Skip to content

Commit

Permalink
[TASK] Add missing documentation files and correct errors
Browse files Browse the repository at this point in the history
Resolves: #84242
Releases: master, 8.7, 7.6
Change-Id: I049c053dee291e7c31dbf5c81aacde0619d0f244
Reviewed-on: https://review.typo3.org/56132
Tested-by: TYPO3com <no-reply@typo3.com>
Reviewed-by: Christian Kuhn <lolli@schwarzbu.ch>
Tested-by: Christian Kuhn <lolli@schwarzbu.ch>
  • Loading branch information
lolli42 committed Mar 13, 2018
1 parent a73bffd commit f5f53da
Show file tree
Hide file tree
Showing 6 changed files with 58 additions and 10 deletions.
Expand Up @@ -41,11 +41,11 @@ In case of the Uri.Typolink Viewhelper, only the first and the fourth parameter
the tag related properties are discarded.
For the given examples, the output is:

.. code-block:: HTML
.. code-block:: html

<a href="index.php?id=19&X=y&b=u" title="some title" target="_blank" class="ico-class" type="button">
index.php?id=19&X=y&b=u
</a>
<a href="index.php?id=19&X=y&b=u" title="some title" target="_blank" class="ico-class" type="button">
index.php?id=19&X=y&b=u
</a>

Impact
======
Expand Down
Expand Up @@ -21,13 +21,13 @@ Example

.. code-block:: typoscript
<INCLUDE_TYPOSCRIPT: source="FILE:EXT:my_extension/Configuration/TypoScript/firefox.ts" condition="[loginUser = *]">
<INCLUDE_TYPOSCRIPT: source="FILE:EXT:my_extension/Configuration/TypoScript/firefox.ts" condition="[loginUser = *]">
Condition with square brackets. File will only be included if a frontend user is logged in.

.. code-block:: typoscript
<INCLUDE_TYPOSCRIPT: source="FILE:EXT:my_extension/Configuration/TypoScript/staging.ts" condition="applicationContext = /^Production\\/Staging\\/Server\\d+$/">
<INCLUDE_TYPOSCRIPT: source="FILE:EXT:my_extension/Configuration/TypoScript/staging.ts" condition="applicationContext = /^Production\\/Staging\\/Server\\d+$/">
Condition without square brackets, backslashes doubled inside the condition. File will only be included in application context
Production/Staging/Server followed by at least one digit.
Expand Down
Expand Up @@ -18,7 +18,7 @@ Impact

The MemcachedBackend checks if either "memcache" or "memcached" is installed. If both plugins are installed, the
MemcachedBackend uses "memcache" over "memcached" to avoid being a breaking change. An integrator may set the option
``peclModule` to use the preferred PECL module.
`peclModule` to use the preferred PECL module.

Example code:

Expand Down
@@ -0,0 +1,39 @@
.. include:: ../../Includes.txt

=========================================
Important: #83768 - Remove referrer check
=========================================

See :issue:`83768`

Description
===========

Browser vendors are considering or have already announced **not** to send the referrer URL/path in HTTP requests when
links are followed or forms are submitted due to privacy reasons. TYPO3 used the referrer as a meagre CSRF protection
for the backend. However, this has been replaced by proper CSRF protection tokens for every backend action and therefore,
the referrer check became obsolete and has been removed.

Usages of the configuration option :php:`[SYS][doNotCheckReferer]` within TYPO3 Core have been removed, as this is not
needed anymore. However, the option can still be set for extensions implementing this option.


Impact
======

Backend users will not notice any differences.


Affected Installations
======================

All installations are affected.


Migration
=========

TYPO3 extensions that use option :php:`[SYS][doNotCheckReferer]` to implement a kind of CSRF protection, should use
proper CSRF protection tokens provided by the core.

.. index:: Backend, FullyScanned
Expand Up @@ -30,7 +30,7 @@ Reloading the topbar via JavaScript requires the following code:
// Or: old-fashioned JavaScript
if (top && top.TYPO3.Backend && top.TYPO3.Backend.Topbar) {
top.TYPO3.Backend.Topbar.refresh();
}';
};
In case a toolbar item registers to the `load` event of the page, the registration must be changed. Reason is that the
Expand All @@ -42,10 +42,10 @@ Example:
define(['jquery', 'TYPO3/CMS/Backend/Viewport'], function($, Viewport) {
// old registration
$(MyAwesomeItem.doStuff)
$(MyAwesomeItem.doStuff);
// new registration
Viewport.Topbar.Toolbar.registerEvent(MyAwesomeItem.doStuff);
});
.. index:: Backend, JavaScript, PHP-API
.. index:: Backend, JavaScript, PHP-API
9 changes: 9 additions & 0 deletions typo3/sysext/core/Documentation/Changelog/8.7.x/Index.rst
Expand Up @@ -12,6 +12,15 @@ Changes after 8.7.0 LTS release.
:local:
:depth: 1

Breaking
^^^^^^^^^

.. toctree::
:maxdepth: 1
:titlesonly:
:glob:

Breaking-*

Features
^^^^^^^^
Expand Down

0 comments on commit f5f53da

Please sign in to comment.