Project

General

Profile

Actions

Bug #80073

closed

sword highlighting missing from CE-Table after SecurityFix

Added by Evelin no-lastname-given about 7 years ago. Updated about 4 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
-
Target version:
-
Start date:
2017-03-01
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
7
PHP Version:
7.0
Tags:
ce-sword,search,parseFunc,FluidStyledContent
Complexity:
Is Regression:
No
Sprint Focus:
Needs Decision

Description

Since another report was rejected prematurely in my oppinion, here another attempt with a more accurate description. The Problem is with the missing highlighting of search results or similar in CE-Tables after parseFunc was removed.

With the fixing of the security issue #25245 introduces in 6.2.16

tt_content.table {
   20.innerStdWrap.parseFunc >
   20.innerStdWrap.htmlSpecialChars = 1
}

the parseFunc funktionality was stripped from CE-Tables, in my case with FluidStyledContent. Therefore the highlighting span with the class "ce-sword" or "csc-sword" provides by the sword functon in parse-func is no longer added to content CE-Tables.

I get that there is no RTE for the table element and no HTML is expected, but this has nothing to do with adding HTML-Content.

Related
https://forge.typo3.org/issues/72250
https://forge.typo3.org/issues/72388
https://forge.typo3.org/issues/73738
https://forge.typo3.org/issues/80021


Related issues 4 (0 open4 closed)

Related to TYPO3 Core - Bug #72250: Links in CE table no longer work in TYPO3 6.2.16Closed2015-12-15

Actions
Related to TYPO3 Core - Bug #72388: Table wizard with large fields output newline as br-tag in frontendClosed2015-12-22

Actions
Related to TYPO3 Core - Bug #73738: Table wizard with large fields output newline as br-tag in frontend (again)Closed2016-02-29

Actions
Related to TYPO3 Core - Bug #80021: parseFunc features missing from CE-Table after SecurityFixRejected2017-02-25

Actions
Actions #1

Updated by Georg Ringer about 4 years ago

  • Sprint Focus set to PRC
Actions #2

Updated by Benni Mack about 4 years ago

  • Status changed from New to Closed

Hey evelyn,

You would need to add this manually to your installation "I know what I'm doing - style". We won't add that back due to security issues. We also will likely remove the sword highlighting functionality from Core as this only works with POST or no_cache results.

Let me know if you have further ideas to overcome this.

Actions #3

Updated by Benni Mack about 4 years ago

  • Sprint Focus changed from PRC to Needs Decision
Actions

Also available in: Atom PDF