Actions
Task #55515
closed
Epic #55070: Workpackages
Epic #55066: WP: Security enhancements
Add CSRF Protection for tce_file.php
Start date:
2014-01-31
Due date:
% Done:
100%
Estimated time:
32.00 h
TYPO3 Version:
6.2
PHP Version:
Tags:
Complexity:
Sprint Focus:
Description
tce_file.php works as API/ entry point for file operations and must be CSRF protected (like tce_db.php)
- Add token check in tce_file.php
- Search all places where tce_file.php is used and add the token
- Especially all JS (d&d fileupload) needs to get the token (d&d upload is handled by ajax.php and needs special handling. This will be targeted in another change)
Updated by 
Updated by 
Updated by Anonymous 
Updated by
Actions