Skip to content
Snippets Groups Projects
Commit 8cfc18a5 authored by Oliver Hader's avatar Oliver Hader Committed by Andreas Fernandez
Browse files

[!!!][TASK] Remove POST option from typolink.addQueryString.method

Setting `addQueryString.method` of typolink could be used like shown
below in order to transform HTTP POST parameters into according GET
parameters.

    typolink {
        parameter = 123
        addQueryString = 1
        addQueryString.method = POST
    }

In terms of correctly using HTTP verbs it's bad practise in general
to treat GET and POST equally, besides that documentation already
mentioned potential side-effects like accidentally exposing sensitive
data submitted via POST to proxies or log files.

That's why values POST, GET,POST and POST,GET are not allowed anymore
for `typolink.addQueryString.method`. Maintaining functionality - if
required at all - has to be done using domain specific logic in
according controllers or middleware implementations.

Resolves: #88755
Releases: master
Change-Id: I6ecfdd2ee98251b64093c1a13f9371beea862ddd
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/61295


Tested-by: default avatarBenjamin Franzke <bfr@qbus.de>
Tested-by: default avatarTYPO3com <noreply@typo3.com>
Tested-by: default avatarAndreas Fernandez <a.fernandez@scripting-base.de>
Reviewed-by: default avatarBenjamin Franzke <bfr@qbus.de>
Reviewed-by: default avatarAndreas Fernandez <a.fernandez@scripting-base.de>
parent 03543ce3
Branches
Tags
Showing with 184 additions and 203 deletions
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment