[TYPO3-core] RFC #12467: TYPO3 Inline User Manual is broken

[Rupert Germann]

Hi,

this is a SVN patch request.

Type: Bugfix, Follow-up

Bugtracker references:
http://bugs.typo3.org/view.php?id=12467

Branches: Trunk, 4_2, 4_1

Problem:
the section links in the TYPO3 Inline User Manual only reload the page 
instead of opening the wanted help section.
something similar happens when opening the inline help in tceforms: the 
link "see full description of table" leads only the the overview (TYPO3 
Inline User Manual) with the not working links.
Reason for this is the url sanitizing in view_help.php (line 151) which 
sees the asterisk as forbidden character and so it unsets $_GET[tfID]. 
the urls normally look like this: typo3/view_help.php?tfID=_MOD_user_setup.*

Solution:
either add the asterisk to the regex or use the api function 
t3lib_div::sanitizeBackendUrl() (and it it to the regex there)

Info:
Since the security fix in view_help.php was applied to all supported 
branches this fix has to be applied to all branches, too.



greets
rupert

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 12467.diff
Type: text/x-diff
Size: 476 bytes
Desc: not available
URL: <http://lists.typo3.org/pipermail/typo3-team-core/attachments/20091104/f5808131/attachment.diff>