[BUGFIX] Unprivileged backend user can read arbitrarily from database
authorHelmut Hummel <helmut.hummel@typo3.org>
Wed, 27 Jul 2011 10:50:08 +0000 (12:50 +0200)
committerOliver Hader <oliver@typo3.org>
Wed, 27 Jul 2011 10:51:32 +0000 (12:51 +0200)
Change-Id: Ie0f19500b713fece84e1fc2caf7d724864965481
Resolves: #26876
Reviewed-on: http://review.typo3.org/3775
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
typo3/sysext/css_styled_content/static/setup.txt
typo3/sysext/workspaces

index c77650f..075b331 100644 (file)
@@ -181,20 +181,19 @@ lib.stdheader {
 
        10.1 = TEXT
        10.1.current = 1
-       10.1.insertData = 1
-       10.1.fontTag = <h1{register:headerStyle}{register:headerClass}>|</h1>
+       10.1.dataWrap = <h1{register:headerStyle}{register:headerClass}>|</h1>
 
        10.2 < .10.1
-       10.2.fontTag = <h2{register:headerStyle}{register:headerClass}>|</h2>
+       10.2.dataWrap = <h2{register:headerStyle}{register:headerClass}>|</h2>
 
        10.3 < .10.1
-       10.3.fontTag = <h3{register:headerStyle}{register:headerClass}>|</h3>
+       10.3.dataWrap = <h3{register:headerStyle}{register:headerClass}>|</h3>
 
        10.4 < .10.1
-       10.4.fontTag = <h4{register:headerStyle}{register:headerClass}>|</h4>
+       10.4.dataWrap = <h4{register:headerStyle}{register:headerClass}>|</h4>
 
        10.5 < .10.1
-       10.5.fontTag = <h5{register:headerStyle}{register:headerClass}>|</h5>
+       10.5.dataWrap = <h5{register:headerStyle}{register:headerClass}>|</h5>
 
        # Pops the used registers off the stack:
        98 = RESTORE_REGISTER
index 25d1920..c509cc2 160000 (submodule)
@@ -1 +1 @@
-Subproject commit 25d192088a96d605c2f5a55cff9dcfd16c7d58d7
+Subproject commit c509cc227c5e4422c57abb9a2a223becbcc48f94