Bug #58138: CSRF with registerModule and navFrameScript - TYPO3 Core - TYPO3 Forge

Custom queries

12 LTS
Accessibility
Dashboard issues
Easy tasks
Extbase Issues
FAL Issues
FAL Sprint 2023
Hierarchical Issues
Issues reported for v11
JavaScript issues
JavaScript Issues (w/o Epics/Stories)
Most wanted Bugfixes
Most wanted Features
My open issues
New & Unassigned
No feedback within 90 days
Open Bugs
Open issues of 10
Page Tree Regressions after 2020-07-28
Recently modified
Regressions
Stabilization Issues
Usability or UX

Watchers (1)

Helmut Hummel

Actions

Copy link

Bug #58138

closed

CSRF with registerModule and navFrameScript

Added by Falk Aaron about 10 years ago. Updated over 5 years ago.

Status:

Closed

Priority:

Must have

Assignee:

Helmut Hummel

Category:

Target version:

Start date:

2014-04-23

Due date:

% Done:

100%

Estimated time:

TYPO3 Version:

6.2

PHP Version:

5.4

Tags:

Complexity:

Is Regression:

Sprint Focus:

Description

How to use \TYPO3\CMS\Extbase\Utility\ExtensionUtility::registerModule with navFrameScript parameter?

It does not work, as the modules are loaded before the BE_USER, so BackendUtility::getModuleUrl does only retrieve a "dummyToken".

May you help me out?

Related issues 1 (0 open — 1 closed)

Related to TYPO3 Core - Story #55509: Add CSRF Protection to mod.php

Closed

Helmut Hummel

2014-02-26

Actions

Issue # Delay: days Cancel

History
Notes
Property changes
Associated revisions

Actions

Copy link

Updated by Helmut Hummel almost 10 years ago

Status changed from New to Needs Feedback

You want to have a custom navFrame, right? How does the URL to your navigation must look like? is it mod.php?M=<moduleName> ... ?

Can you also show me how you tried to register this navigation component?

Thanks

Actions

Copy link

Updated by Falk Aaron almost 10 years ago

'navFrameScript' => BackendUtility::getModuleUrl('RolRkchannelRkchannel_RolRkchannelM3', array('tx_rolrkchannel_rolrkchannelrkchannel_rolrkchannelm3[action]'=> 'tree'))

Thats how i configure the navFrameScript. It's not working like that.

Actions

Copy link

Updated by Helmut Hummel almost 10 years ago

Status changed from Needs Feedback to Accepted

Actions

Copy link

Updated by Gerrit Code Review almost 10 years ago

Status changed from Accepted to Under Review

Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/30593

Actions

Copy link

Updated by Helmut Hummel almost 10 years ago

Falk Aaron wrote:

'navFrameScript' => BackendUtility::getModuleUrl('RolRkchannelRkchannel_RolRkchannelM3', array('tx_rolrkchannel_rolrkchannelrkchannel_rolrkchannelm3[action]'=> 'tree'))

Thats how i configure the navFrameScript. It's not working like that.

Please check the patch in the review system.

Apply the patch and configure the navigation as follows:

'navigationFrameModule' name of the module that is loaded in the navigation frame
'navigationFrameModuleParamters' additional parameters (if needed and specified)

Actions

Copy link

Updated by Gerrit Code Review almost 10 years ago

Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/30593

Actions

Copy link

Updated by Gerrit Code Review almost 10 years ago

Patch set 3 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/30593

Actions

Copy link

Updated by Helmut Hummel almost 10 years ago

Status changed from Under Review to Resolved
% Done changed from 0 to 100

Applied in changeset f8b88c848b41da7f52d261d3f4479bd2f9b49435.

Actions

Copy link

Updated by Gerrit Code Review over 9 years ago

Status changed from Resolved to Under Review

Patch set 1 for branch TYPO3_6-2 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/32676

Actions

Copy link

#10