[BUGFIX] Only treat numerical route arguments as possible UIDs
`PersistedAliasMapper` and `PersistentPatternMapper` both should only use int-like string route arguments as possible UID candidates for the following DB lookup. Thus, check if the arguments are truly numerical before passing them to the database queries. Resolves: #93105 Releases: main, 12.4 Change-Id: Ic3b9b5415abfce602b6be7c8031202823ea25e60 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/80381 Reviewed-by:Stefan B�rk <stefan@buerk.tech> Reviewed-by:
Oliver Klee <typo3-coding@oliverklee.de> Tested-by:
Stefan B�rk <stefan@buerk.tech> Tested-by:
core-ci <typo3@b13.com> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
Oliver Klee <typo3-coding@oliverklee.de>
Showing
- typo3/sysext/core/Classes/Routing/Aspect/PersistedAliasMapper.php 5 additions, 0 deletions...sext/core/Classes/Routing/Aspect/PersistedAliasMapper.php
- typo3/sysext/core/Classes/Routing/Aspect/PersistedPatternMapper.php 5 additions, 0 deletions...xt/core/Classes/Routing/Aspect/PersistedPatternMapper.php
- typo3/sysext/core/Tests/Functional/Routing/Aspect/PersistedAliasMapperTest.php 20 additions, 0 deletions...ts/Functional/Routing/Aspect/PersistedAliasMapperTest.php
- typo3/sysext/core/Tests/Functional/Routing/Aspect/PersistedPatternMapperTest.php 20 additions, 0 deletions.../Functional/Routing/Aspect/PersistedPatternMapperTest.php
Please register or sign in to comment