Actions
Bug #83762
closedFile storage with invalid (upwards folder "../") path can be saved as 'absolute path', but then not edited anymore due to error message. Unsolvable situation.
Status:
Closed
Priority:
Must have
Assignee:
-
Category:
File Abstraction Layer (FAL)
Target version:
Start date:
2018-02-02
Due date:
% Done:
100%
Estimated time:
TYPO3 Version:
8
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:
Description
Using TYPO3 8.7 LTS.
- I edited a file storage with absolute path.
- changed path to relative.
- entered "../somefolder" for a folder outside the web root.
- saved the file storage
- an error occurs: "File ../somefolder is not valid (".." and "//" is not allowed in path). "
- went back to the list module
- clicked to edit the file storage
- same error appears again -> there is no way to get to see the editing form for this record again!
-> file storage was saved with invalid path ==> fatally missing validation before saving!
-> now I cannot fix the invalid path, because the error is shown instead of the record editing form for the file storage.
-> hopeless situation, only direct DB access can come to the rescue.
Actions