Skip to content
Snippets Groups Projects
Commit c44d9f5a authored by Ralf Zimmermann's avatar Ralf Zimmermann Committed by Oliver Hader
Browse files

[SECURITY] Validate allowed values for form element editors

Form editors which provide only a limited set of allowed values
(like single-select or multi-select form editors) now validate the
submitted values against the set of allowed values (configured within
the form setup).

Resolves: #93581
Releases: master, 11.1, 10.4, 9.5
Change-Id: Iae0a34c20cacdbcfc4eff9c4b1add966c1657010
Security-Bulletin: TYPO3-CORE-SA-2021-003
Security-References: CVE-2021-21357
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/68436


Tested-by: default avatarOliver Hader <oliver.hader@typo3.org>
Reviewed-by: default avatarOliver Hader <oliver.hader@typo3.org>
parent 57b5b68f
Branches
Tags
No related merge requests found
Showing
with 1612 additions and 74 deletions
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment