[TYPO3-core] RFC #12990 : referrer in felogin form is not encoded correctly
    Helmut Hummel 
    helmut at typo3.org
       
    Sun May 16 12:48:25 CEST 2010
    
    
  
Hi,
On 16.05.10 10:25, Jigal van Hemert wrote:
> This is a SVN patch request.
> 
> Type: bugfix
> 
> Bugtracker references:
> http://bugs.typo3.org/view.php?id=12990
> 
> 
> Branches:
> Trunk
4-3 is also affected.
> Problem:
> The referrer URL is urlencoded in the login form. The browser must
> urlencode the data, but data in the value attribute of an input element
> should be processed with htmlspecialchars().
> 
> Solution:
> Replace rawurlencode() with htmlspecialchars()
+1 by reading. A nobrainer imho
Helmut
    
    
More information about the TYPO3-team-core
mailing list