Skip to content
Snippets Groups Projects
  1. Feb 07, 2023
  2. Feb 06, 2023
    • Benni Mack's avatar
      [BUGFIX] Enforce validation when no cHash is given · 5e1585ea
      Benni Mack authored
      When no cHash is given but GET parameters are handed in
      which _would_ require cHash parameters, these are now
      properly evaluated during the frontend request.
      
      As this has a security impact,
      a new option called
      $GLOBALS['TYPO3_CONF_VARS']['FE']['cacheHash']['enforceValidation']
      is introduced, which then skips
      the "requireCacheHashPresenceParameters" option.
      The latter is an include list, but cache Hash
      calculation should rather be based on
      the exclude list such as "excludedParameters" and
      "cachedParametersWhiteList".
      
      If the new option is set, but some properties such
      as tx_solr[q] should be allowed, then this needs
      to be added to the excludedList ("excludedParameters")
      by extension authors.
      
      A new test "SlugSiteWithoutRequiredCHashRequestTest"
      is added which works with a disabled feature
      flag compared to "SlugSiteRequestTest" which
      has the feature flag enabled.
      
      Resolves: #95297
      Releases: main, 11.5, 10.4
      Change-Id: Ib72c6a34602e77d8c2044ad2e826c0474ebd2326
      Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/77714
      
      
      Tested-by: default avatarcore-ci <typo3@b13.com>
      Tested-by: default avatarOliver Hader <oliver.hader@typo3.org>
      Reviewed-by: default avatarOliver Hader <oliver.hader@typo3.org>
      5e1585ea
  3. Jan 23, 2023
  4. Jan 18, 2023
  5. Jan 17, 2023
  6. Jan 06, 2023
  7. Dec 22, 2022
  8. Dec 15, 2022
  9. Dec 14, 2022
  10. Dec 13, 2022
  11. Dec 07, 2022
    • Oliver Hader's avatar
      [TASK] Introduce string fragment extraction · f1e1e0bb
      Oliver Hader authored
      When working with variable interpolation and similar scenarios, in
      most cases variables, constants, expressions, ... are embedded in
      a solid string and can only be identified and extracted by the
      corresponding "reader" or "parser".
      
      This string fragment splitter aims to introduce a simpler way for
      extracting and working with these embedded fragments.
      
      Example:
          $pattern = new StringFragmentPattern(
            StringFragmentSplitter::TYPE_EXPRESSION,
            '%[^%]+%'
          );
          $splitter = new StringFragmentSplitter($pattern);
          $collection = $splitter->split(
            'Hello %variable% World!'
            FLAG_UNMATCHED_AS_NULL
          );
      
          // results in having
          // + StringFragment(type: 'raw', value: 'Hello ')
          // + StringFragment(type: 'expression', value: '%variable%')
          // + StringFragment(type: 'raw', value: ' World!')
      
      Resolves: #97553
      Releases: main, 11.5, 10.4
      Change-Id: Ie2b02a247ca884fa44ab7b3ba21214c8ee9bc457
      Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/76947
      
      
      Reviewed-by: default avatarOliver Hader <oliver.hader@typo3.org>
      Tested-by: default avatarcore-ci <typo3@b13.com>
      Tested-by: default avatarOliver Hader <oliver.hader@typo3.org>
      f1e1e0bb
  12. Dec 06, 2022
  13. Dec 05, 2022
  14. Dec 03, 2022
  15. Dec 01, 2022
  16. Nov 12, 2022
  17. Nov 02, 2022
  18. Oct 19, 2022
  19. Oct 14, 2022
  20. Sep 16, 2022