Actions
Task #56345
closed
Epic #55070: Workpackages
Epic #55066: WP: Security enhancements
Story #56052: Implement CSRF Protection for ajax.php
Add API to CSRF protect Ajax calls in Backend
Status:
Closed
Priority:
Should have
Assignee:
-
Category:
-
Target version:
-
Start date:
2014-02-26
Due date:
% Done:
100%
Estimated time:
TYPO3 Version:
6.2
PHP Version:
Tags:
Complexity:
Sprint Focus:
Description
This change adds API to register Ajax ids with their handler
and to get an Ajax URL for a specific AjaxID
A token check is added to the ajax.php dispatcher
script. To stay backwards compatible, the token
is only checked, if the AjaxId is registered not
using the new API.
The new API will be used by TYPO3 core in
consecutive changes.
Updated by 
Updated by 
Updated by
Actions