Actions
Bug #58102
closed
TypoScriptParser does not validate absPath
Status:
Closed
Priority:
Must have
Assignee:
Category:
Backend API
Target version:
Start date:
2014-04-22
Due date:
% Done:
100%
Estimated time:
TYPO3 Version:
6.2
PHP Version:
Tags:
Complexity:
easy
Is Regression:
No
Sprint Focus:
Description
GeneralUtility::getFileAbsFileName() returns a blank string for
invalid paths.
TypoScriptParser::includeDirectory() does not check the return value,
but passes it on to TypoScriptParser::getAllFilesAndFoldersInPath().
This causes the method to enumerate all entries of /.
Fix this by properly checking the return value of getFileAbsFileName().
How to reproduce:
Copy this TSconfig into your root page:<INCLUDE_TYPOSCRIPT: source="DIR:EXT:missingext/Configuration/TSconfig/">
Updated by Gerrit Code Review almost 10 years ago
- Status changed from Accepted to Under Review
Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/29607
Updated by Markus Klein almost 10 years ago
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
Applied in changeset 0b772e11f8cf73c59f7e97f17b1e5f24f4d30fce.
Updated by
Actions