[BUGFIX] Fix double encoded returnUrl parameters in file search 77/50077/2
authorWouter Wolters <typo3@wouterwolters.nl>
Fri, 30 Sep 2016 13:22:52 +0000 (15:22 +0200)
committerNicole Cordes <typo3@cordes.co>
Thu, 6 Oct 2016 09:04:31 +0000 (11:04 +0200)
commit4ae67d1a3035c7278d18f28de0b19594dbf9ee48
tree4ae16c51cf31abeac6d1234af29c8db4439ce916
parent215abe0572bb56c8c2f90a28d5a69b9c21b9b3cb
[BUGFIX] Fix double encoded returnUrl parameters in file search

In ext:filelist you can search for files. All actions that contain
a returnUrl as parameter lead to CSRF-token issues. This is because
the returnUrl is double encoded. Remove the double encoding.

Resolves: #78124
Releases: master
Change-Id: I2719b6e7905576c307e4bdc06d5e6384625a4da3
Reviewed-on: https://review.typo3.org/50077
Tested-by: TYPO3com <no-reply@typo3.com>
Reviewed-by: Michael Oehlhof <typo3@oehlhof.de>
Reviewed-by: Josef Glatz <josef.glatz@typo3.org>
Tested-by: Josef Glatz <josef.glatz@typo3.org>
Reviewed-by: Nicole Cordes <typo3@cordes.co>
Tested-by: Nicole Cordes <typo3@cordes.co>
typo3/sysext/filelist/Resources/Private/Templates/FileList/Search.html