CoreCommunity ExtensionsIncubatorDistributionsTYPO3 4.5 ProjectsTYPO3 4.7 ProjectsTYPO3 6.0 ProjectsTYPO3 6.1 ProjectsTYPO3 6.2 Projects (+)

Bug #7815

Code injection possible in Search field

Added by Michael Telgkamp about 3 years ago. Updated over 2 years ago.

Status:Resolved Start date:2010-05-18
Priority:Must have Due date:
Assignee:Ingo Renner % Done:

100%

Category:Frontend Plugins
Target version:1.1
TYPO3 Version: Has patch:
PHP Version: Tags:
Votes: 0

Description

When using quotes in the search field it is possible to insert HTML to the page.

Example search:

"></div><h1>Code injection</h1><hr class="ci

http://www.typo3-solr.com/en/search/?tx_solr[q]=%22%3E%3C%2Fdiv%3E%3Ch1%3ECode+injection%3C%2Fh1%3E%3Chr+class%3D%22ci

FIX: quotes should be replaced by "e;


Related issues

related to Apache Solr for TYPO3 CMS - Bug #8036: UTF8 chars in search string are not displayed correct in ... Resolved 2010-06-02

Associated revisions

Revision 33513
Added by Ingo Renner about 3 years ago

Fixed issue #7815: Code injection possible in Search field

Revision 33513
Added by Ingo Renner about 3 years ago

Fixed issue #7815: Code injection possible in Search field

History

Updated by Ingo Renner about 3 years ago

  • Category set to Frontend Plugins
  • Status changed from New to Resolved
  • Assignee set to Ingo Renner
  • Target version set to 1.1
  • % Done changed from 0 to 100

resolved by adding htmlentities() with ENT_QUOTES option, t3lib_div::removeXSS() was already in place though, so that no harmful HTML could be inserted.

Also available in: Atom PDF