[SECURITY] Remove TYPO3 version from installer 04/59104/2
authorBenni Mack <benni@typo3.org>
Tue, 11 Dec 2018 09:57:24 +0000 (10:57 +0100)
committerOliver Hader <oliver.hader@typo3.org>
Tue, 11 Dec 2018 09:57:26 +0000 (10:57 +0100)
commit232d0a64282382229c205904173a16a581555fe3
tree25db7a6d717c81cffc5d51209cf206a02550ff09
parent13328b0f74ac589a20b021db814dfa672581c26a
[SECURITY] Remove TYPO3 version from installer

When installing TYPO3, the current version
is shown without any kind of authentication
provided (no FIRST_INSTALL). This information
disclosure is solved.

Resolves: #86254
Releases: master, 8.7, 7.6
Security-Commit: a69d09ab4eabd0474f0191f5daf525d91ebaa32f
Security-Bulletin: TYPO3-CORE-SA-2018-010
Change-Id: Ib8359937716dce4839d76b054b0d0d549bd4aa0c
Reviewed-on: https://review.typo3.org/59104
Reviewed-by: Oliver Hader <oliver.hader@typo3.org>
Tested-by: Oliver Hader <oliver.hader@typo3.org>
typo3/sysext/install/Resources/Private/Templates/Installer/MainLayout.html
typo3/sysext/install/Resources/Private/Templates/Layout/MainLayout.html
typo3/sysext/install/Resources/Private/Templates/Login/ShowLogin.html