Bug #103163
closedBase folder for local storage missing or not allowed (regression from 11.5.35 to 11.5.36)
100%
Description
In TYPO3 11.5.35 a regression was introduced in the filelist.
But TYPO3 11.5.36 doesn't seems to correct it completely.
Here's my case.
Connected with Admin User.
I've got a file storage located outside the public directory which is browsable and writable.
When looking at the mountpoint the folders aren't retrieved and I can't use / as the default folder for the mountpoint.
Thus resulting in now folders available in the filelist
Everything is working fine in TYPO3 11.5.34
In TYPO3 11.5.35 I've got the following error : Core: Exception handler (WEB): Uncaught TYPO3 Exception: #1314516810: Folder "/" does not exist. | TYPO3\CMS\Core\Resource\Exception\FolderDoesNotExistException thrown in file /var/www/XXX/typo3_src-11.5.35/typo3/sysext/core/Classes/Resource/Driver/LocalDriver.php in line 294. Requested URL: http://XXX/typo3/ajax/filestorage/tree/fetchData?token=--AnonymizedToken--
Behaviour Expected : Files and folders should be displayed normally.
Files
Updated by Luc Muller 9 months ago ยท Edited
in TYPO3 11.5.36 error : Core: Exception handler (WEB): Uncaught TYPO3 Exception: #1314516810: Folder "/" does not exist. | TYPO3\CMS\Core\Resource\Exception\FolderDoesNotExistException thrown in file /var/www/XXX/typo3_src-11.5.36/typo3/sysext/core/Classes/Resource/Driver/LocalDriver.php in line 294. Requested URL: http://XXX/typo3/ajax/filestorage/tree/fetchData?token=--AnonymizedToken-- is displayed when I try to refresh the folder list using the reload button above the treeview.
Updated by Oliver Hader 9 months ago
- Status changed from New to Needs Feedback
Did you define $GLOBALS['TYPO3_CONF_VARS']['BE']['lockRootPath']
as described in https://typo3.org/security/advisory/typo3-core-sa-2024-001 and https://docs.typo3.org/c/typo3/cms-core/main/en-us/Changelog/11.5.x/Important-102800-FileAbstractionLayerEnforcesAbsolutePathsToMatchProjectRootOrLockRootPath.html?
In case it is defined, what is the value of BE/lockRootPath
?
Updated by Oliver Hader 9 months ago
- Category changed from Security to File Abstraction Layer (FAL)
- Assignee deleted (
Oliver Hader)
Updated by Luc Muller 9 months ago
Thanks for pointing this out, it solved the problem.
Didn't noticed the required change in the migration process from 11.5.34 to 11.5.35.
Bug is solved !
Updated by Oliver Bartsch 9 months ago
- Status changed from Needs Feedback to Closed
Hi, thanks for your fast feedback. Since this is solved, I will close the issue.