security problems [2]

Mmm... Does it?
xxx.data = getIndpEnv : HTTP_HOST does same as 
t3lib_div::getIndpEnv('HTTP_HOST')
So,  t3lib_div::getIndpEnv('HTTP_HOST') also non-secure way to achieve 
server's host?

> [1] 
> http://typo3.org/documentation/document-library/references/doc_core_tsref/4.2.0/view/1/7/#id4213956
> [2] 
> http://www.justinml.com/mailing-lists/cms-typo3/typo3-dev-mailing-list/subject/mailing/typo3-dev-configbaseurl-lt-basetag-and-security/

Regards.