review.typo3.org

heikopalloks.de

Webdesign Heiko Palloks: Access bypass when editing file metadata

http://www.heikopalloks.de/news/article/access-bypass-when-editing-file-metadata-bd9ea614b0

01 Juli 2015, 14:11 Uhr. Access bypass when editing file metadata. It has been discovered, that editors could change, create or delete metadata of files without permission. July 1, 2015. Versions 6.2.0 to 6.2.13, 7.0.0 to 7.3.0. Suggested CVSS v2.0:. It has been discovered, that editors with access to file meta data table could change, create or delete metadata of files which are not within their file mounts. Update to TYPO3 versions 6.2.14 or 7.3.1 that fix the problem described.

heikopalloks.de

Webdesign Heiko Palloks: Information Disclosure possibility exploitable by Editors

http://www.heikopalloks.de/news/article/information-disclosure-possibility-exploitable-by-editors-39e0e11d5c

01 Juli 2015, 14:11 Uhr. Information Disclosure possibility exploitable by Editors. It has been discovered, that editors could list all files and folders in the root directory of a TYPO3 installation. July 1, 2015. Versions 6.2.0 to 6.2.13, 7.0.0 to 7.3.0. Suggested CVSS v2.0:. Update to TYPO3 versions 6.2.14 or 7.3.1 that fix the problem described. Thanks to Helmut Hummel who discovered and reported the issue. Follow the recommendations that are given in the TYPO3 Security Guide.

agilelevelup.com

Agile Level Up: Fosdem 2013, coté code

http://www.agilelevelup.com/2013/02/fosdem-2013-cote-code.html

Le blog lean startup, agile, software craftsmanship et jeu de rôle de Stéphane Bagnier. Lundi 4 février 2013. Fosdem 2013, coté code. How MediaWiki is tested - Željko Filipin. Est en charge des tests fonctionnels. Le logiciel qui motorise Wikipédia. Son challenge est de créer et de maintenir des tests sur les différentes plateformes et browsers. En parti parce que RVM facilite la mise en place de l'environnement de test. Il utilise la librairie watir.webdriver. Ce qui nécessite des tests véritablement in...

shentao.de

Shentao's Blog: 28.04.13 - 05.05.13

http://www.shentao.de/2013_04_28_archive.html

Über Typo3, Digitale Photographie und alles was mich sonst interessiert. Mittwoch, 1. Mai 2013. RealUrl Kompatibilität mit Typo3 6.1. Typo3 6.1 wurde gestern veröffentlicht - leider funktioniert RealUrl noch nicht mit dieser Version zusammen wegen der Umstellung auf mysqli. Ein Patch gibt es zwar bereits schon, wurde aber noch nicht veröffentlicht im Extension Repository. Um euch die Wartezeit zu verkürzen, könnt ihr bis dahin aber auch selbst Hand anlegen:. T3lib extMgm: isLoaded('dbal') {. Helft mir di...

wiki.typo3.org

TroubleShooting (Git) - TYPO3Wiki

https://wiki.typo3.org/TroubleShooting_(Git)

All page names need to be in English. Special characters in username, "permission denied (publickey)". Push: Permission denied (publickey). Debugging the SSH connection. You are not a committer. Missing Change-Id in commit message. Push: prohibited by gerrit. Pushing old Patch Set again. Conflicts caused by Git Submodules (sysext). Checking out old Change Review prompts to add unrelated submodules. Checkout fails with "error: Untracked working tree file .". Submodules are poluting your commit. Follow the...

t3bits.de

T3Bits | TYPO3 Podcast | Page 2

http://t3bits.de/page/2

Sebastian Michaelsen @ T3B009: Install Tool. Ogg Vorbis [14 MB]. Aufgenommen auf den TYPO3 Developer Days 2013. Das mobile T3Bits Studio wurde gesponsort von jweiland.net. Refactoring des Install Tools. Christian Kuhn ( @lolli42. Der Code des Install Tools wurde gründlich aufgeräumt und unterwegs wurden viele nützliche Features und Verbesserungen implementiert. This entry was posted on. T3B008: Women in the TYPO3 community. Sebastian Michaelsen @ T3B008: Women in the TYPO3 community. Ben van 't Ende.

usetypo3.com

Use TYPO3: JSON view

https://usetypo3.com/json-view.html

Create APIs with the JSON view. Published: January 17, 2016. Updated: February 27, 2017. Do you look for an easy way to access your domain objects in their JSON. Representation for e.g. an AJAX call? Or do you even dream of an entire (RESTful) API residing in your TYPO3? Domain objects as JSON - Why? Domain objects as JSON - How? How to access a single object (show action). Make the URL pretty - realurl. Domain objects as JSON - Why? So how do we do this? Domain objects as JSON - How? You very likely are...

stmllr.net

Report from the TYPO3 Freiburg code sprint

https://stmllr.net/blog/report-from-the-typo3-freiburg-code-sprint/index.html

Report from the TYPO3 Freiburg code sprint. July 24, 2012. Insprired by previous code sprints, the TYPO3 community in Freiburg, Germany decided to organize a local code sprint. From Friday, July 13th to Sunday, July 15th ten TYPO3 developers met for a code sprint. After all it was a great success for the TYPO3 project. The original idea was a local code sprint with participants from Freiburg. But fortunately the event attracted also participants from other regions. Sys collection and sys categories.

heikopalloks.de

Webdesign Heiko Palloks: Cross-Site Scripting in 3rd party library Flowplayer

http://www.heikopalloks.de/news/article/cross-site-scripting-in-3rd-party-library-flowplayer-25ac6752a1

01 Juli 2015, 14:11 Uhr. Cross-Site Scripting in 3rd party library Flowplayer. It has been discovered, that editors could change, create or delete metadata of files without permission. July 1, 2015. Versions 6.2.0 to 6.2.13, 7.0.0 to 7.3.0. Suggested CVSS v2.0:. It has been discovered, that version of the third party flash player flowplayer is vulnerable to Cross-Site Scripting. No authentication is required to exploit this vulnerability. Thanks to Wouter van Dongen who discovered and reported the issue.