Bug #78793
closed
Since 6.2.29 filemounts don't show list of folders anymore
0%
Description
Hello,
since the recent update to 6.2.29 there is bug regarding filemounts.
If I try to edit a filemount the dropdown box with the list of folders is emtpy.
The error doesn't occur with every filemount. It is depending on the selected storage (see screenshots).
With the update to 6.2.29 the function validPathStr in sysext/core/Classes/Utility/GeneralUtility.php was modified:
6.2.28: && !preg_match('#(?:^\\.\\.|/\\.\\./|[[:cntrl:]])#u', $theFile);
6.2.29: && preg_match('#(?:^\\.\\.|/\\.\\./|[[:cntrl:]])#u', $theFile) === 0;
If I change the code to how it looked like with 6.2.28 the error doesn't occur.
Cheers,
Tobias
Files
Updated by Wouter Wolters over 7 years ago
- Status changed from New to Rejected
This change is on purpose and unfortunately you are hit by a case that you have wrong filenames that contain invalid UTF-8 encoding.
See the important note from https://typo3.org/news/article/path-traversal-in-typo3-core/ below:
Important Note: TYPO3 installations having file names or folder names containing invalid UTF-8 encoding, now trigger an error, when accessing these files. It is recommended to rename these files to contain valid encoding sequences.
Updated by Tobias Schaefer over 7 years ago
How can I search for files or folders with invalid UTF-8 encoding?
Updated by Tobias Schaefer over 7 years ago
If somebody is facing the same problem like me, here is a easy way to find the folders or files with invalid encoded names:
Insert at the beginning of the validPathStr function in sysext/core/Classes/Utility/GeneralUtility.php:
if(!(preg_match('#(?:^\\.\\.|/\\.\\./|[[:cntrl:]])#u', $theFile) === 0)) {
echo $theFile."<br>";
}
Edit a filemount where the error occured and you should see the list of the folders or files with invalid encoding.
If it's not possible to correct the names using the filelist module, do it on a system level.
Don't forget to revert the code changes.