[TYPO3-english] Page title with GPvar

[Dmitry Dulepov]

Hi!

Tobias Dörner wrote:
> i have a problem and i hope, anybody could help me with it. i want to set a
> dynamic title given from keywords. i have already tried in different ways
> with GPvars but it didnt work. description an keywords were no problem but
> this f*** title now engaged me for five hours. 
> one example was 
>  headerData.5 = TEXT
> 
>   headerData.5.data.field = {GPvar:tx_myextension_pi1[keyword]} 
> 
>   headerData.5.dataWrap = <title> | </title> 

Next somebody calls your page with some <script>...</script> as a
parameter, this gets cached and you get a very nice XSS...

-- 
Dmitry Dulepov
TYPO3 core&security teams member
Twitter: http://twitter.com/dmitryd
Read more @ http://dmitry-dulepov.com/