[TYPO3-mvc] New feature:
Jochen Rau
jochen.rau at typoplanet.de
Wed Mar 31 09:54:00 CEST 2010
Hi Peter.
On 31.03.10 08:15, Peter Niederlag wrote:
>> But maybe it can go into Extbase 1.1 (shipped with 4.3.3).
>> What's you opinion about the feature and it's release plan?
>
> IMO very important and should be released ASAP.
>
> While it changes the behaviour IMO it could even be considered a
> security fix. Exceptions should not be shown on a production website.
To clarify the things a little bit: In a TYPO3 environment set up
correctly, no exception messages are shown in the FE. Whether Extbase is
used or not. But IMO there is no proper mechanism to catch an exception
thrown inside an extension at the "borders" of the extension by now.
This leads to a blank page if an exception is thrown inside an
extension. The patch allows to let the page be rendered. Only the plugin
content will be left empty.
The common option in TYPO3 is to catch the Exception only on top level
and hand it over to an appropriate handler.
So, no security issue but a new feature.
Regards
Jochen
More information about the TYPO3-project-typo3v4mvc
mailing list