Project

General

Profile

Actions

Bug #103938

open

Properly redirect backend routes

Added by Daniel Siepmann about 1 month ago. Updated about 1 month ago.

Status:
Under Review
Priority:
Should have
Category:
-
Target version:
-
Start date:
2024-05-28
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
12
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

Users might share URLs from the backend, e.g. https://example.com/typo3/module/site/configuration/edit?site=example_site
Those URLs end up in the initial start module instead of actually being opened.
This also affects custom modules by users, not only TYPO3 core modules.

The redirect only works for some routes with special hard coded handling.

The issue seems to be within TYPO3\CMS\Backend\Controller\BackendController->getStartupModule() where the name from redirect is used as a module instead of the actual module.
The redirect transports the route identifier, not the module identifier. Therefore the route identifier needs to be resolved to the module for proper check.

Steps to reproduce:
  1. Create a site
  2. Navigate to site module
  3. Edit the given site
  4. Copy the URL and open it within a new tab

Expected: The edit form of the site is shown
Actual: The dashboard (first module) is shown

Actions #1

Updated by Daniel Siepmann about 1 month ago

  • Description updated (diff)
Actions #2

Updated by Gerrit Code Review about 1 month ago

  • Status changed from New to Under Review

Patch set 1 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/84432

Actions

Also available in: Atom PDF