Skip to content
Snippets Groups Projects
Commit daa52f2c authored by Nicole Cordes's avatar Nicole Cordes Committed by Oliver Hader
Browse files

[SECURITY] Fix GeneralUtility::sanitizeLocalUrl to detect foreign schemes

This patch adds a check to be able to recognize arbitrary schemes which
have to be skipped. Furthermore a missing sanitation is added to
TYPO3\CMS\Backend\Controller\ContentElement\ElementInformationController

Resolves: #68825
Releases: master, 6.2
Security-Commit: de692804837ad0ddfdff194571dc8c786c717576
Security-Bulletin: TYPO3-CORE-SA-2015-009
Change-Id: Iddd54d241776a47f634c9ac2540e6a2e31801da7
Reviewed-on: http://review.typo3.org/43122


Reviewed-by: default avatarOliver Hader <oliver.hader@typo3.org>
Tested-by: default avatarOliver Hader <oliver.hader@typo3.org>
parent 86e0140b
Branches
Tags
No related merge requests found
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment