Feature #98227
open
Form definition import/export
0%
Description
Typo3 does allow the download of .form.yaml files from the form_definitions folder via the file list, but not their upload.
Therefore, an editor cannot copy a complex form to another site without having access to the file system via ssh/ftp.
This is why I suggest an import/export feature for the forms. This would allow editors easily to copy forms between multiple sites.
Updated by Oliver Hader over 1 year ago
The reason of denying uploads of form definitions (.form.yaml) by regular editors is due to https://typo3.org/security/advisory/typo3-core-sa-2018-003 - especially form finishers allowed to execute arbitrary changes.
Assuming the form parts of a form definition is safe, it might be possible to upload/adjust .form.yaml files directly, in case they don't define any finisher processing.
Updated by Oliver Hader over 1 year ago
- Subject changed from From import/export to Form definition import/export