Project

General

Profile

Actions
Copy link

Bug #24097

closed

Introduce a form protection API

Added by Helmut Hummel about 14 years ago. Updated over 13 years ago.

Status:
Closed
Priority:
Should have
Assignee:
Ernesto Baschny
Category:
-
Target version:
-
Start date:
2010-11-17
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

Problem:
TYPO3 currently lacks an API that can be used to secure forms and URLs against Cross Site Request forgery attacks.

Solution:
Introduce such an API

Notes:
This patch was mainly done by Oliver Klee, but reviewed and revised by me and Ernesto

The usage of the formprotection will go in a different RFC

(issue imported from #M16437)

Related issues 2 (0 open — 2 closed)

Related to TYPO3 Core - Feature #24099: Use the form protection API to implement the CSRF protection (1)ClosedErnesto Baschny2010-11-17

Actions
Has duplicate TYPO3 Core - Feature #22685: Provide a CSRF protection framework for the BE and install toolClosedHelmut Hummel2010-05-19

Actions
Actions
Copy link

Also available in: Atom PDF