Project

General

Profile

Actions

Bug #100197

closed

Remove HTTP_REFERER validity check or logging

Added by Torben Hansen over 1 year ago. Updated over 1 year ago.

Status:
Closed
Priority:
Must have
Assignee:
Category:
felogin
Target version:
-
Start date:
2023-03-17
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
11
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

With #99920 the HTTP_REFERER check has been fixed. The patch introduced a validity check for the HTTP_REFERER using the $this->redirectUrlValidator->isValid($referer), which however logs warnings if the checked redirect URL is not considered as valid.

So either the check must be removed or the logging.

As an addition, the evaluation of the referer could only be processed, if redirectMode is either referer or refererDomains. This was the previous behavior in ext:felogin, but seems most likely to have been forgotten to be implemented in the extbase version of ext:felogin.

Logging for the validator can temporarily be disabled by adding the following to AdditionalConfiguration.php

$GLOBALS['TYPO3_CONF_VARS']['LOG']['TYPO3']['CMS']['FrontendLogin']['Validation']['RedirectUrlValidator']['writerConfiguration'][\TYPO3\CMS\Core\Log\LogLevel::WARNING] = [];

Related issues 1 (0 open1 closed)

Related to TYPO3 Core - Bug #100715: felogin redirect mode by http referer is not workingClosedTorben Hansen2023-04-23

Actions
Actions

Also available in: Atom PDF