Bug #101570: TYPO3 crashes on unavailable sys_csp_resolution table while csp is enabled - TYPO3 Core - TYPO3 Forge

Actions

Copy link

Bug #101570

closed

TYPO3 crashes on unavailable sys_csp_resolution table while csp is enabled

Added by Daniel Siepmann 9 months ago. Updated 9 months ago.

Status:

Resolved

Priority:

Should have

Assignee:

Daniel Siepmann

Category:

Security

Target version:

Start date:

2023-08-03

Due date:

% Done:

100%

Estimated time:

TYPO3 Version:

PHP Version:

8.2

Tags:

Complexity:

Is Regression:

Sprint Focus:

Description

Reproduce:

Enable CSP feature for backend
Ensure sys_csp_resolution table is missing, e.g. execute drop table sys_csp_resolution
Log into TYPO3 backend

Enable CSP feature for frontend
Ensure sys_csp_resolution table is missing, e.g. execute drop table sys_csp_resolution
Open TYPO3 frontend

Error:

(1/3) #1146 Doctrine\DBAL\Exception\TableNotFoundException

An exception occurred while executing a query: Table 'own_danielsiepmann.sys_csp_resolution' doesn't exist

Triggered by vendor/typo3/cms-core/Classes/Security/ContentSecurityPolicy/Reporting/ResolutionRepository.php line 58 findByScope()

Actions

Copy link

Updated by Gerrit Code Review 9 months ago

Status changed from New to Under Review

Patch set 1 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/80331

Actions

Copy link

Updated by Daniel Siepmann 9 months ago

Subject changed from TYPO3 backend crashes on unavailable sys_csp_resolution table while csp is enabled for backend to TYPO3 crashes on unavailable sys_csp_resolution table while csp is enabled
Description updated (diff)

Actions

Copy link

Updated by Markus Klein 9 months ago

Can you please precise the issue a bit more? How does the situation occur in a normal case (when not removing tables manually)?

Actions

Copy link

Updated by Gerrit Code Review 9 months ago

Patch set 2 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/80331

Actions

Copy link

Updated by Gerrit Code Review 9 months ago

Patch set 3 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/80331

Actions

Copy link

Updated by Christian Kuhn 9 months ago

It primarily happens during core major core updates: BE bricks. The patch comment now says "usually we wouldn't catch this, but in this case it's convenient for more easy ugrades".

Actions

Copy link

Updated by Gerrit Code Review 9 months ago

Patch set 1 for branch 12.4 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/80358

Actions

Copy link