Project

General

Profile

Actions
Copy link

Bug #83762

closed

File storage with invalid (upwards folder "../") path can be saved as 'absolute path', but then not edited anymore due to error message. Unsolvable situation.

Added by Leonie Philine over 6 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Must have
Assignee:
-
Category:
File Abstraction Layer (FAL)
Target version:
next-patchlevel
Start date:
2018-02-02
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
8
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

Using TYPO3 8.7 LTS.

- I edited a file storage with absolute path.
- changed path to relative.
- entered "../somefolder" for a folder outside the web root.
- saved the file storage
- an error occurs: "File ../somefolder is not valid (".." and "//" is not allowed in path). "
- went back to the list module
- clicked to edit the file storage
- same error appears again -> there is no way to get to see the editing form for this record again!

-> file storage was saved with invalid path ==> fatally missing validation before saving!

-> now I cannot fix the invalid path, because the error is shown instead of the record editing form for the file storage.

-> hopeless situation, only direct DB access can come to the rescue.

Actions
Copy link

Also available in: Atom PDF