Project

General

Profile

Actions

Bug #23682

closed

jumpurl.secure fails if no mimeTypes are set

Added by Reinhard Führicht over 13 years ago. Updated over 13 years ago.

Status:
Closed
Priority:
Should have
Category:
Communication
Target version:
-
Start date:
2010-10-06
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
4.5
PHP Version:
5.2
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

When creating a filelink without setting "mimeTypes", the juHash comparison never matches.

TYPO3 shows the following error message:

jumpurl Secure: Calculated juHash did not match the submitted juHash.

- Use a simple TypoScript like this to generate a filelink.

page.1 = TEXT
page.1.field = media
page.1.filelink {
path = uploads/media/
jumpurl = 1
jumpurl {
secure = 1
}
}

- Add a file in the media field of a page
- Click the generated link in Frontend
- This will let TYPO3 crash will the following error:

jumpurl Secure: Calculated juHash did not match the submitted juHash.

This behavior was introduced in TYPO3 4.4.3 with the fix of #23428.
(issue imported from #M15911)


Files

15911_v1.patch (1.15 KB) 15911_v1.patch Administrator Admin, 2010-10-06 10:49

Related issues 1 (0 open1 closed)

Related to TYPO3 Core - Bug #23675: It is (still) possible to download arbitrary files through the jumpurl featureClosed2010-10-05

Actions
Actions #1

Updated by Steffen Gebert over 13 years ago

Change has been included in #23675 and was released with 4.4.4

Actions #2

Updated by Helmut Hummel over 13 years ago

no duplicate

Actions

Also available in: Atom PDF