TYPO3 Core

With #22990 (applied on 2010-08-31 to 4-3, 4-4 & trunk) a new parameter "contentHash" has been added that prevents XSS warning in IE.
This feature allows to store the to be displayed content for showpic in a cache table and such no longer depends on receiving the whole HTML via HTTP GET parameter.

When using the cache framework, contentHash represents a cacheIdentifier. When manipulated by a user, contentHash and such cacheIdentifier does not necessarily has the structure, the caching framework expects for entry identifiers. Then an exception is thrown in t3lib_cache_frontend_AbstractFrontend::has().

If contentHash contains JS code, this is displayed as are.

vulnerable:
TYPO3 4.3.5+
TYPO3 4.4.3+
TYPO3 4.5alpha1+
with Caching framework enabled

Reporter: Andreas Weber
OTRS: 2010111910000013
(issue imported from #M16485)