TYPO3 Forge

2024-04-25

11:07 TYPO3 Core Task #103722: Detected vulnerability with package 'enshrined/svg-sanitize'

Trying to reproduce that with DependencyTrack and PURL @pkg:composer/enshrined/svg-sanitize@0.15.4@ it get
* a vul... Oliver Hader

10:10 TYPO3 Core Task #103722: Detected vulnerability with package 'enshrined/svg-sanitize'

https://github.com/darylldoyle/svg-sanitizer/security/advisories/GHSA-xrqq-wqh4-5hg2 is maintained only by the packag... Oliver Hader

09:30 TYPO3 Core Task #103722: Detected vulnerability with package 'enshrined/svg-sanitize'

https://github.com/darylldoyle/svg-sanitizer/issues/88 provides more context on the rejected CVE-2023-28426 → v0.15.4... Oliver Hader

09:22 TYPO3 Core Task #103722: Detected vulnerability with package 'enshrined/svg-sanitize'

Lars Tode wrote:
> The currently use of package @enshrined/svg-sanitize@ with version constrain @^0.15.4@ increase t... Oliver Hader

2024-04-23

11:20 TYPO3 Core Revision f5bc5558: [BUGFIX] Avoid mapping route values that are out of scope

Given a static route argument mapper is used - for instance one
that allows values in the range of 1 to 100 - then ge... Oliver Hader

11:15 TYPO3 Core Bug #103400 (Resolved): Avoid mapping route values that are out of scope

Applied in changeset commit:471a83bc74270269e64d5e44096f2617a59f7076. Oliver Hader

11:12 TYPO3 Core Revision db0b4f00: [BUGFIX] Avoid mapping route values that are out of scope

Given a static route argument mapper is used - for instance one
that allows values in the range of 1 to 100 - then ge... Oliver Hader

11:10 TYPO3 Core Revision 471a83bc: [BUGFIX] Avoid mapping route values that are out of scope

Given a static route argument mapper is used - for instance one
that allows values in the range of 1 to 100 - then ge... Oliver Hader

2024-04-11

12:14 TYPO3 Core Bug #103606 (New): No search results due to empty rootPidList & Site Sets

h5. https://github.com/TYPO3/typo3/blob/main/typo3/sysext/indexed_search/Classes/Controller/SearchController.php#L147... Oliver Hader

2024-03-21

20:00 TYPO3 Core Bug #102892: RuntimeException when using redirects with record link targets

I don't think this is related to CSP, but more related to cached TypoScript (I might look into this during the next f... Oliver Hader