Bug #20161
closed
Invalid XHTML Code in logout form
0%
Description
The Logoutform ist invalid by w3c specification. There're ampersands in the code. The Form-Tags looks like this:
<form action="page.html?&page=" target="_top" method="post">
To get xHTML validation it must be:
<form action="page.html?&_amp;page=" target="_top" method="post">
(without underscore) so & must be &_amp;
I've located the problem in typo3/sysext/felogin/pi1/class.tx_felogin_pi1.php nearly line 569 and line 575.
Please fix this bug in one of the next versions of TYPO3, so I don't have to fix it by myself at every new update.
(issue imported from #M10663)
Files
Updated by Stano Paska about 15 years ago
Better is add htmlspecialchars:
search for all texts ###ACTION_URI### in pi1/classtx_felogin_pi1.php
add htmlspeciachars before $this->getPageLink(...
Updated by Oliver Hader about 15 years ago
Fine, can somebody please create a patch and attach it to this report? Thanks!
Updated by Stano Paska about 15 years ago
here you are
based on https://svn.typo3.org/TYPO3v4/Core/branches/TYPO3_4-2
Updated by Oliver Hader about 15 years ago
Thanks... there's a much simpler way to do this in the called method generating the links...
The behaviour can be tested with having preserveGETvars enabled in the TypoScript configuration.
Updated by Oliver Hader about 15 years ago
- TYPO_4-2 (rev. 5214)
- Trunk (rev. 5215)
Updated by