[!!!][SECURITY] Add CSRF protection to mod.php 36/27636/8
authorHelmut Hummel <helmut.hummel@typo3.org>
Fri, 14 Feb 2014 22:56:38 +0000 (23:56 +0100)
committerHelmut Hummel <helmut.hummel@typo3.org>
Wed, 26 Feb 2014 15:36:20 +0000 (16:36 +0100)
commit6e9e5455ba0c656e50ce94bc08d988bba9ec642e
treed46ba6bd7a0c8d1254089e24333bbf6094c71e01
parent7389b684945a1499947ba908f465f3f0d5f3a95a
[!!!][SECURITY] Add CSRF protection to mod.php

Add a token check in mod.php and token generation
to BackendUtility::getModuleUrl()

Adapt code to use BackendUtility::getModuleUrl()
in every place where links are hardcoded.

Releases: 6.2
Resolves: #55509
Change-Id: I952c40fc1004a0a8d77c929927d37e1d93dcfef4
Reviewed-on: https://review.typo3.org/27636
Reviewed-by: Wouter Wolters
Tested-by: Wouter Wolters
Reviewed-by: Markus Klein
Tested-by: Markus Klein
Reviewed-by: Helmut Hummel
Tested-by: Helmut Hummel
22 files changed:
typo3/mod.php
typo3/sysext/backend/Classes/Controller/BackendController.php
typo3/sysext/backend/Classes/Module/ModuleLoader.php
typo3/sysext/backend/Classes/Search/LiveSearch/LiveSearch.php
typo3/sysext/backend/Classes/Utility/BackendUtility.php
typo3/sysext/backend/Classes/View/ModuleMenuView.php
typo3/sysext/backend/Resources/Public/JavaScript/notifications.js
typo3/sysext/beuser/Classes/Controller/BackendUserController.php
typo3/sysext/cshmanual/Classes/Controller/HelpModuleController.php
typo3/sysext/dbal/Classes/Controller/ModuleController.php
typo3/sysext/extbase/Classes/Mvc/Web/Routing/UriBuilder.php
typo3/sysext/extbase/Classes/Utility/ExtensionUtility.php
typo3/sysext/extbase/Tests/Unit/Mvc/Web/Routing/UriBuilderTest.php
typo3/sysext/impexp/Classes/Task/ImportExportTask.php
typo3/sysext/install/Classes/Report/InstallStatusReport.php
typo3/sysext/openid/Classes/OpenidModuleSetup.php
typo3/sysext/openid/ext_tables.php
typo3/sysext/openid/wizard/conf.php
typo3/sysext/reports/Classes/Report/Status/SecurityStatus.php
typo3/sysext/sys_action/Classes/ActionTask.php
typo3/sysext/sys_action/Classes/ActionToolbarMenu.php
typo3/sysext/taskcenter/Classes/Controller/TaskModuleController.php