[SECURITY] Remove TYPO3 version from installer 96/59096/2
authorBenni Mack <benni@typo3.org>
Tue, 11 Dec 2018 09:56:30 +0000 (10:56 +0100)
committerOliver Hader <oliver.hader@typo3.org>
Tue, 11 Dec 2018 09:56:32 +0000 (10:56 +0100)
commitfab0cbc970b709ed65fc4622a2cbd52a197480c4
tree4c4828ffe479d3b277cdb8174701b1e70e84dc15
parenta5359491e3fb3164a6ba96a66c8e67fbb9971a4c
[SECURITY] Remove TYPO3 version from installer

When installing TYPO3, the current version
is shown without any kind of authentication
provided (no FIRST_INSTALL). This information
disclosure is solved.

Resolves: #86254
Releases: master, 8.7, 7.6
Security-Commit: c7f8829609ac20081500ea486eb74a11428313dd
Security-Bulletin: TYPO3-CORE-SA-2018-010
Change-Id: I7358f181e5b93c596aa460040dee53a1485f3759
Reviewed-on: https://review.typo3.org/59096
Reviewed-by: Oliver Hader <oliver.hader@typo3.org>
Tested-by: Oliver Hader <oliver.hader@typo3.org>
typo3/sysext/install/Resources/Private/Layouts/Step.html
typo3/sysext/install/Resources/Private/Partials/Action/Common/LoginForm.html
typo3/sysext/install/Resources/Private/Templates/Action/Common/FirstInstall.html
typo3/sysext/install/Resources/Private/Templates/Action/Common/InstallToolPasswordNotSet.html