Actions
Bug #92288
open
Public access can't be denied in GeneratePublicUrlForResourceEvent
Status:
New
Priority:
Should have
Assignee:
-
Category:
-
Target version:
-
Start date:
2020-09-11
Due date:
% Done:
0%
Estimated time:
TYPO3 Version:
10
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:
Description
Method: setPublicUrl(?string $publicUrl)
Description: Sets new public URL of resource - or removes public url (by setting null), disallowing public access.
Calling setPublicUrl(null) in an event listener does not disallow public access.
Perhaps GeneratePublicUrlForResourceEvent should implement StoppableEventInterface so we can force publicUrl = null.
As a workaround publicUrl can be set to an empty string (setPublicUrl('')). But that causes false URI generation using core ViewHelpers (e.g. f:uri.image) with absolute="true".
No data to display
Actions