[BUGFIX] Reduce strictness for .pl files in fileDenyPattern 86/59886/5
authorOliver Hader <oliver@typo3.org>
Wed, 6 Mar 2019 16:46:56 +0000 (17:46 +0100)
committerMarkus Klein <markus.klein@typo3.org>
Thu, 7 Mar 2019 20:53:00 +0000 (21:53 +0100)
commit399a62a62a6853e72ef694d0ce7b4adb1fe89ba7
treea40e1aa4ff25f48bdd11d8609c0daf81125f8dc0
parentb1fa8e8504926d2d1b56e3c50ed07225507af36f
[BUGFIX] Reduce strictness for .pl files in fileDenyPattern

Files like "file.pl.txt" cannot be uploaded anymore since ".pl" is
considered as executable Perl file. In multilingual scenarios "pl"
is used as reference for Polish content. Since required modules
mod_perl or mod_cgid are not enabled by default, and limited to
be executable only when invoked in location "/cgi-bin/", now only
files ending with ".pl" (e.g. "file.pl") are denied.

Resolves: #87733
Releases: master, 9.5, 8.7
Change-Id: Ib9a69fd3ec04f51653857d2f7309e30b78932653
Reviewed-on: https://review.typo3.org/c/59886
Tested-by: TYPO3com <noreply@typo3.com>
Tested-by: Anja Leichsenring <aleichsenring@ab-softlab.de>
Tested-by: Susanne Moog <susanne.moog@typo3.org>
Tested-by: Markus Klein <markus.klein@typo3.org>
Reviewed-by: Wolfgang Klinger <wolfgang@wazum.com>
Reviewed-by: Anja Leichsenring <aleichsenring@ab-softlab.de>
Reviewed-by: Susanne Moog <susanne.moog@typo3.org>
Reviewed-by: Markus Klein <markus.klein@typo3.org>
typo3/sysext/core/Classes/Core/SystemEnvironmentBuilder.php
typo3/sysext/core/Configuration/DefaultConfigurationDescription.yaml
typo3/sysext/core/Tests/Unit/Utility/GeneralUtilityTest.php