Project

General

Profile

Actions

Bug #103938

open

Properly redirect backend routes

Added by Daniel Siepmann 3 months ago. Updated 3 months ago.

Status:
Under Review
Priority:
Should have
Category:
-
Target version:
-
Start date:
2024-05-28
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
12
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

Users might share URLs from the backend, e.g. https://example.com/typo3/module/site/configuration/edit?site=example_site
Those URLs end up in the initial start module instead of actually being opened.
This also affects custom modules by users, not only TYPO3 core modules.

The redirect only works for some routes with special hard coded handling.

The issue seems to be within TYPO3\CMS\Backend\Controller\BackendController->getStartupModule() where the name from redirect is used as a module instead of the actual module.
The redirect transports the route identifier, not the module identifier. Therefore the route identifier needs to be resolved to the module for proper check.

Steps to reproduce:
  1. Create a site
  2. Navigate to site module
  3. Edit the given site
  4. Copy the URL and open it within a new tab

Expected: The edit form of the site is shown
Actual: The dashboard (first module) is shown

Actions #1

Updated by Daniel Siepmann 3 months ago

  • Description updated (diff)
Actions #2

Updated by Gerrit Code Review 3 months ago

  • Status changed from New to Under Review

Patch set 1 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/84432

Actions

Also available in: Atom PDF