[BUGFIX] Prevent information disclosure in file list 88/42588/2
authorNicole Cordes <typo3@cordes.co>
Tue, 2 Jun 2015 14:32:52 +0000 (16:32 +0200)
committerNicole Cordes <typo3@cordes.co>
Wed, 9 Sep 2015 20:43:19 +0000 (22:43 +0200)
commitd84687876f3b77883c4bdb20b7d3a0227d8774ea
treec570ca5287d9a5b6fd55b8c09c9e258c0f4665d8
parent95eb409d887ca880388cb975d52210b1fb0448c1
[BUGFIX] Prevent information disclosure in file list

Currently the doc header title of a folder shows the full path even
if the current folder is inside a mount point. This patch prevents
showing the full path by not disabling the permission check but catch
a thrown exception and return the path inside the mount point.

Resolves: #67245
Releases: master, 6.2
Change-Id: I6e5486e8c6f923decc4016b57ff60a562f189749
Reviewed-on: http://review.typo3.org/42588
Reviewed-by: Daniel Goerz <ervaude@gmail.com>
Tested-by: Daniel Goerz <ervaude@gmail.com>
Reviewed-by: Nicole Cordes <typo3@cordes.co>
Tested-by: Nicole Cordes <typo3@cordes.co>
typo3/sysext/core/Classes/Resource/Folder.php