Project

General

Profile

Actions
Copy link

Task #56454

closed

Epic #55070: Workpackages

Epic #55066: WP: Security enhancements

Story #56431: Use new wizard registration and remove wizard entry points

Remove old wizard scripts

Added by Helmut Hummel about 10 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
-
Target version:
-
Start date:
2014-02-28
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
6.2
PHP Version:
Tags:
Complexity:
Sprint Focus:

Description

Keeping the old wizard script would not solve
the CSRF attack vector as they could still
be referenced in this kind of attack.

Because of that, we remove them now.

This change provides a backwards compatibility
layer in FormsEngine which takes care of rewriting
URLs which have been referenced in TCA.

It will however break code which link to the
old scripts directly in other places.

Actions
Copy link

Also available in: Atom PDF