[TASK] Remove unnecessary usage of the encryption key 01/41701/2
authorHelmut Hummel <helmut.hummel@typo3.org>
Sun, 19 Jul 2015 09:44:10 +0000 (11:44 +0200)
committerSusanne Moog <typo3@susannemoog.de>
Sun, 19 Jul 2015 09:51:21 +0000 (11:51 +0200)
The encryption key should not be used within a single hash function,
but only by using hmac if needed.
For cache busting, using the encryption key is not needed at all
so we remove it.

Releases: master
Resolves: #68365
Related: #68133
Change-Id: I5c87008f0b733dab2c13fbc224f0ff6fd5e4b199
Reviewed-on: http://review.typo3.org/41701
Reviewed-by: Sebastian Michaelsen <michaelsen@t3seo.de>
Reviewed-by: Anja Leichsenring <aleichsenring@ab-softlab.de>
Tested-by: Anja Leichsenring <aleichsenring@ab-softlab.de>
Reviewed-by: Susanne Moog <typo3@susannemoog.de>
Tested-by: Susanne Moog <typo3@susannemoog.de>
typo3/sysext/core/Classes/Page/PageRenderer.php

index 6a6575e..5780a28 100644 (file)
@@ -1481,7 +1481,7 @@ class PageRenderer implements \TYPO3\CMS\Core\SingletonInterface {
                        if (GeneralUtility::getApplicationContext()->isDevelopment()) {
                                $this->requireJsConfig['urlArgs'] = 'bust=' . $GLOBALS['EXEC_TIME'];
                        } else {
-                               $this->requireJsConfig['urlArgs'] = 'bust=' . GeneralUtility::shortMD5(TYPO3_version . $GLOBALS['TYPO3_CONF_VARS']['SYS']['encryptionKey']);
+                               $this->requireJsConfig['urlArgs'] = 'bust=' . GeneralUtility::shortMD5(TYPO3_version);
                        }
                        // first, load all paths for the namespaces, and configure contrib libs.
                        $this->requireJsConfig['paths'] = array(