Bug #99472
open
URLs in hreflang tags and language menus are cached with the set of query parameters from the first request
0%
Description
If you flush the cache of a page with hreflang tags and a language menu the query parameters of the first request are cached and used for subsequent requests to that page, even if other query parameters are present in the URL.
In other issues (such as https://forge.typo3.org/issues/88264 ) it's suggested to add those parameters to the cHash white list. This is not desirable in all cases.
If for example a solr result plugin is displayed on the page then the search query and the facet parameters should not be included in the cHash (that would flood the cache) but these parameters should be part of the hreflang tags and the language menu.
Currently the parameters used with the first request for that page after flushing the cache are used for the hreflang tags and the language menu of future requests to the page. If you select other facets or visit the page without any parameters then the cached parameters are also used.
Updated by Georg Ringer almost 2 years ago
- Status changed from New to Needs Feedback
hey!
does https://typo3.org/security/advisory/typo3-psa-2021-003 answer your question?
Updated by Jigal van Hemert almost 2 years ago
Hi,
As far as I can determine it addresses the problem only partly. The suggested extension keeps the parameters which are included in the routing configuration. Some query parameters that are not covered by the routing configuration can however be relevant for the hreflang tags and language menu.
Query parameters for uncached plugins which are not transformed to url segments can be relevant for this.
Another part of the issue is that hreflang tags and the language menu are normally part of the cached page. If query parameters for uncached plugins are relevant for these (I'm not completely sure if this is true for the canonical too) then they should not be cached. That can be arranged for the language menu, but unfortunately the hreflang tags are always part of the cached page.