[SECURITY] Disallow access to fallback storage '0'
All users with access to the filelist module are able to display the content of the document root folder by spoofing the url. This patch prevents any rendering from that storage and throws an error. Resolves: #67538 Releases: master, 6.2 Security-Bulletin: TYPO3-CORE-SA-2015-005 Change-Id: I59cc315e913c02001efdad23e2ded7385502c5f2 Reviewed-on: http://review.typo3.org/40808 Reviewed-by:Benjamin Mack <benni@typo3.org> Tested-by:
Benjamin Mack <benni@typo3.org> Reviewed-by:
Helmut Hummel <helmut.hummel@typo3.org> Tested-by:
Helmut Hummel <helmut.hummel@typo3.org>
parent
32d22760
Please register or sign in to comment