Skip to content
GitLab
Projects Groups Topics Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
  • Sign in
  • typo3 typo3
  • Project information
    • Project information
    • Activity
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributor statistics
    • Graph
    • Compare revisions
    • Locked files
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Container Registry
  • Analytics
    • Analytics
    • CI/CD
    • Insights
    • Repository
  • Activity
  • Graph
  • Jobs
  • Commits
Collapse sidebar
  • typo3typo3
  • typo3typo3
  • Repository
  • typo3
  • typo3
  • sysext
  • indexed_search
  • Classes
  • Controller
  • AdministrationController.php
Find file BlameHistoryPermalink
  • Oliver Bartsch's avatar
    [BUGFIX] Avoid parameter collision in IndexedSearch · 7879a3de
    Oliver Bartsch authored Jun 13, 2022
    The action to delete an indexed item in the IndexedSearch
    backend module used the "id" parameter to pass the indexed
    item id to the method. The controller is based on extbase and
    previously, those parameters were prefixed with the plugin
    namespace. However, with #97096 the parameters in extbase
    backend modules are no longer prefix by default, which therefore
    lead to a collision. The "id" parameter should always represent
    the currently selected page, underlying code performs access
    checks on this value.
    
    This is now resolved by using a dedicated parameter, which
    is not already "reserved" by underlying functionality.
    
    Resolves: #97766
    Related: #97096
    Releases: main
    Change-Id: If7ccb1dfbdad6f907eb4f27187eb7eb9b753e9dc
    Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/74885
    
    
    Tested-by: Stefan Bürk's avatarStefan Bürk <stefan@buerk.tech>
    Tested-by: core-ci's avatarcore-ci <typo3@b13.com>
    Tested-by: Benni Mack's avatarBenni Mack <benni@typo3.org>
    Tested-by: Oliver Bartsch's avatarOliver Bartsch <bo@cedev.de>
    Reviewed-by: Stefan Bürk's avatarStefan Bürk <stefan@buerk.tech>
    Reviewed-by: Benni Mack's avatarBenni Mack <benni@typo3.org>
    Reviewed-by: Oliver Bartsch's avatarOliver Bartsch <bo@cedev.de>
    7879a3de