Bug #12397: Needed changes for the CSRF protection - TYPO3 Core - TYPO3 Forge

Actions

Copy link

Bug #12397

closed

Needed changes for the CSRF protection

Added by Helmut Hummel almost 14 years ago. Updated about 6 years ago.

Status:

Closed

Priority:

Should have

Assignee:

Susanne Moog

Category:

Workspaces

Target version:

Start date:

2011-01-20

Due date:

% Done:

Estimated time:

TYPO3 Version:

PHP Version:

Tags:

Complexity:

Is Regression:

Sprint Focus:

Description

Since CSRF protection is implemented into 4.5 now, some things must be taken care of in the clickmenu and the old workspaces module.

I do not know if one or both will be used in 4.5, but for completeness, I would suggest to add these minor changes

Files

Download all files

17153_workspaces.diff (2.77 KB) 17153_workspaces.diff		Helmut Hummel, 2011-01-20 13:11
17153_workspaces_v2.diff (1.02 KB) 17153_workspaces_v2.diff		Susanne Moog, 2011-01-20 17:08

Actions

Copy link

Updated by Ernesto Baschny almost 14 years ago

Just FYI, the required method (t3lib_TCEforms::getHiddenTokenField) is now committed to typo3_src trunk (see RFC #17153, rev. and thread in v4 list), so if you could test the patch in the workspace module, give it some testing so that we could have it in RC1, it would be cool.

Thanks!

Actions

Copy link