Project

General

Profile

Actions

Bug #58138

closed

CSRF with registerModule and navFrameScript

Added by Falk Aaron almost 10 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Must have
Assignee:
Category:
-
Target version:
-
Start date:
2014-04-23
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
6.2
PHP Version:
5.4
Tags:
Complexity:
Is Regression:
No
Sprint Focus:

Description

How to use \TYPO3\CMS\Extbase\Utility\ExtensionUtility::registerModule with navFrameScript parameter?

It does not work, as the modules are loaded before the BE_USER, so BackendUtility::getModuleUrl does only retrieve a "dummyToken".

May you help me out?


Related issues 1 (0 open1 closed)

Related to TYPO3 Core - Story #55509: Add CSRF Protection to mod.phpClosedHelmut Hummel2014-02-26

Actions
Actions #1

Updated by Helmut Hummel almost 10 years ago

  • Status changed from New to Needs Feedback

You want to have a custom navFrame, right? How does the URL to your navigation must look like? is it mod.php?M=<moduleName> ... ?

Can you also show me how you tried to register this navigation component?

Thanks

Actions #2

Updated by Falk Aaron almost 10 years ago

'navFrameScript' => BackendUtility::getModuleUrl('RolRkchannelRkchannel_RolRkchannelM3', array('tx_rolrkchannel_rolrkchannelrkchannel_rolrkchannelm3[action]'=> 'tree'))

Thats how i configure the navFrameScript. It's not working like that.

Actions #3

Updated by Helmut Hummel almost 10 years ago

  • Status changed from Needs Feedback to Accepted
Actions #4

Updated by Gerrit Code Review almost 10 years ago

  • Status changed from Accepted to Under Review

Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/30593

Actions #5

Updated by Helmut Hummel almost 10 years ago

Falk Aaron wrote:

'navFrameScript' => BackendUtility::getModuleUrl('RolRkchannelRkchannel_RolRkchannelM3', array('tx_rolrkchannel_rolrkchannelrkchannel_rolrkchannelm3[action]'=> 'tree'))

Thats how i configure the navFrameScript. It's not working like that.

Please check the patch in the review system.

Apply the patch and configure the navigation as follows:

'navigationFrameModule' name of the module that is loaded in the navigation frame
'navigationFrameModuleParamters' additional parameters (if needed and specified)

Actions #6

Updated by Gerrit Code Review almost 10 years ago

Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/30593

Actions #7

Updated by Gerrit Code Review almost 10 years ago

Patch set 3 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/30593

Actions #8

Updated by Helmut Hummel almost 10 years ago

  • Status changed from Under Review to Resolved
  • % Done changed from 0 to 100
Actions #9

Updated by Gerrit Code Review over 9 years ago

  • Status changed from Resolved to Under Review

Patch set 1 for branch TYPO3_6-2 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/32676

Actions #10

Updated by Helmut Hummel over 9 years ago

  • Status changed from Under Review to Resolved
Actions #11

Updated by David Bruchmann over 7 years ago

Seems the patch made it's way only in TYPO3 Version 7 but not in the 6.2 Branch. Just as info.

Actions #12

Updated by Wouter Wolters over 7 years ago

Two messages above it mentions the 6.2 backport. This change is in 6.2 as well.

Actions #13

Updated by Helmut Hummel over 7 years ago

Wouter Wolters wrote:

Two messages above it mentions the 6.2 backport. This change is in 6.2 as well.

Yes, it absolutely is in 6.2 as well!

Actions #14

Updated by David Bruchmann over 7 years ago

I see, sorry for confusion.
Functionality seems just being in another file - not in ModuleLoader.php but in MenuModuleView.php

Actions #15

Updated by Benni Mack over 5 years ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF