[TYPO3-mvc] New feature:
Martin Kutschker
masi-no at spam-typo3.org
Tue Mar 30 21:23:21 CEST 2010
Jochen Rau schrieb:
> Hi.
>
> Since r2144 there is a new feature in extbase.
>
> [!!!][+FEATURE] Extbase: Implemented the possibility to set the context
> extbase extensions are running in. Default is "Production". You can set
> the context in the .htaccess file e.g. by "SetEnv EXTBASE_CONTEXT
> Development".
I've been told that using the environment as input parameter is a dangerous thing. And I agree
because the environment could be altered by an attacker. Perhaps this is not so dangerous in a web
context (AFAIK Apache won't pass all of its environment on, so only the ones in configured in the
Apache files will be used), but for me it's not the best solution for CLIs.
> What's you opinion about the feature and it's release plan?
THe feature itself is good. As for 4.3, I don't think it's up to us but the release manager if
features may go in. Personally I think it won't matter much as no PHP code (eg another extension)
will have to rely on this new feature.
Masi
More information about the TYPO3-project-typo3v4mvc
mailing list