Task #93579: Form framework does not allow to use ENV variables - TYPO3 Core - TYPO3 Forge

Actions

Copy link

Task #93579

closed

Form framework does not allow to use ENV variables

Added by Albrecht Köhnlein over 3 years ago. Updated about 3 years ago.

Status:

Closed

Priority:

Should have

Assignee:

Björn Jacob

Category:

Form Framework

Target version:

Start date:

2021-02-24

Due date:

% Done:

100%

Estimated time:

TYPO3 Version:

PHP Version:

Tags:

form, yaml, env

Complexity:

Sprint Focus:

Remote Sprint

Description

The documentation shows a great way to use ENV variables inside YAML files: https://docs.typo3.org/m/typo3/reference-coreapi/10.4/en-us/ApiOverview/Yaml/Index.html

I would expect that also to work in form configuration YAML files. But unfortunately, the form framwork uses another YAML parser.

I do not exactly know, if it's correct to set this ticket to "Bug" status. In my case it feels like one, but feel free to change it to "Feature" if there are any reasons, it cannot be changed in TYPO3 10 LTS anymore.

Related issues 1 (0 open — 1 closed)

Actions

Copy link

Updated by Gerrit Code Review over 3 years ago

Status changed from New to Under Review

Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/68093

Actions

Copy link

Updated by Gerrit Code Review over 3 years ago

Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/68093

Actions

Copy link

Updated by Gerrit Code Review over 3 years ago

Patch set 3 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/68093

Actions

Copy link

Updated by Gerrit Code Review over 3 years ago

Patch set 4 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/68093

Actions

Copy link

Updated by Björn Jacob over 3 years ago

Tracker changed from Bug to Task
TYPO3 Version changed from 10 to 11
Sprint Focus set to Remote Sprint

Actions

Copy link

Updated by Björn Jacob over 3 years ago

Status changed from Under Review to New

As discussed in the patch, we would open security issues:

Allowing to use instructions like `%env(VARIABLE_NAME)%` by editors would introduce new security vulnerabilities.

Instead of allowing this, we will change the documentation and add a corresponding information.

Actions

Copy link

Updated by Björn Jacob over 3 years ago

Status changed from New to In Progress
Assignee set to Björn Jacob

Actions

Copy link

Updated by Gerrit Code Review over 3 years ago

Status changed from In Progress to Under Review

Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/70496

Actions

Copy link

Updated by Gerrit Code Review over 3 years ago

Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/70496

Actions

Copy link

#10

Updated by Gerrit Code Review over 3 years ago

Patch set 1 for branch 10.4 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/70514

Actions

Copy link

#11