[FEATURE] Enforce cHash argument for Extbase actions
TypoScriptFrontendController::reqCHash() is now called for Extbase frontend plugin actions just like they were usually called for the legacy AbstractPlugin. This throws a 404, if plugin arguments are present, but cHash is not, which would also happen, if the plugin arguments were added to "cHashRequiredParameters" configuration. This provides a more reliable page caching behavior by default and with zero configuration for extension authors. With the feature switch "requireCHashArgumentForActionArguments" this behavior can be disabled, which could be useful, if all actions in a plugin are uncached or one wants to manually control the cHash behavior. Resolves: #78002 Releases: master Change-Id: Ic6f71c3e5c8a94a0d422372a08c944aef5663f06 Reviewed-on: https://review.typo3.org/49976 Tested-by:TYPO3com <no-reply@typo3.com> Reviewed-by:
Oliver Hader <oliver.hader@typo3.org> Tested-by:
Oliver Hader <oliver.hader@typo3.org> Reviewed-by:
Susanne Moog <susanne.moog@typo3.org> Tested-by:
Susanne Moog <susanne.moog@typo3.org>
Showing
- typo3/sysext/core/Documentation/Changelog/master/Breaking-78002-EnforceCHashArgumentForExtbaseActions.rst 40 additions, 0 deletions.../Breaking-78002-EnforceCHashArgumentForExtbaseActions.rst
- typo3/sysext/core/Documentation/Changelog/master/Feature-78002-EnforceCHashArgumentForExtbaseActions.rst 29 additions, 0 deletions...r/Feature-78002-EnforceCHashArgumentForExtbaseActions.rst
- typo3/sysext/extbase/Classes/Mvc/Web/CacheHashEnforcer.php 73 additions, 0 deletionstypo3/sysext/extbase/Classes/Mvc/Web/CacheHashEnforcer.php
- typo3/sysext/extbase/Classes/Mvc/Web/FrontendRequestHandler.php 22 additions, 0 deletions...sysext/extbase/Classes/Mvc/Web/FrontendRequestHandler.php
- typo3/sysext/extbase/Tests/Unit/Mvc/Web/CacheHashEnforcerTest.php 75 additions, 0 deletions...sext/extbase/Tests/Unit/Mvc/Web/CacheHashEnforcerTest.php
- typo3/sysext/extbase/ext_typoscript_setup.txt 2 additions, 0 deletionstypo3/sysext/extbase/ext_typoscript_setup.txt
Please register or sign in to comment