[BUGFIX] Ignore cHash when given but not needed
If a cHash GET parameter is given, but there are no GET parameters that are relevant, a hash_calc() call against an empty string is done. However, the change now allows an invalid cHash if no check is necessary. This could happen when upgrading from older instances where a cHash is not needed anymore. Bots would not then fill up the error log but get the new page (with a valid 200 result) Resolves: #41033 Releases: master, 9.5 Change-Id: Id02701fcbece371a6b9ce0f92fe0be55dd972325 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/60895 Tested-by:Andreas Fernandez <a.fernandez@scripting-base.de> Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Georg Ringer <georg.ringer@gmail.com> Reviewed-by:
Andreas Fernandez <a.fernandez@scripting-base.de> Reviewed-by:
Georg Ringer <georg.ringer@gmail.com>
Showing
- typo3/sysext/frontend/Classes/Middleware/PageArgumentValidator.php 12 additions, 4 deletions...ext/frontend/Classes/Middleware/PageArgumentValidator.php
- typo3/sysext/frontend/Tests/Unit/Middleware/PageArgumentValidatorTest.php 109 additions, 0 deletions...ntend/Tests/Unit/Middleware/PageArgumentValidatorTest.php
Please register or sign in to comment