[TYPO3-mvc] Find object properties, only using TypoScript

[Xavier Perseguers]

Hi,

> thanks for that comment. But as I see in the source code, uidInList is
> handled with t3lib_div::intExplode() internally. So in my opinion it's
> safe enogh. Or am I wrong?

Simple rule I suggest is to never trust a later, imbricated, part of the
code to check for validity (moreover if it's not yours as if ever it
changes, you may have security issue after a refactoring) if you can
easily do it upfront.

Kind regards

-- 
Xavier Perseguers
Release Manager TYPO3 4.6

TYPO3 .... inspiring people to share!
Get involved: http://typo3.org