Bug #54973

mod_rewrite doesnt allow uppercase characters for the session id

Added by Julian Kleinhans over 1 year ago. Updated over 1 year ago.

Status:Resolved Start date:2014-01-14
Priority:Must have Due date:
Assigned To:Julian Kleinhans % Done:

100%
Category:Core
Target version:-
PHP Version: Complexity:
Has patch:Yes Affected Flow version:Git master

Description

The usage of the SecurityPublishingConfiguration in combination with the fluid resource viewhelper generates a link which includes the users sessions id. This session id includes uppercase characters. The mod_rewrite rule for this private resources doesnt allow uppercase characters for the session id, so the user gets a 404.

Example: 

$myNewResource->getOriginalResource()->setPublishingConfiguration($this->resourceService->getSecurityPublishingConfiguration());

And now use the fluid resource viewhelper.
The output looks like this

http://domain.com/_Resources/Persistent/5I69ZCdxva2uQvHUPYaq00whI1XyD8UQ/Kj187.Core:Editor/c37d1ae0234ad14be3cc05d2657784944eed492e/test.png

Associated revisions

Revision dc938874
Added by Julian Kleinhans over 1 year ago

[BUGFIX] Allow uppercase rewrite regex expression for session id

The usage of the SecurityPublishingConfiguration in combination with
the fluid resource viewhelper generates a link which includes the
users sessions id. This session id includes uppercase characters.
The mod_rewrite rule for this private resources doesnt allow uppercase
characters for the session id, so the user gets a 404.

Fixes: #54973
Releases: master

Change-Id: I39e9b1922f5ef052b040c04467ea0c041aaec698

History

#1 Updated by Gerrit Code Review over 1 year ago

  • Status changed from New to Under Review

Patch set 2 for branch master of project Packages/TYPO3.Flow has been pushed to the review server.
It is available at https://review.typo3.org/26700

#2 Updated by Gerrit Code Review over 1 year ago

Patch set 3 for branch master of project Packages/TYPO3.Flow has been pushed to the review server.
It is available at https://review.typo3.org/26700

#3 Updated by Gerrit Code Review over 1 year ago

Patch set 4 for branch master of project Packages/TYPO3.Flow has been pushed to the review server.
It is available at https://review.typo3.org/26700

#4 Updated by Anonymous over 1 year ago

  • Status changed from Under Review to Resolved
  • % Done changed from 0 to 100

Also available in: Atom PDF