[SECURITY] Mitigate phar stream wrapper 41/57541/2
authorChristian Kuhn <lolli@schwarzbu.ch>
Thu, 12 Jul 2018 09:31:21 +0000 (11:31 +0200)
committerOliver Hader <oliver.hader@typo3.org>
Thu, 12 Jul 2018 09:31:26 +0000 (11:31 +0200)
commitb02279274499f3fe09c7bc58bb0ba46053dd2d2d
tree2234945507732bd746f5da7c3cd492563aea39bf
parenta5d6bfab15ab2190576ee1b279c30d5988c2b2b2
[SECURITY] Mitigate phar stream wrapper

SoftReferenceIndex throws exceptions on phar streams
LegacyLinkNotationConverter throws exceptions on phar streams

Resolves: #85385
Releases: master, 8.7, 7.6
Security-Commit: 0311b6c0cc7fed584f59f34adba5b693e75797d8
Security-Bulletin: TYPO3-CORE-SA-2018-002
Change-Id: Ic57514e1bcdb30ec612a39bcb3c49287cc0c5330
Reviewed-on: https://review.typo3.org/57541
Reviewed-by: Oliver Hader <oliver.hader@typo3.org>
Tested-by: Oliver Hader <oliver.hader@typo3.org>
typo3/sysext/core/Classes/Database/SoftReferenceIndex.php
typo3/sysext/core/Tests/Unit/Database/SoftReferenceIndexTest.php [new file with mode: 0644]
typo3/sysext/frontend/Classes/ContentObject/ContentObjectRenderer.php
typo3/sysext/frontend/Tests/Unit/ContentObject/ContentObjectRendererTest.php