[FOLLOWUP][BUGFIX] Fix CSRF protection token in localization overview 88/42088/2
authorNicole Cordes <typo3@cordes.co>
Wed, 29 Jul 2015 12:51:42 +0000 (14:51 +0200)
committerWouter Wolters <typo3@wouterwolters.nl>
Thu, 30 Jul 2015 10:52:47 +0000 (12:52 +0200)
This patch streamlines the concatenation of the onEdit link and
additional Javascript. See https://review.typo3.org/42084

Related: #67866
Related: #68604
Releases: master
Change-Id: I05972eeda2a0f8965b6e37f981dc56feef3f71c0
Reviewed-on: http://review.typo3.org/42088
Reviewed-by: Markus Klein <markus.klein@typo3.org>
Tested-by: Markus Klein <markus.klein@typo3.org>
Reviewed-by: Wouter Wolters <typo3@wouterwolters.nl>
Tested-by: Wouter Wolters <typo3@wouterwolters.nl>
typo3/sysext/frontend/Classes/Controller/TranslationStatusController.php

index cf51a40..958facf 100644 (file)
@@ -250,10 +250,10 @@ class TranslationStatusController extends \TYPO3\CMS\Backend\Module\AbstractFunc
                                $params = '&columnsOnly=title,hidden,sys_language_uid&overrideVals[pages_language_overlay][sys_language_uid]=' . $langRow['uid'];
                                $onClick = BackendUtility::editOnClick($params);
                                if (!empty($newOL_js[$langRow['uid']])) {
-                                       $onClickArray = explode('\'', $onClick);
+                                       $onClickArray = explode('?', $onClick, 2);
                                        $lastElement = array_pop($onClickArray);
-                                       array_push($onClickArray, $newOL_js[$langRow['uid']] . $lastElement);
-                                       $onClick = implode('\'', $onClickArray);
+                                       array_push($onClickArray, '\'' . $newOL_js[$langRow['uid']] . ' + \'&' . $lastElement);
+                                       $onClick = implode('?', $onClickArray);
                                }
                                $tCells[] = '<td><a href="#" onclick="' . htmlspecialchars($onClick)
                                        . '" title="' . $lang->sL(