Project

General

Profile

Actions
Copy link

Task #56356

closed

Epic #55070: Workpackages

Epic #55066: WP: Security enhancements

Story #56052: Implement CSRF Protection for ajax.php

Protect core Ajax calls against CSRF

Added by Helmut Hummel about 10 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
-
Target version:
-
Start date:
2014-02-26
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
6.2
PHP Version:
Tags:
Complexity:
Sprint Focus:

Description

The backend ajax handler that are directly registered
in DefaultConfiguration.php should be CSRF protected
if necessary.

Related issues 2 (0 open — 2 closed)

Related to TYPO3 Core - Bug #56626: AJAX file upload fails in beta6Closed2014-03-06

Actions
Precedes TYPO3 Core - Bug #56988: IE8 Users can't login to backendClosedNicole Cordes2014-03-17

Actions
Actions
Copy link

Also available in: Atom PDF