[SECURITY] Extbase must not cache dynamic parts of queries 32/29932/7
authorMarkus Klein <klein.t3@mfc-linz.at>
Thu, 8 May 2014 01:31:21 +0000 (03:31 +0200)
committerGeorg Ringer <georg.ringer@gmail.com>
Mon, 12 May 2014 13:45:03 +0000 (15:45 +0200)
commit65603ab6f69ab96e06b39e0f865fc0e7e4b06c15
treea0949d72be0d0ef765c39ba2d7aa574da1e2b743
parent037d2c7b4df0717c52cb1e14e70268ce49576938
[SECURITY] Extbase must not cache dynamic parts of queries

Do not cache the enable fields part of queries. This part
needs to be added on each query dynamically to reflect the
current context. (Time restrictions, User restrictions)

Resolves: #58369
Releases: 6.2
Change-Id: I492d5983ff6a06d72cd18cf9a08a0d62d304ac2b
Reviewed-on: https://review.typo3.org/29932
Reviewed-by: Wouter Wolters
Tested-by: Wouter Wolters
Reviewed-by: Marcin SÄ…gol
Reviewed-by: Jan Kiesewetter
Tested-by: Jan Kiesewetter
Reviewed-by: Georg Ringer
Tested-by: Georg Ringer
typo3/sysext/extbase/Classes/Persistence/Generic/Storage/Typo3DbBackend.php
typo3/sysext/extbase/Classes/Persistence/Generic/Storage/Typo3DbQueryParser.php