Actions
Bug #100197
closedRemove HTTP_REFERER validity check or logging
Start date:
2023-03-17
Due date:
% Done:
100%
Estimated time:
TYPO3 Version:
11
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:
Description
With #99920 the HTTP_REFERER check has been fixed. The patch introduced a validity check for the HTTP_REFERER using the $this->redirectUrlValidator->isValid($referer)
, which however logs warnings if the checked redirect URL is not considered as valid.
So either the check must be removed or the logging.
As an addition, the evaluation of the referer could only be processed, if redirectMode
is either referer
or refererDomains
. This was the previous behavior in ext:felogin, but seems most likely to have been forgotten to be implemented in the extbase version of ext:felogin.
Logging for the validator can temporarily be disabled by adding the following to AdditionalConfiguration.php
$GLOBALS['TYPO3_CONF_VARS']['LOG']['TYPO3']['CMS']['FrontendLogin']['Validation']['RedirectUrlValidator']['writerConfiguration'][\TYPO3\CMS\Core\Log\LogLevel::WARNING] = [];
Actions