[TYPO3-core] RFC #13858: IS cannot not index files if absRefPrefix is set and indexExternalURLs is not

[Dmitry Dulepov]

Hi!

Christian Kuhn wrote:
> Still not perfect, now file-links without leading / are not detected
> anymore if absRefPrefix is not set.
> 
> BTW: If links contain '../', they won't survive the sanitizing later on
> in the code, so no way to index arbitrary files in the system ;)

Here is v3, which (1) fixes relative paths, (2) resolves backpaths, (3)
adds phpUnit tests for easier testing.

-- 
Dmitry Dulepov
TYPO3 expert / TYPO3 security team member
Read more @ http://dmitry-dulepov.com/
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: 13858_v3.diff
URL: <http://lists.typo3.org/pipermail/typo3-team-core/attachments/20100419/2c0e4ea2/attachment.txt>