Bug #54304: Missing encoding in flexforms IRRE javascript - TYPO3 Core - TYPO3 Forge

Actions

Copy link

Bug #54304

closed

Missing encoding in flexforms IRRE javascript

Added by Alexey Gafiulov over 10 years ago. Updated over 5 years ago.

Status:

Closed

Priority:

Must have

Assignee:

Category:

Target version:

Start date:

2013-12-10

Due date:

% Done:

100%

Estimated time:

TYPO3 Version:

6.2

PHP Version:

Tags:

Complexity:

Is Regression:

Sprint Focus:

Description

AJAX IRRE requests are sending context property. This property is json-encoded string, which could contain special chars.
Parameters set for AJAX request is not properly encoded, which is causing failure during verification.

Bug is in function jsfunc.inline.js, method "makeAjaxCall".

urlParams += '&ajax[context]=' + Object.toJSON(context)

should be

urlParams += '&ajax[context]=' + encodeURIComponent(Object.toJSON(context));

Actions

Copy link

Updated by Gerrit Code Review over 10 years ago

Status changed from New to Under Review

Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/26283

Actions

Copy link

Updated by Gerrit Code Review over 10 years ago

Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/26283

Actions

Copy link

Updated by Gerrit Code Review about 10 years ago

Patch set 1 for branch TYPO3_6-1 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/27674

Actions

Copy link

Updated by Gerrit Code Review about 10 years ago

Patch set 1 for branch TYPO3_6-0 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/27675

Actions

Copy link