Task #56454
closed
Epic #55070: Workpackages
Epic #55066: WP: Security enhancements
Story #56431: Use new wizard registration and remove wizard entry points
Remove old wizard scripts
100%
Description
Keeping the old wizard script would not solve
the CSRF attack vector as they could still
be referenced in this kind of attack.
Because of that, we remove them now.
This change provides a backwards compatibility
layer in FormsEngine which takes care of rewriting
URLs which have been referenced in TCA.
It will however break code which link to the
old scripts directly in other places.
Updated by Gerrit Code Review over 10 years ago
- Status changed from New to Under Review
Patch set 3 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/27956
Updated by Gerrit Code Review over 10 years ago
Patch set 4 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/27956
Updated by Gerrit Code Review over 10 years ago
Patch set 5 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/27956
Updated by Gerrit Code Review over 10 years ago
Patch set 6 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/27956
Updated by Helmut Hummel over 10 years ago
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
Applied in changeset dfab37ac702f566250bcb4f9cec35da471dafad5.
Updated by