[TYPO3-english] CoolURI with unwanted .html

Jan Bednarik info at bednarik.org
Wed May 11 15:09:40 CEST 2016


Hi,

use

config.linkVars = L(0-9)

Otherwise anything that will appear in L param will get to URL and it 
vounerable to hacking.

Jan

Dne 11.05.2016 v 14:12 Robert Hafenried napsal(a):
> Hi,
>
> I'm using TYPO3 7.6.6 und coolURI v. 1.1.2. I have only one language
> with 'sys_language_uid = 0'.
>
> For a while I have the problem with unwanted .html. Here is an example.
>
> http://www.domain.de/xxx/page.html?L=.html.html.html
>
> It only happens sometimes.
> Thanks for any help.
>
> Robert



More information about the TYPO3-english mailing list