[SECURITY] XSS in validateForm
authorMarkus Bucher <markusbucher@gmx.de>
Wed, 15 Aug 2012 10:21:56 +0000 (12:21 +0200)
committerOliver Hader <oliver.hader@typo3.org>
Wed, 15 Aug 2012 10:22:02 +0000 (12:22 +0200)
commit2518600207b4d627248a0f8bf2f1aae66f7a8b3f
treebfe685a517e5c6d6b98c76941248c491306b6234
parenteb7eb17c663f75936ebf9d05c0e3d45fad925726
[SECURITY] XSS in validateForm

Properly quote the form name and field list
for the JavaScript validation

Fixes: #25052
Releases: 6.0, 4.7, 4.6, 4.5

Change-Id: I328a3a39e3034c55de96d403994a450d9397f389
Security-Bulletin: TYPO3-CORE-SA-2012-004
Reviewed-on: http://review.typo3.org/13772
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
typo3/sysext/cms/tslib/content/class.tslib_content_form.php