[TYPO3-mvc] New feature:

Jochen Rau jochen.rau at typoplanet.de
Wed Mar 31 09:54:00 CEST 2010


Hi Peter.

On 31.03.10 08:15, Peter Niederlag wrote:
>> But maybe it can go into Extbase 1.1 (shipped with 4.3.3).
>> What's you opinion about the feature and it's release plan?
>
> IMO very important and should be released ASAP.
>
> While it changes the behaviour IMO it could even be considered a
> security fix. Exceptions should not be shown on a production website.

To clarify the things a little bit: In a TYPO3 environment set up 
correctly, no exception messages are shown in the FE. Whether Extbase is 
used or not. But IMO there is no proper mechanism to catch an exception 
thrown inside an extension at the "borders" of the extension by now. 
This leads to a blank page if an exception is thrown inside an 
extension. The patch allows to let the page be rendered. Only the plugin 
content will be left empty.

The common option in TYPO3 is to catch the Exception only on top level 
and hand it over to an appropriate handler.

So, no security issue but a new feature.

Regards
Jochen


More information about the TYPO3-project-typo3v4mvc mailing list