diff --git a/typo3/sysext/core/Documentation/Changelog/13.0/Feature-87889-ConfigurableTYPO3BackendURL.rst b/typo3/sysext/core/Documentation/Changelog/13.0/Feature-87889-ConfigurableTYPO3BackendURL.rst index 82e08d104ec8fbd1f87c795d1f9adbfb6c96400a..951b2c7185ea301bfe3ce6bd79b2bf2c884eb74c 100644 --- a/typo3/sysext/core/Documentation/Changelog/13.0/Feature-87889-ConfigurableTYPO3BackendURL.rst +++ b/typo3/sysext/core/Documentation/Changelog/13.0/Feature-87889-ConfigurableTYPO3BackendURL.rst @@ -15,7 +15,7 @@ Description The TYPO3 backend URL is made configurable in order to enable optional protection against application admin interface infrastructure enumeration (`WSTG-CONF-05`_). Both, frontend and backend requests are -now handled by the PHP script `/index.php` to enable virtual admin +now handled by the PHP script :file:`/index.php` to enable virtual admin interface URLs. The default TYPO3 backend entry point path `/typo3` can be changed by @@ -25,8 +25,8 @@ specifying a custom URL path or domain name in This change requires web server adaption. A silent migration and according documentation for custom web server configurations is added. A deprecation layer (for non-adapted systems) is in place that rewrites -the server environment variables passed to `/typo3/index.php` as if -`/index.php` was used directly. This layer will be removed in TYPO3 v14. +the server environment variables passed to :file:`/typo3/index.php` as if +:file:`/index.php` was used directly. This layer will be removed in TYPO3 v14. This change does not take assets into account, only routing is adapted. That means Composer mode will use assets provided via `/_assets` as before @@ -55,20 +55,20 @@ Configure to use a distinct (sub)domain Now point your browser to `https://backend.example.com/` to log into the TYPO3 -Backend. +backend. Legacy-Free installation ~~~~~~~~~~~~~~~~~~~~~~~~~ -The legacy entry point `/typo3/index.php` is no longer needed and deprecated in -favor of handling all backend and frontend requests with `/index.php`. The +The legacy entry point :file:`/typo3/index.php` is no longer needed and deprecated in +favor of handling all backend and frontend requests with :file:`/index.php`. The entry point is still in place, in case webserver configuration has not been adapted yet. The maintenance and emergency tool is still available via -`/typo3/install.php` in order to work in edge cases like broken web server +:file:`/typo3/install.php` in order to work in edge cases like broken web server routing. In Composer mode there is an additional opt-out for the installation of the -legacy entrypoint for that can be defined in your project's :file:`composer.json` +legacy entrypoint that can be defined in your project's :file:`composer.json` file: .. code-block:: json @@ -85,7 +85,7 @@ Impact The TYPO3 backend route path is made configurable in order to protected against application admin interface infrastructure enumeration (`WSTG-CONF-05`_). -Therefore, all requests are handled by the PHP script `/index.php` in order to +Therefore, all requests are handled by the PHP script :file:`/index.php` in order to allow for variable admin interface URLs. .. _WSTG-CONF-05: https://owasp.org/www-project-web-security-testing-guide/v42/4-Web_Application_Security_Testing/02-Configuration_and_Deployment_Management_Testing/05-Enumerate_Infrastructure_and_Application_Admin_Interfaces