Bug #25217: Additions to fileDenyPattern give security warning in BE - TYPO3 Core - TYPO3 Forge

Actions

Copy link

Bug #25217

closed

Additions to fileDenyPattern give security warning in BE

Added by Steffen Kamper about 13 years ago. Updated over 5 years ago.

Status:

Closed

Priority:

Should have

Assignee:

Steffen Kamper

Category:

Target version:

Start date:

2011-03-01

Due date:

% Done:

Estimated time:

TYPO3 Version:

4.5

PHP Version:

5.3

Tags:

Complexity:

Is Regression:

Sprint Focus:

Description

The check is wrong. Instead of checking if the entry is equal to default entry, it should check if any parts of the default value are removed.

As it's a security warning, this should be stated in the warning, so change the wording.

(issue imported from #M17817)

Files

Download all files

17817.patch (2.82 KB) 17817.patch		Administrator Admin, 2011-03-01 23:12
17817_v2.patch (4.34 KB) 17817_v2.patch		Administrator Admin, 2011-03-02 00:00

Related issues 1 (0 open — 1 closed)

Actions

Copy link

Updated by Daniel Minder about 13 years ago

Since my original report 8690 is now marked as resolved although this bug is only assigned I have to add it here as well:
The reports sysext also includes the same check in class.tx_reports_reports_status_securitystatus.php. So, it should also be modified there.

Actions

Copy link