This project is mirrored from https://git.typo3.org/typo3/typo3.git. Pull mirroring failed .
Repository mirroring has been paused due to too many failed attempts. It can be resumed by a project maintainer.
Last successful update .
  1. 01 Dec, 2016 6 commits
  2. 29 Nov, 2016 4 commits
  3. 28 Nov, 2016 2 commits
  4. 26 Nov, 2016 4 commits
  5. 22 Nov, 2016 1 commit
    • Benni Mack's avatar
      [SECURITY] Disallow invalid encoding in GeneralUtility::validPathStr · e8d9c8d1
      Benni Mack authored and Oliver Hader's avatar Oliver Hader committed
      Directory names, which have an invalid UTF encoding,
      cause the preg_match() to return false.
      To avoid that the complete statement in GeneralUtility::validPathStr()
      returns true in this case, a strict comparison against 0 is added,
      so that we ensure that strings with invalid encodings are rejected
      by this API method.
      
      As a consequence UTF-16 encoded path names are rejected as well, if the
      system / file system does not support them.
      
      Resolves: #73453
      Releases: master, 8.4, 7.6, 6.2
      Security-Commit: c54aa56d18815aa1867ec54358ad419ea03ec205
      Security-Bulletins: TYPO3-CORE-SA-2016-023, 024
      Change-Id: Iedd6628050d8cdf2efe429bcd7b577f5a6d11805
      Reviewed-on: https://review.typo3.org/50744
      
      
      Reviewed-by: Oliver Hader's avatarOliver Hader <oliver.hader@typo3.org>
      Tested-by: Oliver Hader's avatarOliver Hader <oliver.hader@typo3.org>
      e8d9c8d1
  6. 20 Nov, 2016 3 commits
  7. 19 Nov, 2016 1 commit
  8. 18 Nov, 2016 9 commits
  9. 17 Nov, 2016 5 commits
  10. 16 Nov, 2016 3 commits
  11. 15 Nov, 2016 2 commits